last executing test programs: 30m16.419258651s ago: executing program 32 (id=141): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_raw(r1, 0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x1, 0x10080) openat(0xffffffffffffff9c, 0x0, 0x200, 0x119) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x9f, &(0x7f0000000340)=ANY=[@ANYBLOB="1201500200000040d118042d40000102030109028d00030107600b080b010101ff20050904000000010120000924010600031500070c24030501035d020001002009040100000102200009040101010102200008240201fc01510410240105c408000000000609000000cd090501090800"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 28m35.069724744s ago: executing program 33 (id=718): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1b, {0x0, "0fa2f4"}}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmresume={0x130, 0x18}], 0x7b}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20003) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20001) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 28m18.694907119s ago: executing program 34 (id=794): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000456000/0x3000)=nil, r3, 0x1, 0x11, r2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb018984500d361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb11803000000000000000000000000000000000000000000000000000000009128009946977d4600"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 23m38.734905088s ago: executing program 35 (id=1823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0xc001102c, 0x0, 0x9}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000081dd22104c052e000005010203010902120001000000000904000000f7045c5c48a35f"], 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) set_mempolicy(0x6, &(0x7f00000003c0)=0x8002000000000001, 0xe0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000063, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000400), 0x0, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x23) 21m8.252615103s ago: executing program 8 (id=2204): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') socket$inet_sctp(0x2, 0x5, 0x84) getdents64(r3, &(0x7f0000002f40)=""/4097, 0x1001) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/122, 0x7a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 21m5.741424806s ago: executing program 8 (id=2212): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x1814, 0x2, 0x2}, 0x18, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) r3 = socket(0x3, 0x800, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(r3, 0x0, 0x59) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)=0x4) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) 20m50.411074491s ago: executing program 36 (id=2212): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x1814, 0x2, 0x2}, 0x18, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) r3 = socket(0x3, 0x800, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(r3, 0x0, 0x59) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)=0x4) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) 15m50.823863719s ago: executing program 37 (id=2929): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x41424344], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x80000000}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="42733ad6f7b63f622feeab3196b7e21057f4302c3b202872f2529051f374039238336a690ff135fd77946013c62efdf8975fd8518a7d9109ffd688291fc55ff15b43c263fa2e4deb24b0ba827fc3a2589165138354b566d82783d4304c3003eaea7dc13fb5b7dafee2114df8e088dc6087f49cf2fd31f6ff0090d9ac76cf31efa71cfc426ca7259a4bc592", 0x8b}], 0x1}}], 0x1, 0x400c404) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x4850) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x7ff9, 0x0, 0x9, 0x10, 0xfffffe0000000001, 0xfa11, 0x6}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, &(0x7f00000003c0)=""/51, 0xc2b7a7935a212ec7) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pread64(0xffffffffffffffff, 0x0, 0x3, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') 15m27.718331918s ago: executing program 38 (id=2977): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffff001, 0xff, 0xffff, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r7, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r7, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0x2) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r8, &(0x7f0000000040)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x8, 0x0, 0x103, 0xfffffff8, 0x3d}}, 0x0) fcntl$setsig(r4, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r5, 0x8002}], 0x1, 0x0, 0x0, 0x0) r9 = dup2(r4, r5) fcntl$setown(r9, 0x8, r3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 13m33.755101587s ago: executing program 5 (id=3170): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[], 0x208}, 0x1, 0x0, 0x0, 0x8}, 0x400008c4) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) ioctl$TCXONC(r1, 0x540a, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xdc11, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc0445624, &(0x7f00000000c0)={0x140980001, 0x102, "bb5dff0f251ed600f60800000000000000ce1ced49e8981e103268fadc1433ae", 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xff, [0x0, 0x9, 0x0, 0x4]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r7, {0x9}}, './file0\x00'}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, &(0x7f0000000240)=0x6a, 0x4) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000240)={0x2, 0x100, 0x3, {0x4, 0xfffffffe, 0x1000, 0x870}}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 13m33.074505719s ago: executing program 5 (id=3171): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$kcm(0x11, 0x2, 0x300) recvmsg$kcm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f00000002c0)={"4497acf4", 0xb, 0x6, 0x0, 0x4, 0x1000002, "550000000100", "5922b1fa", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "00000000000000deff00", "fa0700f62b42b0023be516d1", "000000eaff01001b00800001"]}) r9 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x13, r9, 0x2000) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, 0x0, &(0x7f0000000040)) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)=ANY=[]) 13m27.133138534s ago: executing program 5 (id=3177): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x101) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f0000000300)="ceddd1", 0x3) r6 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000240)={0x50, 0x0, r9, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r10, 0x427, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r7}]}}}]}, 0x6c}}, 0x0) 13m25.789993778s ago: executing program 5 (id=3180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) close(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) 13m25.186401013s ago: executing program 5 (id=3182): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, 0x100f, 0x2220, 0x5, 0x4000c251, 0x7f, 0x1}) socket$unix(0x1, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, 0x0) read$FUSE(r4, &(0x7f0000004100)={0x2020}, 0x2020) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x40}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r10, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100001040000000000070000000000", @ANYRES32=r9, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 13m22.742265599s ago: executing program 39 (id=3166): syz_open_dev$dri(&(0x7f0000002d40), 0x0, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0xa, @vbi={0xfffffff7, 0x7fffffff, 0xb679, 0x34325258, [0x2, 0xfffffe77], [0x4, 0x6], 0x2}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x0, 0x6, 0x4, {0x9, @win={{0xe, 0xfffffffa, 0xe, 0x975}, 0x7, 0xc53, 0x0, 0x5, 0x0, 0xff}}}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x2000c88c) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x90) timer_create(0x3, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x80) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x2000000000f4, 0x1, 0x2, '\x00', 0x8}}, 0x2a) 13m20.951156718s ago: executing program 5 (id=3189): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r3, 0x6000000) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000012c0)={0x18}) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ff"], 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x1050) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') file_setattr(0xffffffffffffff9c, 0x0, &(0x7f0000000000)={0x6000, 0xfffffffc, 0xed, 0x0, 0x405}, 0x18, 0x1000) 13m16.835506652s ago: executing program 0 (id=3193): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) socket$kcm(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) accept4$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x18, 0xfffffffffffffff9) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='cdefghijklmnop\x00\x00', 0x0) request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x70bd3d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000007}, 0x40) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000400)}) socket$nl_generic(0x10, 0x3, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r4, 0x0, r4, 0x0, 0x276) syz_usb_disconnect(0xffffffffffffffff) 13m14.328862487s ago: executing program 0 (id=3196): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x9, 0x3, 0x80, "11010000001413ff0300", 0x47425247}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f00000016c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r6, 0xc0106401, &(0x7f00000001c0)={0x0, 0x0}) read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) r8 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af24, &(0x7f0000000000)={0x1}) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000000)={0x8d, ""/141}) 13m11.183019508s ago: executing program 0 (id=3199): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0x2e2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0xffff}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0xdddd0000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) socket$l2tp6(0xa, 0x2, 0x73) 13m5.949618117s ago: executing program 0 (id=3202): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x1, 0x4, 0x7f, 0x81, 0x4}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x1000) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1, 0x21}}, @mask_fadd={0x58, 0x114, 0x8, {{0x7d3de0b3, 0x6}, 0x0, 0x0, 0x1, 0x80000001, 0x80000000, 0x5, 0x18, 0x101}}], 0xa0}, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r6, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000540)=0x4) 13m5.821164768s ago: executing program 40 (id=3189): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r3, 0x6000000) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000012c0)={0x18}) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ff"], 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x1050) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') file_setattr(0xffffffffffffff9c, 0x0, &(0x7f0000000000)={0x6000, 0xfffffffc, 0xed, 0x0, 0x405}, 0x18, 0x1000) 13m1.830573322s ago: executing program 0 (id=3206): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',ro']) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x200000f, 0x12, r2, 0x913c0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x66000080) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x805, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x3000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 12m54.741506612s ago: executing program 0 (id=3211): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffff001, 0xff, 0xffff, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r8, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r8, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r5, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r6, 0x8002}], 0x1, 0x0, 0x0, 0x0) r9 = dup2(r5, r6) fcntl$setown(r9, 0x8, r4) tkill(r4, 0x13) r10 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 12m39.399468134s ago: executing program 41 (id=3211): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffff001, 0xff, 0xffff, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r8, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r8, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r5, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r6, 0x8002}], 0x1, 0x0, 0x0, 0x0) r9 = dup2(r5, r6) fcntl$setown(r9, 0x8, r4) tkill(r4, 0x13) r10 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 11m53.911220873s ago: executing program 8 (id=3229): ioprio_set$pid(0x2, 0x0, 0x0) eventfd(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='$\x00', 0x2) io_uring_setup(0x1701, &(0x7f00000002c0)={0x0, 0xb198, 0x8000, 0xffbfffff, 0x183}) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000180)={'#! ', './file1', [{0x20, '2\x9d\x89\x02\x00\xb1D\xf6\xf9q\xc4\xde\xdb\xe2DHdy\xcdj\x13G\xea\xaa\x85\x92\xda\xe1\xfd\x86@\xday\xff/\xd0\"as\xde\x9e-,\xeb\xb4Z\xa4$\x06\x14h\xe1\xc9\xfe\xc9\xab#^fR\xf3E)\xf9\x9fn\xb3k\x9bI\xc1\xe3@c\x03\xd6/a\x87\x96\x87\xc2\x11\x88\x13\x97\xe0H9\xcd%\xb3(H\xf7\xecOf'}]}, 0x6e) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0x1cb) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = add_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)="1d", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r4, &(0x7f0000000140)="c4", 0x1) 11m51.772089615s ago: executing program 8 (id=3275): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x0, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000}], 0xa0000) unshare(0x62040200) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000100)={0xfffffffb, 0x0, 0x40}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) 11m47.237861351s ago: executing program 8 (id=3279): socket(0xa, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000440)={'wlan0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "712a47568b2c402e2c5792b5adbbb82e0c1f8ee15ff7a4373a68eb060d768899", "4a3eb3768515948dfab2e1f39f58465d11fafea228a4086797ceab4b73313c93", "2a9b70e21ec29d05eb89d11e2ed69c5ab4272fac74fcaab9925fabaa303bac61", "38e51009894cae17d2b361d9fedae469737f49b6a39d85a1ca87cbbb9b8e4809", "f16f995bdf5e1d0f32a39b81f061d8cf37f3a57c678b2356afda00", "87e20d1a690faf456b2d5369", 0x7afc, 0x3, 0x4, 0x6fa, 0x7ff}}) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x9, 0x8, 0x8001, 0x0, 0x4, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) getpgrp(0xffffffffffffffff) clock_adjtime(0x0, &(0x7f0000000580)={0x8003ff, 0x7, 0x23e654d4, 0xa, 0x1000, 0x0, 0x18, 0x0, 0x200, 0x100, 0x0, 0xfffffdfffffffffd, 0x9, 0x10, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x6, 0x0, 0x3}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r3, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d10, 0x0) recvfrom(r5, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xd000, 0x7000}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f00000018c0)) 11m44.889632478s ago: executing program 8 (id=3283): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x1, 0x4}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) getsockopt$bt_hci(r2, 0x0, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a", @ANYRES32=r8], 0x3c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 11m39.029613357s ago: executing program 3 (id=3289): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x5, 0x4, 0x20, 0x80, 0x6, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) shutdown(r2, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20001002, 0x0, 0x111, 0xa}}, 0x20) prlimit64(0x0, 0xb, &(0x7f0000000180)={0x3, 0xffffffffffffffff}, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, {0xa, 0x0, 0x9, @mcast1}}}, 0x38) pread64(0xffffffffffffffff, 0x0, 0x0, 0x20000000000040) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r8, r8, 0x0, 0x200000) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) 11m38.683392789s ago: executing program 3 (id=3292): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) symlink(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r6, &(0x7f0000000cc0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}, {0x0}, {0x0}], 0x3) read(r6, &(0x7f0000000240)=""/28, 0xffd2) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) 11m36.072272268s ago: executing program 3 (id=3293): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r3, 0x0, 0x44, 0x4000000, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r7, 0x0, 0xd231c4f959ad4808) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ppoll(&(0x7f0000000000)=[{r1, 0x7000}, {r1, 0x2333}], 0x2, 0x0, &(0x7f0000000080)={[0x6]}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 11m33.065892207s ago: executing program 3 (id=3297): userfaultfd(0x801) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r0 = openat$urandom(0xffffffffffffff9c, 0x0, 0x143902, 0x0) fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x4, 0x8000049, r1, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x7a) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) writev(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)}], 0x2) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000000)={&(0x7f0000000140), 0x39}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xadc) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_driver={0xbcd, 0x9, &(0x7f0000000480)="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"}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) 11m32.783629003s ago: executing program 3 (id=3299): mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000140)={@hyper, 0x3ff}) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000026c0)=""/4096, 0x17f, 0x1000, 0x1, 0x663}, 0x28) close_range(r0, r1, 0x2) r2 = socket$inet6(0xa, 0x3, 0x7) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc"], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x12) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000240)=0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x3, @empty, 0x4}, 0x1c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 11m32.454725458s ago: executing program 3 (id=3301): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf09010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x2000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20, 0x4, [0x2, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x8000, @rand_addr=0xfffffffffffffffe}, 0x10) listen(0xffffffffffffffff, 0xda90) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000040)={0x18, r4}) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, 0x0) 11m29.417020417s ago: executing program 42 (id=3283): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x1, 0x4}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) getsockopt$bt_hci(r2, 0x0, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a", @ANYRES32=r8], 0x3c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 11m17.346051334s ago: executing program 43 (id=3301): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf09010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x2000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20, 0x4, [0x2, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x8000, @rand_addr=0xfffffffffffffffe}, 0x10) listen(0xffffffffffffffff, 0xda90) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000040)={0x18, r4}) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, 0x0) 8m31.406771786s ago: executing program 7 (id=3627): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) r0 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f, 0x1}, 0x20) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x5a, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x86, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x0, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x6, 0x95, 0x7}}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000380)={0x1, 0x0, [{0x6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x4}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r8], &(0x7f0000000200), &(0x7f00000000c0)=[r9], &(0x7f0000000040), 0x0, 0x300}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) 8m30.218098068s ago: executing program 7 (id=3630): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000240), 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) utimensat(r1, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{}, {0x0, 0xea60}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1, 0x55, 0xfffffffc) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140d, 0xd2b5594142800135}, 0x10}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x7}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) 