last executing test programs: 6m54.968265905s ago: executing program 2 (id=179): sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x5, 0x1, 0x98fae76629956136, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) io_uring_setup(0x7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000400)=0x2a12, 0x4) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x0, 0xa, 0x20002f7}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4000) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000200)={{0x0, 0x989680}}, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) timerfd_create(0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000002d000701feffffff01000002027c00000c00018008001600", @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x4c855}, 0xc800) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x2b, 0x0, &(0x7f0000000300)='GPL\x00', 0x7fff, 0xaa, &(0x7f0000000340)=""/170, 0x40f00, 0x10, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x9, 0x3, 0x8}, 0x10, 0x30cfe, 0xffffffffffffffff, 0x1, &(0x7f0000000480)=[0xffffffffffffffff], &(0x7f00000004c0)=[{0x5, 0x3, 0xb, 0x3}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x0, 0x61, 0x6b, &(0x7f00000005c0)="19030b4e1170b2988df376674356c01a7388811ae9a13741a61cec0f7af0c810a0e6916f8a3359c08173c7d4864a28d16966bd6788a986dc763d343b041d9a9bdd028bf18ca3bc906f5c252618acfea248943e2b90e1aff5d705d3b2a2f44da266", &(0x7f0000000640)=""/107, 0x6, 0x0, 0x63, 0x53, &(0x7f00000006c0)="aea8ad4af3aee50ae2d2d1bc920eb8f067ebc4879279e43a0604201671dc5c587c9aeba5081d61acaba4f9fb87c6b7f09004efc92d764a5cdd01f112dcbc7377d860bdedc70e2daba1de16af0a441a1679cde1e2ff8648bd6c6ae37a09870ad426cf54", &(0x7f0000000740)="5dfcc673e55a8b6d48b9f3bbb873664d1ce66d4d7f51361c85175efe2f72fb8b3a7a24e7b819d7e904678f6a3cb3036214c0e833ef4c1b9a1d4332d905c0f8d04d8858b63cde0a558e34eb46bb1962c1ffe088", 0x1, 0x0, 0x8}, 0x50) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x1}, 0x10) 6m54.344940938s ago: executing program 2 (id=183): syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x7021, 0x0, 0x0, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r0, 0x3a, 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000cc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) connect$unix(0xffffffffffffffff, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fadvise64(0xffffffffffffffff, 0x1, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 6m51.560416219s ago: executing program 2 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0xc84d5727a3a4cb9, 0x1, 0x10000, 0x401}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000840)={0x28, 0x6, r1, 0x0, &(0x7f0000008000/0x4000)=nil, 0x4000, 0x5fffffffffffffff}) ioperm(0x6, 0x9, 0x824) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f0000000200)={0x0, 0x17, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ptrace$ARCH_SHSTK_LOCK(0x1e, 0xffffffffffffffff, 0x3, 0x5003) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00') ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x5, r1, 0x0, &(0x7f000000b000/0x3000)=nil, 0x3000, 0xfffffffffffffffe}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000380)={0x28, 0x4, r1, r1, 0x1000, 0x0, 0x3ffe}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x380000b, 0x204031, 0xffffffffffffffff, 0x5e9b7000) r5 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x0) move_pages(0x0, 0x6, &(0x7f0000000080)=[&(0x7f00000ac000/0x1000)=nil, &(0x7f0000160000/0x1000)=nil, &(0x7f00001e5000/0x2000)=nil, &(0x7f00000c5000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000015a000/0x3000)=nil], &(0x7f0000000100)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x2) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r5, 0x6f2d, 0x7fffffffffffffff) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r5, 0x6f2d, 0xcb) 6m50.580023584s ago: executing program 2 (id=194): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @empty, @val={@val={0x88a8, 0x1, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@can={0xc, {{0x4, 0x1, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "8a7b8bf24399cbdc"}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@mcast2, @in6}}, {{@in6=@private2}, 0x0, @in=@multicast1}}, 0x0) clock_gettime(0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x2}}) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008000100", @ANYRES32=r2, @ANYRES64, @ANYRES8=r2, @ANYRESDEC=r6, @ANYRES32=r6, @ANYRES16=r7, @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000080)={0x9, {0x400, 0x81, 0x101, 0xffffffe1}, {0x8, 0x7, 0x1, 0x7ff}, {0x1}}) 6m49.537163678s ago: executing program 2 (id=196): r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xd402, 0x1, 0x0, 0x4d55ba80e15bd3d8, 0xb5a, 0x8}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4a}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000072009fb300000000000000", @ANYRES32=0x0, @ANYBLOB="0800010001002000a58886a954"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000001140)={@multicast2, @local}, 0x8) getsockopt$inet_buf(r7, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000001600)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f00000013c0)={0x1d4, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x79, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0xfffffffffffffee7}, {0x4}}, {0x8}}}, {0x4c, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x40, 0x1, @lb_stats_refresh_interval={{}, {}, {0x0, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{}, {}, {0x0, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{}, {}, {0x0, 0x4, 0x3}}}}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x24008024}, 0x4008000) connect$inet6(0xffffffffffffffff, &(0x7f0000002140)={0xa, 0x4e27, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) 6m48.449778782s ago: executing program 2 (id=200): gettid() syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @remote, @remote, @loopback}}}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r3, 0x8008550e, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffff80fe, 0x40}, 0x4c) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x10c00, 0x9) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000280)) mount_setattr(r4, &(0x7f00000001c0)='./file0\x00', 0x5000, &(0x7f00000002c0)={0x10017e, 0x0, 0x20000, {r5}}, 0x20) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x40) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000980)={'syz1\x00', {0x0, 0xcf0d}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0x4f5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x4020, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xe20, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0x0, 0x1], [0x3, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x4, 0xed, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x5, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x2000000, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x84dc, 0x80000000, 0x0, 0xf, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x10001], [0x2, 0x0, 0x6, 0x40000, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x800000, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0xfd2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r7, 0x4004556d, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) write$uinput_user_dev(r7, &(0x7f0000000e00)={'syz1\x00', {0x8, 0x2, 0x5, 0x5}, 0x6, [0x6, 0x8228, 0x400, 0xbd4, 0x2e09800, 0x100, 0x3, 0x40007, 0x3, 0xd, 0x100, 0x1, 0x4, 0x5, 0x2, 0xb78a, 0x5a, 0x150, 0x4, 0x1, 0x4, 0x9, 0x3, 0x7, 0x6, 0x7f, 0x8af4, 0x3, 0x2, 0x6, 0x4, 0x33a2, 0x200, 0xffff7b22, 0x4, 0xe0, 0x7, 0x3, 0xff, 0x800, 0x7f, 0xffffff81, 0x7f, 0x5, 0x80000, 0x7, 0x23e, 0x9, 0x67, 0x9, 0x10, 0xb, 0x2, 0x5, 0x5, 0x6, 0xb8e, 0x627, 0x6, 0x0, 0x9, 0x1, 0x10000004, 0x9], [0x3, 0x0, 0x1, 0x80000001, 0xffffffff, 0xff, 0x1, 0x3, 0x7, 0x9, 0xd502, 0x80000001, 0x4439, 0xffff, 0x7, 0x7, 0x5, 0x8, 0x4, 0x4, 0x1, 0x6, 0x0, 0x9, 0x1, 0x7, 0x7, 0x7, 0x0, 0xae, 0xa8d, 0x4605, 0xfffffffe, 0x7fff, 0x5, 0xffffffff, 0x3, 0x3, 0x7ff, 0x8, 0x10000, 0x4, 0xfffffe00, 0xfff, 0x106, 0x3, 0x8, 0xf0, 0x5, 0x6, 0x400, 0x7, 0x3, 0x8, 0x1000, 0x8, 0x31, 0x81, 0x8, 0x401, 0x3, 0x9a, 0x10, 0x7], [0x5, 0xfffffffe, 0x800006, 0x6, 0xb0fa, 0x4, 0x7ef, 0xc, 0x5, 0xb79a, 0x2, 0x5, 0x2, 0x34000, 0x0, 0x0, 0x6, 0x1, 0x0, 0x1, 0x1, 0x9, 0x101, 0x7, 0xfa, 0x5a17, 0x42d, 0x3, 0xe8, 0x3, 0x85e, 0x8, 0x2, 0x2, 0x7fffffff, 0x800, 0x1, 0xa, 0x0, 0xf, 0x6, 0x10000000, 0x40, 0x8, 0x6, 0x4ea, 0x6, 0x100, 0x1, 0x7f, 0xf7, 0xfc, 0x8, 0x0, 0x5, 0x6, 0x6, 0x5455, 0x2, 0x1001, 0x2, 0x400, 0xffffff7f, 0x4219], [0x5, 0x3, 0x8, 0x2, 0x5043, 0x9, 0x2c, 0x3d, 0x400, 0xe, 0x3, 0x0, 0x8, 0x44a4e339, 0x499, 0x4, 0x2, 0x40, 0x9, 0x9, 0x9, 0x3, 0xe, 0xfffffff8, 0x4, 0x3, 0x10, 0x9, 0x9e92, 0x0, 0x9, 0x1000, 0x2, 0xc845, 0x5, 0x6, 0x6, 0x3, 0x800, 0x1d, 0x6b66fc9f, 0x5, 0x0, 0xfffffff7, 0x0, 0x945, 0xb7, 0x4, 0xffff, 0x9, 0x4, 0x80000000, 0xf2be, 0x7, 0x3, 0x7fff, 0x81, 0x1, 0x6, 0x3, 0x8, 0x2, 0x2, 0xfe]}, 0x45c) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000002300)={&(0x7f0000000580)=[{0x3, 0x10, 0x0, 0x0}, {0xfbff, 0x210, 0x0, &(0x7f00000001c0)}], 0x2}) 6m32.688380442s ago: executing program 32 (id=200): gettid() syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @remote, @remote, @loopback}}}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r3, 0x8008550e, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffff80fe, 0x40}, 0x4c) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x10c00, 0x9) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000280)) mount_setattr(r4, &(0x7f00000001c0)='./file0\x00', 0x5000, &(0x7f00000002c0)={0x10017e, 0x0, 0x20000, {r5}}, 0x20) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x40) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000980)={'syz1\x00', {0x0, 0xcf0d}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0x4f5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x4020, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xe20, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0x0, 0x1], [0x3, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x4, 0xed, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x5, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x2000000, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x84dc, 0x80000000, 0x0, 0xf, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x10001], [0x2, 0x0, 0x6, 0x40000, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x800000, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0xfd2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r7, 0x4004556d, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) write$uinput_user_dev(r7, &(0x7f0000000e00)={'syz1\x00', {0x8, 0x2, 0x5, 0x5}, 0x6, [0x6, 0x8228, 0x400, 0xbd4, 0x2e09800, 0x100, 0x3, 0x40007, 0x3, 0xd, 0x100, 0x1, 0x4, 0x5, 0x2, 0xb78a, 0x5a, 0x150, 0x4, 0x1, 0x4, 0x9, 0x3, 0x7, 0x6, 0x7f, 0x8af4, 0x3, 0x2, 0x6, 0x4, 0x33a2, 0x200, 0xffff7b22, 0x4, 0xe0, 0x7, 0x3, 0xff, 0x800, 0x7f, 0xffffff81, 0x7f, 0x5, 0x80000, 0x7, 0x23e, 0x9, 0x67, 0x9, 0x10, 0xb, 0x2, 0x5, 0x5, 0x6, 0xb8e, 0x627, 0x6, 0x0, 0x9, 0x1, 0x10000004, 0x9], [0x3, 0x0, 0x1, 0x80000001, 0xffffffff, 0xff, 0x1, 0x3, 0x7, 0x9, 0xd502, 0x80000001, 0x4439, 0xffff, 0x7, 0x7, 0x5, 0x8, 0x4, 0x4, 0x1, 0x6, 0x0, 0x9, 0x1, 0x7, 0x7, 0x7, 0x0, 0xae, 0xa8d, 0x4605, 0xfffffffe, 0x7fff, 0x5, 0xffffffff, 0x3, 0x3, 0x7ff, 0x8, 0x10000, 0x4, 0xfffffe00, 0xfff, 0x106, 0x3, 0x8, 0xf0, 0x5, 0x6, 0x400, 0x7, 0x3, 0x8, 0x1000, 0x8, 0x31, 0x81, 0x8, 0x401, 0x3, 0x9a, 0x10, 0x7], [0x5, 0xfffffffe, 0x800006, 0x6, 0xb0fa, 0x4, 0x7ef, 0xc, 0x5, 0xb79a, 0x2, 0x5, 0x2, 0x34000, 0x0, 0x0, 0x6, 0x1, 0x0, 0x1, 0x1, 0x9, 0x101, 0x7, 0xfa, 0x5a17, 0x42d, 0x3, 0xe8, 0x3, 0x85e, 0x8, 0x2, 0x2, 0x7fffffff, 0x800, 0x1, 0xa, 0x0, 0xf, 0x6, 0x10000000, 0x40, 0x8, 0x6, 0x4ea, 0x6, 0x100, 0x1, 0x7f, 0xf7, 0xfc, 0x8, 0x0, 0x5, 0x6, 0x6, 0x5455, 0x2, 0x1001, 0x2, 0x400, 0xffffff7f, 0x4219], [0x5, 0x3, 0x8, 0x2, 0x5043, 0x9, 0x2c, 0x3d, 0x400, 0xe, 0x3, 0x0, 0x8, 0x44a4e339, 0x499, 0x4, 0x2, 0x40, 0x9, 0x9, 0x9, 0x3, 0xe, 0xfffffff8, 0x4, 0x3, 0x10, 0x9, 0x9e92, 0x0, 0x9, 0x1000, 0x2, 0xc845, 0x5, 0x6, 0x6, 0x3, 0x800, 0x1d, 0x6b66fc9f, 0x5, 0x0, 0xfffffff7, 0x0, 0x945, 0xb7, 0x4, 0xffff, 0x9, 0x4, 0x80000000, 0xf2be, 0x7, 0x3, 0x7fff, 0x81, 0x1, 0x6, 0x3, 0x8, 0x2, 0x2, 0xfe]}, 0x45c) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000002300)={&(0x7f0000000580)=[{0x3, 0x10, 0x0, 0x0}, {0xfbff, 0x210, 0x0, &(0x7f00000001c0)}], 0x2}) 13.908196719s ago: executing program 3 (id=1481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000100)="776cc98b5ea757a85a633793379b763a26d52aa7bd351820", 0x0, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="e19394f5d542"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaa85aaaaaabb88f5"], 0x72) 13.377502925s ago: executing program 3 (id=1483): socket$kcm(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r3, @ANYRES16=r4, @ANYBLOB="5b5e08007000ffdbdf250100dbc96024c70ac9cff854d1084713"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0xf) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000480)=0x8, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r6, 0xffffffffffffffff, 0x31, 0x0, @val=@netfilter={0x1, 0x1, 0x1}}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) 11.872087516s ago: executing program 4 (id=1487): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x800, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0xffffffffffffff52, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0xc004054}, 0x0) r8 = dup3(r3, r6, 0x0) sendmsg$nl_xfrm(r8, 0x0, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d40000000001010400000000000000000200"], 0xd4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x134}}, 0x0) 10.920166049s ago: executing program 4 (id=1489): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) 10.853267729s ago: executing program 5 (id=1490): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) pipe(0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x1, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b00000000000ad3c185b496dacbf850020002a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) arch_prctl$ARCH_GET_GS(0x1004, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_dev$video(&(0x7f0000000140), 0x5, 0x20040) r1 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 10.655634946s ago: executing program 1 (id=1491): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e21, 0x3, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r3, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r4, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r7, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0xd8, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffe7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x7ffe, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x3, 0xf, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 10.32002692s ago: executing program 5 (id=1492): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000000)={0x401, 0x8, 0xaf2, 0x0, 0x8, 0xf, 0xfd, "d48283cf5eb388b31bed056da363b62d4288e03d", "a2f5baaa44d85db1c9041280676a36114716c0c9"}) getrlimit(0xa, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x3, 0x3, 0x202, 0x4, 0xd}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000040)={0x5, 0x2, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000940)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@mask_fadd={0x58, 0x114, 0x8, {{0x1ff, 0x9}, &(0x7f0000019300)=0x7ff, 0x0, 0x2, 0x8000000000000001, 0xe1, 0xf, 0x0, 0xffffffffffffffff}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0xa7}, 0x0, 0x0, 0x2, 0x4, 0x7, 0x0, 0x4, 0x8001}}], 0xb0, 0x8004}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000400)=0x2a1a, 0x4) syz_open_dev$ptys(0xc, 0x3, 0x0) r5 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0xc0245720, &(0x7f0000000180)) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000019400)={r0, &(0x7f00000002c0)=':\x00', 0x622000, &(0x7f0000019340)={@_ha_fsid={[0x89d, 0x7]}, {0xb23b, 0x800, 0x0, 0x9}}, 0x670cd1c1, &(0x7f0000019380)={@_ha_fsid}, &(0x7f00000193c0)=0x3}) 10.234899403s ago: executing program 3 (id=1493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) cachestat(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000680)={'#! ', './file0', [{0x20, '#! '}], 