8m26.535077023s ago: executing program 7 (id=3635): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20040000) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 8m26.398023589s ago: executing program 7 (id=3636): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x40045702, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000000c0)={0x0, 0x82, 0x3ff, 0x1, 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000108000021", @ANYBLOB="f5fbcb44a3994c2c9ebc814ce5fabfcf12c14edff73a8a49480c0261ac338b77c138b669a8b1e822693154fe2aef4e8ffe5eddd1310f83b1b887741fc1ca550e463de0b2f25b1d07fa9d91ef8785f2cc30c084f11698fecc01cf47f26ea5f79532"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m23.208841057s ago: executing program 7 (id=3645): r0 = socket$l2tp(0x2, 0x2, 0x73) openat$kvm(0xffffffffffffff9c, 0x0, 0x101800, 0x0) setpriority(0x0, 0x1, 0xa7a8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r4, r3, 0x0, 0x8010002b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) io_setup(0xc00, &(0x7f0000000000)=0x0) io_submit(r6, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) socket$kcm(0x10, 0x2, 0x4) ioprio_set$uid(0x3, 0x0, 0x4007) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') sendfile(r8, r8, &(0x7f0000000000)=0xa01f, 0x100000000) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 8m21.454246562s ago: executing program 7 (id=3646): syz_open_procfs(0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474d, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @sdr={0x42474752, 0x4}}, 0xffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x810, 0xffffffffffffffff, 0x9f221000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x20000023896) socket$netlink(0x10, 0x3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0xc0046209, 0x200000000000000) 8m5.888137001s ago: executing program 44 (id=3646): syz_open_procfs(0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474d, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @sdr={0x42474752, 0x4}}, 0xffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x810, 0xffffffffffffffff, 0x9f221000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x20000023896) socket$netlink(0x10, 0x3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0xc0046209, 0x200000000000000) 21.640509111s ago: executing program 2 (id=4713): socket$igmp(0x2, 0x3, 0x2) socket(0x2, 0xa, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) socket(0x6, 0xa, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000acc000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000009e000c0046723040dcf851353d80428b66c4a5c76fdd086344be5b4b365b030000000000000098b7647dd42e1f003e993562f77b29872355e30839152ef602e4e7b1a25f4123ba0b4f5889c3681c221c0b96e521524250432d6063a60098490ece73ddd10f0030be88fed0a90e3ad8f6863296818bb85f56f7ce8ea7f57bd1a124d9398abb0010000000000000e9577a02dd7f0018c1ac994fbb855ea542000014000000110001bed7fb2e839aeb48cdaa41850d73866782a88041b0b31459daa6651fb72815a0e8f3540bb00e836744dedbf00ef7771bf226d008db27a7f9748bf4e1b4583d5a3d8d9a179f8337e92f7acf4a54bd7a2b3aa3911613fef781e3060d3469420236bbaecd62b5dc9ca6cdc757b9146dbc33d9a617120aa3ccc12cb6959a080fb7b7bdde66abbe02c9d0c4840c934b994e5d3c3ea95e9c40f4cf88f4ddfcdebcd248b29d8a"], 0xf4}, 0x1, 0x0, 0x0, 0x4040854}, 0x24000840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000040a"], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x24008000) 19.497042878s ago: executing program 2 (id=4716): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000019240)=""/102356, 0x18fd4, 0x200) mmap$binder(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="000008000100000000003d00000048f800400000000000f78490783fffffffac1414aa440c670000000004000000030000000005", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x4e) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000180)=ANY=[@ANYBLOB="bb6233c1eb870180c200000086dd6410f746004a2f0100000000000000000000ffffffffffffff0200000000000000000000000000010401000904000800010086ddef2f6de0080088be000000041c0930000100000000000003080022eb0000000103915300020000"], 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) r5 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r5, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac23}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0x4cc59373, 0x0, 0x8001, 0x1, 0x6, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x10000, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x1, 0xe, 0x8000, 0x1, 0x9d, 0x80, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xffffffff, 0x3, 0x100, 0x5, 0xb], [0xa, 0x9d2, 0x80000001, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x9, 0x8, 0x80000001, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x0, 0x2, 0x2, 0x3, 0xb, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc00, 0x1, 0x4, 0x3ff, 0x3, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0x0, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0xd7a8, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0x9, 0x7, 0x590, 0x10000000, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x6, 0x7, 0x3, 0x3, 0x4, 0xe, 0x8001, 0x1, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x7, 0x2, 0x8000, 0x10, 0x5, 0x3, 0x1, 0x10, 0xb8, 0x6, 0xec5f, 0x8001, 0x7fffffff, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x6, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x4, 0x9, 0x80000000, 0xffff, 0xb7, 0x3a1, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x6, 0x6, 0x6, 0x5, 0x1, 0x0, 0x4, 0x9, 0x6, 0x1, 0x6, 0x2, 0x3, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0x6]}, 0x45c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mkdir(&(0x7f0000000040)='./file0\x00', 0x14) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r6, &(0x7f0000003240)=[{0x0}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x2, 0x1, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1f, 0x0, 0x4, 0x8) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') socket$nl_route(0x10, 0x3, 0x0) 17.359947825s ago: executing program 2 (id=4720): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0xf0, 0x17, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xa8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}]}]}, 0xf0}}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x6, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r5, r3) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000200)={0x1, 0x4, 0x1000, 0x100000, &(0x7f0000000000)='/', 0x2, 0x0, &(0x7f0000000d40)="d0f9"}) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r8 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000240)) preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 13.983017875s ago: executing program 2 (id=4728): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x4004850) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newspdinfo={0x24, 0x24, 0x3dd681fbf96b935, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x24}}, 0x0) getresuid(&(0x7f0000000100), 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x100, 0x8, @mcast1={0xff, 0x7}, 0xfffffffe}}, {{0xa, 0x0, 0x200, @private2, 0xffffffff}}}, 0x108) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x6, &(0x7f0000000700)=ANY=[@ANYRESHEX=r6], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, r7, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13.843998156s ago: executing program 1 (id=4729): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) bind(0xffffffffffffffff, &(0x7f00000002c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f2c50c9eb720e93d3e5b49fae5ab325f9ef326cf8bad0db853cbb8235b0c803c417ede8f7b85eaad8aea5b2fe9813fee217a97a980d39d7a1efef815bf2bfe6823e664dc7dcd285d91c9e4ab6ee36a00b300ffd69f9eb85d6f8c7b5c176084bccbdea02f34326a0123f31e282ee", 0xb2}, {&(0x7f00000006c0)="080c0434", 0x4}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e44272215dba2195d826f9fd3b46efe6524229e48a31", 0x91}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db19ac572af50ea485d175761731e22c55a759161b4a9abe65d440cccf63983cbbcac2913f2df6e269ebe5875", 0x3e}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000000000000000000001000000ff000056df27bb76a0c4c02a354f90106d3a00000000001400000000000000000000000200000057020000000000001400000000000000000000000200000009000000000000001100000000000000000000000100000001000000000000001cfe83fe", @ANYRES32=r1, @ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f00000100000007ac1e000100000008ac14143200000005e0000002000000f77f000001000002"], 0x1a0}, 0x41) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 12.340404167s ago: executing program 9 (id=4730): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a54000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000028000480240001800b0001007470726f7879000014000280080002400000080c08000140"], 0x7c}, 0x1, 0x0, 0x0, 0x4000050}, 0x24044010) socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) unshare(0x22020600) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) close(0x3) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x1ff, 0x50000, 0x0, 0xffffffffffffffff, 0x4}) 11.919568946s ago: executing program 1 (id=4731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000340)={0x0, 0x0, 0xc, 0x7, 0x5}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x57, &(0x7f00000003c0)=[{&(0x7f00000001c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xc}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000000080)=""/79, 0x4f}], 0x1, 0x21}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffff8, 0x4}, {0x0}, &(0x7f0000001580)=[{&(0x7f00000003c0)=""/139, 0x8b}], 0x1, 0x8, 0x3}}], 0x90}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x44080) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00007b030000000000009f440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 11.705912162s ago: executing program 6 (id=4732): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0], 0x28}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0xffe0, 0xb}, {0xb, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c099, 0x4400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000040)={0x2d}, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.389406935s ago: executing program 9 (id=4733): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) close(0x3) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r5) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="00082dbd7000fedbdf250300000005003700000000000800310008000000"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x80) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r8 = dup2(r6, r6) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, 0x0) read$FUSE(r8, &(0x7f00000063c0)={0x2020}, 0x2020) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000040)={0x8, 0xe5de, 0x2, {0xd, @vbi={0x0, 0x4000003, 0x2, 0x37303250, [0x1, 0x4], [0x0, 0x2], 0x1}}}) 9.969743715s ago: executing program 1 (id=4734): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x480) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/6, 0x6}], 0x1, 0x7, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r4, &(0x7f00000052c0)=[{{&(0x7f0000000180)=@ax25={{0x3, @netrom}, [@netrom, @remote, @netrom, @default, @null, @remote, @netrom, @default]}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000200)=""/189, 0xbd}], 0x1}, 0xef35}, {{&(0x7f0000000780)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001d80)}, 0x79}], 0x2, 0x2000, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) shmat(r3, &(0x7f0000f62000/0x1000)=nil, 0x7000) mremap(&(0x7f0000f7f000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x14) r6 = timerfd_create(0x0, 0x0) r7 = mq_open(&(0x7f0000000240)='ba\x01adv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x7ffffffffffffffe, 0x8, 0x1, 0xc05}) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r8, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r7, 0x0}]) mq_timedsend(r7, 0x0, 0x0, 0x5, 0x0) mq_timedreceive(r7, &(0x7f0000000400)=""/215, 0xd7, 0x0, 0x0) timerfd_settime(r6, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) 9.969266715s ago: executing program 4 (id=4735): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x6, 0x22, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x2, 0x3b63}, {0x6, 0x0, 0xfe}]}, 0x10) r4 = socket$inet6(0xa, 0x5, 0x4) setsockopt$inet_int(r4, 0x0, 0xf, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) fcntl$getown(r2, 0x9) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000001400)={0x0, 0x1, {0xb3, 0x13, 0x80010, 0x15, 0x2, 0xb30, 0x1, 0x168, 0x1}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000015001001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="0df16064f075813fe179c9ef8950c7069ad85c0cc803642a9b3551e7dcca918370697b0eeb1cd634c7dbab786b770afbf25845024956510dd9cbbaa133367fb5a68dc88298e34e817e1f328c8824682bbf5c38feb74871bce5f791d22dee2659dfdb77a2789ea7c2c3f461d4fa6f87ef7349fc170f8d0ab040f90ce5efcb3972751c8398f1a6e5430a9c06e8777ce459eed9f777c0757ccd2aa74a9a6d89ac7832a2751b3d75b153"], 0x40}}, 0x2400c080) socket$nl_netfilter(0x10, 0x3, 0xc) 9.799703522s ago: executing program 2 (id=4736): fsopen(0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x145101) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) fsopen(&(0x7f0000000140)='vxfs\x00', 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000200)=0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d"], 0x24}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x7577e0b0a29503e5) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 9.456955349s ago: executing program 6 (id=4737): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) bind(0xffffffffffffffff, &(0x7f00000002c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f2c50c9eb720e93d3e5b49fae5ab325f9ef326cf8bad0db853cbb8235b0c803c417ede8f7b85eaad8aea5b2fe9813fee217a97a980d39d7a1efef815bf2bfe6823e664dc7dcd285d91c9e4ab6ee36a00b300ffd69f9eb85d6f8c7b5c176084bccbdea02f34326a0123f31e282ee", 0xb2}, {&(0x7f00000006c0)="080c0434", 0x4}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfa", 0x74}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db19ac572af50ea485d175761731e22c55a759161b4a9abe65d440cccf63983cbbcac2913f2df6e269ebe5875", 0x3e}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000000000000000000001000000ff000056df27bb76a0c4c02a354f90106d3a00000000001400000000000000000000000200000057020000000000001400000000000000000000000200000009000000000000001100000000000000000000000100000001000000000000001cfe83fe", @ANYRES32=r1, @ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f00000100000007ac1e000100000008ac14143200000005e0000002000000f77f000001000002"], 0x1a0}, 0x41) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9.111768832s ago: executing program 9 (id=4738): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf09010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001700)=""/4108, 0x100c}], 0x1}, 0x2000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20, 0x4, [0x2, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) listen(0xffffffffffffffff, 0xda90) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) 8.517686225s ago: executing program 6 (id=4739): openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x101402, 0x85, 0x20}, 0x18) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000140)={'team0\x00', {0x2, 0x0, @local}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30", 0x2}], 0x1) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x8}]}}]}, 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r6, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x8}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) 6.679802942s ago: executing program 9 (id=4740): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1, 0x2, 0x2000, 0x2000, &(0x7f00009c4000/0x2000)=nil}) socket(0x1e, 0x4, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000200)=0x6) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000200)=""/182) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000028c0)={0x2020}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x40, 0x4251}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x5}}]}]}}}]}, 0x44}}, 0x8010) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8) quotactl_fd$Q_GETINFO(r5, 0xffffffff80000500, r7, &(0x7f0000000540)) r8 = socket(0x10, 0x803, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) 6.541025297s ago: executing program 6 (id=4741): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x38, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') lseek(r4, 0x400, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x50, 0x0, &(0x7f0000000480)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x100b}, @flat=@weak_handle={0x77682a85, 0x1100, 0x1}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}, @free_buffer], 0x0, 0x0, 0x0}) dup3(r5, r1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0xffffffffffffffff}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x100) write$dsp(r6, &(0x7f0000000240)=' ', 0x1) close(r6) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 5.782581717s ago: executing program 1 (id=4742): socket$igmp(0x2, 0x3, 0x2) socket(0x2, 0xa, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) socket(0x6, 0xa, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0x4040854}, 0x24000840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000040a01"], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x24008000) 4.720285278s ago: executing program 6 (id=4743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0xfffe, @multicast1}}, 0x1e) bind$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x110, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r5, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000280)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) quotactl_fd$Q_GETFMT(r6, 0xffffffff80000400, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) r7 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfc8d}}]}}, 0x0) syz_usb_control_io$lan78xx(r7, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r7, 0x0, &(0x7f00000007c0)={0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="00110ec026684a105ac790f64714c2afc1f7c6defd849ea1554328aeb0aa931e668fc631cc546426610271b79affa59c5b175511394a998c71f8e69b1048c14352df14f657425fae20e7a71abdd900b362472fd0120000000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pivot_root(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='./file1\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r9, 0x0, 0x1, 0x0, 0x3, 0x3d869c, 0x109c94}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0xc048aeca, &(0x7f0000001440)=@vmx={0x8, 0x0, 0x2080, {0x0, 0x10000}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"}}) 4.01023057s ago: executing program 4 (id=4744): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000052e000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x29}, {0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x2, 0x100000000}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x9}, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000001b00)="a6", 0x1, 0x20000045, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x0, 0x3, 0x0, 0x8, {0x5, 0x2, 0x0, 0xa, 0xccc}, {0x5, 0x1, 0x0, 0x6, 0x2, 0x4}, 0x1, 0x0, 0x800000}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x78}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r0], 0x38}}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'veth1_virt_wifi\x00', {0x4}, 0x9}) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x3c1c, 0xc002, 0x2000, 0x3c}) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote}, "090088beffff0000"}}}}}, 0x0) 3.929336632s ago: executing program 1 (id=4745): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x51a00}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r6 = msgget$private(0x0, 0x4a0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgsnd(r6, &(0x7f0000000440)=ANY=[], 0xe3, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x3b}, 0x5a) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4) syz_usb_connect(0x3, 0x64, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007"], 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000080)=0x5d6, 0x4) 3.836953546s ago: executing program 9 (id=4746): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) readv(r1, &(0x7f0000003500)=[{&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f0000001380)=""/34, 0x22}, {&(0x7f00000013c0)=""/25, 