0xa, "0a01e97940cf3aecc9c99a51d8190d57064219f393469b0c8148dfc7530ec2c4437da2f2c6f3f2400a837a4fb07e6457842cb9acbb98dbb34a1569b77913b0f3f32d740907c59c17d9ae1f282aa449f352717d5dd2d9621aa55898303ba0dc835a8006c417db560d22c08a78df5bf4573016a931611d7cbecbfd908569ffbe77f6ef13916e2d91df774613dffca28cad4ef7eda41c31815bf805073e2469474df9cbdb6c1d01c1cff34b38fbbdaa302851d9e8f410e324facf4e9290d02278294e29bd55c7f9931893e875f3d9e3dfc1660edf5c600467b9271273431eff1aa104fe51d334ed12c1fee905bf875237c7e0c292f9e6df51a446795fc2b7828da74baf02c076502577d01099db5f5f50719b479f398a3aea1a3b80eaad23b574b695b1a37102e5ca0ac96fe098e4818c5ad0834080efb30dfb162512fe359b86052adb6f5a12e7882863c55d366d05aae187446ff85761f061ab0f161cb43ad96fee7d2de9ee471b72d758a5b6f8ff6c40684f649fe08a10f2b9b47f247837d61f54ee17adaa6be90858432fe16504fcbb09c5bb5c60d6062fec83727a8a3d8a252509beb87794448cab09bb0577291afe46ce341823de4f8c81f985c2a597cd187e19ab7d840660f5500bc42a630dab5ec65b2e76753674f4c70caae52e601ab63ee6c9a66c6aecc1a9ecd288c5b94c132eb426"}, 0x202) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) fallocate(r7, 0x0, 0x2, 0xffffffff004) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 10.195228491s ago: executing program 1 (id=1494): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x800, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0xffffffffffffff52, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0xc004054}, 0x0) r7 = dup3(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r7, 0x0, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d40000000001010400000000000000000200"], 0xd4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x134}}, 0x0) 9.903022019s ago: executing program 4 (id=1495): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0x25dfdbf8, {0x0, 0x0, 0x0, r3, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}}, 0x0) sendto$packet(r1, &(0x7f0000000180)="05d936277c6f5422007f9f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c7168c7eb53b", 0x28, 0x408a1, &(0x7f0000000040)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close(0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001100)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x28, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) syz_emit_ethernet(0x101a, &(0x7f0000001640)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @local, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@llc_tr={0x11, {@snap={0x0, 0x1, "86", "f5563c", 0x8884, "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"}}}}}, &(0x7f0000002680)={0x0, 0x1, [0x38f, 0xb00, 0xb69, 0x1d]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r5, 0x7, 0x104, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x8, 0xfff1}, {}, {0x6, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000100)=0x8, 0x8) 9.122749318s ago: executing program 5 (id=1496): r0 = socket(0x400000000010, 0x3, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) gettid() openat$comedi(0xffffffffffffff9c, 0x0, 0x46442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x500, &(0x7f0000000900)='trans=tcp,') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000080)="8301fa", 0x3) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000340)=0xfffffffffffff697, 0x6}], 0x1, 0x0, 0x0, 0x1) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="54000000100019002cbd7000fadb00000000000000056c5cf7b3b383326dc4cba2d3850271dde18eb3c688cb38b4a82adb8418b242f008f5135280e19932b2d624165641bd0298002d02e56a12994c753b069e68c5a8a5097c1fb76f95b0574a2e99d87e079271ac7331f313a9", @ANYRESOCT=r0, @ANYBLOB="a70d040069920700200012800e0001006970366772657461700000000c00028006000e00030000001400030069703667726574617030000000000000"], 0x54}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8040) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e20, 0x3, 'wrr\x00', 0x9, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x8, 0x5f}, {@rand_addr=0x64010102, 0x4e20, 0x2, 0x4d, 0x12d5f, 0x2}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB='p\x00\x00t\x00\x00\x00\x00\x008', @ANYRES32=r3, @ANYBLOB='\x00'/16], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x22000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) 8.947469963s ago: executing program 1 (id=1497): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x25, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240), 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtaction={0x61c, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x608, 0x1, [@m_bpf={0x120, 0x12, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x2, 0x45, 0x5, 0x9}, {0x4, 0xf, 0x4, 0xffffffff}, {0x5, 0xf, 0x6, 0x2d}]}]}, {0xdb, 0x6, "a89b7f89e099e2789c51e56b5678439e94ca82bf1fe07d379c3a021d3396eba45fc534778629e0536d80597d925246770aba713c0180a3099f82991978f766819a0cbf93721ebc57e601d2a95025b77a4764f237cba83cb1c0d32fdad2c1c4dbc4d8cfe01ef40267fed2a05efd737e8ad6b15fff3eb7c799c125349c1cc77e6cd3ee52930c261483791ff13f01b11d0bd36a06855d449334fae730a68245940c2ed988dba5330f6d086a89f692d8b1600140b6a0552a15b19a107e7088079b9987a47f61be279d0b98a69898977ebb20fdfc8bdbeeb15a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x168, 0x10, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00'}]}, {0x112, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x164, 0xc, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x621f}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0xe7, 0x8, 0x0, 0xa89e}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0xb2, 0x6, "aa3b006c442a3a3052b2d1ee604e97d1a65e9ae6fe39c34559da0ad2f52dcb6966efe6be7e318f9d012af2c65f0d63ccd119d7b612ffde554cb71a40f371ea9d2cc58239290520d5eba9f9e427ce94d94d8f02477ec967f45f1d90eed7514e578829b9311d1cb612226fb8cae26915726dc4e5dae31f2ffbcf1c87fbb80b4f29495f596817ee89e3027d359b815580543ebd1975dac9e2fd904d5f6e999fc74cae77e7b391cc9614e1e848f0a438"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x134, 0x3, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x2, 0x4, 0x40, 0x1}, {0x80, 0x9, 0x80, 0x2}]}]}, {0xcc, 0x6, "3bae61fad09961b574c38ebcc680ce5e130444b7a13890b8794b20dcbbb05dc750159835a86496a5fefda8e461c0dfb75a795a8feea14fdf79307e873954b926cf75d846c5a9d6cad680ba14e4446fca91f991485a97eae7844484af71e36ff628a2e65110dbd98b388ac6af99b73171b1d9f482f5e698393f2a59daa2028f31cf67473084eb368c60e0de4c0883fa4a41c07f963314868644892c44f2f7977ff1921a55af9e4821e8517ebfec78863ee841bf9b74b2800e7614d34a1ced6e64d0f23ba784f9783f"}, {0xc}, {0xc, 0x8, {0x6, 0x1}}}}, @m_tunnel_key={0x54, 0x1f, 0x0, 0x0, {{0xf}, {0xfe92}, {0x24, 0x6, "5c6d7f12b70525da3676018d28b91f6d2b3acecb751a79c9d3a219f796c5f6c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x90, 0x8, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xf0a3, 0x0, 0x8, 0xa2, 0x80000001}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80, 0xfff, 0x5, 0x1, 0xfffffffa}, 0x1}}]}, {0x1d, 0x6, "d1c2f0aa718748a65ee641ce09b3f36410eb4b15410772af2e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x61c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 6.774866562s ago: executing program 5 (id=1500): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x800, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0xffffffffffffff52, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0xc004054}, 0x0) r8 = dup3(r3, r6, 0x0) sendmsg$nl_xfrm(r8, 0x0, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d40000000001010400000000000000000200"], 0xd4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x134}}, 0x0) 6.554710096s ago: executing program 3 (id=1502): socket$tipc(0x1e, 0x5, 0x0) syz_clone(0x4b40100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081003000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x400}}, './file0\x00'}) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000300)={0x0, @bt={0xfffffffa, 0x3, 0x1, 0x2, 0x7, 0x97fa0000, 0x1, 0x1, 0x9, 0x0, 0x736, 0xfffff000, 0x0, 0x80, 0x0, 0xa, {0x1ff, 0xffffffee}, 0x5, 0x3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$dri(&(0x7f0000000000), 0xb, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000440)={0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x4, 0x6, 0xfffa}, 0x38, [0xb, 0xc95a, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x7, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x80000001, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0xd, 0x7f, 0x2, 0x3, 0xb, 0x3ff, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x30f0, 0x7, 0x7418, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x4, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c8, 0x2000af, 0x3, 0x8, 0x7ff, 0x123, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x42c2, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x10000018, 0xfffffffe, 0x80000003, 0x6, 0x4, 0x0, 0x9, 0xfffff000, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x45, 0xc, 0x30b1d68f, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = dup(r4) write$vga_arbiter(r5, 0x0, 0x0) 6.542813688s ago: executing program 4 (id=1503): socket$kcm(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r3, @ANYRES16=r4, @ANYBLOB="5b5e08007000ffdbdf250100dbc96024c70ac9cff854d1084713"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0xf) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000480)=0x8, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r6, 0xffffffffffffffff, 0x31, 0x0, @val=@netfilter={0x1, 0x1, 0x1}}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) 5.6393881s ago: executing program 5 (id=1504): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e21, 0x3, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r3, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r4, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r7, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0xd8, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffe7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x7ffe, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x3, 0xf, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 4.288158374s ago: executing program 3 (id=1505): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) stat(&(0x7f0000001740)='./file1/file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102384, 0x18ff0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000005a40), 0x40, 0x101002) sendmsg$netlink(r4, &(0x7f0000005b40)={&(0x7f0000000280)=@proc={0x10, 0x0, 0x6, 0x8000}, 0xc, &(0x7f0000005780)=[{&(0x7f0000000900)={0x1ac, 0x17, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x14, 0x137, 0x0, 0x1, [@nested={0x4, 0x14d}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0x3}]}, @typed={0xa5, 0x16b, 0x0, 0x0, @binary="50f54b21297d579eccdbe72b865c34381a3179833982d1311cd5f18a555fb50b5118e5ff8fbab2eeb4c952d6ed73c9f1e3d7b9d92a6e73d957f98a85a866466bca1058e7505b2115da6ef42266119d02124ec4b631521a327ff5926dbe9537aadefbd7d7a2ba2160baaa2228d2afbc592683160d80c17143deec6d58ba0627ca9b4d072f0031cb1afb6f6b8dd610b8267b51df19fa8c48516b8ba37226a77f25ad"}, @typed={0xc, 0xb2, 0x0, 0x0, @u64}, @typed={0x4, 0xd1}, @typed={0xd0, 0x15, 0x0, 0x0, @binary="d71c030fc5c47c772c054d69c300ca2d0569a8ff5ac0c44b0727f7303774e3447bf998344c8311a6146aa738d8d6057b37cfcd2ab8200694615fc383137516b9c840e90f92ec6d6e2eae296d9fd47ab08b8597455efa3157be36b6353c0b43cad4cacf1f86c76b7a328e14ead6cd2d65edc7d719d7310af1effb454dbc376d47a2fe87d2755a32b6e8e287aba1881e9cb6c6207fdeb7a88760b36b06302f7ed30c082703468c971649678b53fa11c9acffd514befb394e6fa155fc1bf9f7acb3713533d493a44f54d7937ea3"}]}, 0x1ac}, {&(0x7f00000018c0)={0x155c, 0x30, 0x2, 0x70bd27, 0x25dfdbfb, "", [@nested={0x114, 0x96, 0x0, 0x1, [@nested={0x4, 0x141}, @generic="4ef9176504022d855bf5a83d7a4d59bf70dcc7ac4b874d7d873e4898cfa9825b3f62df05d7d930a734f475e79533f7a71fa5ddacc3899de1bba4aa642be4ae3a28a9cd41f2cd476e5a0f9c61a2e410a2fdae768053225bf6f2eb18d1a37b177f185a2e785b64c491a5", @typed={0x8, 0xd0, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="bdcabc02bce84efbba47a4cdbb42c49386e8f2f3d2f39fd88955b5bd6fd627e452d5d1f79902183a7ab97c885c91868f34de5d210c03d5474a04fe31de29e885939de2adce9725a8c148f94f87a1a15df31f3c458cbce400716ab20172c5832c95ba734b1fa2d8cc7eb777470634890878d2194bc8c4e3bf18c98831b31d9b9637", @nested={0x4, 0x8f}, @generic="c7640414059c01476536ce4780ca6135148b", @nested={0x4, 0x35}]}, @typed={0x8, 0xbb, 0x0, 0x0, @uid}, @typed={0x8, 0x119, 0x0, 0x0, @pid}, @typed={0x1004, 0xc6, 0x0, 0x0, @binary="0d733afccb4f60435caf199cd081812818b4ef3da76beb89d531e7ec2e89ef0d1391ef7ad5791082d53f430149b98c97e6bbdcefe35d1a0b27e030597e5bc6d10286be600e07387e225d4351d86fd86c1655943370f8b170b2c568d45064fead7da8d46e4f79d919e807ab574e725b75fc8400a21797bc8e470bbe0ee800f1a60ebbe7ee9be954f15da2fbe320e35bdaf22ad74b602d31227e7735b35c1581f91d91545cf9087f54db2cc5e647960d9c482c1c95a415fc404ede89bf7bd63a47da30a597b90e61c523e77c2dcbec03db276934462bcf2113b1de55fbe7b27998f740f3bf0a901942e5de29f98c4409ceba29680ec19b89995fc0f53b7ba0c49ffb1c8927a8330ff0076a58e2372d2c096dbabfc14a48d69f8cf47ec21f2cc0e3081e8bc86d4ea0e0ffbdc71ae4d6a895eac0547917b735b42c3a6b28af83e1366427aeaa3651b82aa78883156a2058754883d9e1bb04f92397f400bf685788329a8fb0f8f8019eabe3bbaf76cac643421ae5d73a152a164186e3d62d15182e5e31e5d3fc5d5e3c8a498ad05195d1f3e479025abf78f09e126033cadf36f5b45374f54212c51aaaba7f0ffdc5e73b72a20620669ba7fe06b13205144a7ae578bb6be051c456ec0f4cc7ef80e7b29a137fd49614a60923c06338e96ba9c2865f4efac94201c4e3476919e6675e74baccc460bb23b2d7d3184bf50279c03114ce3ab0015fdcb505ce6e2b72885a3f90a661a04381c0f5efb3da523d7ee3e8b769eec44f619791ea32ea8247b4f5ecc735c0d1d1c04e5a1f3fb6237d1ba776e6571d4bc4809d098c5ce84c8a6ca19d556897ba89a25c5e31b0e5083d66f1d197c566e88280a4301b4755d2b090d040e980a1e68acd5864e38a73ddcaa8de00bad357d40960adb326acec81cae51fe6a1af15190ed5b6597769636b7ae34eac5ba3f56a376268c6b06fc16fa385a24e0e61cba80829b20b778a5d7fe8e44e29e6e9f04ada8fb6148017eeb9de5d63bcd55a75406b83685c137b565886fe69e7a341223bbb85b08f5e151e0633cd8b8c1e605279d214a32ff605c5e14f9ac473f5b3e956b5181dbb5728f477bbe9c1563fb11766cd9603f1b1461c4db431033179d7809145da3bce57b5d7c1ce6a4acfeb929058f9958d67b3fde3c8d8439ba765602c01c590cbde746124944d76a8ec80b41147b4d342389225bba941c6e84262f464b344b04a906e21b84f60209e1ffda13220a844cbed07bbd44a5173b0fc01cd88bf72523aa605c48a31a4e48db4a84fbe1728837864e9dad926ecf395a3c7d8143cc7b90c0811a110ecee8f4d6e05d1eb7944191d6dc0d406b57062eefad741fc5a590121b4a9236d192f5fae146d2903d62214a5e02bc29ed28f0b727beb338c5b1467e0c7989dc4e028d8933bda88ba24967afda02d707551d01303804071d547bce4dabdd9b085d4df1482ffe698ba0abd50c01bc2085bfa8c0564a6cffa1cf8b891edf000fd0e0cce9be49e44f9ac16a6ece45f8fbaeec02c772dd02f3a8d599bfb5a70ae1c16c92f36b8557429c0e82477689ef7bf57270e0da8bcbabb6513a69088480701502d319c0578e8c395a73504a53a444873f5cd43085688ec6582823fd5b520f13d1cfe475f7732c29f5a80c1ad59e5bce7074c4c5b730cc69b8398c58d04c0d22764938e90ea0b5f939ddf24183db9f6a94e53e060e5346bb96dfae94939b515a6b74640a3d87b78288727b166043f1d0037c10d5f68e8c4fd0d36cfc8cb8d174369b8aff2142b014d9b30cbc05831fc093fc47685efded0f3f286ff41ad0feee019d6736112e20b19de706fef514836306db92e3e68e8d6e2959a73654132b0c23957efc23901453b887b21ee006b5756950a378287df6735679c567b4274adc0228db8044b3181b3606d3e2a507673fe6663f3aaad095d8076014132bfc7eb371311cf63e76ed22232aaa9823a8f244e045f35cd7f506854da8271d3fcf01b0942601712f4e818455f170fa789b203b9155f9aefc4d75ec364ea4b9f22bb0a51347ef438dc281d0d4f56dafe202a7c7b682a7bd0f3df7013d74e29b4865f71450a6ef1ff5e86678c61b1c5d651f5895ff82af63da5a503389ad962576cc9c94ea51c4ec208b8a7db2691af33b2a6663e2f5c4d52b9ec3f3d15543dd3d2fa41e8f8cf11e58bc0ca49370ba46c018116a4507cc46d3953df6673e092239975b54f60cc6743ab92ecac04a93f539003d1835145ca6bae6d8ea04fef5ce8869e30387e6d9e735d109a8bcbe299f7a8b2e9ff9135903844bd06c9704448fc0301fb48dd7ae5f39146c4683dc6c15df4c822e6c318757633e28acadac4979a83389d301da043d31279fc7ffbc666d062b7dfdb36ba8de8422e7672e05a718055a6c9cde94c17f063ee9847e8dc52ea97e213315f4226b1f3978d31b3e0df2306217aa9ad042ff3b9b6741748dbf363f8ced267134d7647874aece90ea1877af64232a55e3f896d7067455db85b87bc3d28b0d09af278c2cece532a74ec1eb4f484cdcad1beed385e187fdd1d3a6c7a8cc8a4903bd830f719f77a38432055de211628cdeb911f9de9b17b668e24469663b675ed116d2cd02b6f90f9e3d4720be0a8463a3b0037df96afbb29d11ab0b41982a76ffcf4f38e512d038d12ca234706979302d60497a21b50d7e53adf349a443a3269010bb94edc68285903b02b0290a58a5c3eb3daaf78781d1245fbb29705da8e333b5423cbb379ae631b5142a84410770169eebed919c3e2d6e01f85c2f6c9a42f31ddf6c5fac16e0e482a0f12b1821926432fa50e1fc5b9c0db5d621ab22a707f09e2d2af43210b4f9ab9aef05414d815c72b606b30a08f4c001e48112dfafc4805f82e4e45ce2ba94803fbaa784879e54e8e2b54eaecdba3814feb3ede70ff36f44d8fe017ce2b572b46eff3d9fd0eaefe2dd78e7e8083dbe909f7a6d3ab7621f7e1cfc442ecea1540f07cb3602c041b0a60303488d24bb68a920824b147e776968853f1ccd6edd07e0eed82ae5b6b9f3e0ed97e4e1b773a99b73624c91c3ce47f9b72d0f6fab74ac5cc03cd0ffa8a9236694e64e1c8142d034303bc056129dba2081e881d07196d02a1e4393536130da1d9c780db4d047a45b548eb5b2e0f0937fa270397208d531b281b88c3f21181aa17d0880bbe29abd5098703dad369dd3fb8a6d9f1aa8f948473f7e653505b8d204cb5e4283fa10616008a11a733f00fcf5513a299a71270a7729f9db7f6c8e5941de9923dde1614869bee928c8c79d927753f1eec781d8f836072f260591aac3b244048968ce674321faae8c1ac6521fb75755fd96b69927d7184eee90650d560814f3f2c874aa271c8adbadc11fd9f0d8323fe02dcfdc0a3a946fca87e11b93484c1b10a4bb40a0aeb897a4b52eba7786e05f375c853bb5bef95583bf1e927759e385b827161456f0c63668385e89c00623a7ad471c2f801754ee4644b9c65dcdae7b538d831ea87b256fdbcdda60f01946719aedfdb174469fc4f82ef31e60dce9d43536e05c8324fc260c3f55b138d6365acf034172c5c010b17a9652fa7901a671e510fbdd590370afdc0e18396e24317685dd7a3bc5758a9ce211f3459fd8d2f2d667c7df28f2c3495675c26f9c28be3e353abec5e3e95ad9f15a5b3bd09cd845fe4a639f9ede67b251cd0d9238e0dd4846aa1db802ee110fefc99c12c4c5ce0a5ff68b76ab1c583b1e8e54e56ce8fd0940e573193a66d72250255f64c2e39d70eebde7f7e0f8fe7256da8b50606c364d88035a3e050f9de63785901e9d54ffd8473f9a43dc452966903b213e10845637a486c87a235ecbfc39388a0f2fc3096c34d20284d8a099aff2b4bc133ed2fcbb48b25a9aff975350559287de51edb13b635251975ce7b8dc56bbfd3b081809f933d0ab9ca94361cd15a4e87927cdbc8477505621a6f60bd1079d340d1b0afa284266a7cbf7774714034d4ef2470aac3f3b66251e872a04305fc31286c542590c64ef3cf981aabb5f78878ddd0109313efa27c57c268c59988727e82f275afa67509743abd6ce4ccce75775ef97044f1fdc30ba7f281b8f2b832eca8908160fe7a4c12d95edc50633aa8b0cae373b7220d73246cb82e9500feb17c2f1ec16e57c386096e03df8281487e8855f02a460cfa6566aad5fffbe1a00fdd7afc5f4aafd6efdd8b22af48417f6f5487746358848f02930ff86ae3a69bd59127ae75202f999f4ae1cbf6d106437e3c05f6b7afe1d5ff3f2fb49b83ef805844cff55323ce887f89e1756463d3c9b755e6494eb9db22049f5028d7f89ca05642ea87f4b7559db838fd6490bd44225c15381dac9764db5d57550472ce722d1ddae3f0b9d8c471d2927996516eefc6f42d18363bf168e43454bc02e8dd0b78ede48b6b3476400423baa9b4c373dd43eda226130cdccef884c64acaf577e28db0f80e413c87ac4fd466c8ff4b2a8714d76646a61eb08e65f6ca04698a11e6ca96cfaa8d6e579b75b96083aa4ddc3415a4643938ec46cd3c6abf025bea5aa79d1957ace4fdffcb769c41e6d9b60ff9de39d109c7593fefaf3fa6473ce732fa2964beaa550333ed92e73426b666dc08a9f1ccdd55e74d2e1a771fc9f05adef774eb33430bba1b87610ba31f7fae79e667d9592ea44551a8428224c7a5c8faccd67bca37ef8eb234248e8b41851596bc3028f735e7b88b7aa3bee085886e2bbd706e1e48264c774cf00006064f79a7d3cb559bbf01cccc8ef997ec074711df345b86c7de99b6da84a6eeed1f513804af66c774760846fdbdb60986d51914818456162e74d6c2af61f4620186c13f67b716619f1d7eebff7a63b2264f3a9f8e2f844600d39accae77dd59c6631f1440086e4374a0ba2182463df21122eb70e664a7942657aee893bbd7b0a47d6f40b6281c1577501c28effc8e8243336892a9c82ccbe2628b2857b93cc11805248d4b6da3da2fa11e0d254060b753ec554b66dbb92520ea9fc33f11b523e622a873db2675fc40236e52c615edc8b5781f7b9019f64454568deef427971f0d4677ee09793c2b033e9a48134137b79e84ab69bc3191c14fa6aa07e7241aed9fac7c5a746e3bad7315ffd52e4c4c2f2fbaa2d268282c0f259013259b550d8378616cabe5a9ebb06d102c5392fc88453e16f649d5a406a8b1fc6abf9c9b76ee06ea65d658a4e16b4e4b206e268abe4bb805f98fb194d5f14590d756b0714df52bbca1a98e5523b25e360e8b3592ab3115c94bfd20b8f652cfdfd53162866af79bc5e65e4d2a5249ba39638bb68b409efa6f73e62344d81523b88da4d53fd1f54b437e9219bd9f921189803cb7bdb007c6818f357316047284bd1075a89bf9c03afe3a327f7b7f1e5f59d7e5917c7b7526410d021a793fcda925216d1d3db12eaf8f2f2f756e53c74e1cafcddea3663d664a2da9e933defbd55942cd35a5296cde55ea887165235d9fa58ef736029c39b690075b51e95a6ff07ecf1a5d8f58ef4faf681bb8d002853ecad664cdded7314a1d296678bc25b6e85d9fde88b68b1387c42b8c0605ccfddd99b4f6393f5a57738f589194c812ffb3749898ba168ac552077fa1637cea71b0475da3e5a90839fd73ce80dde9dbeb90f7ede810db81995066014fac867f6ac8d726d2ee1890f0ccb4d968e3a44080be90fb13edabee4124bcaeda9e39a67833a2a48c1f39f1f74585e20dc29e039f66ac562eb39416776ae596cf3de15979133fdf93bce58d0ae3256e21962710a6750e416aa1682d1ff39581"}, @nested={0x127, 0x3d, 0x0, 0x1, [@typed={0x69, 0x154, 0x0, 0x0, @binary="7f428ad779178c0d0e9df466680e965c7d5933a050642b8b44483e69cd09eb26825c5f03e381c6e69b925ed196304a580e676f2af935ae1457dcccb9cb8b64fde578c10c32e0b5e728f582a5b220c06e2997332de7be97c71ca388a09c1a542df903f0e9cd"}, @generic="49c6e40646ba80f4d9e7c98f8c1002c36df8f9f32d809a691eb329c89a48fcbc4b7fe59821c0b047b0d7f4b22f31673397c36e650697da328b320cc40f8eccdfff229dacf6a6471d4c5f6f742bec080af854fe6c2e1db3e62f7163e55062d674388bc15fc52b40b5e3b78834332859e870411a26dd28d0c984bc4be971cadfd99af8f6e106288f667ca408044cb270ab6a23513aa10b38e1a93b9697344bc0aa16fcc438222b01d2bf4a8f1bff92cbad690e03", @nested={0x4, 0x52}]}, @nested={0xae, 0x82, 0x0, 0x1, [@nested={0x4, 0x15b}, @nested={0x4, 0xda}, @generic="6430a66bf565bfb0bd813750db584a2c4c7e81bc9f4de1f566c23180d69fb78de48a0b4b3ab65a3e6605e4cda6563df59669e81092b7cb15cbdad8283ad7d125779ec4cf976f4e7f82a59b9bd43570aca985dcd3b6dcc1b00dca1c29d103c8bc7a2632c31ffb1fc4c3036477b939287149adc6beafdc5ae5db3365aedefe06a52b9081660c5b3ed1e05ac35d486643f8169242048f3e089efc007fbb5f59aa16a9dd"]}, @nested={0x20b, 0x13e, 0x0, 0x1, [@typed={0xb3, 0xf1, 0x0, 0x0, @binary="7c7f5414388a5c4232e6911bee6bd99a379af816d8c990dbaf8c1198a2fd2ce99513d2aa4026f3911339bceab4fd47db89bff9df8bc56377a454e2462d8d55eb79b2550ec6359a94d8da1ebe6f9640a1bf9f3db99321b3d472e5ef081f838273cd4db1e8a05e71b5c885801fd120cad8253ea52bff89c2c539ea438eeecd019cf5d1c4d67bfef1ae4b5c0693e24540cc23f19794a3b49fd4b79d39aaf7b04c577774054b4ebc94a39a44dcb3c3924e"}, @generic="432530c2c06a10ffc3ef71a5d9774c2b5cbf7fe2f13e86ae883e696ae79fa15ea8d12b864094af3590d5f587cd9da54342e18803a95d4219f8426d3a062f974329c55f41f0dc69dc3e2c701a360e5afe8a349a8a6b49309db08f0a9b858a4d6936f78a60e5cdc08d525129fc0d0e31a29a285506f041f44f2b325f12eefb43eb5b4cd1bae30340a6ffe6b8a6699893d781a76a9f33ba5feb3691a19ee95ec031176f3c9f11bbc8f9052d74ed7f4953b55859d6ff73b8af52", @generic="0699fb1bf6a466c74c4418e6409d0414c3c35fc926490e2312fe53a5ac4a8e962cb68690c44fe069b5e8f3a53349ceb630977d312c13a64239e743a5a05d6ffc14f9ab5626a607c0f019c698521074440a9f85154257fab2144ccbb54ab61d2ed7abbd44f38199b4164cda4e186654533445c0c7dc3579f6a325046446a4df54782d", @typed={0x8, 0x161, 0x0, 0x0, @fd=r3}, @generic="22586946f1", @typed={0x8, 0xce, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x4, 0x6b}]}, @typed={0x8, 0x14e, 0x0, 0x0, @uid}, @generic="a8078a50e80245851b7b65ca958371fc7ac9e50d21f3fe974b8d5aa222302caa34d3a0650ee696221c46330963110b5bad7e993495"]}, 0x155c}, {&(0x7f0000002e40)={0xc8, 0x1a, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic="e4b944d4a7633b73eb8d566d501152e0e7182828ef622823d03d49c5e14cb4975bcf46703998b81de99982afcb859f041d349d58dbb9824c5213009c813843e42fe4111cdfbc9359337745cbd9647b7c0a3194ddd0fc1592fb57c87e78b7f5", @generic="d20d3c49c3469a97461070db9c8e77b34144772363784903c9ab6ac5e2d3b7959721bee0901ee2755d847048e0fe93c4dd4ba09cc4a1de18f0a7fc14ae5b91e1cac9da4b3fc6fb6fd78aaab1e068", @typed={0x4, 0x32}, @typed={0x4, 0xd5}]}, 0xc8}, {&(0x7f0000002f40)={0x11dc, 0x14, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@generic="978dbbef5d0549d5ccc94020f76d4f7b6b36f460e632542fb7c3a4d5f1a742f564359b83ca009ca16969e8d90da0c0", @typed={0x8, 0xff, 0x0, 0x0, @fd=r2}, @generic="145e577935bc32ac5de279f2cfad282f32f0fd880411e27fc9862c4688244ee5cd05c113066110630ec2fc057722be4318d7827159858f0f5074d49e5dfdce0d6898a68f5a388aa437cb25b23397418b000df9c2d981a621ae87f05e477b88cee1716fd746e47217bb1d4c4c7e5af437e9e2b0e641a4f657465ae0758d61e9c36a4ffbd341f9b87674fae313f8d1e97eae77f68942d0c5acc2207d727bc2f5f92867e79488b87f", @typed={0x28, 0x15a, 0x0, 0x0, @binary="bda28ea906f3448991419a6608d22cec89e9bcb03abe9048bf749cf03686ea3af2dd571a"}, @typed={0x8, 0x1e, 0x0, 0x0, @fd=r3}, @nested={0x8, 0x3d, 0x0, 0x1, [@nested={0x4, 0x6d}]}, @generic="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", @generic="5c7a82e283733af0303efa8261d1b1b832dfc6df5a048b4a6cd34d127a6286a49646977b9317bef2a0b5e32eb8ab6f5191eb62be8444ff4ad9cec9a207", @generic="148d3cf1f734bb5655d4bb7169967bd32a34fcb2381779e99c1b21a5cee7c14403119f5efff561ddbfd7fb3523233b92f9401883901ca9b48617a6d1ff7b295da9b1cc5fbe1020d73130d47393afba3f18efdb159efe7a43a70b4352cca969d627bf", @nested={0x14, 0xe6, 0x0, 0x1, [@typed={0x8, 0x11b, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x4, 0xa3}, @typed={0x4, 0xbf}]}]}, 0x11dc}, {&(0x7f0000004140)={0x13c0, 0x33, 0x200, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x5e, 0xf4, 0x0, 0x1, [@generic="1985d69b1c44de0f1fe211b0a7ed8b17f5887b30dea8aae2bd60bc1293524434ab03bb09a8fa5946aa2ea06bb50b044f333b1f2933c6b3cfe94d9865c70d06ec125a1e782178ce46ef28cfcb78ce1489ce9f", @typed={0x8, 0x7f, 0x0, 0x0, @ipv4=@remote}]}, @nested={0x47, 0x38, 0x0, 0x1, [@generic="26fce51e515f1d052621d8dc30e250e5e64521246de8683967602f8fd6c7dfb08ed02f0f8d7f8515d4f1fce3186d3f6ffce9b684f9120ed51f3bce2482f233bd996c3c"]}, @generic="d430cbfb5bcb1d023fa890600a1ddecf91e5103c8209646f42ca925bd0aa145968cf1e1ce59e647bfdcc74e62280e338cbe3048f4b07f4b71104746592d05846e3b6154f68d03635f015cda2b7544a93eccf869054e0f24a48af311e32d4351de8abd495f42b8fba9ed54ac6c7da66a02603bff7e8c4f9bbbc24684b4904bcd082aaaffb6cc5ee7d5e4e76719409fd82829ad7744c5b53ab15", @nested={0x34, 0xfa, 0x0, 0x1, [@nested={0x4, 0x154}, @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0xad, 0x0, 0x0, @uid}, @typed={0xc, 0x63, 0x0, 0x0, @u64=0x1ff}, @typed={0x4, 0x147}]}, @generic="a25b3b9a291f5670fc39813ba08c5179f68135f4e57143e609ceb15e9edbd3934052c5b802508fcffbe8f18ba51b0f2fec9eafd6ed382aa7bc2c49449348009c42d3468f4e6c9a25b93761696829de20e3f0e008b333ede050e0898aeeee8512abda3e5e1e8c31252da550e91552135753a8da48f9c95a6f8d23b5f06206f7ea1ca06b6008aa1576ed018940291a0f69cf75859d11c5a22e0d8432648eecf5ae853f418c0910dc239521a6f1d1b76fc90431449d9af32079f623bfc05c4158e32adf1bda7e9504", @nested={0x1113, 0x57, 0x0, 0x1, [@generic="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", @typed={0x8, 0x3b, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x8, 0x107, 0x0, 0x0, @uid}, @generic="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"]}, @generic="3159f10c0ef3d546e0f23e88c035a2abc0ae86e05c3b3d01f238e8e2eb8ce0212944473d07e28fed47f3a164fbfd4a3246be33b193465fe04ee4af5f5b87ca2357", @typed={0x8, 0xbb, 0x0, 0x0, @pid}, @generic, @nested={0x14, 0xef, 0x0, 0x1, [@nested={0x4, 0x11c}, @typed={0xc, 0x116, 0x0, 0x0, @u64=0xfffffffffffffffe}]}]}, 0x13c0}, {&(0x7f0000005500)={0x120, 0x1d, 0x100, 0x70bd28, 0x25dfdbfb, "", [@generic="a54dd214fccc1278600ea48b51ad5724a0c919ecac945093547c27302c48dd85a2a4db3089844cf0c2f725fb77e40fb5a952348f551805b52d7f889d657c46ffc64831375cd8111d74e8c7233e488313dbea7d82491f222ec6f7ecb72aa682d50a6f0d0d1908056114e08c0d3ab59e3441d032e2dd6fae538cee5a0bf8cb1648d85e60e1c5b12141137c13fa76ce9e05", @generic="028ba191e535af969361550f36dd1e65f1df8e3a6a6d9bc37437eda65481a839988f9be1c8f9aff93468445b860b3ddca09ba30490d22853c6014ebbae66f63c958003f75951e4c15dbd19e57969ba80ad2e5e0fb9bff498572c6bf13260ad790168252df7125acebf79b65bfcfbe9d4deb565f10297baaaa46829fb1967"]}, 0x120}, {&(0x7f0000005640)={0x140, 0x21, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@generic="cf001c8bb91894b6510c4077d94645ad3741817ee38c1424517a8df59cf7d7605cf0cc9e48960f77340f4a1c6f85fff3be8ea163a275cbc918744e03fdf89f9874517624816707014d09a8514e4004", @typed={0x8, 0xcd, 0x0, 0x0, @u32=0x2868}, @generic="b81756b906b80bfb3a46da1055eb208d7d40dbe53ceb58a5e8b3d474480f25a99444bb34258639f9bfb6abd90547343f06053b86c1dd7e218294329ea01b0fbcfd298bf80eb5a06ffefade856fd805dccecebfdea25da4b29ad86180de93a45dea469e4a4368728c96ec0b3e0460a7a60ccf43900689e477bd73ee81dc638af4b20a1300a02b175a5b2ae34ff504d677213bd911d826fee03f61b36b9f67d2e10944412c5c278b144c4aba6a0d637d3950f12b59c57930e92f25f764d9beb7cdaa04cfe0958fab7f2d9c24", @typed={0xc, 0xe8, 0x0, 0x0, @u64=0xe}]}, 0x140}], 0x7, &(0x7f0000005a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r3, r3, r1]}}, @rights={{0x24, 0x1, 0x1, [r4, r2, r5, r4, r4]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x34, 0x1, 0x1, [r6, r3, r4, r1, r1, r0, r1, 0xffffffffffffffff, r2]}}], 0xb8, 0x8040}, 0x4001) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000200)=0x18) r7 = ioctl$TIOCGPTPEER(r4, 0x5441, 0xb3d) ioctl$TCFLSH(r7, 0x540b, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf25070000000c0017000201aaaaaaaaaaaa0a0004007770616e3300000008000100000000000c001700010055555555555508000300", @ANYRES32=r10], 0x64}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={0x168, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x150, 0x1, 0x0, 0x1, [@nested={0x24, 0x79, 0x0, 0x1, [@nested={0x20, 0xe8, 0x0, 0x1, [@nested={0x1c, 0x6d, 0x0, 0x1, [@nested={0x18, 0x73, 0x0, 0x1, [@typed={0x14, 0x148, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}]}]}, @nested={0x127, 0x1022, 0x0, 0x1, [@generic="711e3ceb831f34af9c9ee1f185d5139232ffae162ce6012b2479962cedd800c912ca18574d5ffecbb9dca937034cbce8ff31cd4d451232be", @typed={0x8, 0x9b, 0x0, 0x0, @fd=r3}, @generic="ba617f3c2f4b8d094a345b665799c4214a00b079cb0ddf807d67783a77dd51fe46b868a0b4e703650afe489d539dbb14986cca8009c5a934cb7359e868cc9f83f6480953afd38f07b137f25e3beebad601169b7648ff690f0479fd6eaad4619b00a955e54e9072dbe543038296470391db6eacfa0638aace4dc75cfc63676c80c5b6c1d7a9fb74fc0f2b62401c2d6f2c2135ac5474e60d44e70535cfc8ec0dbb7f173186c9b3ec55c54ab889b561192ad879eec321231dad35d0413f82cf08bf18d80c696edc334fc9c73967a0c20d9a191c77a174bc8f3aaad472d1289a830e4a243f"]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) 3.383788535s ago: executing program 0 (id=1506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x6e37b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) statx(0xffffffffffffff9c, 0x0, 0x0, 0x35ce9dbc6723c18f, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300), 0x0, 0x0}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) 3.362838669s ago: executing program 3 (id=1507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x6e37b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x0, 0x35ce9dbc6723c18f, &(0x7f0000000080)) mount(&(0x7f00000000c0)=@nullb, 0x0, &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) 3.204081582s ago: executing program 1 (id=1508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$kcm(0x11, 0x3, 0x0) eventfd(0xffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000001400000014000000080000000400000001000006"], 0x0, 0x34, 0x0, 0x1}, 0x28) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) 2.625828184s ago: executing program 4 (id=1509): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2.450942649s ago: executing program 0 (id=1510): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0xc84d5727a3a4cb9, 0x1, 0x10000, 0x401}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000840)={0x28, 0x6, r1, 0x0, &(0x7f0000008000/0x4000)=nil, 0x4000, 0x5fffffffffffffff}) ioperm(0x6, 0x9, 0x824) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f0000000200)={0x0, 0x17, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ptrace$ARCH_SHSTK_LOCK(0x1e, 0xffffffffffffffff, 0x3, 0x5003) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00') ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x5, r1, 0x0, &(0x7f000000b000/0x3000)=nil, 0x3000, 0xfffffffffffffffe}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000380)={0x28, 0x4, r1, r1, 0x1000, 0x0, 0x3ffe}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x380000b, 0x204031, 0xffffffffffffffff, 0x5e9b7000) r5 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r5, 0x6f2d, 0x7fffffffffffffff) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r5, 0x6f2d, 0xcb) 2.03166426s ago: executing program 0 (id=1511): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x81}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) inotify_add_watch(0xffffffffffffffff, 0x0, 0x11000800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000040)={0x0, 