0x19}, {&(0x7f0000001400)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x6) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) open(&(0x7f0000000280)='./file0\x00', 0x2a002, 0x32) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0xb56e2e3f2d9728b3, 0x8, 0x8001, 0x0, 0x9, 0x100000003, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r5, 0x80047437, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x4c00, 0x0) 3.770511161s ago: executing program 4 (id=4747): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000600)=r1, 0x4) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008", @ANYRES64=r1], 0x1c}}, 0x20040000) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket(0x10, 0x3, 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TCXONC(r5, 0x540a, 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000bc0)={@ifindex, 0xffffffffffffffff, 0x1b}, 0x20) 2.282812969s ago: executing program 9 (id=4748): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf25020000001800018014000300ac1414bb030000000000000000000000080005006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000380), 0xfffffffffffffffa, 0x1c400) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0xd, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x3, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) getpid() syz_io_uring_setup(0xcb0, &(0x7f0000000100)={0x0, 0xb601, 0x859, 0x5, 0x8032c}, &(0x7f00000002c0), &(0x7f00000000c0), &(0x7f0000000000)) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) execve(&(0x7f00000001c0)='./file0\x00', 0xfffffffffffffffc, &(0x7f0000000400)={[&(0x7f0000000240)='ns/pid\x00']}) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000a80)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r6}) 2.28250244s ago: executing program 4 (id=4749): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) bind(0xffffffffffffffff, &(0x7f00000002c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f2c50c9eb720e93d3e5b49fae5ab325f9ef326cf8bad0db853cbb8235b0c803c417ede8f7b85eaad8aea5b2fe9813fee217a97a980d39d7a1efef815bf2bfe6823e664dc7dcd285d91c9e4ab6ee36a00b300ffd69f9eb85d6f8c7b5c176084bccbdea02f34326a0123f31e282ee", 0xb2}, {&(0x7f00000006c0)="080c0434", 0x4}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e44272215dba2195d826f9fd", 0x87}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db19ac572af50ea485d175761731e22c55a759161b4a9abe65d440cccf63983cbbcac2913f2df6e269ebe5875", 0x3e}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000000000000000000001000000ff000056df27bb76a0c4c02a354f90106d3a00000000001400000000000000000000000200000057020000000000001400000000000000000000000200000009000000000000001100000000000000000000000100000001000000000000001cfe83fe", @ANYRES32=r1, @ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f00000100000007ac1e000100000008ac14143200000005e0000002000000f77f000001000002"], 0x1a0}, 0x41) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.902175716s ago: executing program 4 (id=4750): openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x101402, 0x85, 0x20}, 0x18) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000140)={'team0\x00', {0x2, 0x0, @local}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30", 0x2}], 0x1) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x8}]}}]}, 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r6, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x8}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) 1.108189389s ago: executing program 6 (id=4751): openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x101402, 0x85, 0x20}, 0x18) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000140)={'team0\x00', {0x2, 0x0, @local}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30", 0x2}], 0x1) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x8}]}}]}, 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r6, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x8}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) 276.718369ms ago: executing program 2 (id=4752): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000180000000800000060000000000", @ANYRES32, @ANYBLOB="0200008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000300"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, 0x0, &(0x7f0000000280)}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f00000005c0), &(0x7f0000000680)=""/151}, 0x20) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000001c0), 0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) syz_emit_ethernet(0x24, &(0x7f0000000340)=ANY=[], 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 191.706867ms ago: executing program 1 (id=4753): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = userfaultfd(0x801) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) socket(0xa, 0x3, 0x3a) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x48}}], 0x1, 0x815) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 0s ago: executing program 4 (id=4754): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES8=r0, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40801) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1000}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r3 = syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x82341) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chroot(&(0x7f00000004c0)='./file0\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x0, &(0x7f0000004540)) ioctl$VIDIOC_G_PRIORITY(r6, 0x80045643, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) capset(&(0x7f0000000580)={0x20071026}, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000002c0)={0x6, 0x8, 0xfd5, 0x7fffffffffffffff, 0x4, 0x7ff}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2329c2, 0x0) openat$cgroup_int(r8, &(0x7f0000000380)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="00000000fbb9b634b8f978cf17e03dfde3633e4d6a9fef22d8eb1a066ae9b288c6c5c1f98ab386be60f601032dcde8d553261f300a234858a5aeebfd8101978fa50b2cba1eabbf24bd51495ca29fddd91087044d62876f4db69309c1657726a1c3858f4a2596c4cce448775fead14a067e2af05eea4afb49d84eb8531cb4", @ANYRES16=r7, @ANYBLOB="00042abd7000fcdbdf25380000000c00990005000000070000000c0058002500000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8011}, 0x42) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000005c0)={0x70, 0x101, 0x0, 0x595f314c, 0x19, "00e47903e5951edc064af900"}) syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp\x00') kernel console output (not intermixed with test programs): ialNumber: syz [ 1563.428622][T15437] usb 5-1: config 0 descriptor?? [ 1563.466673][ T5721] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 1563.485189][ T5721] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 1563.522179][ T393] random: crng reseeded on system resumption [ 1563.535650][T15437] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 080 [ 1563.549689][ T5721] input: HID 0955:7214 Haptics as /devices/virtual/input/input79 [ 1563.968189][ T5721] shield 0003:0955:7214.001C: Registered Thunderstrike controller [ 1563.994794][ T5721] shield 0003:0955:7214.001C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 1564.529592][T21856] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1564.538728][T11884] usb 10-1: USB disconnect, device number 30 [ 1564.573867][ T494] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1564.644629][T21856] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1564.725617][T21856] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1564.766083][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1564.766098][ T30] audit: type=1400 audit(1777772812.768:1165): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=491 comm="syz.2.3954" [ 1565.157657][ T511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1565.198511][ T511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1565.267386][ T511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3951'. [ 1566.318585][ T540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3958'. [ 1566.821760][T15437] i2c i2c-4: failure reading functionality [ 1566.862174][T15437] i2c i2c-4: connected i2c-tiny-usb device [ 1566.889238][T15437] usb 5-1: USB disconnect, device number 80 [ 1567.079552][ T577] xt_TCPMSS: Only works on TCP SYN packets [ 1567.495879][ T577] sit1: entered allmulticast mode [ 1568.992553][T10780] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1569.002981][T10780] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1569.428088][ T30] audit: type=1326 audit(1777772817.428:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=622 comm="syz.1.3965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134039cdd9 code=0x7ffc0000 [ 1569.609728][ T30] audit: type=1326 audit(1777772817.428:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=622 comm="syz.1.3965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134039cdd9 code=0x7ffc0000 [ 1569.735507][ T30] audit: type=1326 audit(1777772817.468:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=622 comm="syz.1.3965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f134039cdd9 code=0x7ffc0000 [ 1569.860859][ T30] audit: type=1326 audit(1777772817.468:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=622 comm="syz.1.3965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134039cdd9 code=0x7ffc0000 [ 1570.135622][ T30] audit: type=1326 audit(1777772817.468:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=622 comm="syz.1.3965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134039cdd9 code=0x7ffc0000 [ 1570.328512][ T30] audit: type=1326 audit(1777772817.478:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=622 comm="syz.1.3965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f134039cdd9 code=0x7ffc0000 [ 1570.493510][ T30] audit: type=1326 audit(1777772817.478:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=622 comm="syz.1.3965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134039cdd9 code=0x7ffc0000 [ 1570.588210][ T30] audit: type=1326 audit(1777772817.478:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=622 comm="syz.1.3965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134039cdd9 code=0x7ffc0000 [ 1570.715546][ T30] audit: type=1326 audit(1777772817.478:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=622 comm="syz.1.3965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f134039cdd9 code=0x7ffc0000 [ 1570.820691][ T30] audit: type=1326 audit(1777772817.478:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=622 comm="syz.1.3965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134039cdd9 code=0x7ffc0000 [ 1570.852146][ T30] audit: type=1326 audit(1777772817.478:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=622 comm="syz.1.3965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134039cdd9 code=0x7ffc0000 [ 1570.882343][ T30] audit: type=1326 audit(1777772817.478:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=622 comm="syz.1.3965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f134039cdd9 code=0x7ffc0000 [ 1570.971273][ T30] audit: type=1326 audit(1777772817.478:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=622 comm="syz.1.3965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134039cdd9 code=0x7ffc0000 [ 1572.835435][ T687] vivid-002: disconnect [ 1572.867652][ T687] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1572.896771][ T687] vivid-002: reconnect [ 1574.466343][ T738] syzkaller0: entered promiscuous mode [ 1574.474021][ T738] syzkaller0: entered allmulticast mode [ 1576.123188][T11889] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1576.294259][T11889] usb 7-1: Using ep0 maxpacket: 16 [ 1576.382305][T11889] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1576.433343][T11889] usb 7-1: New USB device found, idVendor=046d, idProduct=b305, bcdDevice= 0.00 [ 1576.474461][T11889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.573878][T11889] usb 7-1: config 0 descriptor?? [ 1576.996600][ T811] sctp: [Deprecated]: syz.1.3991 (pid 811) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1576.996600][ T811] Use struct sctp_sack_info instead [ 1577.374405][T11889] hid-generic 0003:046D:B305.001E: unknown main item tag 0x0 [ 1577.430031][T11889] hid-generic 0003:046D:B305.001E: unknown main item tag 0x0 [ 1577.483188][T11889] hid-generic 0003:046D:B305.001E: unknown main item tag 0x0 [ 1577.527773][T11889] hid-generic 0003:046D:B305.001E: unknown main item tag 0x0 [ 1577.573813][T11889] hid-generic 0003:046D:B305.001E: unknown main item tag 0x0 [ 1577.616593][T11889] hid-generic 0003:046D:B305.001E: unknown main item tag 0x0 [ 1577.664179][T11889] hid-generic 0003:046D:B305.001E: unknown main item tag 0x0 [ 1577.701804][T11889] hid-generic 0003:046D:B305.001E: unknown main item tag 0x0 [ 1577.743414][T11889] hid-generic 0003:046D:B305.001E: unknown main item tag 0x0 [ 1577.839842][T11889] hid-generic 0003:046D:B305.001E: unknown main item tag 0x0 [ 1578.215959][T27658] hid-generic 0008:0091:0009.001F: reserved main item tag 0xd [ 1578.256732][T11889] hid-generic 0003:046D:B305.001E: hidraw0: USB HID v0.0a Device [HID 046d:b305] on usb-dummy_hcd.6-1/input0 [ 1578.285552][T27658] hid-generic 0008:0091:0009.001F: item fetching failed at offset 28/32 [ 1578.314573][T27658] hid-generic 0008:0091:0009.001F: probe with driver hid-generic failed with error -22 [ 1578.678107][T13255] Bluetooth: hci4: command 0x0406 tx timeout [ 1579.246802][T27658] usb 7-1: USB disconnect, device number 79 [ 1579.341258][ T797] m1Ie5n: entered promiscuous mode [ 1580.509806][ T914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3996'. [ 1580.741619][ T923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3998'. [ 1580.874043][ T925] input: syz0 as /devices/virtual/input/input80 [ 1581.052655][ T923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1581.211659][ T923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1582.813871][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1582.813889][ T30] audit: type=1326 audit(1777772830.818:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=989 comm="syz.4.4003" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26879cdd9 code=0x7ffc0000 [ 1582.928524][ T30] audit: type=1326 audit(1777772830.888:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=989 comm="syz.4.4003" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd26879cdd9 code=0x7ffc0000 [ 1583.043826][ T30] audit: type=1326 audit(1777772830.888:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=989 comm="syz.4.4003" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26879cdd9 code=0x7ffc0000 [ 1583.175425][ T30] audit: type=1326 audit(1777772830.888:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=989 comm="syz.4.4003" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26879cdd9 code=0x7ffc0000 [ 1583.281303][ T30] audit: type=1326 audit(1777772830.898:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=989 comm="syz.4.4003" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd26879cdd9 code=0x7ffc0000 [ 1583.434592][ T30] audit: type=1326 audit(1777772830.908:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=989 comm="syz.4.4003" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26879cdd9 code=0x7ffc0000 [ 1583.645663][ T30] audit: type=1326 audit(1777772830.908:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=989 comm="syz.4.4003" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd26879cdd9 code=0x7ffc0000 [ 1583.818775][ T30] audit: type=1326 audit(1777772830.918:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=989 comm="syz.4.4003" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26879cdd9 code=0x7ffc0000 [ 1583.848485][ T30] audit: type=1326 audit(1777772831.108:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=989 comm="syz.4.4003" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26879cdd9 code=0x7ffc0000 [ 1583.908213][ T30] audit: type=1326 audit(1777772831.118:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=989 comm="syz.4.4003" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fd26879cdd9 code=0x7ffc0000 [ 1584.837238][ T1070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1584.971590][ T1078] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1588.048117][ T5721] IPVS: starting estimator thread 0... [ 1588.149600][ T1163] IPVS: using max 27 ests per chain, 64800 per kthread [ 1589.787195][ T1192] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1589.835691][ T1192] team0: Port device batadv2 added [ 1589.919006][ T1192] hub 9-0:1.0: USB hub found [ 1589.964630][ T1192] hub 9-0:1.0: 1 port detected [ 1590.720799][ T1190] Cannot find set identified by id 0 to match [ 1590.939920][ T1219] cifs: Unknown parameter ' [ 1591.098233][T27658] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 1591.529564][T27658] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.562963][T27658] usb 10-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1591.583546][T27658] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.593543][T27658] usb 10-1: Product: syz [ 1591.598222][T27658] usb 10-1: Manufacturer: syz [ 1591.603254][T27658] usb 10-1: SerialNumber: syz [ 1591.620256][T27658] usb 10-1: config 0 descriptor?? [ 1591.652352][T27658] usb 10-1: No union descriptors [ 1591.672581][T27658] usb 10-1: unsupported MDLM descriptors [ 1591.997285][ T1246] syzkaller0: entered promiscuous mode [ 1592.012579][ T1246] syzkaller0: entered allmulticast mode [ 1592.539529][ T1220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1592.595169][ T1220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1592.988094][T10780] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1594.809924][ T5721] usb 10-1: USB disconnect, device number 31 [ 1594.978339][T10780] usb 2-1: Using ep0 maxpacket: 16 [ 1595.003816][T10780] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1595.019109][T10780] usb 2-1: New USB device found, idVendor=046d, idProduct=b305, bcdDevice= 0.00 [ 1595.038120][T10780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.067203][T10780] usb 2-1: config 0 descriptor?? [ 1595.551354][T10780] hid_parser_main: 28 callbacks suppressed [ 1595.551373][T10780] hid-generic 0003:046D:B305.0020: unknown main item tag 0x0 [ 1595.571677][T10780] hid-generic 0003:046D:B305.0020: unknown main item tag 0x0 [ 1595.584210][T10780] hid-generic 0003:046D:B305.0020: unknown main item tag 0x0 [ 1595.598130][T10780] hid-generic 0003:046D:B305.0020: unknown main item tag 0x0 [ 1595.612481][T10780] hid-generic 0003:046D:B305.0020: unknown main item tag 0x0 [ 1595.636128][T10780] hid-generic 0003:046D:B305.0020: unknown main item tag 0x0 [ 1595.657243][T10780] hid-generic 0003:046D:B305.0020: unknown main item tag 0x0 [ 1595.678603][T10780] hid-generic 0003:046D:B305.0020: unknown main item tag 0x0 [ 1595.697206][T10780] hid-generic 0003:046D:B305.0020: unknown main item tag 0x0 [ 1595.720163][T10780] hid-generic 0003:046D:B305.0020: unknown main item tag 0x0 [ 1595.761939][T10780] hid-generic 0003:046D:B305.0020: hidraw0: USB HID v0.0a Device [HID 046d:b305] on usb-dummy_hcd.1-1/input0 [ 1596.786640][ T1328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4036'. [ 1596.876500][ T1330] xt_ecn: cannot match TCP bits for non-tcp packets [ 1598.653876][ T1350] syzkaller0: entered promiscuous mode [ 1598.659567][ T1350] syzkaller0: entered allmulticast mode [ 1598.860098][ T1360] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1599.465169][T15437] usb 2-1: USB disconnect, device number 76 [ 1600.879658][ T1403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4046'. [ 1600.924755][ T1403] Cannot find add_set index 1 as target [ 1602.210538][ T1420] fuse: Bad value for 'fd' [ 1602.648108][T15438] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1602.851737][T15438] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1602.864353][T15438] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.887707][T15438] usb 3-1: Product: syz [ 1602.910815][T15438] usb 3-1: Manufacturer: syz [ 1602.926638][T15438] usb 3-1: SerialNumber: syz [ 1603.016459][T15438] usb 3-1: config 0 descriptor?? [ 1603.069980][T15438] hub 3-1:0.0: bad descriptor, ignoring hub [ 1603.134408][T15438] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1603.280344][T15438] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1603.316022][T15438] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1603.353185][T15438] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1603.395669][T15438] usb 3-1: media controller created [ 1604.022277][T15438] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1604.167665][T15438] DVB: Unable to find symbol dib7000p_attach() [ 1604.174240][T15438] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1604.328029][T15438] rc_core: IR keymap rc-dib0700-rc5 not found [ 1604.366191][T15438] Registered IR keymap rc-empty [ 1604.382897][T15438] dvb-usb: could not initialize remote control. [ 1604.394112][T15438] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1604.535843][ T4946] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 1604.799567][ T1455] syzkaller0: entered promiscuous mode [ 1604.805310][ T1455] syzkaller0: entered allmulticast mode [ 1605.610006][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1605.610029][ T30] audit: type=1326 audit(1777772853.618:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1464 comm="syz.4.4054" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26879cdd9 code=0x7ffc0000 [ 1605.681032][ T30] audit: type=1326 audit(1777772853.648:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1464 comm="syz.4.4054" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26879cdd9 code=0x7ffc0000 [ 1605.758874][ T30] audit: type=1326 audit(1777772853.718:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1464 comm="syz.4.4054" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd26879cdd9 code=0x7ffc0000 [ 1605.856680][ T30] audit: type=1326 audit(1777772853.718:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1464 comm="syz.4.4054" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26879cdd9 code=0x7ffc0000 [ 1605.902213][T27658] usb 3-1: USB disconnect, device number 32 [ 1605.956680][ T30] audit: type=1326 audit(1777772853.728:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1464 comm="syz.4.4054" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd26879cdd9 code=0x7ffc0000 [ 1606.014318][T27658] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1606.036397][ T30] audit: type=1326 audit(1777772853.728:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1464 comm="syz.4.4054" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26879cdd9 code=0x7ffc0000 [ 1606.079980][ T30] audit: type=1326 audit(1777772853.728:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1464 comm="syz.4.4054" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd26879cdd9 code=0x7ffc0000 [ 1606.118102][ T30] audit: type=1326 audit(1777772853.728:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1464 comm="syz.4.4054" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26879cdd9 code=0x7ffc0000 [ 1606.157047][ T30] audit: type=1326 audit(1777772853.728:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1464 comm="syz.4.4054" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd26879cdd9 code=0x7ffc0000 [ 1606.188440][ T30] audit: type=1326 audit(1777772853.728:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1464 comm="syz.4.4054" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26879cdd9 code=0x7ffc0000 [ 1606.589263][T15438] usb 10-1: new full-speed USB device number 32 using dummy_hcd [ 1606.753155][ T1522] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 1522 comm: syz.6.4068) [ 1606.784305][T15437] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1606.812875][T15438] usb 10-1: config index 0 descriptor too short (expected 8192, got 36) [ 1606.848918][T15438] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.880536][T15438] usb 10-1: config 0 has no interfaces? [ 1606.905338][T15438] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1606.929603][T15438] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.979977][T15437] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1607.015402][T15438] usb 10-1: config 0 descriptor?? [ 1607.045225][T15437] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1607.113792][T15437] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1607.166350][T15437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.369062][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.376709][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.566310][T15437] usb 3-1: usb_control_msg returned -32 [ 1607.617115][T15437] usbtmc 3-1:16.0: can't read capabilities [ 1609.955057][T10780] usb 3-1: USB disconnect, device number 33 [ 1610.213129][T15438] usb 10-1: USB disconnect, device number 32 [ 1611.064131][ T1639] syzkaller0: entered promiscuous mode [ 1611.075423][ T1639] syzkaller0: entered allmulticast mode [ 1612.378198][ T5721] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1612.628441][ T5721] usb 5-1: Using ep0 maxpacket: 16 [ 1612.636202][ T1665] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4071'. [ 1612.664818][ T5721] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1612.722610][ T5721] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1612.768122][ T5721] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1612.784029][ T5721] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1612.824680][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.860981][ T1675] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4072'. [ 1612.968313][T15437] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 1613.041378][ T5721] usb 5-1: config 0 descriptor?? [ 1613.143504][T15437] usb 10-1: config index 0 descriptor too short (expected 8192, got 36) [ 1613.169299][T15437] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1613.213765][T15437] usb 10-1: config 0 has no interfaces? [ 1613.241753][T15437] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1613.289669][T15437] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.352255][T15437] usb 10-1: config 0 descriptor?? [ 1613.465968][ T1657] loop5: detected capacity change from 0 to 7 [ 1613.495014][ T1657] loop5: p1 < > p3 p4 [ 1613.520495][ T1657] loop5: partition table partially beyond EOD, truncated [ 1613.567364][ T1657] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 1613.599406][ T1657] loop5: p4 start 33554432 is beyond EOD, truncated [ 1613.894798][ T5721] hid_parser_main: 28 callbacks suppressed [ 1613.894817][ T5721] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1614.221256][ T5721] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1614.344146][ T5721] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1614.368388][ T5721] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1614.378045][ T5721] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1614.386707][ T5721] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1614.579115][ T5721] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1614.587134][ T5721] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1614.595729][ T5721] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1614.603206][ T5721] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1614.611805][ T5721] cougar 0003:060B:500A.0021: unexpected long global item [ 1614.625461][ T5721] cougar 0003:060B:500A.0021: parse failed [ 1614.632639][ T5721] cougar 0003:060B:500A.0021: probe with driver cougar failed with error -22 [ 1614.914331][ T5721] usb 5-1: USB disconnect, device number 81 [ 1615.602556][ T1699] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4074'. [ 1616.843549][ T1739] syzkaller0: entered promiscuous mode [ 1616.849144][ T1739] syzkaller0: entered allmulticast mode [ 1617.115134][ T1755] fuse: Bad value for 'fd' [ 1618.818705][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1618.818729][ T30] audit: type=1326 audit(1777772866.818:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1791 comm="syz.6.4085" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4d39cdd9 code=0x7ffc0000 [ 1618.974698][ T30] audit: type=1326 audit(1777772866.948:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1791 comm="syz.6.4085" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7d4d39cdd9 code=0x7ffc0000 [ 1619.081684][ T30] audit: type=1326 audit(1777772867.078:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1791 comm="syz.6.4085" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4d39cdd9 code=0x7ffc0000 [ 1619.177960][ T30] audit: type=1326 audit(1777772867.178:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1791 comm="syz.6.4085" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4d39cdd9 code=0x7ffc0000 [ 1619.264023][ T30] audit: type=1326 audit(1777772867.268:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1791 comm="syz.6.4085" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f7d4d39cdd9 code=0x7ffc0000 [ 1619.336615][ T30] audit: type=1326 audit(1777772867.338:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1791 comm="syz.6.4085" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4d39cdd9 code=0x7ffc0000 [ 1619.423757][ T30] audit: type=1326 audit(1777772867.338:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1791 comm="syz.6.4085" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4d39cdd9 code=0x7ffc0000 [ 1619.741673][T15438] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1619.782248][ T1813] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 1619.806791][T10780] usb 10-1: USB disconnect, device number 33 [ 1619.816427][ T1813] PKCS7: Only support pkcs7_signedData type [ 1619.948081][T15438] usb 5-1: Using ep0 maxpacket: 32 [ 1619.996581][T15438] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1620.073041][T15438] usb 5-1: config 0 has no interfaces? [ 1620.090504][T15438] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1620.123726][T15438] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.184138][T15438] usb 5-1: config 0 descriptor?? [ 1620.348279][T15438] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1621.399045][T15438] usb 10-1: Using ep0 maxpacket: 16 [ 1621.565772][T15438] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1621.579737][T15438] usb 10-1: New USB device found, idVendor=046d, idProduct=b305, bcdDevice= 0.00 [ 1621.591911][T15438] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.624080][T15438] usb 10-1: config 0 descriptor?? [ 1622.078035][T15437] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1622.133159][T15438] hid_parser_main: 101 callbacks suppressed [ 1622.133177][T15438] hid-generic 0003:046D:B305.0022: unknown main item tag 0x0 [ 1622.183653][T15438] hid-generic 0003:046D:B305.0022: unknown main item tag 0x0 [ 1622.215401][T15438] hid-generic 0003:046D:B305.0022: unknown main item tag 0x0 [ 1622.238688][T15438] hid-generic 0003:046D:B305.0022: unknown main item tag 0x0 [ 1622.272410][T15437] usb 2-1: Using ep0 maxpacket: 32 [ 1622.279176][T15438] hid-generic 0003:046D:B305.0022: unknown main item tag 0x0 [ 1622.299699][T15437] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.316469][T15438] hid-generic 0003:046D:B305.0022: unknown main item tag 0x0 [ 1622.334738][T15437] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1622.354116][T15438] hid-generic 0003:046D:B305.0022: unknown main item tag 0x0 [ 1622.376377][T15438] hid-generic 0003:046D:B305.0022: unknown main item tag 0x0 [ 1622.389236][T15437] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1622.414877][T15438] hid-generic 0003:046D:B305.0022: unknown main item tag 0x0 [ 1622.427599][T15437] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1622.451591][T15438] hid-generic 0003:046D:B305.0022: unknown main item tag 0x0 [ 1622.513118][T15438] hid-generic 0003:046D:B305.0022: hidraw0: USB HID v0.0a Device [HID 046d:b305] on usb-dummy_hcd.9-1/input0 [ 1622.556471][T15437] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1622.663363][T15437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.707335][T15437] usb 2-1: Product: syz [ 1622.770007][T15437] usb 2-1: Manufacturer: syz [ 1622.776965][T15438] usb 5-1: USB disconnect, device number 82 [ 1622.802163][T15437] usb 2-1: SerialNumber: syz [ 1622.868925][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1622.877745][T15437] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input83 [ 1623.139304][T15437] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1623.157497][T15437] (id 0x00) [ 1623.322451][T15437] rc_core: IR keymap rc-imon-pad not found [ 1623.336379][T15437] Registered IR keymap rc-empty [ 1623.376366][T15437] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1623.401109][T15437] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1623.486688][T15437] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 1623.598706][T15437] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input84 [ 1623.704717][T15437] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:77> initialized [ 1624.115461][ T1907] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1624.283144][ T1905] imon:send_packet: packet tx failed (-71) [ 1624.285904][T15438] usb 2-1: USB disconnect, device number 77 [ 1624.314048][ T5721] usb 10-1: USB disconnect, device number 34 [ 1624.357415][ T1905] imon:vfd_write: send packet #0 failed [ 1624.564810][ T1924] imon:display_open: display port is already open [ 1625.824311][ T1964] fuse: Bad value for 'fd' [ 1625.899592][ T4946] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 1627.527985][T10780] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1627.719156][T10780] usb 3-1: Using ep0 maxpacket: 32 [ 1627.733412][T10780] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1627.744040][T10780] usb 3-1: config 0 has no interfaces? [ 1627.759076][T10780] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1627.778828][T10780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.806864][T10780] usb 3-1: config 0 descriptor?? [ 1627.854724][ T2042] xt_TCPMSS: Only works on TCP SYN packets [ 1629.118324][T15438] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1629.288142][T15438] usb 10-1: Using ep0 maxpacket: 32 [ 1629.328932][T15438] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1629.356306][T15438] usb 10-1: config 0 has no interface number 0 [ 1629.380169][T15438] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1629.408253][T10780] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1629.463009][T15438] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1629.504162][T15438] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.537018][T15438] usb 10-1: Product: syz [ 1629.564201][T15438] usb 10-1: Manufacturer: syz [ 1629.584050][T15438] usb 10-1: SerialNumber: syz [ 1629.627789][T15438] usb 10-1: config 0 descriptor?? [ 1629.696485][T10780] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1629.728002][T10780] usb 5-1: config 0 has no interfaces? [ 1629.768211][T10780] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1629.788064][T10780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.839103][T10780] usb 5-1: config 0 descriptor?? [ 1630.291183][T15437] usb 3-1: USB disconnect, device number 34 [ 1630.392430][ T2090] binder: BINDER_SET_CONTEXT_MGR already set [ 1630.441047][ T2090] binder: 2080:2090 ioctl 4018620d 200000000040 returned -16 [ 1633.005513][T15438] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1633.046885][T15438] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 1633.098811][T15438] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1633.126017][T15438] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 1633.164236][T15438] usb 10-1: USB disconnect, device number 35 [ 1633.414071][T15438] usb 5-1: USB disconnect, device number 83 [ 1633.469585][ T2117] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4110'. [ 1635.907993][ T5721] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1636.084570][ T5721] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1636.103960][ T5721] usb 5-1: config 3 has an invalid interface number: 19 but max is 0 [ 1636.120070][ T5721] usb 5-1: config 3 has an invalid interface number: 4 but max is 0 [ 1636.132757][ T5721] usb 5-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 1636.153986][ T5721] usb 5-1: config 3 has no interface number 0 [ 1636.184776][ T5721] usb 5-1: config 3 has no interface number 1 [ 1636.195007][ T5721] usb 5-1: config 3 interface 19 altsetting 9 endpoint 0x6 has invalid maxpacket 1040, setting to 64 [ 1636.236048][ T5721] usb 5-1: config 3 interface 19 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1636.260432][ T5721] usb 5-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 1636.277576][ T5721] usb 5-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 1636.294375][ T5721] usb 5-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 1636.308772][ T5721] usb 5-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 1636.326294][ T5721] usb 5-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 1636.371750][ T5721] usb 5-1: config 3 interface 19 has no altsetting 0 [ 1636.380418][ T5721] usb 5-1: config 3 interface 4 has no altsetting 0 [ 1636.422367][ T5721] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=13.f5 [ 1636.438219][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.456582][ T5721] usb 5-1: Product: syz [ 1636.466705][ T5721] usb 5-1: Manufacturer: syz [ 1636.480351][ T5721] usb 5-1: SerialNumber: syz [ 1636.886739][ T2194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1636.941189][ T2194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1637.401391][ T5721] pl2303 5-1:3.19: required endpoints missing [ 1637.482416][ T5721] pl2303 5-1:3.4: required interrupt-in endpoint missing [ 1637.542937][ T5721] usb 5-1: USB disconnect, device number 84 [ 1637.788312][T15437] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1637.978136][T15437] usb 10-1: Using ep0 maxpacket: 32 [ 1637.987234][T15437] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1637.999438][T15437] usb 10-1: config 0 has no interfaces? [ 1638.005144][T15437] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1638.015710][T15437] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.051036][T15437] usb 10-1: config 0 descriptor?? [ 1638.330521][ T2229] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1638.762044][ T2238] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[24464] was attempted by " ./file0    N$   /sys/kernel/debug/binder/stats 8    \x09   cgroup.controllers [ 1640.328173][T27658] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1640.485156][T10780] usb 10-1: USB disconnect, device number 36 [ 1640.588246][T27658] usb 5-1: Using ep0 maxpacket: 8 [ 1640.595411][T27658] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1640.607290][T27658] usb 5-1: config 0 has no interface number 0 [ 1640.618036][T27658] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1640.629678][T27658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.652419][T27658] usb 5-1: Product: syz [ 1640.663244][T27658] usb 5-1: Manufacturer: syz [ 1640.672760][T27658] usb 5-1: SerialNumber: syz [ 1640.757338][T27658] usb 5-1: config 0 descriptor?? [ 1640.820507][ T2277] netlink: 184 bytes leftover after parsing attributes in process `syz.6.4127'. [ 1640.939370][ T2280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4127'. [ 1641.596193][ T2284] binder: BINDER_SET_CONTEXT_MGR already set [ 1641.636262][ T2284] binder: 2271:2284 ioctl 4018620d 200000004a80 returned -16 [ 1643.253629][T27658] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1643.299629][T27658] uvcvideo 5-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1643.393942][T27658] uvcvideo 5-1:0.31: Failed to create links for entity 5 [ 1643.433056][T27658] uvcvideo 5-1:0.31: Failed to register entities (-22). [ 1643.508373][T27658] usb 5-1: USB disconnect, device number 85 [ 1643.895852][ T2306] fuse: Bad value for 'fd' [ 1645.176507][ T2323] netlink: 'syz.9.4132': attribute type 9 has an invalid length. [ 1647.128688][T15438] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1647.301388][T15438] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 1647.324454][T15438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 95, setting to 64 [ 1647.361274][T15438] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1647.399803][T15438] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.466785][T15438] usb 3-1: config 0 descriptor?? [ 1647.555665][ T2382] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1648.371762][ T2427] sctp: [Deprecated]: syz.9.4147 (pid 2427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1648.371762][ T2427] Use struct sctp_sack_info instead [ 1648.506530][T15438] ath6kl: Failed to submit usb control message: -71 [ 1648.531135][T15438] ath6kl: unable to send