0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000780)=0xc) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x910004, &(0x7f00000004c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0xb00}}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, r6}}, {@euid_lt={'euid<', r6}}, {@hash}, {@fowner_eq={'fowner', 0x3d, r6}}]}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRES64], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup3(r0, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x106f) 1.780405201s ago: executing program 5 (id=1512): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201100100000040ac054e0200000000000109022400010000c00a6b0400fe010300030009218306010122280009058103080008c110acab9e96ca4c1c3e53ae8a3c2187adc233643f643bb3223e76fc512083706d0855ba4e38bed32a8b2c339492167e84c002d59ada5ce964bc589bb31bbea09377df7995f9d26a6d7ad225628d12de91ba4e7d"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x20, 0x7, 0x29, {0x29, 0x6, "c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c5544388c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) r3 = socket(0x2, 0x80805, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) sendto$inet6(r3, &(0x7f00000000c0)="6de31249bfa6b66996964f739df49c3dc5abdd0d41fc110977a92ba7bc5a08cdf5d0d8c06f7e92488a99ef32f57c96b9d84a40cbd33715dec66b9586ef5ca1c3100e9fdeec2131b149de06015f53d39198cfed559f4405735efee0c4cbe515067ab6d450fda08fd8d1f6e0556d60bb72304720fed63817be9b220f96f5ee99b5", 0x80, 0x28881, &(0x7f0000000180)={0xa, 0x4e23, 0x100000, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf3}, 0x1c) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"]) 1.450641733s ago: executing program 0 (id=1513): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) userfaultfd(0x80800) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3, 0x0, 0x0, 0x2) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0xfff, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0xe, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0xa, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x200, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x84b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x7fffffff, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x10, 0x7, 0x3, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x668, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x7, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x5, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x10, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x942, 0x1, 0x2, 0xfdffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x10000009, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80001ffe, 0x8, 0x8000, 0x10004, 0x10, 0x1a, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x3, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x6, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x5, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x0, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0x200, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x0, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x8, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x2000011, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x1ff, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x81, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x8, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0xb5, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0xb, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x7, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x6, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x2, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x9, 0x9e95, 0x9, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe01, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0x103, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x4, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffefffe, 0x924, 0x499, 0x8, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x3, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0xa4, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x7, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x1, 0x3, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x1, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) socket(0x10, 0x3, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0xff0f) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000001280)=""/194) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.448180794s ago: executing program 1 (id=1514): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x800, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0xffffffffffffff52, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0xc004054}, 0x0) r8 = dup3(r3, r6, 0x0) sendmsg$nl_xfrm(r8, 0x0, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d40000000001010400000000000000000200"], 0xd4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x134}}, 0x0) 1.250875744s ago: executing program 4 (id=1515): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x800, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000a40)={0x0, 0x0, 0xffffffffffffffff, 0x1}) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0xffffffffffffff52, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0xc004054}, 0x0) r7 = dup3(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r7, 0x0, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d40000000001010400000000000000000200"], 0xd4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x134}}, 0x0) 160.123074ms ago: executing program 0 (id=1516): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x5, 0x5, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0x2d, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x1000, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0xc, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x313, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x1, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0xe823, 0x3, 0x8, 0xa6d, 0x7, 0x6c0, 0x5, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d5, 0x9, 0x5, 0x7fff, 0x0, 0x4, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x6, 0xa, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x3, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2008, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) socket$inet6_tcp(0xa, 0x1, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) epoll_create1(0x80000) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0x5, 0x8}, {0x6, 0x5e, 0x5, 0x86d}}}}, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') fanotify_init(0x40, 0x101000) syz_open_dev$vim2m(&(0x7f0000000340), 0x10000000042007, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 58.406654ms ago: executing program 1 (id=1517): r0 = openat$comedi(0xffffff9c, &(0x7f0000000340)='/dev/comedi0\x00', 0x2c83, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_io_uring_setup(0x5b68, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0xfffffffe, 0xcf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x8, 0x1, r6, 0x0, &(0x7f0000000640)={0x0, 0xffffffffffffffac, 0x0, 0x0, 0x0, 0x19}}) r7 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000180)=0x80000000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xffffffffffffffe3, 0x0, 0x0, 0x9}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7de", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000080)) 0s ago: executing program 0 (id=1518): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x0, 0x8}) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r2}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x82, &(0x7f0000006680)) epoll_create1(0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545", 0x17}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0xffffffff, 0x3, 0x22}, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={0xffffffffffffffff, r8, 0x4, r6}, 0x10) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r9, 0x0, r9, 0x0, 0x276) kernel console output (not intermixed with test programs): 12kB (UME) 14*1024kB (ME) 13*2048kB (UME) 264*4096kB (UM) = 1180012kB [ 407.032733][ T9597] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 407.044153][ T9597] Node 1 Normal: 1*4kB (U) 1*8kB (M) 1*16kB (M) 7*32kB (UM) 10*64kB (UM) 7*128kB (UM) 6*256kB (UM) 3*512kB (M) 4*1024kB (UM) 4*2048kB (UM) 957*4096kB (M) = 3937020kB [ 407.060784][ T9597] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 407.070324][ T9597] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 407.080060][ T9597] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 407.089609][ T9597] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 407.098888][ T9597] 63376 total pagecache pages [ 407.103546][ T9597] 4 pages in swap cache [ 407.107765][ T9597] Free swap = 124996kB [ 407.111920][ T9597] Total swap = 124996kB [ 407.116046][ T9597] 2097051 pages RAM [ 407.119822][ T9597] 0 pages HighMem/MovableOnly [ 407.124488][ T9597] 432248 pages reserved [ 407.128625][ T9597] 0 pages cma reserved [ 407.556620][ T29] audit: type=1400 audit(1783374191.400:1656): avc: denied { connect } for pid=9605 comm="syz.3.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 408.349916][ T9616] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 408.767725][ T9624] hfsplus: unable to find HFS+ superblock [ 411.187673][ T29] audit: type=1400 audit(1783374195.030:1657): avc: denied { setopt } for pid=9644 comm="syz.1.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 411.376501][ T29] audit: type=1400 audit(1783374195.060:1658): avc: denied { getopt } for pid=9644 comm="syz.1.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 412.508927][ T29] audit: type=1400 audit(1783374196.340:1659): avc: denied { create } for pid=9662 comm="syz.0.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 412.606189][ T9660] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1035'. [ 412.631801][ T9667] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 412.640538][ T9667] overlayfs: missing 'lowerdir' [ 412.773728][ T9671] syzkaller1: entered promiscuous mode [ 412.789755][ T9671] syzkaller1: entered allmulticast mode [ 412.890550][ T5756] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 413.161069][ T5756] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 413.226639][ T5756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.238079][ T5756] usb 5-1: Product: syz [ 413.363840][ T5756] usb 5-1: Manufacturer: syz [ 413.373929][ T5756] usb 5-1: SerialNumber: syz [ 413.408727][ T5756] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 413.495450][ T9683] FAULT_INJECTION: forcing a failure. [ 413.495450][ T9683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.523438][ T5612] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 413.551226][ T9683] CPU: 1 UID: 0 PID: 9683 Comm: syz.5.1044 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.551263][ T9683] Tainted: [L]=SOFTLOCKUP [ 413.551271][ T9683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 413.551283][ T9683] Call Trace: [ 413.551290][ T9683] [ 413.551298][ T9683] dump_stack_lvl+0x100/0x190 [ 413.551330][ T9683] should_fail_ex.cold+0x5/0xa [ 413.551358][ T9683] _copy_to_user+0x32/0xd0 [ 413.551385][ T9683] simple_read_from_buffer+0xcb/0x170 [ 413.551422][ T9683] proc_fail_nth_read+0x1af/0x230 [ 413.551453][ T9683] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.551483][ T9683] ? rw_verify_area+0xce/0x6d0 [ 413.551511][ T9683] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.551540][ T9683] vfs_read+0x1e4/0xb40 [ 413.551571][ T9683] ? __pfx_vfs_read+0x10/0x10 [ 413.551600][ T9683] ? __fget_files+0x215/0x3d0 [ 413.551639][ T9683] ? __fget_files+0x21f/0x3d0 [ 413.551682][ T9683] ksys_read+0x12a/0x250 [ 413.551711][ T9683] ? __pfx_ksys_read+0x10/0x10 [ 413.551750][ T9683] do_syscall_64+0x115/0x870 [ 413.551780][ T9683] ? clear_bhb_loop+0x40/0x90 [ 413.551806][ T9683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.551829][ T9683] RIP: 0033:0x7f879ab5e68e [ 413.551847][ T9683] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 413.551867][ T9683] RSP: 002b:00007f879ba0ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.551887][ T9683] RAX: ffffffffffffffda RBX: 00007f879ba106c0 RCX: 00007f879ab5e68e [ 413.551901][ T9683] RDX: 000000000000000f RSI: 00007f879ba100a0 RDI: 0000000000000007 [ 413.551913][ T9683] RBP: 00007f879ba10090 R08: 0000000000000000 R09: 0000000000000000 [ 413.551925][ T9683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.551937][ T9683] R13: 00007f879ae26038 R14: 00007f879ae25fa0 R15: 00007ffcc6cffa28 [ 413.551966][ T9683] [ 413.842254][ T9676] net_ratelimit: 19 callbacks suppressed [ 413.842272][ T9676] netlink: zone id is out of range [ 413.853049][ T9676] netlink: zone id is out of range [ 413.858142][ T9676] netlink: zone id is out of range [ 413.863264][ T9676] netlink: zone id is out of range [ 413.868350][ T9676] netlink: zone id is out of range [ 413.873524][ T9676] netlink: zone id is out of range [ 413.878614][ T9676] netlink: zone id is out of range [ 413.883741][ T9676] netlink: zone id is out of range [ 413.888824][ T9676] netlink: zone id is out of range [ 413.894029][ T9676] netlink: zone id is out of range [ 413.963244][ T9666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.030976][ T9666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.198164][ T5756] usb 5-1: USB disconnect, device number 37 [ 414.936581][ T5612] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 415.251898][ T5612] ath9k_htc: Failed to initialize the device [ 415.408305][ T5756] usb 5-1: ath9k_htc: USB layer deinitialized [ 416.806191][ T9701] netlink: 'syz.1.1049': attribute type 1 has an invalid length. [ 416.815131][ T9701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1049'. [ 416.952682][ T29] audit: type=1400 audit(1783374200.807:1660): avc: denied { map } for pid=9702 comm="syz.0.1051" path="socket:[26323]" dev="sockfs" ino=26323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 417.112714][ T29] audit: type=1400 audit(1783374200.967:1661): avc: denied { map } for pid=9705 comm="syz.1.1052" path="socket:[26329]" dev="sockfs" ino=26329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 417.658759][ T29] audit: type=1400 audit(1783374200.967:1662): avc: denied { accept } for pid=9705 comm="syz.1.1052" path="socket:[26329]" dev="sockfs" ino=26329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 418.031016][ T5756] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 418.246072][ T5756] usb 5-1: Using ep0 maxpacket: 8 [ 418.312210][ T5756] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.387742][ T5756] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 418.479763][ T5756] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.673670][ T5756] usb 5-1: config 0 descriptor?? [ 418.722373][ T9721] dummy0: Caught tx_queue_len zero misconfig [ 418.978489][ T9729] comedi comedi1: 8255: I/O port conflict (0xc0000000,4) [ 419.127210][ T5612] usb 5-1: USB disconnect, device number 38 [ 419.556704][ T9738] netlink: 'syz.0.1062': attribute type 1 has an invalid length. [ 419.565261][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1062'. [ 419.610053][ T9737] loop9: detected capacity change from 0 to 1 [ 419.642667][ T9737] Dev loop9: unable to read RDB block 1 [ 419.648237][ T9737] loop9: unable to read partition table [ 419.654067][ T9737] loop9: partition table beyond EOD, truncated [ 419.660219][ T9737] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 420.969715][ T9745] : renamed from vlan0 (while UP) [ 421.156153][ T9750] 9p: Bad value for 'source' [ 421.313646][ T9752] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1065'. [ 423.142388][ T803] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 423.310506][ T803] usb 5-1: Using ep0 maxpacket: 32 [ 423.349755][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.361910][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.371922][ T803] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 423.382122][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.572033][ T803] usb 5-1: config 0 descriptor?? [ 423.588567][ T803] hub 5-1:0.0: USB hub found [ 423.714289][ T9785] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 423.721861][ T9785] UDF-fs: Scanning with blocksize 512 failed [ 423.728225][ T9785] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 423.735764][ T9785] UDF-fs: Scanning with blocksize 1024 failed [ 423.742092][ T9785] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 423.749577][ T9785] UDF-fs: Scanning with blocksize 2048 failed [ 423.755889][ T9785] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 423.764051][ T9785] UDF-fs: Scanning with blocksize 4096 failed [ 423.818342][ T29] audit: type=1326 audit(1783374207.664:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9787 comm="syz.0.