the bmi data to the device: -71 [ 1648.562632][T15438] ath6kl: Unable to send get target info: -71 [ 1648.662165][T15438] ath6kl: Failed to init ath6kl core: -71 [ 1648.704602][T15438] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1648.746699][T15438] usb 3-1: USB disconnect, device number 35 [ 1649.458497][T11889] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1649.652785][T11889] usb 2-1: Using ep0 maxpacket: 32 [ 1649.671673][T11889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.694692][T11889] usb 2-1: config 0 has no interfaces? [ 1649.720835][T11889] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1649.767014][T11889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.810706][T11889] usb 2-1: config 0 descriptor?? [ 1650.204947][ T2466] hub 9-0:1.0: USB hub found [ 1650.212344][ T2466] hub 9-0:1.0: 1 port detected [ 1652.304239][ T5721] usb 2-1: USB disconnect, device number 78 [ 1652.833471][ T2540] use of bytesused == 0 is deprecated and will be removed in the future, [ 1652.915092][ T2540] use the actual size instead. [ 1654.326550][ T2546] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4145'. [ 1657.050068][ T2603] fuse: Bad value for 'fd' [ 1658.906903][ T2673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1659.577982][T27658] usb 7-1: new full-speed USB device number 80 using dummy_hcd [ 1659.741909][T27658] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1659.758127][T27658] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.782407][T27658] usb 7-1: Product: syz [ 1659.792554][T27658] usb 7-1: Manufacturer: syz [ 1659.812299][T27658] usb 7-1: SerialNumber: syz [ 1659.841722][T27658] usb 7-1: config 0 descriptor?? [ 1660.089171][T27658] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1660.123591][ T2696] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1660.171352][ T2696] usb usb2: Process 2696 (syz.4.4159) called USBDEVFS_RESETEP for active endpoint 0x81 [ 1662.611305][ T2726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4164'. [ 1662.666692][ T2726] Cannot find del_set index 4 as target [ 1662.762534][T27658] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1662.789303][T27658] usb 7-1: USB disconnect, device number 80 [ 1663.490458][ T12] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1664.684974][ T2771] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4167'. [ 1664.992555][ T30] audit: type=1326 audit(1777772912.988:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2775 comm="syz.6.4168" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4d39cdd9 code=0x7ffc0000 [ 1665.045681][ T30] audit: type=1326 audit(1777772912.988:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2775 comm="syz.6.4168" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4d39cdd9 code=0x7ffc0000 [ 1665.553662][ T30] audit: type=1326 audit(1777772913.558:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2775 comm="syz.6.4168" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7d4d39cdd9 code=0x7ffc0000 [ 1668.761578][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.768003][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.888827][ T2856] tipc: Failed to remove unknown binding: 66,0,0/0:2316083657/2316083659 [ 1668.888852][ T2856] tipc: Failed to remove unknown binding: 66,0,0/0:2316083657/2316083658 [ 1668.889364][ T2856] tipc: Failed to remove unknown binding: 66,0,0/0:2316083657/2316083659 [ 1668.889385][ T2856] tipc: Failed to remove unknown binding: 66,0,0/0:2316083657/2316083658 [ 1672.544627][ T2889] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4178'. [ 1672.914383][ T2910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1673.377977][T27658] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1673.547968][T27658] usb 10-1: Using ep0 maxpacket: 32 [ 1673.555210][T27658] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1673.569427][T27658] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1673.581478][T27658] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1673.604352][T27658] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.646677][T27658] usb 10-1: config 0 descriptor?? [ 1673.674775][T27658] hub 10-1:0.0: USB hub found [ 1673.876150][T27658] hub 10-1:0.0: 1 port detected [ 1674.360346][ T2941] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4184'. [ 1674.363592][ T2941] fuse: Bad value for 'fd' [ 1674.515223][T27658] hub 10-1:0.0: activate --> -90 [ 1674.731702][T27658] hub 10-1:0.0: hub_ext_port_status failed (err = -71) [ 1674.734607][T11884] usb 10-1: USB disconnect, device number 37 [ 1676.351412][ T2973] syzkaller0: entered promiscuous mode [ 1676.372280][ T2973] syzkaller0: entered allmulticast mode [ 1677.031848][ T2987] fuse: Bad value for 'fd' [ 1677.877560][ T2990] cifs: Unknown parameter ' [ 1677.916431][ T3002] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4193'. [ 1678.483741][ T3009] ip6gretap0: entered promiscuous mode [ 1681.932241][ T3059] syzkaller0: entered promiscuous mode [ 1681.938006][ T3059] syzkaller0: entered allmulticast mode [ 1683.941731][ T3101] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 1684.216036][ T3111] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4209'. [ 1685.725973][ T3120] x_tables: duplicate underflow at hook 4 [ 1686.566620][ T3112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.574014][ T3112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.721008][ T3112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1686.740308][ T3112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1686.867362][T10065] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.898688][T10065] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.939664][T10065] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.960755][T10065] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.983885][ T3131] syzkaller0: entered promiscuous mode [ 1687.001866][ T3131] syzkaller0: entered allmulticast mode [ 1688.880158][T15435] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1689.045093][T15435] usb 10-1: Using ep0 maxpacket: 32 [ 1689.095723][T15435] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1689.124307][T15435] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1689.175947][T15435] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1689.223667][T15435] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.279548][T15435] usb 10-1: config 0 descriptor?? [ 1689.312797][T15435] hub 10-1:0.0: USB hub found [ 1689.514704][T15435] hub 10-1:0.0: 1 port detected [ 1690.135161][T15435] hub 10-1:0.0: activate --> -90 [ 1690.626692][T27658] usb 10-1: USB disconnect, device number 38 [ 1692.077301][ T3247] syzkaller0: entered promiscuous mode [ 1692.089373][ T3247] syzkaller0: entered allmulticast mode [ 1692.940449][ T3264] netlink: 'syz.6.4230': attribute type 1 has an invalid length. [ 1693.018869][ T3264] bond0: (slave bridge2): making interface the new active one [ 1693.027729][ T3264] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 1693.055410][ T3264] macvlan2: entered promiscuous mode [ 1693.062527][ T3264] macvlan2: entered allmulticast mode [ 1693.072265][ T3264] bond0: entered promiscuous mode [ 1693.103834][ T3264] bridge2: entered promiscuous mode [ 1693.131048][ T3264] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1693.150977][ T3264] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1693.268145][ T3264] bond0: left promiscuous mode [ 1693.283570][ T3264] bridge2: left promiscuous mode [ 1693.898221][T11889] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1694.064656][T11889] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1694.098293][T11889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.157070][T11889] usb 5-1: config 0 has no interfaces? [ 1694.208024][T11889] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1694.274988][T11889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.341939][T11889] usb 5-1: config 0 descriptor?? [ 1694.454302][ T3331] netlink: 'syz.6.4232': attribute type 4 has an invalid length. [ 1694.478938][ T3331] netlink: 'syz.6.4232': attribute type 4 has an invalid length. [ 1694.607520][ T3331] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1695.718015][T27658] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1696.391298][T21856] usb 5-1: USB disconnect, device number 86 [ 1696.408018][T27658] usb 10-1: Using ep0 maxpacket: 8 [ 1696.626219][ T3369] syzkaller0: entered promiscuous mode [ 1696.635462][ T3369] syzkaller0: entered allmulticast mode [ 1696.658522][T27658] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1696.689462][T27658] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1696.746437][T27658] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1696.839515][T27658] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1696.854284][T27658] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1696.863690][T27658] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.157282][T27658] usb 10-1: GET_CAPABILITIES returned 0 [ 1697.165674][T27658] usbtmc 10-1:16.0: can't read capabilities [ 1697.217428][ T3377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1697.884866][ T3377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1698.789786][ T3405] hub 9-0:1.0: USB hub found [ 1698.806797][ T3405] hub 9-0:1.0: 1 port detected [ 1698.807776][ T3406] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 3406 comm: syz.2.4241) [ 1698.911637][ T30] audit: type=1800 audit(1777772946.918:1320): pid=3406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4241" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=108919 res=0 errno=0 [ 1699.012006][T27658] usb 10-1: USB disconnect, device number 39 [ 1700.595083][ T3473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4243'. [ 1700.918257][T11889] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1701.078067][T11889] usb 3-1: Using ep0 maxpacket: 32 [ 1701.090376][T11889] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1701.100438][T11889] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1701.110359][T11889] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1701.135087][T11889] usb 3-1: config 1 has no interface number 0 [ 1701.150340][T11889] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1701.162820][T11889] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1701.224934][T11889] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1701.265936][T11889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.284132][T11889] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1701.797416][T11889] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1702.017394][ T5721] usb 3-1: USB disconnect, device number 36 [ 1702.027695][ T5721] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1702.703437][ T3520] trusted_key: encrypted_key: insufficient parameters specified [ 1702.782309][ T3518] syzkaller0: entered promiscuous mode [ 1702.800219][ T3518] syzkaller0: entered allmulticast mode [ 1704.934114][ T3539] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1704.940699][ T3539] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1704.967565][ T3545] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4250'. [ 1705.009623][ T3539] vhci_hcd vhci_hcd.0: Device attached [ 1705.248035][ T5721] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 1705.368292][ T3540] vhci_hcd: connection reset by peer [ 1705.404980][T10065] vhci_hcd vhci_hcd.1: stop threads [ 1705.413004][T10065] vhci_hcd vhci_hcd.1: release socket [ 1705.418729][T10065] vhci_hcd vhci_hcd.1: disconnect device [ 1707.440815][ T3574] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 3574 comm: syz.1.4255) [ 1707.490562][ T30] audit: type=1800 audit(1777772955.498:1321): pid=3574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4255" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=114948 res=0 errno=0 [ 1707.729117][ T4946] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 1710.038073][T15435] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1710.284965][T15435] usb 10-1: Using ep0 maxpacket: 8 [ 1710.322598][T15435] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1710.341385][T15435] usb 10-1: config 0 has no interface number 0 [ 1710.348036][ T5721] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1710.401236][T15435] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1710.411183][T15435] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.436774][T15435] usb 10-1: Product: syz [ 1710.469094][T15435] usb 10-1: Manufacturer: syz [ 1710.498904][T15435] usb 10-1: SerialNumber: syz [ 1710.552000][T15435] usb 10-1: config 0 descriptor?? [ 1710.699367][ T3645] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4262'. [ 1711.266308][ T3646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.274190][ T3646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.693032][ T3646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1712.119737][ T80] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.151796][ T80] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.191102][ T80] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.225908][ T80] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.918186][T15437] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1713.051570][T27658] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1713.166262][T15437] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1713.222155][T15437] usb 3-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 1713.268346][T27658] usb 5-1: Using ep0 maxpacket: 32 [ 1713.286083][T15437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.312788][T27658] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1713.362399][T27658] usb 5-1: config 0 has no interface number 0 [ 1713.393917][T15437] usb 3-1: config 0 descriptor?? [ 1713.408950][T27658] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1713.467675][T27658] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1713.515598][T15437] pwc: Samsung MPC-C30 USB webcam detected. [ 1713.525371][T27658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.574429][T27658] usb 5-1: Product: syz [ 1713.623560][T27658] usb 5-1: Manufacturer: syz [ 1713.662620][T27658] usb 5-1: SerialNumber: syz [ 1713.722585][T27658] usb 5-1: config 0 descriptor?? [ 1713.988264][T15435] uvcvideo 10-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1714.031209][T15435] uvcvideo 10-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1714.046438][T15435] uvcvideo 10-1:0.31: Failed to create links for entity 5 [ 1714.058077][T15435] uvcvideo 10-1:0.31: Failed to register entities (-22). [ 1714.107218][T15435] usb 10-1: USB disconnect, device number 40 [ 1714.322542][T27658] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1714.444713][T27658] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1714.534762][T27658] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1714.582329][T27658] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 1716.249041][T15437] pwc: send_video_command error -71 [ 1716.273701][T15437] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1716.309730][T15437] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1716.373230][T15437] usb 3-1: USB disconnect, device number 37 [ 1716.573810][T10780] usb 5-1: USB disconnect, device number 87 [ 1717.930997][ T3770] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4277'. [ 1718.752440][ T3801] bridge_slave_0: left allmulticast mode [ 1718.770374][ T3801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.206517][ T3801] bridge_slave_1: left allmulticast mode [ 1719.224675][ T3801] bridge_slave_1: left promiscuous mode [ 1719.245479][ T3801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.306181][ T3801] bond0: (slave bond_slave_0): Releasing backup interface [ 1719.375606][ T3801] bond0: (slave bond_slave_1): Releasing backup interface [ 1719.414464][ T3801] team0: Port device team_slave_0 removed [ 1719.435234][ T3801] team0: Port device team_slave_1 removed [ 1719.462311][ T3801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1719.510537][ T3801] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1720.055538][ T3687] syz.1.4267 (3687) used greatest stack depth: 19040 bytes left [ 1721.458058][ T3830] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1721.776027][T10780] IPVS: starting estimator thread 0... [ 1721.890522][ T3843] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1722.022016][ T3829] netlink: 'syz.9.4285': attribute type 8 has an invalid length. [ 1722.144935][ T3843] program syz.1.4286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1722.913527][ T3842] IPVS: using max 41 ests per chain, 98400 per kthread [ 1725.172827][ T3891] pic_ioport_write: 79 callbacks suppressed [ 1725.172848][ T3891] kvm: pic: level sensitive irq not supported [ 1725.191230][ T3891] picdev_read: 79 callbacks suppressed [ 1725.191251][ T3891] kvm: pic: non byte read [ 1725.262099][ T3891] kvm: pic: level sensitive irq not supported [ 1725.262164][ T3891] kvm: pic: non byte read [ 1725.285969][ T3891] kvm: pic: level sensitive irq not supported [ 1725.286041][ T3891] kvm: pic: non byte read [ 1725.345134][ T3891] kvm: pic: level sensitive irq not supported [ 1725.345875][ T3891] kvm: pic: non byte read [ 1725.391024][ T3891] kvm: pic: level sensitive irq not supported [ 1725.391097][ T3891] kvm: pic: non byte read [ 1725.402304][ T3891] kvm: pic: level sensitive irq not supported [ 1725.402372][ T3891] kvm: pic: non byte read [ 1725.481281][ T3899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4294'. [ 1725.506155][ T3891] kvm: pic: level sensitive irq not supported [ 1725.506235][ T3891] kvm: pic: non byte read [ 1725.572763][ T3891] kvm: pic: level sensitive irq not supported [ 1725.572841][ T3891] kvm: pic: non byte read [ 1725.635272][ T3891] kvm: pic: level sensitive irq not supported [ 1725.635342][ T3891] kvm: pic: non byte read [ 1725.654996][ T3891] kvm: pic: level sensitive irq not supported [ 1725.655069][ T3891] kvm: pic: non byte read [ 1726.309300][T15437] usb 10-1: new full-speed USB device number 41 using dummy_hcd [ 1726.512571][T15437] usb 10-1: config 0 has an invalid interface number: 30 but max is 0 [ 1726.557167][T15437] usb 10-1: config 0 has no interface number 0 [ 1726.581689][T15437] usb 10-1: config 0 interface 30 has no altsetting 0 [ 1726.612080][T15437] usb 10-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04 [ 1726.662006][T15437] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.692894][T15437] usb 10-1: Product: syz [ 1726.713985][T15437] usb 10-1: Manufacturer: syz [ 1726.735187][T15437] usb 10-1: SerialNumber: syz [ 1726.770019][T15437] usb 10-1: config 0 descriptor?? [ 1726.806142][T15437] hub 10-1:0.30: bad descriptor, ignoring hub [ 1726.835162][T15437] hub 10-1:0.30: probe with driver hub failed with error -5 [ 1726.861132][T15437] keyspan 10-1:0.30: Keyspan - (without firmware) converter detected [ 1728.769891][ T3945] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1729.277591][ T3950] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4299'. [ 1729.678333][T11889] usb 10-1: USB disconnect, device number 41 [ 1729.706468][T11889] keyspan 10-1:0.30: device disconnected [ 1730.201125][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.207641][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.708813][T15437] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1731.940831][T15437] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1732.010379][T15437] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1732.101289][T15437] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1732.210216][T15437] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1732.271270][T15437] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1732.352108][T15437] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1732.379859][T15437] usb 3-1: Product: syz [ 1732.396893][T15437] usb 3-1: Manufacturer: syz [ 1732.537758][T15437] cdc_wdm 3-1:1.0: skipping garbage [ 1732.556856][T15437] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1732.834479][ T3998] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 1733.438612][ T4041] No such timeout policy "syz1" [ 1733.508315][ T4056] xfrm0: entered promiscuous mode [ 1733.531454][ T4056] xfrm0: entered allmulticast mode [ 1733.594102][ T4056] overlay: Unknown parameter '-CV5dgqދhM38j#آ2QEoms'9(S][(33ӵ0^{2rNaς\lG+XJtnGjG*3]W5n헆OԜKT