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f835199de59 code=0x7ffc0000 [ 423.858485][ T803] hub 5-1:0.0: 1 port detected [ 423.888771][ T29] audit: type=1326 audit(1783374207.664:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9787 comm="syz.0.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f835199de59 code=0x7ffc0000 [ 423.927751][ T29] audit: type=1326 audit(1783374207.664:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9787 comm="syz.0.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f835199de59 code=0x7ffc0000 [ 423.993092][ T29] audit: type=1326 audit(1783374207.694:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9787 comm="syz.0.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f835199de59 code=0x7ffc0000 [ 424.201268][ T29] audit: type=1326 audit(1783374207.694:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9787 comm="syz.0.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f835199de59 code=0x7ffc0000 [ 424.456398][ T29] audit: type=1326 audit(1783374207.694:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9787 comm="syz.0.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f835199de59 code=0x7ffc0000 [ 424.546486][ T29] audit: type=1326 audit(1783374207.764:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9787 comm="syz.0.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f835199de59 code=0x7ffc0000 [ 424.574503][ T29] audit: type=1326 audit(1783374207.764:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9787 comm="syz.0.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f835199dbc2 code=0x7ffc0000 [ 424.608874][ T29] audit: type=1326 audit(1783374207.764:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9787 comm="syz.0.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f835199dc57 code=0x7ffc0000 [ 424.637766][ T29] audit: type=1326 audit(1783374207.764:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9787 comm="syz.0.1076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f835195ab51 code=0x7ffc0000 [ 425.432333][ T9824] syz.3.1086: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 425.447182][ T9824] CPU: 1 UID: 0 PID: 9824 Comm: syz.3.1086 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.447202][ T9824] Tainted: [L]=SOFTLOCKUP [ 425.447207][ T9824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 425.447215][ T9824] Call Trace: [ 425.447219][ T9824] [ 425.447224][ T9824] dump_stack_lvl+0x100/0x190 [ 425.447243][ T9824] warn_alloc.cold+0x94/0xa8 [ 425.447256][ T9824] ? __pfx_warn_alloc+0x10/0x10 [ 425.447278][ T9824] ? __lock_acquire+0x49f/0x1a40 [ 425.447298][ T9824] __vmalloc_node_range_noprof+0x136c/0x1630 [ 425.447318][ T9824] ? trace_contention_end+0x126/0x160 [ 425.447334][ T9824] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 425.447349][ T9824] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 425.447362][ T9824] ? find_held_lock+0x2b/0x80 [ 425.447380][ T9824] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 425.447395][ T9824] ? __pfx___mutex_lock+0x10/0x10 [ 425.447418][ T9824] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 425.447431][ T9824] __vmalloc_node_noprof+0xad/0xf0 [ 425.447446][ T9824] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 425.447461][ T9824] dvb_dvr_do_ioctl+0x15d/0x270 [ 425.447477][ T9824] dvb_usercopy+0x167/0x340 [ 425.447491][ T9824] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 425.447506][ T9824] ? __pfx_dvb_usercopy+0x10/0x10 [ 425.447526][ T9824] ? selinux_file_ioctl+0x13b/0x290 [ 425.447543][ T9824] ? selinux_file_ioctl+0xb6/0x290 [ 425.447560][ T9824] dvb_dvr_ioctl+0x29/0x40 [ 425.447572][ T9824] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 425.447585][ T9824] __x64_sys_ioctl+0x18e/0x210 [ 425.447603][ T9824] do_syscall_64+0x115/0x870 [ 425.447619][ T9824] ? clear_bhb_loop+0x40/0x90 [ 425.447633][ T9824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.447645][ T9824] RIP: 0033:0x7f7818b9de59 [ 425.447656][ T9824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.447667][ T9824] RSP: 002b:00007f78199b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.447679][ T9824] RAX: ffffffffffffffda RBX: 00007f7818e25fa0 RCX: 00007f7818b9de59 [ 425.447687][ T9824] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000004 [ 425.447694][ T9824] RBP: 00007f7818c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 425.447701][ T9824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.447708][ T9824] R13: 00007f7818e26038 R14: 00007f7818e25fa0 R15: 00007fffc3074398 [ 425.447725][ T9824] [ 425.447730][ T9824] Mem-Info: [ 425.690852][ T9824] active_anon:16584 inactive_anon:0 isolated_anon:0 [ 425.690852][ T9824] active_file:0 inactive_file:59196 isolated_file:0 [ 425.690852][ T9824] unevictable:768 dirty:112 writeback:0 [ 425.690852][ T9824] slab_reclaimable:11827 slab_unreclaimable:102017 [ 425.690852][ T9824] mapped:33729 shmem:4186 pagetables:1552 [ 425.690852][ T9824] sec_pagetables:0 bounce:0 [ 425.690852][ T9824] kernel_misc_reclaimable:0 [ 425.690852][ T9824] free:1283112 free_pcp:10835 free_cma:0 [ 425.736367][ T9824] Node 0 active_anon:66336kB inactive_anon:0kB active_file:0kB inactive_file:236456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134800kB dirty:436kB writeback:0kB shmem:15208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13028kB pagetables:6088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 425.770860][ T9824] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 425.803672][ T9824] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 425.833956][ T9824] lowmem_reserve[]: 0 2473 2473 2473 2473 [ 425.839684][ T9824] Node 0 DMA32 free:1179820kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:66336kB inactive_anon:0kB active_file:0kB inactive_file:236456kB unevictable:1536kB writepending:436kB zspages:0kB present:3129332kB managed:2532368kB mlocked:0kB bounce:0kB free_pcp:43340kB local_pcp:22088kB free_cma:0kB [ 425.872956][ T9824] lowmem_reserve[]: 0 0 0 0 0 [ 425.877686][ T9824] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 425.906916][ T9824] lowmem_reserve[]: 0 0 0 0 0 [ 425.911632][ T9824] Node 1 Normal free:3937268kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 425.943735][ T9824] lowmem_reserve[]: 0 0 0 0 0 [ 425.948440][ T9824] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 425.961376][ T9824] Node 0 DMA32: 544*4kB (UME) 651*8kB (UME) 228*16kB (UME) 363*32kB (UME) 96*64kB (UME) 142*128kB (UM) 27*256kB (UM) 21*512kB (UME) 13*1024kB (ME) 10*2048kB (UME) 264*4096kB (UM) = 1179768kB [ 425.980209][ T9824] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 425.991681][ T9824] Node 1 Normal: 1*4kB (U) 4*8kB (UM) 5*16kB (UM) 12*32kB (UM) 10*64kB (UM) 7*128kB (UM) 6*256kB (UM) 3*512kB (M) 4*1024kB (UM) 4*2048kB (UM) 957*4096kB (M) = 3937268kB [ 426.008632][ T9824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 426.018594][ T9824] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 426.028154][ T9824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 426.037721][ T9824] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 426.047015][ T9824] 63378 total pagecache pages [ 426.051722][ T9824] 0 pages in swap cache [ 426.055863][ T9824] Free swap = 124996kB [ 426.060001][ T9824] Total swap = 124996kB [ 426.064173][ T9824] 2097051 pages RAM [ 426.067980][ T9824] 0 pages HighMem/MovableOnly [ 426.072653][ T9824] 432248 pages reserved [ 426.076795][ T9824] 0 pages cma reserved [ 426.084627][ T803] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 426.108992][ T5612] usb 5-1: USB disconnect, device number 39 [ 426.129655][ T5869] usb 5-1: Failed to suspend device, error -19 [ 426.165376][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1087'. [ 426.325528][ T9829] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 426.333108][ T9829] UDF-fs: Scanning with blocksize 512 failed [ 426.339404][ T9829] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 426.346911][ T9829] UDF-fs: Scanning with blocksize 1024 failed [ 426.353225][ T9829] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 426.422522][ T9831] net_ratelimit: 17 callbacks suppressed [ 426.422573][ T9831] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 426.782454][ T9829] UDF-fs: Scanning with blocksize 2048 failed [ 426.806543][ T9829] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 426.814041][ T9829] UDF-fs: Scanning with blocksize 4096 failed [ 426.826287][ T803] IPVS: starting estimator thread 0... [ 426.921208][ T9832] IPVS: using max 38 ests per chain, 91200 per kthread [ 426.945992][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'. [ 427.268290][ T9840] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 427.900834][ T9842] Bluetooth: MGMT ver 1.23 [ 428.538881][ T9845] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 428.549596][ T9845] overlayfs: missing 'lowerdir' [ 428.754824][ T9857] 9p: Bad value for 'source' [ 428.778973][ T9857] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1098'. [ 428.885921][ T9861] netlink: 'syz.0.1099': attribute type 1 has an invalid length. [ 428.893956][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'. [ 428.946879][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1100'. [ 429.576352][ T24] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 429.601237][ T5723] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 429.616751][ T46] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 429.634623][ T5723] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 429.644132][ T46] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 429.653322][ T24] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 429.670250][ T5723] usb 2-1: USB disconnect, device number 39 [ 429.677897][ T46] usb 6-1: USB disconnect, device number 30 [ 429.692494][ T24] usb 4-1: USB disconnect, device number 33 [ 430.113171][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1093'. [ 430.664408][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 430.664425][ T29] audit: type=1400 audit(1783374214.514:1708): avc: denied { map } for pid=9884 comm="syz.1.1105" path="/dev/usbmon7" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 431.000917][ T46] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 431.006910][ T9896] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 431.017270][ T9896] overlayfs: missing 'lowerdir' [ 431.077812][ T9895] loop9: detected capacity change from 0 to 1 [ 431.110455][ T5612] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 431.179597][ T9895] Dev loop9: unable to read RDB block 1 [ 431.185480][ T9895] loop9: unable to read partition table [ 431.191260][ T9895] loop9: partition table beyond EOD, truncated [ 431.197415][ T9895] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 431.333321][ T46] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 431.350063][ T9902] fuse: Unknown parameter 'HVD4j_laql)gָk\FvƇH)Ds0x0000000000000003' [ 431.368170][ T46] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.378933][ T46] usb 6-1: config 0 has no interface number 0 [ 431.480562][ T5612] usb 2-1: Using ep0 maxpacket: 8 [ 431.484008][ T46] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 431.487831][ T5612] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 431.504836][ T5612] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 431.508644][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.514710][ T5612] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 431.516835][ T5612] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.539952][ T46] usb 6-1: Product: syz [ 431.542017][ T5612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.554907][ T5612] usb 2-1: Product: 뢚㒶ծмиᄵﰃ경酛犂 [ 431.555922][ T46] usb 6-1: Manufacturer: syz [ 431.561670][ T5612] usb 2-1: Manufacturer: 춫뢋দ๟鞽퓼ₑ斡듯ꤲ㆛⍜弪쁤부复꯵࡛丹⁠潧䌯캓솋閑⻣绋䖌乛皾刺冴舦괊泰隻ڽՠ⬊Ꮤດ埤푃逄ᡙ㽙훹ଲ莋ꜫހ⍬…醊巀儣᳡연 [ 431.561705][ T5612] usb 2-1: SerialNumber: ఉ [ 431.593266][ T46] usb 6-1: SerialNumber: syz [ 431.628306][ T46] usb 6-1: config 0 descriptor?? [ 431.656281][ T9908] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 431.664076][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'. [ 431.994989][ T5612] cdc_ncm 2-1:1.0: bind() failure [ 432.012224][ T5612] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 432.019115][ T5612] cdc_ncm 2-1:1.1: bind() failure [ 432.042496][ T5612] usb 2-1: USB disconnect, device number 40 [ 432.603972][ T9919] hfsplus: unable to find HFS+ superblock [ 433.397055][ T46] uvcvideo 6-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 433.417543][ T46] uvcvideo 6-1:0.64: No valid video chain found. [ 433.431656][ T46] usb 6-1: USB disconnect, device number 31 [ 433.448659][ T9925] loop9: detected capacity change from 0 to 1 [ 433.458106][ T9925] Dev loop9: unable to read RDB block 1 [ 433.463744][ T9925] loop9: unable to read partition table [ 433.469473][ T9925] loop9: partition table beyond EOD, truncated [ 433.475690][ T9925] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 433.862857][ T9932] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1118'. [ 434.592117][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.598493][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.692206][ T9937] loop9: detected capacity change from 0 to 1 [ 434.797889][ T9937] Dev loop9: unable to read RDB block 1 [ 434.803577][ T9937] loop9: unable to read partition table [ 434.809328][ T9937] loop9: partition table beyond EOD, truncated [ 434.815587][ T9937] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 434.892726][ T5798] kworker/1:7 (5798) used greatest stack depth: 20056 bytes left [ 435.201807][ T9950] netlink: 'syz.3.1123': attribute type 1 has an invalid length. [ 435.209895][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1123'. [ 435.457766][ T29] audit: type=1400 audit(1783374219.299:1709): avc: denied { getopt } for pid=9944 comm="syz.1.