Eؽc}vgi+G *^A77)b' [ 1734.884935][ T4092] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4312'. [ 1735.277012][T15437] usb 3-1: USB disconnect, device number 38 [ 1735.594018][ T4102] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4313'. [ 1736.094774][ T4110] syzkaller1: entered promiscuous mode [ 1736.110055][ T4110] syzkaller1: entered allmulticast mode [ 1736.969091][ T4139] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4319'. [ 1737.071046][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1737.149497][ T4144] input: syz0 as /devices/virtual/input/input85 [ 1738.523351][ T4139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1739.628151][T15437] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1739.805304][T15437] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1739.829579][T15437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.847078][T15437] usb 3-1: Product: syz [ 1739.857215][T15437] usb 3-1: Manufacturer: syz [ 1739.867603][T15437] usb 3-1: SerialNumber: syz [ 1739.886829][T15437] usb 3-1: config 0 descriptor?? [ 1740.137330][T15437] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1740.301490][ T4213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1740.344469][ T4213] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1742.812999][ T4260] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4327'. [ 1742.843637][ T4265] netlink: 179596 bytes leftover after parsing attributes in process `syz.9.4328'. [ 1743.240351][T15437] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1743.330121][T15437] usb 3-1: USB disconnect, device number 39 [ 1744.935594][ T4305] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4334'. [ 1745.209049][ T4318] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4336'. [ 1745.236363][ T4318] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1745.276063][ T4299] vivid-002: disconnect [ 1745.295619][ T4299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1745.324090][ T4299] vivid-002: reconnect [ 1746.881094][ T4340] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1746.959284][ T4345] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1746.992958][ T4339] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4338'. [ 1747.898923][T15435] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1748.098130][T15435] usb 3-1: Using ep0 maxpacket: 8 [ 1748.120014][T15435] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1748.178449][T15435] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1748.194758][T15435] usb 3-1: string descriptor 0 read error: -22 [ 1748.210971][T15435] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1748.255211][T15435] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1748.299181][T15435] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1748.342754][T15435] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1748.369317][T15435] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1748.388345][T15435] usb 3-1: media controller created [ 1748.444573][T15435] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1749.019987][ T4371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1749.034978][ T4371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1749.120145][ T4411] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4342'. [ 1750.636046][T15435] usb 3-1: USB disconnect, device number 40 [ 1753.539115][ T4481] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1753.549465][ T4481] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1754.997146][ T4509] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4355'. [ 1755.568552][ T4946] Bluetooth: hci4: command 0x0406 tx timeout [ 1757.528895][ T4560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1757.565418][ T4559] batman_adv: batadv0: Adding interface: dummy0 [ 1757.652729][ T4559] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1757.678576][ T4946] Bluetooth: hci4: command 0x0406 tx timeout [ 1757.756676][ T4559] batman_adv: batadv0: Interface activated: dummy0 [ 1757.817171][ T4559] netlink: 'syz.6.4364': attribute type 10 has an invalid length. [ 1757.880130][ T4562] batadv0: mtu less than device minimum [ 1757.902263][ T4562] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1757.916492][ T4562] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1757.928951][ T4562] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1757.940310][ T4562] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1757.951796][ T4562] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1757.963292][ T4562] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1757.974931][ T4562] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1757.986273][ T4562] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1759.077015][ T4581] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1759.281392][ T4584] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1760.161303][ T4610] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4371'. [ 1760.417941][T15437] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1761.542288][T15437] usb 10-1: Using ep0 maxpacket: 8 [ 1761.608381][T15437] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1761.647380][T15437] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1761.833365][T15437] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 1761.967216][T15437] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1762.017267][T15437] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1762.060184][T15437] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1762.091469][T15437] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.384845][ T4651] syzkaller0: entered promiscuous mode [ 1763.390994][ T4651] syzkaller0: entered allmulticast mode [ 1763.765099][ T4659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1763.968768][ T4663] team0: entered promiscuous mode [ 1763.981903][ T4663] batadv1: entered promiscuous mode [ 1763.992304][ T4663] net_ratelimit: 12 callbacks suppressed [ 1763.992324][ T4663] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1764.140110][ T4663] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4378'. [ 1764.542830][T15437] usb 10-1: usb_control_msg returned -71 [ 1764.580463][T15437] usbtmc 10-1:16.0: can't read capabilities [ 1764.686579][T15437] usb 10-1: USB disconnect, device number 42 [ 1764.943185][ T30] audit: type=1800 audit(1777773012.948:1322): pid=4682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4379" name="bus" dev="tmpfs" ino=1126 res=0 errno=0 [ 1766.963900][ T4721] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4385'. [ 1768.520463][ T4740] syzkaller0: entered promiscuous mode [ 1768.540206][ T4740] syzkaller0: entered allmulticast mode [ 1769.324197][ T4755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4390'. [ 1772.107367][ T4800] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4405'. [ 1772.123078][ T4800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4405'. [ 1773.910024][ T4805] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4395'. [ 1775.419458][ T4845] syzkaller0: entered promiscuous mode [ 1775.440902][ T4845] syzkaller0: entered allmulticast mode [ 1775.605616][ T4946] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 1775.956284][ T4864] syzkaller0: entered promiscuous mode [ 1775.982035][ T4864] syzkaller0: entered allmulticast mode [ 1776.181919][ T4870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4402'. [ 1776.543043][ T4877] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 1776.640313][ T4877] PKCS7: Only support pkcs7_signedData type [ 1777.112093][ T4882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4404'. [ 1778.546089][ T4886] macvtap1: entered promiscuous mode [ 1778.553282][ T4886] ip6gretap0: entered promiscuous mode [ 1778.587732][ T4886] ip6gretap0: left promiscuous mode [ 1781.928095][T21856] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1782.197060][T21856] usb 10-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1782.391795][T21856] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1782.477680][T21856] usb 10-1: string descriptor 0 read error: -22 [ 1782.501468][T21856] usb 10-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 1782.557336][T21856] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.588350][T15437] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1782.662731][T21856] usbhid 10-1:1.0: couldn't find an input interrupt endpoint [ 1782.777597][T15437] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1782.802734][T15437] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.855224][T15437] usb 5-1: Product: syz [ 1782.871899][T15437] usb 5-1: Manufacturer: syz [ 1782.891352][T15437] usb 5-1: SerialNumber: syz [ 1782.946279][T15437] usb 5-1: config 0 descriptor?? [ 1782.997102][T15437] hub 5-1:0.0: bad descriptor, ignoring hub [ 1783.033729][T15437] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1783.222030][T15437] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1783.296914][T15437] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1783.344509][T15437] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1783.370462][T15437] usb 5-1: media controller created [ 1783.429496][T15437] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1783.712884][T15437] DVB: Unable to find symbol dib7000p_attach() [ 1783.790510][T15437] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1784.132368][T15437] rc_core: IR keymap rc-dib0700-rc5 not found [ 1784.159339][T15437] Registered IR keymap rc-empty [ 1784.175233][T15437] dvb-usb: could not initialize remote control. [ 1784.201483][T15437] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1785.324904][ T5037] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1785.347212][ T5037] usb usb2: Process 5037 (syz.1.4420) called USBDEVFS_RESETEP for active endpoint 0x81 [ 1785.452980][T15437] usb 5-1: USB disconnect, device number 88 [ 1785.511521][T15437] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1785.690288][T21856] usb 10-1: USB disconnect, device number 43 [ 1785.884236][ T5061] netlink: 'syz.4.4421': attribute type 4 has an invalid length. [ 1785.936584][ T5061] netlink: 'syz.4.4421': attribute type 4 has an invalid length. [ 1786.097181][ T5056] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1787.434502][ T5094] ip6tnl0: Caught tx_queue_len zero misconfig [ 1788.403959][ T5110] netlink: 200 bytes leftover after parsing attributes in process `syz.6.4428'. [ 1789.295068][ T30] audit: type=1326 audit(1777773037.278:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.2.4430" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82a939cdd9 code=0x7ffc0000 [ 1789.706697][ T30] audit: type=1326 audit(1777773037.298:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.2.4430" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82a939cdd9 code=0x7ffc0000 [ 1789.794415][ T30] audit: type=1326 audit(1777773037.318:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.2.4430" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f82a939cdd9 code=0x7ffc0000 [ 1789.852525][ T30] audit: type=1326 audit(1777773037.318:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.2.4430" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82a939cdd9 code=0x7ffc0000 [ 1789.909801][ T30] audit: type=1326 audit(1777773037.318:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.2.4430" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f82a939cdd9 code=0x7ffc0000 [ 1789.974080][ T30] audit: type=1326 audit(1777773037.318:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.2.4430" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82a939cdd9 code=0x7ffc0000 [ 1790.114496][ T30] audit: type=1326 audit(1777773037.318:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.2.4430" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82a939cdd9 code=0x7ffc0000 [ 1790.178853][ T30] audit: type=1326 audit(1777773037.318:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.2.4430" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82a939cdd9 code=0x7ffc0000 [ 1790.253426][ T30] audit: type=1326 audit(1777773037.318:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.2.4430" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82a939cdd9 code=0x7ffc0000 [ 1790.459536][ T30] audit: type=1326 audit(1777773037.328:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5125 comm="syz.2.4430" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82a939cdd9 code=0x7ffc0000 [ 1791.644081][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.650874][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.157978][T27658] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1794.367762][T27658] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1794.416154][T27658] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1794.450959][T27658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1794.467171][ T5205] fuse: Bad value for 'fd' [ 1794.491238][T27658] usb 5-1: Product: syz [ 1794.503653][T27658] usb 5-1: Manufacturer: syz [ 1794.527542][T27658] usb 5-1: SerialNumber: syz [ 1794.801104][T27658] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 89 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1795.127289][T11889] usb 5-1: USB disconnect, device number 89 [ 1795.198719][T11889] usblp0: removed [ 1796.533109][ T5240] hub 9-0:1.0: USB hub found [ 1796.560006][ T5240] hub 9-0:1.0: 1 port detected [ 1797.857918][T21856] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1798.053762][T21856] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1798.081032][T21856] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1798.113995][T21856] usb 5-1: can't read configurations, error -71 [ 1798.407573][ T5288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4450'. [ 1798.767361][ T5311] trusted_key: encrypted_key: insufficient parameters specified [ 1802.648922][ T4946] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 1803.041716][ T5399] hub 9-0:1.0: USB hub found [ 1803.065476][ T5399] hub 9-0:1.0: 1 port detected [ 1803.634912][ T5414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1807.254047][ T5492] fuse: Bad value for 'fd' [ 1808.499956][ T5503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4483'. [ 1810.264675][ T5557] binder: 5550:5557 ioctl 4018620d 0 returned -22 [ 1811.375112][ T5569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4480'. [ 1814.162729][ T5609] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4497'. [ 1814.184949][ T5609] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1814.205675][ T5618] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 1814.216373][ T5618] PKCS7: Only support pkcs7_signedData type [ 1815.897277][ T5642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4493'. [ 1815.912111][ T5643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4492'. [ 1815.935002][ T5643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4492'. [ 1816.226869][ T5653] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4493'. [ 1816.419530][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4495'. [ 1817.732238][ T5700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1818.224661][ T5720] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1819.115837][ T5737] binder: 5732:5737 ioctl 4018620d 0 returned -22 [ 1819.521267][ T5737] syz.9.4501 (5737): drop_caches: 2 [ 1822.323923][T15437] IPVS: starting estimator thread 0... [ 1822.360725][ T5788] binder: 5784:5788 ioctl 4018620d 0 returned -22 [ 1822.427951][ T5790] IPVS: using max 39 ests per chain, 93600 per kthread [ 1822.505707][ T5794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4509'. [ 1822.583740][ T5799] binder: 5784:5799 ioctl c0306201 0 returned -14 [ 1822.608942][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1822.633663][ T5798] syz.2.4510 (5798): drop_caches: 2 [ 1822.763028][ T5799] syz.1.4508 (5799): drop_caches: 2 [ 1823.806983][ T5825] netlink: 'syz.2.4514': attribute type 4 has an invalid length. [ 1823.869032][ T5825] netlink: 'syz.2.4514': attribute type 4 has an invalid length. [ 1824.034920][ T5821] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1824.776125][ T5846] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4516'. [ 1826.249427][T15437] IPVS: starting estimator thread 0... [ 1826.419474][ T5874] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1826.438900][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1826.720704][ T5874] program syz.4.4521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1826.928077][ T5873] IPVS: using max 28 ests per chain, 67200 per kthread [ 1827.699349][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1827.699367][ T30] audit: type=1326 audit(1777773075.698:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.9.4525" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effaa19cdd9 code=0x0 [ 1828.457350][ T5906] netlink: 'syz.2.4527': attribute type 10 has an invalid length. [ 1828.471421][ T5906] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4527'. [ 1828.483922][ T5896] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4525'. [ 1828.825896][ T5925] tipc: Failed to remove unknown binding: 66,1,1/2886997162:4112992241/4112992243 [ 1829.280971][T11884] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1829.459216][T11884] usb 5-1: Using ep0 maxpacket: 16 [ 1829.480874][T11884] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1829.514120][T11884] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1829.549851][T11884] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1829.937922][T15437] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1830.101194][T15437] usb 10-1: Using ep0 maxpacket: 32 [ 1830.127300][T15437] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1830.145437][T15437] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.165858][T15437] usb 10-1: Product: syz [ 1830.178134][T15437] usb 10-1: Manufacturer: syz [ 1830.192545][T15437] usb 10-1: SerialNumber: syz [ 1830.242532][T15437] usb 10-1: config 0 descriptor?? [ 1830.267740][T15437] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1830.297981][T15437] dvb-usb: bulk message failed: -22 (4/0) [ 1830.312207][T15437] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1830.358510][T15437] dvb-usb: bulk message failed: -22 (5/0) [ 1830.374436][T15437] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1830.399544][T15437] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1830.410530][T15437] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1830.418962][T15437] usb 10-1: media controller created [ 1830.471768][T15437] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1830.497240][T15437] usb 10-1: selecting invalid altsetting 3 [ 1830.503944][T15437] ttusb2: set interface to alts=3 failed [ 1830.600976][T15437] DVB: Unable to find symbol tda10086_attach() [ 1830.616875][T15437] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1830.634763][ T30] audit: type=1400 audit(1777773078.638:1393): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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dvb-usb: bulk message failed: -22 (4/0) [ 1830.880895][T15437] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1830.959736][T15437] dvb-usb: bulk message failed: -22 (5/0) [ 1830.985622][T15437] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1831.012877][T15437] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1833.601010][T11884] usb 5-1: string descriptor 0 read error: -71 [ 1833.607398][T11884] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1833.623188][T11884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.642575][T11884] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 1833.653791][T11884] usb 5-1: no configuration chosen from 1 choice [ 1833.665628][T11884] usb 5-1: USB disconnect, device number 92 [ 1833.879729][T27658] usb 10-1: USB disconnect, device number 44 [ 1833.993681][T27658] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1834.006853][ T6007] hub 9-0:1.0: USB hub found [ 1834.012416][ T6007] hub 9-0:1.0: 1 port detected [ 1834.332482][ T6027] kAFS: unable to lookup cell '' [ 1837.424096][ T6065] usb usb7: usbfs: process 6065 (syz.6.4546) did not claim interface 0 before use [ 1837.439970][ T6065] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1837.491368][ T6068] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4547'. [ 1838.295383][ T6064] ALSA: mixer_oss: invalid OSS volume 'w' [ 1838.306203][ T6064] ALSA: mixer_oss: invalid OSS volume 'V$~w āĒ0?2' [ 1838.331479][ T6064] ALSA: mixer_oss: invalid OSS volume ' HID v0.00 Device [syz0] on syz0 [ 1860.466920][ T6514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4590'. [ 1860.482018][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4590'. [ 1861.881343][ T6523] veth1_to_bond: Caught tx_queue_len zero misconfig [ 1861.912977][ T6524] netlink: 82 bytes leftover after parsing attributes in process `syz.6.4591'. [ 1862.491865][ T6546] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4595'. [ 1862.853117][ T6545] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1862.999475][ T6428] Set syz1 is full, maxelem 65536 reached [ 1865.087997][T15437] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 1865.263006][T15437] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1865.301339][T15437] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1865.381372][T15437] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1865.423117][T15437] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1865.460511][T15437] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1865.485103][T15437] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1865.529137][T15437] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 1865.549689][T15437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.567409][T15437] usb 3-1: Product: syz [ 1865.579188][T15437] usb 3-1: Manufacturer: syz [ 1865.594909][T15437] usb 3-1: SerialNumber: syz [ 1865.616453][T15437] usb 3-1: config 0 descriptor?? [ 1865.667233][T15437] ti_usb_3410_5052 3-1:0.0: required endpoints missing [ 1866.024455][ T6589] fuse: Bad value for 'user_id' [ 1866.043285][ T6589] fuse: Bad value for 'user_id' [ 1866.556310][ T6626] netlink: 'syz.4.4605': attribute type 4 has an invalid length. [ 1868.948406][ T12] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1870.086727][ T6664] program syz.6.4611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1871.404613][T11884] usb 3-1: USB disconnect, device number 41 [ 1872.402963][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4617'. [ 1872.697290][ T6726] netlink: 'syz.2.4620': attribute type 10 has an invalid length. [ 1874.232873][ T6759] team0: Device gtp0 is of different type [ 1875.058546][ T6790] raw_sendmsg: syz.1.4624 forgot to set AF_INET. Fix it! [ 1875.999390][ T6813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4627'. [ 1876.947872][T10780] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1877.159461][T10780] usb 10-1: Using ep0 maxpacket: 32 [ 1877.184138][T10780] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1877.226031][T10780] usb 10-1: config 0 has no interface number 0 [ 1877.324747][T10780] usb 10-1: config 0 interface 67 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1877.432212][T10780] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1877.469319][T10780] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.522871][T10780] usb 10-1: Product: syz [ 1877.552609][T10780] usb 10-1: Manufacturer: syz [ 1877.591337][T10780] usb 10-1: SerialNumber: syz [ 1877.670397][T10780] usb 10-1: config 0 descriptor?? [ 1877.713279][T10780] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1877.753458][T10780] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22 [ 1878.394350][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4633'. [ 1878.415757][ T6856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4634'. [ 1878.608207][ T6863] netlink: 'syz.4.4633': attribute type 1 has an invalid length. [ 1878.713664][T11884] usb 10-1: USB disconnect, device number 47 [ 1879.570207][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4636'. [ 1880.906715][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4635'. [ 1881.368949][ T6907] fuse: Bad value for 'fd' [ 1881.874856][ T6914] tipc: Failed to remove unknown binding: 66,1,1/0:328601778/328601780 [ 1882.127917][T27658] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1882.287901][T27658] usb 3-1: Using ep0 maxpacket: 16 [ 1882.306010][T27658] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1882.327657][T27658] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1882.399948][T27658] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1882.749975][T27658] usb 3-1: string descriptor 0 read error: -71 [ 1882.798348][T27658] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1882.837343][T27658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.888797][T27658] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 1882.901328][T27658] usb 3-1: no configuration chosen from 1 choice [ 1882.953161][T27658] usb 3-1: USB disconnect, device number 42 [ 1883.112878][ T6946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4644'. [ 1883.655156][ T6953] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1884.878120][T10780] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1885.098389][T10780] usb 10-1: Using ep0 maxpacket: 32 [ 1885.120639][T10780] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1885.167498][T10780] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1885.195428][T10780] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1885.237208][T10780] usb 10-1: Product: syz [ 1885.260894][T10780] usb 10-1: Manufacturer: syz [ 1885.291772][T10780] usb 10-1: SerialNumber: syz [ 1885.335932][T10780] usb 10-1: config 0 descriptor?? [ 1885.363480][ T6971] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1885.735585][ T6997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1885.780928][ T6997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1887.586016][T10780] usb 10-1: USB disconnect, device number 48 [ 1889.715508][ T7077] pic_ioport_write: 79 callbacks suppressed [ 1889.715559][ T7077] kvm: pic: level sensitive irq not supported [ 1889.740031][ T7077] picdev_read: 79 callbacks suppressed [ 1889.740053][ T7077] kvm: pic: non byte read [ 1889.826255][ T7077] kvm: pic: level sensitive irq not supported [ 1889.826338][ T7077] kvm: pic: non byte read [ 1889.876282][ T7077] kvm: pic: level sensitive irq not supported [ 1889.876338][ T7077] kvm: pic: non byte read [ 1889.899827][ T7077] kvm: pic: level sensitive irq not supported [ 1889.899903][ T7077] kvm: pic: non byte read [ 1889.959555][ T7077] kvm: pic: level sensitive irq not supported [ 1889.959639][ T7077] kvm: pic: non byte read [ 1890.174275][ T7077] kvm: pic: level sensitive irq not supported [ 1890.178484][ T7077] kvm: pic: non byte read [ 1890.247422][ T7077] kvm: pic: level sensitive irq not supported [ 1890.260100][ T7077] kvm: pic: non byte read [ 1890.365730][ T7077] kvm: pic: level sensitive irq not supported [ 1890.365805][ T7077] kvm: pic: non byte read [ 1890.530062][ T7077] kvm: pic: level sensitive irq not supported [ 1890.530251][ T7077] kvm: pic: non byte read [ 1890.612456][ T7077] kvm: pic: level sensitive irq not supported [ 1890.612542][ T7077] kvm: pic: non byte read [ 1891.442871][ T7109] netlink: 'syz.2.4664': attribute type 4 has an invalid length. [ 1891.598303][ T7112] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4660'. [ 1894.103153][ T7134] syz.9.4668: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1894.160730][ T7134] CPU: 0 UID: 0 PID: 7134 Comm: syz.9.4668 Tainted: G L syzkaller #0 PREEMPT(full) [ 1894.160763][ T7134] Tainted: [L]=SOFTLOCKUP [ 1894.160770][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1894.160781][ T7134] Call Trace: [ 1894.160790][ T7134] [ 1894.160797][ T7134] dump_stack_lvl+0xe8/0x150 [ 1894.160825][ T7134] warn_alloc+0x249/0x340 [ 1894.160856][ T7134] ? __pfx_warn_alloc+0x10/0x10 [ 1894.160896][ T7134] __vmalloc_node_range_noprof+0x132/0x1750 [ 1894.160922][ T7134] ? __mutex_trylock_common+0x158/0x260 [ 1894.160947][ T7134] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1894.160974][ T7134] ? trace_contention_end+0x3d/0x140 [ 1894.160999][ T7134] ? __mutex_lock+0x319/0x1550 [ 1894.161041][ T7134] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1894.161063][ T7134] ? tomoyo_path_number_perm+0x219/0x630 [ 1894.161086][ T7134] ? dvb_demux_do_ioctl+0x320/0x540 [ 1894.161111][ T7134] ? __pfx___mutex_lock+0x10/0x10 [ 1894.161136][ T7134] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1894.161161][ T7134] vmalloc_noprof+0xb2/0xe0 [ 1894.161184][ T7134] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1894.161209][ T7134] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1894.161238][ T7134] dvb_demux_do_ioctl+0x45d/0x540 [ 1894.161264][ T7134] dvb_usercopy+0x199/0x2e0 [ 1894.161285][ T7134] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1894.161307][ T7134] ? __pfx_dvb_usercopy+0x10/0x10 [ 1894.161340][ T7134] ? rcu_is_watching+0x15/0xb0 [ 1894.161361][ T7134] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1894.161384][ T7134] dvb_demux_ioctl+0x29/0x40 [ 1894.161413][ T7134] __se_sys_ioctl+0xfc/0x170 [ 1894.161444][ T7134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1894.161464][ T7134] do_syscall_64+0x15f/0xf80 [ 1894.161485][ T7134] ? trace_irq_disable+0x3b/0x140 [ 1894.161511][ T7134] ? clear_bhb_loop+0x40/0x90 [ 1894.161531][ T7134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1894.161548][ T7134] RIP: 0033:0x7effaa19cdd9 [ 1894.161565][ T7134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1894.161580][ T7134] RSP: 002b:00007effab0d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1894.161598][ T7134] RAX: ffffffffffffffda RBX: 00007effaa416180 RCX: 00007effaa19cdd9 [ 1894.161611][ T7134] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000007 [ 1894.161622][ T7134] RBP: 00007effaa232d69 R08: 0000000000000000 R09: 0000000000000000 [ 1894.161633][ T7134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1894.161643][ T7134] R13: 00007effaa416218 R14: 00007effaa416180 R15: 00007effaa53fa48 [ 1894.161673][ T7134] [ 1894.161686][ T7134] Mem-Info: [ 1894.432315][ T7134] active_anon:8489 inactive_anon:2 isolated_anon:0 [ 1894.432315][ T7134] active_file:19401 inactive_file:40751 isolated_file:0 [ 1894.432315][ T7134] unevictable:771 dirty:397 writeback:0 [ 1894.432315][ T7134] slab_reclaimable:7273 slab_unreclaimable:115182 [ 1894.432315][ T7134] mapped:37687 shmem:2157 pagetables:1705 [ 1894.432315][ T7134] sec_pagetables:0 bounce:0 [ 1894.432315][ T7134] kernel_misc_reclaimable:0 [ 1894.432315][ T7134] free:1268026 free_pcp:19052 free_cma:0 [ 1894.685684][ T7134] Node 0 active_anon:34256kB inactive_anon:8kB active_file:77456kB inactive_file:162800kB unevictable:1548kB isolated(anon):0kB isolated(file):0kB mapped:150820kB dirty:1588kB writeback:0kB shmem:7092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14448kB pagetables:6780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1894.720945][ T7134] Node 1 active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1894.789995][ T7134] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1894.873021][ T7134] lowmem_reserve[]: [ 1894.878329][ T7143] netlink: 'syz.9.4668': attribute type 12 has an invalid length. [ 1894.996073][ T7134] 0 2492 2493 2493 2493 [ 1895.329466][ T7134] Node 0 DMA32 free:1143188kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32664kB inactive_anon:8kB active_file:77456kB inactive_file:162800kB unevictable:1536kB writepending:1632kB zspages:0kB present:3129332kB managed:2552668kB mlocked:0kB bounce:0kB free_pcp:49236kB local_pcp:30000kB free_cma:0kB [ 1895.513237][ T7134] lowmem_reserve[]: 0 0 0 0 0 [ 1895.537711][ T7134] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 1895.678032][ T7134] lowmem_reserve[]: 0 0 0 0 0 [ 1895.711577][ T7134] Node 1 Normal free:3920148kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21632kB local_pcp:21632kB free_cma:0kB [ 1895.862576][ T7134] lowmem_reserve[]: 0 0 0 0 0 [ 1895.883190][ T7134] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1895.934148][ T7134] Node 0 DMA32: 8563*4kB (UME) 6989*8kB (UME) 4656*16kB (UME) 984*32kB (UME) 1435*64kB (UME) 1022*128kB (UME) 745*256kB (UME) 415*512kB (UME) 226*1024kB (UME) 20*2048kB (U) 12*4096kB (UM) = 1143540kB [ 1896.054154][ T7134] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1896.154361][ T7134] Node 1 Normal: 11*4kB (UM) 13*8kB (UM) 14*16kB (UM) 13*32kB (UM) 14*64kB (UM) 9*128kB (UM) 8*256kB (UM) 7*512kB (UM) 4*1024kB (UM) 4*2048kB (UM) 952*4096kB (UM) = 3920148kB [ 1896.175283][ T7134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1896.230731][ T7134] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 1896.380368][ T7134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1896.397374][ T7134] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1896.409993][ T7134] 61979 total pagecache pages [ 1896.462840][ T7134] 2 pages in swap cache [ 1896.489167][ T7134] Free swap = 124988kB [ 1896.519013][ T7134] Total swap = 124996kB [ 1896.535168][ T7134] 2097051 pages RAM [ 1896.549496][ T7134] 0 pages HighMem/MovableOnly [ 1896.570129][ T7134] 427101 pages reserved [ 1896.590003][ T7134] 0 pages cma reserved [ 1897.723412][ T7180] team0: Caught tx_queue_len zero misconfig [ 1898.102084][ T7188] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4675'. [ 1898.168163][ T7188] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4675'. [ 1900.606726][ T7220] futex_wake_op: syz.9.4679 tries to shift op by -1; fix this program [ 1902.955513][ T7258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1904.310204][ T7267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4687'. [ 1906.067748][ T7305] netlink: 'syz.2.4693': attribute type 1 has an invalid length. [ 1906.181956][ T7308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4693'. [ 1907.204061][ T7355] lo: Caught tx_queue_len zero misconfig [ 1907.427637][ T7359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4694'. [ 1907.983890][ T7376] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4697'. [ 1911.463060][ T7460] pic_ioport_write: 46 callbacks suppressed [ 1911.463076][ T7460] kvm: pic: level sensitive irq not supported [ 1911.488687][ T7460] picdev_read: 46 callbacks suppressed [ 1911.488703][ T7460] kvm: pic: non byte read [ 1911.538485][T27658] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1911.574374][ T7460] kvm: pic: level sensitive irq not supported [ 1911.574470][ T7460] kvm: pic: non byte read [ 1911.591880][ T7460] kvm: pic: level sensitive irq not supported [ 1911.591955][ T7460] kvm: pic: non byte read [ 1911.640611][ T7460] kvm: pic: level sensitive irq not supported [ 1911.640690][ T7460] kvm: pic: non byte read [ 1911.682696][ T7460] kvm: pic: level sensitive irq not supported [ 1911.682774][ T7460] kvm: pic: non byte read [ 1911.699344][ T7460] kvm: pic: level sensitive irq not supported [ 1911.699421][ T7460] kvm: pic: non byte read [ 1911.711749][ T7460] kvm: pic: level sensitive irq not supported [ 1911.711821][ T7460] kvm: pic: non byte read [ 1911.764030][ T7460] kvm: pic: level sensitive irq not supported [ 1911.764107][ T7460] kvm: pic: non byte read [ 1911.783684][ T7474] netlink: 'syz.4.4701': attribute type 10 has an invalid length. [ 1911.796100][ T7474] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4701'. [ 1911.823424][ T7460] kvm: pic: level sensitive irq not supported [ 1911.823495][ T7460] kvm: pic: non byte read [ 1911.876171][ T7460] kvm: pic: level sensitive irq not supported [ 1911.876261][ T7460] kvm: pic: non byte read [ 1912.520759][T27658] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1912.610649][T27658] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1912.701854][T27658] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1912.836600][T27658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.970296][T27658] usb 3-1: Product: syz [ 1913.110305][T27658] usb 3-1: Manufacturer: syz [ 1913.140218][T27658] usb 3-1: SerialNumber: syz [ 1913.195987][T27658] usb 3-1: config 0 descriptor?? [ 1914.538337][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.549304][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.647063][T27658] usb 3-1: can't set config #0, error -71 [ 1915.740164][T27658] usb 3-1: USB disconnect, device number 43 [ 1917.141477][ T7550] netlink: 'syz.1.4712': attribute type 1 has an invalid length. [ 1918.907854][T10780] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1919.058873][T10780] usb 5-1: Using ep0 maxpacket: 32 [ 1919.067232][T10780] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1919.096676][T10780] usb 5-1: config 0 has no interface number 0 [ 1919.119876][T10780] usb 5-1: config 0 interface 67 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1919.159942][T10780] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1919.184151][T10780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.214338][T10780] usb 5-1: Product: syz [ 1919.240631][T10780] usb 5-1: Manufacturer: syz [ 1919.253252][T10780] usb 5-1: SerialNumber: syz [ 1919.273718][T10780] usb 5-1: config 0 descriptor?? [ 1919.307233][T10780] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1919.322589][T10780] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 1919.565180][ T7585] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1919.608103][ T7587] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1919.972923][T10780] usb 5-1: USB disconnect, device number 93 [ 1920.166360][ T7605] netlink: 'syz.9.4717': attribute type 10 has an invalid length. [ 1920.202686][ T7605] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4717'. [ 1922.164960][T27658] IPVS: starting estimator thread 0... [ 1922.278593][ T7659] IPVS: using max 38 ests per chain, 91200 per kthread [ 1923.127217][ T7671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1924.842717][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1924.842742][ T30] audit: type=1326 audit(1777773172.838:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7680 comm="syz.9.4726" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effaa19cdd9 code=0x7ffc0000 [ 1925.095260][ T30] audit: type=1326 audit(1777773172.888:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7680 comm="syz.9.4726" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effaa19cdd9 code=0x7ffc0000 [ 1925.148469][ T30] audit: type=1326 audit(1777773172.888:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7680 comm="syz.9.4726" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7effaa19cdd9 code=0x7ffc0000 [ 1925.176742][ T30] audit: type=1326 audit(1777773172.888:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7680 comm="syz.9.4726" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effaa19cdd9 code=0x7ffc0000 [ 1925.243319][ T30] audit: type=1326 audit(1777773172.888:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7680 comm="syz.9.4726" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effaa19cdd9 code=0x7ffc0000 [ 1925.336172][ T30] audit: type=1326 audit(1777773172.888:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7680 comm="syz.9.4726" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effaa19cdd9 code=0x7ffc0000 [ 1925.361886][ T30] audit: type=1326 audit(1777773172.898:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7680 comm="syz.9.4726" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7effaa19cdd9 code=0x7ffc0000 [ 1925.398858][ T30] audit: type=1326 audit(1777773172.918:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7680 comm="syz.9.4726" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effaa19cdd9 code=0x7ffc0000 [ 1925.460303][ T30] audit: type=1326 audit(1777773172.938:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7680 comm="syz.9.4726" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7effaa19cdd9 code=0x7ffc0000 [ 1925.537082][ T30] audit: type=1326 audit(1777773173.028:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7680 comm="syz.9.4726" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effaa19cdd9 code=0x7ffc0000 [ 1927.332197][T13212] IPVS: stop unused estimator thread 0... [ 1927.444215][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4732'. [ 1927.898715][ T7773] kAFS: unable to lookup cell '' [ 1929.704117][ T7803] gtp0: entered promiscuous mode [ 1929.759299][ T7803] team0: Device gtp0 is of different type [ 1930.237518][ T7822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1930.354513][ T7804] netlink: 'syz.1.4734': attribute type 10 has an invalid length. [ 1930.416236][ T7804] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4734'. [ 1932.594390][ T7874] binder: 7868:7874 ioctl 4018620d 0 returned -22 [ 1932.642555][T15437] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1932.756339][ T7879] binder: 7868:7879 ioctl c0306201 0 returned -14 [ 1932.843692][T15437] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1932.856498][T15437] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1932.875749][T15437] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1932.945175][T15437] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.006894][T15437] usb 10-1: config 0 descriptor?? [ 1933.149800][ T7879] syz.6.4741 (7879): drop_caches: 2 [ 1933.475907][ T7901] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4742'. [ 1933.588673][T15437] cm6533_jd 0003:0D8C:0022.0024: unknown main item tag 0x0 [ 1933.607685][T15437] cm6533_jd 0003:0D8C:0022.0024: unknown main item tag 0x0 [ 1933.646190][T15437] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0D8C:0022.0024/input/input96 [ 1933.827630][T15437] cm6533_jd 0003:0D8C:0022.0024: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.9-1/input0 [ 1934.488730][T10780] usb 10-1: USB disconnect, device number 49 [ 1934.986201][ T7943] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4744'. [ 1935.186428][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4747'. [ 1935.201146][ T7956] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1935.225087][ T7956] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1936.817812][ T7983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1939.120849][ T8014] [ 1939.123298][ T8014] ===================================================== [ 1939.130230][ T8014] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1939.137689][ T8014] syzkaller #0 Tainted: G L [ 1939.143693][ T8014] ----------------------------------------------------- [ 1939.150632][ T8014] syz.4.4754/8014 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1939.158364][ T8014] ffff88804d06a440 (&tty->flow.lock){....