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 435.636030][ T9951] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1122'. [ 436.004905][ T1227] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 436.147252][ T9958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9958 comm=syz.3.1127 [ 436.720747][ T1227] usb 2-1: not running at top speed; connect to a high speed hub [ 436.834175][ T9964] hfsplus: unable to find HFS+ superblock [ 437.285800][ T5612] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 437.316795][ T1227] usb 2-1: config 45 has an invalid interface number: 2 but max is 0 [ 437.334212][ T1227] usb 2-1: config 45 has no interface number 0 [ 437.358116][ T1227] usb 2-1: config 45 interface 2 has no altsetting 0 [ 437.377977][ T1227] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 437.392922][ T1227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.406621][ T1227] usb 2-1: Product: syz [ 437.411242][ T1227] usb 2-1: Manufacturer: syz [ 437.415888][ T1227] usb 2-1: SerialNumber: syz [ 437.551959][ T5612] usb 5-1: Using ep0 maxpacket: 8 [ 437.605570][ T5612] usb 5-1: device descriptor read/all, error -61 [ 437.732298][ T9973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9973 comm=syz.3.1129 [ 438.192302][ T1227] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 438.200921][ T5612] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 438.208644][ T1227] dvb-usb: bulk message failed: -22 (3/0) [ 438.220136][ T1227] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 438.229589][ T1227] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 438.237821][ T1227] usb 2-1: media controller created [ 438.383167][ T1227] dvb-usb: bulk message failed: -22 (5/0) [ 438.408243][ T1227] dvb-usb: MAC address reading failed. [ 438.420502][ T5612] usb 5-1: device descriptor read/64, error -71 [ 438.427605][ T1227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 438.446858][ T1227] dvb-usb: bulk message failed: -22 (6/0) [ 438.453851][ T1227] dvb-usb: bulk message failed: -22 (6/0) [ 438.464612][ T9976] loop9: detected capacity change from 0 to 1 [ 438.474970][ T9976] Dev loop9: unable to read RDB block 1 [ 438.480709][ T9976] loop9: unable to read partition table [ 438.486541][ T9976] loop9: partition table beyond EOD, truncated [ 438.492802][ T9976] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 438.541557][ T5612] usb usb5-port1: attempt power cycle [ 438.578655][ T1227] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 438.793281][ T1227] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 438.820160][ T1227] dvb-usb: schedule remote query interval to 100 msecs. [ 438.827857][ T1227] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 438.946175][ T11] dvb-usb: bulk message failed: -22 (2/0) [ 439.063166][ T5612] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 439.121135][ T11] dvb-usb: error while querying for an remote control event. [ 439.184360][ T1227] usb 2-1: USB disconnect, device number 41 [ 439.363343][ T1227] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 439.375059][ T5612] usb 5-1: device descriptor read/8, error -71 [ 439.951443][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1136'. [ 439.969969][ T9991] 8021q: adding VLAN 0 to HW filter on device team2 [ 440.199601][ T9997] netlink: 'syz.4.1138': attribute type 1 has an invalid length. [ 440.207672][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1138'. [ 440.487745][T10000] 9p: Bad value for 'source' [ 440.720459][T10003] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1140'. [ 441.244015][T10015] comedi comedi1: 8255: I/O port conflict (0xc0000000,4) [ 442.337261][T10025] 9p: Bad value for 'source' [ 442.466405][T10027] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1146'. [ 443.465696][T10037] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 443.531670][T10039] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 443.802942][ T5622] Bluetooth: hci4: connection err: -111 [ 443.962373][T10013] geneve2: entered promiscuous mode [ 443.976128][T10046] netlink: zone id is out of range [ 443.981436][T10046] netlink: zone id is out of range [ 443.986810][T10046] netlink: zone id is out of range [ 443.992014][T10046] netlink: zone id is out of range [ 443.997245][T10046] netlink: zone id is out of range [ 444.002482][T10046] netlink: zone id is out of range [ 444.007690][T10046] netlink: zone id is out of range [ 444.012881][T10046] netlink: zone id is out of range [ 444.023725][T10013] geneve2: entered allmulticast mode [ 444.043366][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 444.059218][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 444.144948][T10049] netlink: 'syz.5.1153': attribute type 1 has an invalid length. [ 444.152825][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1153'. [ 444.394319][ T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 444.426897][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 444.948581][T10059] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 444.957375][T10059] overlayfs: missing 'lowerdir' [ 445.040369][T10051] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1155'. [ 445.212616][T10067] 9p: Bad value for 'source' [ 445.286278][T10069] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1160'. [ 446.590719][T10085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1165'. [ 447.111383][T10093] netlink: 'syz.1.1167': attribute type 1 has an invalid length. [ 447.119408][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1167'. [ 447.547788][T10100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 447.556712][T10100] overlayfs: missing 'lowerdir' [ 448.754529][T10126] net_ratelimit: 100 callbacks suppressed [ 448.754542][T10126] netlink: zone id is out of range [ 448.765411][T10126] netlink: zone id is out of range [ 448.770593][T10126] netlink: zone id is out of range [ 448.775682][T10126] netlink: zone id is out of range [ 448.780807][T10126] netlink: zone id is out of range [ 448.785885][T10126] netlink: zone id is out of range [ 448.791012][T10126] netlink: zone id is out of range [ 448.796092][T10126] netlink: zone id is out of range [ 448.801216][T10126] netlink: zone id is out of range [ 448.806310][T10126] netlink: zone id is out of range [ 450.121377][T10140] hfsplus: unable to find HFS+ superblock [ 450.614208][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1183'. [ 451.420507][ T46] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 451.650274][ T46] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 451.795974][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.828378][T10155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1188'. [ 451.976212][ T46] usb 5-1: config 0 has no interface number 0 [ 452.006833][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 452.036504][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.051431][ T29] audit: type=1400 audit(1783374235.897:1710): avc: denied { sqpoll } for pid=10158 comm="syz.3.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 452.087542][ T46] usb 5-1: Product: syz [ 452.125886][ T46] usb 5-1: Manufacturer: syz [ 452.166914][ T46] usb 5-1: SerialNumber: syz [ 452.265855][ T46] usb 5-1: config 0 descriptor?? [ 452.450004][T10164] 9p: Bad value for 'source' [ 452.978811][ T46] uvcvideo 5-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 453.000474][ T46] uvcvideo 5-1:0.64: No valid video chain found. [ 453.014558][ T46] usb 5-1: USB disconnect, device number 44 [ 453.087492][T10170] 9p: Bad value for 'source' [ 453.548788][T10174] xt_hashlimit: size too large, truncated to 1048576 [ 453.612837][T10178] loop9: detected capacity change from 0 to 1 [ 453.778484][T10178] Dev loop9: unable to read RDB block 1 [ 453.784303][T10178] loop9: unable to read partition table [ 453.790043][T10178] loop9: partition table beyond EOD, truncated [ 453.796383][T10178] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 453.860480][ T5756] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 453.992724][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1194'. [ 454.031279][ T5756] usb 4-1: Using ep0 maxpacket: 8 [ 454.090081][ T5756] usb 4-1: unable to get BOS descriptor or descriptor too short [ 454.565444][T10185] hfsplus: unable to find HFS+ superblock [ 454.649850][ T5756] usb 4-1: config 1 has an invalid interface descriptor of length 2, skipping [ 454.672048][ T5756] usb 4-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 454.712225][ T5756] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 454.740776][ T5756] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 11 [ 454.753324][ T5756] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 454.768198][ T5756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.779191][ T5756] usb 4-1: Product: syz [ 454.784077][ T5756] usb 4-1: Manufacturer: syz [ 454.899894][ T5756] usb 4-1: SerialNumber: syz [ 454.930377][T10177] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 454.964718][T10194] syz.4.1201: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 454.979528][T10194] CPU: 1 UID: 0 PID: 10194 Comm: syz.4.1201 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.979566][T10194] Tainted: [L]=SOFTLOCKUP [ 454.979574][T10194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 454.979583][T10194] Call Trace: [ 454.979587][T10194] [ 454.979592][T10194] dump_stack_lvl+0x100/0x190 [ 454.979612][T10194] warn_alloc.cold+0x94/0xa8 [ 454.979625][T10194] ? __pfx_warn_alloc+0x10/0x10 [ 454.979663][T10194] ? __lock_acquire+0x49f/0x1a40 [ 454.979703][T10194] __vmalloc_node_range_noprof+0x136c/0x1630 [ 454.979731][T10194] ? trace_contention_end+0x126/0x160 [ 454.979748][T10194] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 454.979763][T10194] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 454.979776][T10194] ? find_held_lock+0x2b/0x80 [ 454.979814][T10194] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 454.979845][T10194] ? __pfx___mutex_lock+0x10/0x10 [ 454.979878][T10194] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 454.979891][T10194] __vmalloc_node_noprof+0xad/0xf0 [ 454.979906][T10194] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 454.979924][T10194] dvb_dvr_do_ioctl+0x15d/0x270 [ 454.979956][T10194] dvb_usercopy+0x167/0x340 [ 454.979989][T10194] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 454.980011][T10194] ? __pfx_dvb_usercopy+0x10/0x10 [ 454.980032][T10194] ? selinux_file_ioctl+0x13b/0x290 [ 454.980048][T10194] ? selinux_file_ioctl+0xb6/0x290 [ 454.980070][T10194] dvb_dvr_ioctl+0x29/0x40 [ 454.980095][T10194] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 454.980122][T10194] __x64_sys_ioctl+0x18e/0x210 [ 454.980156][T10194] do_syscall_64+0x115/0x870 [ 454.980185][T10194] ? clear_bhb_loop+0x40/0x90 [ 454.980199][T10194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.980218][T10194] RIP: 0033:0x7f1eaad9de59 [ 454.980237][T10194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.980259][T10194] RSP: 002b:00007f1eabbdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 454.980281][T10194] RAX: ffffffffffffffda RBX: 00007f1eab025fa0 RCX: 00007f1eaad9de59 [ 454.980293][T10194] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000004 [ 454.980300][T10194] RBP: 00007f1eaae33e6f R08: 0000000000000000 R09: 0000000000000000 [ 454.980307][T10194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.980315][T10194] R13: 00007f1eab026038 R14: 00007f1eab025fa0 R15: 00007fffbba2ba58 [ 454.980332][T10194] [ 454.980337][T10194] Mem-Info: [ 455.224623][T10194] active_anon:16361 inactive_anon:0 isolated_anon:0 [ 455.224623][T10194] active_file:0 inactive_file:59206 isolated_file:0 [ 455.224623][T10194] unevictable:768 dirty:346 writeback:0 [ 455.224623][T10194] slab_reclaimable:11850 slab_unreclaimable:101737 [ 455.224623][T10194] mapped:33723 shmem:4200 pagetables:1512 [ 455.224623][T10194] sec_pagetables:0 bounce:0 [ 455.224623][T10194] kernel_misc_reclaimable:0 [ 455.224623][T10194] free:1284205 free_pcp:10457 free_cma:0 [ 455.269743][T10194] Node 0 active_anon:65444kB inactive_anon:0kB active_file:0kB inactive_file:236496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134776kB dirty:1372kB writeback:0kB shmem:15264kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12872kB pagetables:5928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 455.305201][T10194] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 455.338004][T10194] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 455.367863][T10194] lowmem_reserve[]: 0 2473 2473 2473 2473 [ 455.373630][T10194] Node 0 DMA32 free:1184192kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:65444kB inactive_anon:0kB active_file:0kB inactive_file:236496kB unevictable:1536kB writepending:1372kB zspages:0kB present:3129332kB managed:2532368kB mlocked:0kB bounce:0kB free_pcp:41796kB local_pcp:24108kB free_cma:0kB [ 455.407614][T10194] lowmem_reserve[]: 0 0 0 0 0 [ 455.412353][T10194] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 455.441563][T10194] lowmem_reserve[]: 0 0 0 0 0 [ 455.446247][T10194] Node 1 Normal free:3937268kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 455.477971][T10194] lowmem_reserve[]: 0 0 0 0 0 [ 455.482724][T10194] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 455.495353][T10194] Node 0 DMA32: 841*4kB (UME) 367*8kB (UME) 258*16kB (UME) 417*32kB (UME) 37*64kB (UME) 111*128kB (UME) 32*256kB (UM) 20*512kB (UME) 11*1024kB (ME) 14*2048kB (UME) 265*4096kB (UM) = 1184156kB [ 455.515279][T10194] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 455.526805][T10194] Node 1 Normal: 1*4kB (U) 4*8kB (UM) 5*16kB (UM) 12*32kB (UM) 10*64kB (UM) 7*128kB (UM) 6*256kB (UM) 3*512kB (M) 4*1024kB (UM) 4*2048kB (UM) 957*4096kB (M) = 3937268kB [ 455.543801][T10194] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 455.553416][T10194] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 455.562724][T10194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 455.572262][T10194] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 455.581584][T10194] 63402 total pagecache pages [ 455.586245][T10194] 0 pages in swap cache [ 455.590410][T10194] Free swap = 124996kB [ 455.594551][T10194] Total swap = 124996kB [ 455.598698][T10194] 2097051 pages RAM [ 455.602531][T10194] 0 pages HighMem/MovableOnly [ 455.607183][T10194] 432248 pages reserved [ 455.612375][T10194] 0 pages cma reserved [ 456.120966][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 457.208000][ T46] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 457.430803][ T46] usb 6-1: Using ep0 maxpacket: 32 [ 457.472927][ T46] usb 6-1: config index 0 descriptor too short (expected 13339, got 27) [ 457.547100][ T46] usb 6-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 457.767951][ T46] usb 6-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 457.943330][ T46] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 458.070987][ T5756] usb 4-1: selecting invalid altsetting 1 [ 458.112636][ T46] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 458.474750][ T46] usb 6-1: Product: syz [ 458.494968][ T46] usb 6-1: Manufacturer: syz [ 458.710314][ T5756] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 458.763156][ T46] usb 6-1: SerialNumber: syz [ 458.956012][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1204'. [ 458.989722][ T46] usb 6-1: can't set config #108, error -71 [ 459.040210][ T5756] usb 4-1: USB disconnect, device number 34 [ 459.066678][ T46] usb 6-1: USB disconnect, device number 32 [ 459.113803][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.282903][T10223] 8021q: adding VLAN 0 to HW filter on device team3 [ 459.332078][ T1227] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 459.557327][T10238] comedi comedi1: 8255: I/O port conflict (0xc0000000,4) [ 459.636416][ T1227] usb 2-1: device descriptor read/64, error -71 [ 459.770326][T10243] hfsplus: unable to find HFS+ superblock [ 459.911803][ T1227] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 460.165432][ T1227] usb 2-1: device descriptor read/64, error -71 [ 460.195575][T10244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1212'. [ 460.316835][ T1227] usb usb2-port1: attempt power cycle [ 460.522045][T10248] netlink: 'syz.3.1213': attribute type 1 has an invalid length. [ 460.535202][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 460.811272][ T1227] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 460.839406][ T29] audit: type=1400 audit(1783374244.672:1711): avc: denied { bind } for pid=10253 comm="syz.3.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 460.839617][ T1227] usb 2-1: device descriptor read/8, error -71 [ 461.170496][ T1227] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 461.210955][ T1227] usb 2-1: device descriptor read/8, error -71 [ 461.323893][ T1227] usb usb2-port1: unable to enumerate USB device [ 461.527352][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'. [ 461.827363][T10267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10267 comm=syz.3.1217 [ 463.775675][T10283] netlink: 'syz.5.1225': attribute type 1 has an invalid length. [ 463.783496][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1225'. [ 464.044491][T10291] net_ratelimit: 71 callbacks suppressed [ 464.044503][T10291] netlink: zone id is out of range [ 464.055255][T10291] netlink: zone id is out of range [ 464.060337][T10291] netlink: zone id is out of range [ 464.065480][T10291] netlink: zone id is out of range [ 464.070610][T10291] netlink: zone id is out of range [ 464.075688][T10291] netlink: zone id is out of range [ 464.080798][T10291] netlink: zone id is out of range [ 464.085873][T10291] netlink: zone id is out of range [ 464.090970][T10291] netlink: zone id is out of range [ 464.096052][T10291] netlink: zone id is out of range [ 464.175495][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1227'. [ 464.501179][T10299] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 464.559495][T10296] 8021q: adding VLAN 0 to HW filter on device team2 [ 465.814025][T10315] comedi comedi1: 8255: I/O port conflict (0xc0000000,4) [ 466.340472][ T803] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 466.603925][ T803] usb 6-1: Using ep0 maxpacket: 32 [ 466.610940][ T803] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.622997][ T803] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 466.632429][ T803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.641299][ T803] usb 6-1: Product: syz [ 466.645489][ T803] usb 6-1: Manufacturer: syz [ 466.650081][ T803] usb 6-1: SerialNumber: syz [ 467.671870][ T803] usb 6-1: config 0 descriptor?? [ 467.687770][ T803] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 467.996237][ T803] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 468.021401][ T803] quatech2 6-1:0.0: probe with driver quatech2 failed with error -8 [ 468.031758][T10333] 9p: Bad value for 'source' [ 468.282335][ T29] audit: type=1400 audit(1783374252.043:1712): avc: denied { watch watch_reads } for pid=10316 comm="syz.5.1234" path="pipe:[12602]" dev="pipefs" ino=12602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 468.797260][ T29] audit: type=1400 audit(1783374252.483:1713): avc: denied { setopt } for pid=10336 comm="syz.1.