}-{3:3}, at: stop_tty+0x2f/0x140 [ 1939.166952][ T8014] [ 1939.166952][ T8014] and this task is already holding: [ 1939.174340][ T8014] ffffffff8f20add8 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd7/0x42f0 [ 1939.182964][ T8014] which would create a new lock dependency: [ 1939.188866][ T8014] (kbd_event_lock){..-.}-{3:3} -> (&tty->flow.lock){....}-{3:3} [ 1939.196615][ T8014] [ 1939.196615][ T8014] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1939.206061][ T8014] (kbd_event_lock){..-.}-{3:3} [ 1939.206084][ T8014] [ 1939.206084][ T8014] ... which became SOFTIRQ-irq-safe at: [ 1939.218679][ T8014] lock_acquire+0x106/0x350 [ 1939.223294][ T8014] _raw_spin_lock+0x2e/0x40 [ 1939.227898][ T8014] kbd_event+0xd7/0x42f0 [ 1939.232242][ T8014] input_handle_events_default+0xd4/0x1a0 [ 1939.238048][ T8014] input_pass_values+0x288/0x890 [ 1939.243199][ T8014] input_event_dispose+0x3e5/0x6b0 [ 1939.248408][ T8014] input_inject_event+0x1dc/0x330 [ 1939.253544][ T8014] kd_sound_helper+0x101/0x210 [ 1939.258405][ T8014] input_handler_for_each_handle+0x101/0x1c0 [ 1939.264482][ T8014] call_timer_fn+0x192/0x5e0 [ 1939.269161][ T8014] __run_timer_base+0x652/0x8b0 [ 1939.274104][ T8014] run_timer_softirq+0xb7/0x170 [ 1939.279047][ T8014] handle_softirqs+0x22a/0x840 [ 1939.283917][ T8014] __irq_exit_rcu+0xca/0x220 [ 1939.288595][ T8014] irq_exit_rcu+0x9/0x30 [ 1939.292923][ T8014] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1939.298650][ T8014] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1939.304717][ T8014] unwind_next_frame+0x50e/0x2550 [ 1939.309827][ T8014] arch_stack_walk+0x11b/0x150 [ 1939.314681][ T8014] stack_trace_save+0xa9/0x100 [ 1939.319545][ T8014] kasan_save_track+0x3e/0x80 [ 1939.324315][ T8014] __kasan_slab_alloc+0x6c/0x80 [ 1939.329257][ T8014] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1939.334806][ T8014] do_getname+0x2e/0x250 [ 1939.339136][ T8014] do_sys_openat2+0xca/0x200 [ 1939.343812][ T8014] __x64_sys_openat+0x138/0x170 [ 1939.348758][ T8014] do_syscall_64+0x15f/0xf80 [ 1939.353455][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1939.359427][ T8014] [ 1939.359427][ T8014] to a SOFTIRQ-irq-unsafe lock: [ 1939.366438][ T8014] (tasklist_lock){.+.+}-{3:3} [ 1939.366461][ T8014] [ 1939.366461][ T8014] ... which became SOFTIRQ-irq-unsafe at: [ 1939.379089][ T8014] ... [ 1939.379096][ T8014] lock_acquire+0x106/0x350 [ 1939.386261][ T8014] _raw_read_lock+0x36/0x50 [ 1939.390972][ T8014] __do_wait+0xde/0x740 [ 1939.395234][ T8014] do_wait+0x1e7/0x510 [ 1939.399431][ T8014] kernel_wait+0xd6/0x1c0 [ 1939.403885][ T8014] call_usermodehelper_exec_work+0xbe/0x230 [ 1939.409961][ T8014] process_scheduled_works+0xb5d/0x1860 [ 1939.415599][ T8014] worker_thread+0xa53/0xfc0 [ 1939.420278][ T8014] kthread+0x388/0x470 [ 1939.424445][ T8014] ret_from_fork+0x514/0xb70 [ 1939.429127][ T8014] ret_from_fork_asm+0x1a/0x30 [ 1939.433981][ T8014] [ 1939.433981][ T8014] other info that might help us debug this: [ 1939.433981][ T8014] [ 1939.444209][ T8014] Chain exists of: [ 1939.444209][ T8014] kbd_event_lock --> &tty->flow.lock --> tasklist_lock [ 1939.444209][ T8014] [ 1939.456997][ T8014] Possible interrupt unsafe locking scenario: [ 1939.456997][ T8014] [ 1939.465336][ T8014] CPU0 CPU1 [ 1939.470710][ T8014] ---- ---- [ 1939.476101][ T8014] lock(tasklist_lock); [ 1939.480369][ T8014] local_irq_disable(); [ 1939.487478][ T8014] lock(kbd_event_lock); [ 1939.494328][ T8014] lock(&tty->flow.lock); [ 1939.501266][ T8014] [ 1939.504730][ T8014] lock(kbd_event_lock); [ 1939.509236][ T8014] [ 1939.509236][ T8014] *** DEADLOCK *** [ 1939.509236][ T8014] [ 1939.517376][ T8014] 5 locks held by syz.4.4754/8014: [ 1939.522479][ T8014] #0: ffff88802ca8f110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1939.531651][ T8014] #1: ffff88802c9ee230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 1939.541857][ T8014] #2: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330 [ 1939.551548][ T8014] #3: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1939.561127][ T8014] #4: ffffffff8f20add8 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd7/0x42f0 [ 1939.570181][ T8014] [ 1939.570181][ T8014] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1939.580599][ T8014] -> (kbd_event_lock){..-.}-{3:3} { [ 1939.585820][ T8014] IN-SOFTIRQ-W at: [ 1939.589809][ T8014] lock_acquire+0x106/0x350 [ 1939.595965][ T8014] _raw_spin_lock+0x2e/0x40 [ 1939.602123][ T8014] kbd_event+0xd7/0x42f0 [ 1939.608186][ T8014] input_handle_events_default+0xd4/0x1a0 [ 1939.615553][ T8014] input_pass_values+0x288/0x890 [ 1939.622147][ T8014] input_event_dispose+0x3e5/0x6b0 [ 1939.628909][ T8014] input_inject_event+0x1dc/0x330 [ 1939.635588][ T8014] kd_sound_helper+0x101/0x210 [ 1939.642011][ T8014] input_handler_for_each_handle+0x101/0x1c0 [ 1939.649647][ T8014] call_timer_fn+0x192/0x5e0 [ 1939.655898][ T8014] __run_timer_base+0x652/0x8b0 [ 1939.662485][ T8014] run_timer_softirq+0xb7/0x170 [ 1939.669160][ T8014] handle_softirqs+0x22a/0x840 [ 1939.675574][ T8014] __irq_exit_rcu+0xca/0x220 [ 1939.681919][ T8014] irq_exit_rcu+0x9/0x30 [ 1939.687829][ T8014] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1939.695131][ T8014] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1939.702758][ T8014] unwind_next_frame+0x50e/0x2550 [ 1939.709447][ T8014] arch_stack_walk+0x11b/0x150 [ 1939.715861][ T8014] stack_trace_save+0xa9/0x100 [ 1939.722283][ T8014] kasan_save_track+0x3e/0x80 [ 1939.728616][ T8014] __kasan_slab_alloc+0x6c/0x80 [ 1939.735121][ T8014] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1939.742242][ T8014] do_getname+0x2e/0x250 [ 1939.748146][ T8014] do_sys_openat2+0xca/0x200 [ 1939.754386][ T8014] __x64_sys_openat+0x138/0x170 [ 1939.760888][ T8014] do_syscall_64+0x15f/0xf80 [ 1939.767130][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1939.774683][ T8014] INITIAL USE at: [ 1939.778589][ T8014] lock_acquire+0x106/0x350 [ 1939.784692][ T8014] _raw_spin_lock_irqsave+0x40/0x60 [ 1939.791458][ T8014] vt_reset_unicode+0x2b/0x160 [ 1939.797801][ T8014] reset_vc+0x68/0x1b0 [ 1939.803455][ T8014] vc_init+0x70/0x4a0 [ 1939.809014][ T8014] con_init+0x377/0x6a0 [ 1939.814735][ T8014] console_init+0x10b/0x4a0 [ 1939.820800][ T8014] start_kernel+0x230/0x3e0 [ 1939.826877][ T8014] x86_64_start_reservations+0x24/0x30 [ 1939.833895][ T8014] x86_64_start_kernel+0x143/0x1c0 [ 1939.840569][ T8014] common_startup_64+0x13e/0x147 [ 1939.847070][ T8014] } [ 1939.849562][ T8014] ... key at: [] kbd_event_lock+0x18/0xa0 [ 1939.857444][ T8014] [ 1939.857444][ T8014] the dependencies between the lock to be acquired [ 1939.857452][ T8014] and SOFTIRQ-irq-unsafe lock: [ 1939.870967][ T8014] -> (tasklist_lock){.+.+}-{3:3} { [ 1939.876351][ T8014] HARDIRQ-ON-R at: [ 1939.880584][ T8014] lock_acquire+0x106/0x350 [ 1939.887262][ T8014] _raw_read_lock+0x36/0x50 [ 1939.894021][ T8014] __do_wait+0xde/0x740 [ 1939.900350][ T8014] do_wait+0x1e7/0x510 [ 1939.906592][ T8014] kernel_wait+0xd6/0x1c0 [ 1939.913101][ T8014] call_usermodehelper_exec_work+0xbe/0x230 [ 1939.921255][ T8014] process_scheduled_works+0xb5d/0x1860 [ 1939.928971][ T8014] worker_thread+0xa53/0xfc0 [ 1939.935728][ T8014] kthread+0x388/0x470 [ 1939.941975][ T8014] ret_from_fork+0x514/0xb70 [ 1939.948734][ T8014] ret_from_fork_asm+0x1a/0x30 [ 1939.955709][ T8014] SOFTIRQ-ON-R at: [ 1939.959947][ T8014] lock_acquire+0x106/0x350 [ 1939.966705][ T8014] _raw_read_lock+0x36/0x50 [ 1939.973375][ T8014] __do_wait+0xde/0x740 [ 1939.979698][ T8014] do_wait+0x1e7/0x510 [ 1939.985937][ T8014] kernel_wait+0xd6/0x1c0 [ 1939.992442][ T8014] call_usermodehelper_exec_work+0xbe/0x230 [ 1940.000498][ T8014] process_scheduled_works+0xb5d/0x1860 [ 1940.008209][ T8014] worker_thread+0xa53/0xfc0 [ 1940.015052][ T8014] kthread+0x388/0x470 [ 1940.021313][ T8014] ret_from_fork+0x514/0xb70 [ 1940.028068][ T8014] ret_from_fork_asm+0x1a/0x30 [ 1940.034999][ T8014] INITIAL USE at: [ 1940.039145][ T8014] lock_acquire+0x106/0x350 [ 1940.045730][ T8014] _raw_write_lock_irq+0x3d/0x50 [ 1940.052749][ T8014] copy_process+0x2b4c/0x4440 [ 1940.059506][ T8014] kernel_clone+0x284/0x8f0 [ 1940.066092][ T8014] user_mode_thread+0x110/0x180 [ 1940.073030][ T8014] rest_init+0x23/0x300 [ 1940.079263][ T8014] start_kernel+0x38a/0x3e0 [ 1940.085864][ T8014] x86_64_start_reservations+0x24/0x30 [ 1940.093401][ T8014] x86_64_start_kernel+0x143/0x1c0 [ 1940.100591][ T8014] common_startup_64+0x13e/0x147 [ 1940.107705][ T8014] INITIAL READ USE at: [ 1940.112303][ T8014] lock_acquire+0x106/0x350 [ 1940.119327][ T8014] _raw_read_lock+0x36/0x50 [ 1940.126348][ T8014] __do_wait+0xde/0x740 [ 1940.133025][ T8014] do_wait+0x1e7/0x510 [ 1940.139623][ T8014] kernel_wait+0xd6/0x1c0 [ 1940.146605][ T8014] call_usermodehelper_exec_work+0xbe/0x230 [ 1940.155011][ T8014] process_scheduled_works+0xb5d/0x1860 [ 1940.163080][ T8014] worker_thread+0xa53/0xfc0 [ 1940.170186][ T8014] kthread+0x388/0x470 [ 1940.176772][ T8014] ret_from_fork+0x514/0xb70 [ 1940.183879][ T8014] ret_from_fork_asm+0x1a/0x30 [ 1940.191163][ T8014] } [ 1940.193917][ T8014] ... key at: [] tasklist_lock+0x18/0x40 [ 1940.201987][ T8014] ... acquired at: [ 1940.206048][ T8014] _raw_read_lock+0x36/0x50 [ 1940.210722][ T8014] send_sigurg+0x12b/0x420 [ 1940.215402][ T8014] sk_send_sigurg+0x6c/0x2e0 [ 1940.220260][ T8014] queue_oob+0x42c/0x4f0 [ 1940.224672][ T8014] unix_stream_sendmsg+0xcb1/0xe80 [ 1940.229966][ T8014] ____sys_sendmsg+0x972/0x9f0 [ 1940.234990][ T8014] ___sys_sendmsg+0x2a5/0x360 [ 1940.239840][ T8014] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1940.245081][ T8014] do_syscall_64+0x15f/0xf80 [ 1940.249844][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.256009][ T8014] [ 1940.258331][ T8014] -> (&f_owner->lock){....}-{3:3} { [ 1940.263737][ T8014] INITIAL USE at: [ 1940.267808][ T8014] lock_acquire+0x106/0x350 [ 1940.274224][ T8014] _raw_write_lock_irq+0x3d/0x50 [ 1940.281163][ T8014] __f_setown+0x67/0x370 [ 1940.287408][ T8014] generic_setlease+0xacf/0xfd0 [ 1940.294365][ T8014] do_fcntl_add_lease+0x35e/0x470 [ 1940.301304][ T8014] fcntl_setdeleg+0x14c/0x1e0 [ 1940.307983][ T8014] do_fcntl+0xe6d/0x1a20 [ 1940.314228][ T8014] __se_sys_fcntl+0xc8/0x150 [ 1940.320734][ T8014] do_syscall_64+0x15f/0xf80 [ 1940.327500][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.335305][ T8014] INITIAL READ USE at: [ 1940.339816][ T8014] lock_acquire+0x106/0x350 [ 1940.346671][ T8014] _raw_read_lock_irqsave+0x48/0x60 [ 1940.354224][ T8014] send_sigio+0x38/0x370 [ 1940.360814][ T8014] kill_fasync+0x24d/0x4d0 [ 1940.367600][ T8014] lease_break_callback+0x26/0x30 [ 1940.375058][ T8014] __break_lease+0x81f/0x1ea0 [ 1940.382163][ T8014] vfs_set_acl+0x4d9/0xc00 [ 1940.388934][ T8014] file_setxattr+0x233/0x2b0 [ 1940.395879][ T8014] path_setxattrat+0x3b0/0x440 [ 1940.402993][ T8014] __x64_sys_fsetxattr+0xbc/0xe0 [ 1940.410297][ T8014] do_syscall_64+0x15f/0xf80 [ 1940.417232][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.425468][ T8014] } [ 1940.428140][ T8014] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1940.437182][ T8014] ... acquired at: [ 1940.441160][ T8014] _raw_read_lock_irqsave+0x48/0x60 [ 1940.446529][ T8014] send_sigio+0x38/0x370 [ 1940.450945][ T8014] kill_fasync+0x24d/0x4d0 [ 1940.455536][ T8014] lease_break_callback+0x26/0x30 [ 1940.460742][ T8014] __break_lease+0x81f/0x1ea0 [ 1940.465590][ T8014] vfs_set_acl+0x4d9/0xc00 [ 1940.470288][ T8014] file_setxattr+0x233/0x2b0 [ 1940.475057][ T8014] path_setxattrat+0x3b0/0x440 [ 1940.480084][ T8014] __x64_sys_fsetxattr+0xbc/0xe0 [ 1940.485202][ T8014] do_syscall_64+0x15f/0xf80 [ 1940.489980][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.496046][ T8014] [ 1940.498366][ T8014] -> (&new->fa_lock){....}-{3:3} { [ 1940.503577][ T8014] INITIAL USE at: [ 1940.507555][ T8014] lock_acquire+0x106/0x350 [ 1940.513813][ T8014] _raw_write_lock_irq+0x3d/0x50 [ 1940.520522][ T8014] fasync_remove_entry+0xf1/0x1c0 [ 1940.527289][ T8014] lease_modify+0x4f7/0x6c0 [ 1940.533531][ T8014] locks_remove_file+0x5f0/0xf70 [ 1940.540246][ T8014] __fput+0x3ae/0xa60 [ 1940.545991][ T8014] task_work_run+0x1d9/0x270 [ 1940.552345][ T8014] get_signal+0x11eb/0x1330 [ 1940.558588][ T8014] arch_do_signal_or_restart+0xbc/0x830 [ 1940.565879][ T8014] exit_to_user_mode_loop+0x86/0x480 [ 1940.572909][ T8014] do_syscall_64+0x33e/0xf80 [ 1940.579252][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.586890][ T8014] INITIAL READ USE at: [ 1940.591307][ T8014] lock_acquire+0x106/0x350 [ 1940.598000][ T8014] _raw_read_lock_irqsave+0x48/0x60 [ 1940.605490][ T8014] kill_fasync+0x199/0x4d0 [ 1940.612178][ T8014] lease_break_callback+0x26/0x30 [ 1940.619387][ T8014] __break_lease+0x81f/0x1ea0 [ 1940.626239][ T8014] vfs_set_acl+0x4d9/0xc00 [ 1940.632831][ T8014] file_setxattr+0x233/0x2b0 [ 1940.639601][ T8014] path_setxattrat+0x3b0/0x440 [ 1940.646540][ T8014] __x64_sys_fsetxattr+0xbc/0xe0 [ 1940.653671][ T8014] do_syscall_64+0x15f/0xf80 [ 1940.660458][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.668527][ T8014] } [ 1940.671180][ T8014] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1940.680032][ T8014] ... acquired at: [ 1940.683939][ T8014] _raw_read_lock_irqsave+0x48/0x60 [ 1940.689341][ T8014] kill_fasync+0x199/0x4d0 [ 1940.693942][ T8014] __start_tty+0x18c/0x220 [ 1940.698539][ T8014] n_tty_ioctl_helper+0x128/0x4d0 [ 1940.703748][ T8014] tty_ioctl+0x9c5/0xde0 [ 1940.708170][ T8014] __se_sys_ioctl+0xfc/0x170 [ 1940.712944][ T8014] do_syscall_64+0x15f/0xf80 [ 1940.717710][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.723815][ T8014] [ 1940.726134][ T8014] -> (&tty->flow.lock){....}-{3:3} { [ 1940.731433][ T8014] INITIAL USE at: [ 1940.735322][ T8014] lock_acquire+0x106/0x350 [ 1940.741415][ T8014] _raw_spin_lock_irqsave+0x40/0x60 [ 1940.748186][ T8014] start_tty+0x1b/0x50 [ 1940.753854][ T8014] n_tty_set_termios+0xa7c/0x10a0 [ 1940.760458][ T8014] tty_set_termios+0xdb3/0x1800 [ 1940.766893][ T8014] set_termios+0x566/0x710 [ 1940.772889][ T8014] tty_mode_ioctl+0x4a6/0x7d0 [ 1940.779222][ T8014] tty_ioctl+0x9c5/0xde0 [ 1940.785037][ T8014] __se_sys_ioctl+0xfc/0x170 [ 1940.791199][ T8014] do_syscall_64+0x15f/0xf80 [ 1940.797362][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.804820][ T8014] } [ 1940.807316][ T8014] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 1940.816087][ T8014] ... acquired at: [ 1940.819917][ T8014] _raw_spin_lock_irqsave+0x40/0x60 [ 1940.825300][ T8014] stop_tty+0x2f/0x140 [ 1940.829553][ T8014] kbd_event+0x2f91/0x42f0 [ 1940.834143][ T8014] input_handle_events_default+0xd4/0x1a0 [ 1940.840039][ T8014] input_pass_values+0x288/0x890 [ 1940.845161][ T8014] input_event_dispose+0x330/0x6b0 [ 1940.850442][ T8014] input_inject_event+0x1dc/0x330 [ 1940.855661][ T8014] evdev_write+0x325/0x4c0 [ 1940.860254][ T8014] vfs_write+0x29a/0xb90 [ 1940.864672][ T8014] ksys_write+0x150/0x270 [ 1940.869200][ T8014] do_syscall_64+0x15f/0xf80 [ 1940.873994][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.880064][ T8014] [ 1940.882392][ T8014] [ 1940.882392][ T8014] stack backtrace: [ 1940.888279][ T8014] CPU: 1 UID: 0 PID: 8014 Comm: syz.4.4754 Tainted: G L syzkaller #0 PREEMPT(full) [ 1940.888299][ T8014] Tainted: [L]=SOFTLOCKUP [ 1940.888305][ T8014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1940.888315][ T8014] Call Trace: [ 1940.888323][ T8014] [ 1940.888330][ T8014] dump_stack_lvl+0xe8/0x150 [ 1940.888348][ T8014] __lock_acquire+0x2a94/0x2cf0 [ 1940.888371][ T8014] ? stop_tty+0x2f/0x140 [ 1940.888390][ T8014] lock_acquire+0x106/0x350 [ 1940.888404][ T8014] ? stop_tty+0x2f/0x140 [ 1940.888427][ T8014] _raw_spin_lock_irqsave+0x40/0x60 [ 1940.888444][ T8014] ? stop_tty+0x2f/0x140 [ 1940.888462][ T8014] stop_tty+0x2f/0x140 [ 1940.888481][ T8014] kbd_event+0x2f91/0x42f0 [ 1940.888497][ T8014] ? __pfx_kbd_event+0x10/0x10 [ 1940.888508][ T8014] ? finish_task_switch+0x41f/0xbe0 [ 1940.888524][ T8014] ? __lock_acquire+0x6b5/0x2cf0 [ 1940.888540][ T8014] ? __lock_acquire+0x6b5/0x2cf0 [ 1940.888558][ T8014] ? __lock_acquire+0x6b5/0x2cf0 [ 1940.888573][ T8014] ? __lock_acquire+0x6b5/0x2cf0 [ 1940.888597][ T8014] ? __lock_acquire+0x6b5/0x2cf0 [ 1940.888613][ T8014] ? input_pass_values+0x8d/0x890 [ 1940.888632][ T8014] ? lock_acquire+0x106/0x350 [ 1940.888646][ T8014] ? input_pass_values+0x8d/0x890 [ 1940.888667][ T8014] input_handle_events_default+0xd4/0x1a0 [ 1940.888684][ T8014] ? input_pass_values+0x8d/0x890 [ 1940.888703][ T8014] input_pass_values+0x288/0x890 [ 1940.888725][ T8014] ? input_handle_event+0x70c/0xf30 [ 1940.888742][ T8014] input_event_dispose+0x330/0x6b0 [ 1940.888761][ T8014] input_inject_event+0x1dc/0x330 [ 1940.888778][ T8014] ? input_inject_event+0xb5/0x330 [ 1940.888796][ T8014] evdev_write+0x325/0x4c0 [ 1940.888817][ T8014] ? __lock_acquire+0x6b5/0x2cf0 [ 1940.888832][ T8014] ? __pfx_evdev_write+0x10/0x10 [ 1940.888854][ T8014] ? bpf_lsm_file_permission+0x9/0x20 [ 1940.888875][ T8014] ? security_file_permission+0x75/0x260 [ 1940.888909][ T8014] ? rw_verify_area+0x255/0x4d0 [ 1940.888930][ T8014] ? __pfx_evdev_write+0x10/0x10 [ 1940.888952][ T8014] vfs_write+0x29a/0xb90 [ 1940.888975][ T8014] ? __pfx_vfs_write+0x10/0x10 [ 1940.888996][ T8014] ? __fget_files+0x2a/0x420 [ 1940.889015][ T8014] ? __fget_files+0x2a/0x420 [ 1940.889031][ T8014] ? __fget_files+0x3a0/0x420 [ 1940.889048][ T8014] ? __fget_files+0x2a/0x420 [ 1940.889068][ T8014] ksys_write+0x150/0x270 [ 1940.889089][ T8014] ? __pfx_ksys_write+0x10/0x10 [ 1940.889112][ T8014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.889127][ T8014] do_syscall_64+0x15f/0xf80 [ 1940.889146][ T8014] ? trace_irq_disable+0x3b/0x140 [ 1940.889168][ T8014] ? clear_bhb_loop+0x40/0x90 [ 1940.889184][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.889199][ T8014] RIP: 0033:0x7fd26879cdd9 [ 1940.889214][ T8014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1940.889227][ T8014] RSP: 002b:00007fd2695a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1940.889243][ T8014] RAX: ffffffffffffffda RBX: 00007fd268a15fa0 RCX: 00007fd26879cdd9 [ 1940.889254][ T8014] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000006 [ 1940.889264][ T8014] RBP: 00007fd268832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1940.889274][ T8014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1940.889283][ T8014] R13: 00007fd268a16038 R14: 00007fd268a15fa0 R15: 00007fd268b3fa48 [ 1940.889300][ T8014]