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 468.923017][T10344] netlink: 'syz.3.1241': attribute type 1 has an invalid length. [ 468.930869][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1241'. [ 469.797020][ T29] audit: type=1804 audit(1783374253.647:1714): pid=10319 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1234" name="/newroot/193/file0" dev="tmpfs" ino=1057 res=1 errno=0 [ 470.109526][ T1227] usb 6-1: USB disconnect, device number 33 [ 470.320575][ T5756] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 470.340156][T10339] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.347344][T10339] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.424438][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1245'. [ 470.509453][ T5756] usb 4-1: Using ep0 maxpacket: 16 [ 470.600282][ T5756] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 471.063435][ T29] audit: type=1400 audit(1783374254.527:1715): avc: denied { read } for pid=10357 comm="syz.4.1246" path="socket:[29833]" dev="sockfs" ino=29833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 471.106502][ T5756] usb 4-1: config 0 has no interface number 0 [ 471.119678][ T5756] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 471.142902][ T5756] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 471.155419][ T5756] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 471.175528][ T5756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.184651][ T5756] usb 4-1: Product: syz [ 471.191247][ T5756] usb 4-1: Manufacturer: syz [ 471.197894][ T5756] usb 4-1: SerialNumber: syz [ 471.305649][ T5756] usb 4-1: config 0 descriptor?? [ 471.327026][T10351] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 471.342432][T10351] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 471.360363][T10339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.395150][T10339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.680010][T10370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1248'. [ 471.750320][T10351] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 471.775287][T10351] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 471.807971][T10371] net_ratelimit: 17 callbacks suppressed [ 471.807995][T10371] netlink: zone id is out of range [ 471.821832][T10371] netlink: zone id is out of range [ 471.827098][T10371] netlink: zone id is out of range [ 471.832483][T10371] netlink: zone id is out of range [ 471.837743][T10371] netlink: zone id is out of range [ 471.843586][T10371] netlink: zone id is out of range [ 471.848906][T10371] netlink: zone id is out of range [ 471.854533][T10371] netlink: zone id is out of range [ 471.860523][T10371] netlink: zone id is out of range [ 471.865786][T10371] netlink: zone id is out of range [ 471.994634][ T5756] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 472.017232][ T137] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.034726][ T5756] asix 4-1:0.34: probe with driver asix failed with error -32 [ 472.050937][ T137] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.084284][ T137] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.116909][ T137] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.223500][T10377] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1251'. [ 472.415708][T10380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.165209][T10380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.333079][T10391] netlink: 'syz.1.1253': attribute type 1 has an invalid length. [ 473.350899][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1253'. [ 473.768911][ T5612] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 474.072745][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1254'. [ 474.114748][T10389] 8021q: adding VLAN 0 to HW filter on device bond4 [ 474.132323][ T5612] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 474.166325][ T5612] usb 6-1: config 0 has no interface number 0 [ 474.182705][ T5612] usb 6-1: config 0 interface 41 has no altsetting 0 [ 474.193977][ T5612] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 474.204666][ T5612] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.212848][ T5612] usb 6-1: Product: syz [ 474.217130][ T5612] usb 6-1: Manufacturer: syz [ 474.223594][ T5612] usb 6-1: SerialNumber: syz [ 474.234337][ T5612] usb 6-1: config 0 descriptor?? [ 474.278079][ T46] usb 4-1: USB disconnect, device number 35 [ 474.687223][T10407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1258'. [ 474.696381][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1260'. [ 474.801559][ T46] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 474.972416][ T46] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 474.993058][ T46] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 475.011134][ T46] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 475.020731][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 475.032170][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 475.044787][ T46] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 475.054050][ T46] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 475.062420][ T46] usb 4-1: Product: syz [ 475.067684][ T46] usb 4-1: Manufacturer: syz [ 475.076982][T10415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1263'. [ 475.099015][ T46] cdc_wdm 4-1:1.0: skipping garbage [ 475.111636][ T46] cdc_wdm 4-1:1.0: skipping garbage [ 475.118315][ T46] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 475.124773][ T46] cdc_wdm 4-1:1.0: Unknown control protocol [ 475.131044][ T803] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 475.238777][ T5612] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 475.292066][ T803] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 475.300329][ T803] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.310868][ T803] usb 2-1: config 0 has no interface number 0 [ 475.318774][ T803] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 475.328398][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.336817][ T803] usb 2-1: Product: syz [ 475.341353][ T803] usb 2-1: Manufacturer: syz [ 475.345993][ T803] usb 2-1: SerialNumber: syz [ 475.354036][ T803] usb 2-1: config 0 descriptor?? [ 475.660634][ T46] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 475.788062][T10421] overlayfs: missing 'lowerdir' [ 475.893815][ T46] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 475.904178][ T46] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 475.917862][ T46] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.952618][ T46] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 475.973605][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.011894][ T46] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 476.029495][ T46] usb 5-1: invalid MIDI out EP 0 [ 476.399346][ T46] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 476.435186][ T46] usb 5-1: USB disconnect, device number 45 [ 476.667224][ T5612] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 476.698535][ T5612] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 476.731093][ T5612] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 476.767762][ T5612] usb 6-1: USB disconnect, device number 34 [ 476.831536][ T46] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 476.990804][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 477.006562][ T46] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 477.031687][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 477.046762][ T46] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 477.063640][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.092282][ T46] usb 5-1: config 0 descriptor?? [ 477.478390][ T5723] usb 4-1: USB disconnect, device number 36 [ 477.616306][T10438] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 477.625396][T10438] overlayfs: missing 'lowerdir' [ 477.732458][T10440] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 477.741475][T10440] overlayfs: missing 'lowerdir' [ 477.909982][ T46] corsair-cpro 0003:1B1C:0C10.0008: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 478.310181][ T29] audit: type=1400 audit(1783374262.150:1716): avc: denied { write } for pid=10450 comm="syz.5.1272" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 478.359898][ T803] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 478.389159][ T803] uvcvideo 2-1:0.64: No valid video chain found. [ 478.419734][ T46] corsair-cpro 0003:1B1C:0C10.0008: probe with driver corsair-cpro failed with error -110 [ 478.447357][ T803] usb 2-1: USB disconnect, device number 46 [ 478.489420][ T46] usb 5-1: USB disconnect, device number 46 [ 478.641242][ T11] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 478.806732][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'. [ 479.012546][T10459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10459 comm=syz.1.1273 [ 479.949467][ T11] usb 6-1: config index 0 descriptor too short (expected 25183, got 144) [ 480.178171][ T11] usb 6-1: config 116 has too many interfaces: 121, using maximum allowed: 32 [ 480.192871][ T11] usb 6-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 480.203202][ T11] usb 6-1: config 116 has 0 interfaces, different from the descriptor's value: 121 [ 480.311488][ T5622] Bluetooth: hci3: ISO packet for unknown connection handle 52 [ 480.379979][ T11] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 480.571454][ T5756] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 480.604392][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.624648][ T11] usb 6-1: Product: syz [ 480.632774][ T11] usb 6-1: Manufacturer: syz [ 480.642514][ T11] usb 6-1: SerialNumber: syz [ 480.760625][ T5756] usb 5-1: Using ep0 maxpacket: 16 [ 480.772391][ T5756] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 480.802821][ T5756] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 480.814109][ T5756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.822217][ T5756] usb 5-1: Product: syz [ 480.826779][ T5756] usb 5-1: Manufacturer: syz [ 480.832890][ T5756] usb 5-1: SerialNumber: syz [ 481.381111][ T5756] r8152-cfgselector 5-1: Unknown version 0x0000 [ 481.390176][ T11] usb 6-1: USB disconnect, device number 35 [ 481.403814][ T5756] r8152-cfgselector 5-1: config 0 descriptor?? [ 481.753928][T10478] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 481.762743][T10478] overlayfs: missing 'lowerdir' [ 482.290215][T10479] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1280'. [ 482.309833][T10479] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1280'. [ 482.320552][T10479] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1280'. [ 482.329910][T10479] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1280'. [ 482.340135][T10479] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1280'. [ 482.497759][T10479] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1280'. [ 482.592360][T10479] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1280'. [ 482.613275][T10479] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1280'. [ 482.624482][T10479] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1280'. [ 482.640808][ T803] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 482.648505][T10479] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1280'. [ 483.011106][ T5756] r8152-cfgselector 5-1: Unknown version 0x0000 [ 483.509087][T10493] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 483.522096][T10493] UDF-fs: Scanning with blocksize 512 failed [ 483.534814][T10493] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 483.545293][T10493] UDF-fs: Scanning with blocksize 1024 failed [ 483.551553][ T803] usb 4-1: device descriptor read/64, error -71 [ 483.551907][ T5756] r8152-cfgselector 5-1: No union descriptors [ 483.581232][ T5756] r8152-cfgselector 5-1: USB disconnect, device number 47 [ 483.739313][T10493] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 483.747883][T10493] UDF-fs: Scanning with blocksize 2048 failed [ 483.758962][T10493] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 483.975008][ T803] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 484.103826][T10510] loop9: detected capacity change from 0 to 1 [ 484.612817][T10509] fuse: Bad value for 'user_id' [ 484.617779][T10509] fuse: Bad value for 'user_id' [ 484.682590][T10510] Dev loop9: unable to read RDB block 1 [ 484.688156][T10510] loop9: unable to read partition table [ 484.694354][T10510] loop9: partition table beyond EOD, truncated [ 484.700590][T10510] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 484.905994][T10493] UDF-fs: Scanning with blocksize 4096 failed [ 485.521125][T10523] hfsplus: unable to find HFS+ superblock [ 486.626193][T10532] net_ratelimit: 71 callbacks suppressed [ 486.626205][T10532] netlink: zone id is out of range [ 486.634547][T10530] comedi comedi1: 8255: I/O port conflict (0xc0000000,4) [ 486.637455][T10532] netlink: zone id is out of range [ 486.637470][T10532] netlink: zone id is out of range [ 486.637478][T10532] netlink: zone id is out of range [ 486.637487][T10532] netlink: zone id is out of range [ 486.665206][T10532] netlink: zone id is out of range [ 486.670291][T10532] netlink: zone id is out of range [ 486.675407][T10532] netlink: zone id is out of range [ 486.680596][T10532] netlink: zone id is out of range [ 486.685684][T10532] netlink: zone id is out of range [ 486.840721][ T5723] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 487.200453][ T5723] usb 2-1: Using ep0 maxpacket: 32 [ 487.327282][ T5723] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 487.377627][ T5723] usb 2-1: config 0 has no interface number 0 [ 487.387184][ T5723] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 487.396634][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.404709][ T5723] usb 2-1: Product: syz [ 487.409216][ T5723] usb 2-1: Manufacturer: syz [ 487.416069][ T5723] usb 2-1: SerialNumber: syz [ 487.431406][ T5723] usb 2-1: config 0 descriptor?? [ 487.453411][ T5723] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 487.779880][T10552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10552 comm=syz.3.1299 [ 488.424731][T10553] xt_hashlimit: size too large, truncated to 1048576 [ 488.479682][T10556] __nla_validate_parse: 23 callbacks suppressed [ 488.479701][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1300'. [ 489.342373][T10556] 8021q: adding VLAN 0 to HW filter on device team3 [ 489.413269][ T5723] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 489.457395][ T5723] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 489.576231][T10564] syzkaller1: entered promiscuous mode [ 489.591592][T10564] syzkaller1: entered allmulticast mode [ 490.625764][T10570] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.632955][T10570] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.814269][T10570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.823981][T10570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.901749][T10577] FAULT_INJECTION: forcing a failure. [ 490.901749][T10577] name failslab, interval 1, probability 0, space 0, times 0 [ 490.915911][T10577] CPU: 1 UID: 0 PID: 10577 Comm: syz.5.1305 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.915946][T10577] Tainted: [L]=SOFTLOCKUP [ 490.915953][T10577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 490.915966][T10577] Call Trace: [ 490.915974][T10577] [ 490.915984][T10577] dump_stack_lvl+0x100/0x190 [ 490.916016][T10577] should_fail_ex.cold+0x5/0xa [ 490.916046][T10577] should_failslab+0xc2/0x120 [ 490.916072][T10577] __kvmalloc_node_noprof+0x116/0x970 [ 490.916099][T10577] ? __v4l2_ctrl_modify_dimensions+0x1c3/0x640 [ 490.916136][T10577] __v4l2_ctrl_modify_dimensions+0x1c3/0x640 [ 490.916171][T10577] vivid_update_format_cap+0x9aa/0x1f80 [ 490.916202][T10577] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 490.916236][T10577] ? vivid_get_format+0x124/0x180 [ 490.916276][T10577] vivid_s_fmt_vid_cap+0x5f1/0x3100 [ 490.916316][T10577] ? __pfx_vivid_s_fmt_vid_cap+0x10/0x10 [ 490.916339][T10577] fmt_sp2mp_func+0xbc/0x3e0 [ 490.916375][T10577] ? __pfx_fmt_sp2mp_func+0x10/0x10 [ 490.916442][T10577] vidioc_s_fmt_vid_cap+0xa0/0xe0 [ 490.916469][T10577] vivid_s_fmt_cap+0x76/0xc0 [ 490.916503][T10577] v4l_s_fmt+0x399/0xf20 [ 490.916533][T10577] ? video_usercopy+0x7b6/0x1730 [ 490.916561][T10577] __video_do_ioctl+0xb2a/0xdf0 [ 490.916588][T10577] ? __might_fault+0xc5/0x140 [ 490.916620][T10577] ? __pfx___video_do_ioctl+0x10/0x10 [ 490.916655][T10577] video_usercopy+0x47a/0x1730 [ 490.916680][T10577] ? __pfx___video_do_ioctl+0x10/0x10 [ 490.916703][T10577] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 490.916738][T10577] ? __pfx_video_usercopy+0x10/0x10 [ 490.916781][T10577] v4l2_ioctl+0x1bd/0x250 [ 490.916805][T10577] ? __pfx_v4l2_ioctl+0x10/0x10 [ 490.916831][T10577] __x64_sys_ioctl+0x18e/0x210 [ 490.916864][T10577] do_syscall_64+0x115/0x870 [ 490.916894][T10577] ? clear_bhb_loop+0x40/0x90 [ 490.916922][T10577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.916945][T10577] RIP: 0033:0x7f879ab9de59 [ 490.916963][T10577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.916984][T10577] RSP: 002b:00007f879b9ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.917005][T10577] RAX: ffffffffffffffda RBX: 00007f879ae26180 RCX: 00007f879ab9de59 [ 490.917020][T10577] RDX: 0000200000000080 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 490.917034][T10577] RBP: 00007f879b9ce090 R08: 0000000000000000 R09: 0000000000000000 [ 490.917047][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.917060][T10577] R13: 00007f879ae26218 R14: 00007f879ae26180 R15: 00007ffcc6cffa28 [ 490.917091][T10577] [ 491.371511][ T48] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.380488][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.389392][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.398360][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.447492][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1308'. [ 492.730908][ T5756] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 493.048629][ T5756] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 493.113999][ T5756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.165790][ T5756] usb 6-1: Product: syz [ 493.196350][ T5756] usb 6-1: Manufacturer: syz [ 493.242219][ T5756] usb 6-1: SerialNumber: syz [ 493.477349][ T5756] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 493.814028][ T5612] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 494.106639][T10604] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 494.188830][T10604] overlayfs: missing 'lowerdir' [ 494.600887][T10586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.830454][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 494.840187][ T5723] usb 2-1: USB disconnect, device number 47 [ 494.888565][T10586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.973212][ T803] usb 6-1: USB disconnect, device number 36 [ 495.186131][ T5612] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 495.194401][ T5612] ath9k_htc: Failed to initialize the device [ 495.202326][ T5723] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 495.218541][ T803] usb 6-1: ath9k_htc: USB layer deinitialized [ 495.241427][ T5723] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 495.740158][ T5723] quatech2 2-1:0.51: device disconnected [ 495.759472][T10620] xt_hashlimit: size too large, truncated to 1048576 [ 495.942175][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1317'. [ 496.094304][T10617] 8021q: adding VLAN 0 to HW filter on device team3 [ 496.121682][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.129713][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.180513][ T11] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 496.342531][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 496.356096][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 496.390195][ T11] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 496.424544][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 496.465068][ T11] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 496.489595][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.515341][ T11] usb 4-1: Product: syz [ 496.539810][ T11] usb 4-1: Manufacturer: syz [ 496.545553][ T11] usb 4-1: SerialNumber: syz [ 496.568708][ T11] usb 4-1: config 0 descriptor?? [ 496.595552][ T11] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 496.664845][ C1] xpad 4-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 497.316783][T10646] netlink: 'syz.4.1325': attribute type 1 has an invalid length. [ 497.353638][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1325'. [ 497.664674][ T11] usb 4-1: USB disconnect, device number 39 [ 497.664836][ C1] xpad 4-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 498.511464][T10652] syz.4.1327: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 498.526169][T10652] CPU: 0 UID: 0 PID: 10652 Comm: syz.4.1327 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.526189][T10652] Tainted: [L]=SOFTLOCKUP [ 498.526193][T10652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 498.526201][T10652] Call Trace: [ 498.526206][T10652] [ 498.526211][T10652] dump_stack_lvl+0x100/0x190 [ 498.526231][T10652] warn_alloc.cold+0x94/0xa8 [ 498.526245][T10652] ? __pfx_warn_alloc+0x10/0x10 [ 498.526272][T10652] ? __lock_acquire+0x49f/0x1a40 [ 498.526293][T10652] __vmalloc_node_range_noprof+0x136c/0x1630 [ 498.526314][T10652] ? trace_contention_end+0x126/0x160 [ 498.526328][T10652] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 498.526344][T10652] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 498.526356][T10652] ? find_held_lock+0x2b/0x80 [ 498.526376][T10652] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 498.526391][T10652] ? __pfx___mutex_lock+0x10/0x10 [ 498.526414][T10652] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 498.526427][T10652] __vmalloc_node_noprof+0xad/0xf0 [ 498.526442][T10652] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 498.526461][T10652] dvb_dvr_do_ioctl+0x15d/0x270 [ 498.526490][T10652] dvb_usercopy+0x167/0x340 [ 498.526514][T10652] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 498.526539][T10652] ? __pfx_dvb_usercopy+0x10/0x10 [ 498.526560][T10652] ? selinux_file_ioctl+0x13b/0x290 [ 498.526576][T10652] ? selinux_file_ioctl+0xb6/0x290 [ 498.526593][T10652] dvb_dvr_ioctl+0x29/0x40 [ 498.526606][T10652] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 498.526620][T10652] __x64_sys_ioctl+0x18e/0x210 [ 498.526637][T10652] do_syscall_64+0x115/0x870 [ 498.526652][T10652] ? clear_bhb_loop+0x40/0x90 [ 498.526667][T10652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.526679][T10652] RIP: 0033:0x7f1eaad9de59 [ 498.526690][T10652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.526701][T10652] RSP: 002b:00007f1eabbdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.526713][T10652] RAX: ffffffffffffffda RBX: 00007f1eab025fa0 RCX: 00007f1eaad9de59 [ 498.526721][T10652] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000004 [ 498.526728][T10652] RBP: 00007f1eaae33e6f R08: 0000000000000000 R09: 0000000000000000 [ 498.526735][T10652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.526742][T10652] R13: 00007f1eab026038 R14: 00007f1eab025fa0 R15: 00007fffbba2ba58 [ 498.526767][T10652] [ 498.526777][T10652] Mem-Info: [ 498.813469][T10652] active_anon:19313 inactive_anon:0 isolated_anon:0 [ 498.813469][T10652] active_file:0 inactive_file:59224 isolated_file:0 [ 498.813469][T10652] unevictable:768 dirty:240 writeback:0 [ 498.813469][T10652] slab_reclaimable:11991 slab_unreclaimable:102500 [ 498.813469][T10652] mapped:36675 shmem:7054 pagetables:1512 [ 498.813469][T10652] sec_pagetables:0 bounce:0 [ 498.813469][T10652] kernel_misc_reclaimable:0 [ 498.813469][T10652] free:1276578 free_pcp:11625 free_cma:0 [ 498.858958][T10652] Node 0 active_anon:77252kB inactive_anon:0kB active_file:0kB inactive_file:236568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146572kB dirty:960kB writeback:0kB shmem:26680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12768kB pagetables:5928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 498.893386][T10652] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 498.926326][T10652] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 498.956149][T10652] lowmem_reserve[]: 0 2473 2473 2473 2473 [ 498.961884][T10652] Node 0 DMA32 free:1153684kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:77252kB inactive_anon:0kB active_file:0kB inactive_file:236568kB unevictable:1536kB writepending:960kB zspages:0kB present:3129332kB managed:2532368kB mlocked:0kB bounce:0kB free_pcp:46496kB local_pcp:20768kB free_cma:0kB [ 498.994867][T10652] lowmem_reserve[]: 0 0 0 0 0 [ 498.999542][T10652] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 499.029276][T10652] lowmem_reserve[]: 0 0 0 0 0 [ 499.033983][T10652] Node 1 Normal free:3937268kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 499.065525][T10652] lowmem_reserve[]: 0 0 0 0 0 [ 499.070200][T10652] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 499.082782][T10652] Node 0 DMA32: 169*4kB (ME) 184*8kB (UME) 145*16kB (UME) 33*32kB (UME) 72*64kB (UME) 82*128kB (UME) 28*256kB (UM) 17*512kB (UME) 11*1024kB (ME) 10*2048kB (ME) 265*4096kB (UM) = 1153684kB [ 499.101296][T10652] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 499.112741][T10652] Node 1 Normal: 1*4kB (U) 4*8kB (UM) 5*16kB (UM) 12*32kB (UM) 10*64kB (UM) 7*128kB (UM) 6*256kB (UM) 3*512kB (M) 4*1024kB (UM) 4*2048kB (UM) 957*4096kB (M) = 3937268kB [ 499.129893][T10652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 499.139425][T10652] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 499.148702][T10652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 499.158251][T10652] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 499.167517][T10652] 66274 total pagecache pages [ 499.172184][T10652] 0 pages in swap cache [ 499.176307][T10652] Free swap = 124996kB [ 499.180450][T10652] Total swap = 124996kB [ 499.184573][T10652] 2097051 pages RAM [ 499.188344][T10652] 0 pages HighMem/MovableOnly [ 499.193014][T10652] 432248 pages reserved [ 499.197135][T10652] 0 pages cma reserved [ 499.346033][T10666] xt_hashlimit: size too large, truncated to 1048576 [ 499.490111][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1330'. [ 499.508215][T10666] 8021q: adding VLAN 0 to HW filter on device team4 [ 499.580544][ T803] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 499.717941][T10674] xt_hashlimit: size too large, truncated to 1048576 [ 499.764053][ T803] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 499.786276][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.805564][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 499.833320][T10676] 8021q: adding VLAN 0 to HW filter on device team5 [ 499.858140][ T803] usb 2-1: Product: syz [ 499.869351][ T803] usb 2-1: Manufacturer: syz [ 499.874638][ T803] usb 2-1: SerialNumber: syz [ 499.890181][ T803] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 499.918733][ T5723] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 500.336515][T10661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.345801][T10661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.394491][ T803] usb 2-1: USB disconnect, device number 48 [ 501.036670][ T5723] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 501.072006][ T5723] ath9k_htc: Failed to initialize the device [ 501.079125][ T803] usb 2-1: ath9k_htc: USB layer deinitialized [ 501.355709][T10699] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 501.372563][T10699] overlayfs: missing 'lowerdir' [ 501.386339][T10702] netlink: 'syz.0.1338': attribute type 1 has an invalid length. [ 501.394062][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1338'. [ 501.670493][ T803] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 501.842453][ T803] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 501.861400][ T803] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 501.882840][ T803] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 501.900776][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.920458][ T803] usb 2-1: Product: syz [ 501.926115][ T803] usb 2-1: Manufacturer: syz [ 501.940626][ T803] usb 2-1: SerialNumber: syz [ 501.947741][ T803] usb 2-1: config 0 descriptor?? [ 502.011060][ T11] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 502.185584][ T11] usb 6-1: Using ep0 maxpacket: 8 [ 502.197951][T10700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.222892][ T11] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 502.237138][T10700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.298816][ T11] usb 6-1: config 179 has no interface number 0 [ 502.443872][ T11] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 502.522695][ T11] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 502.550592][ T11] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 502.566048][ T11] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 502.581084][ T11] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 502.608136][ T11] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 502.627796][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.569704][ T29] audit: type=1400 audit(1783374286.842:1717): avc: denied { unmount } for pid=10713 comm="syz.4.1343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 503.749694][T10708] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 504.042792][ T11] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input19 [ 504.321074][T10700] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 504.670977][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 504.957185][ T11] libceph: connect (1)[c::]:6789 error -101 [ 505.001663][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 505.012469][T10732] FAULT_INJECTION: forcing a failure. [ 505.012469][T10732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.059008][ T803] mos7840 2-1:0.0: required endpoints missing [ 505.092907][T10732] CPU: 1 UID: 0 PID: 10732 Comm: syz.3.1345 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.092940][T10732] Tainted: [L]=SOFTLOCKUP [ 505.092947][T10732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 505.092959][T10732] Call Trace: [ 505.092966][T10732] [ 505.092974][T10732] dump_stack_lvl+0x100/0x190 [ 505.093004][T10732] should_fail_ex.cold+0x5/0xa [ 505.093032][T10732] _copy_from_iter+0x1f4/0x1690 [ 505.093063][T10732] ? __asan_memset+0x23/0x50 [ 505.093097][T10732] ? __pfx__copy_from_iter+0x10/0x10 [ 505.093122][T10732] ? __pfx___alloc_skb+0x10/0x10 [ 505.093168][T10732] netlink_sendmsg+0x808/0xda0 [ 505.093204][T10732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.093232][T10732] ? __might_fault+0x20/0x140 [ 505.093275][T10732] ____sys_sendmsg+0xa4d/0xbe0 [ 505.093301][T10732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.093333][T10732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 505.093378][T10732] ___sys_sendmsg+0x190/0x1e0 [ 505.093409][T10732] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.093435][T10732] ? __lock_acquire+0x49f/0x1a40 [ 505.093492][T10732] __sys_sendmsg+0x160/0x210 [ 505.093515][T10732] ? __pfx___sys_sendmsg+0x10/0x10 [ 505.093552][T10732] do_syscall_64+0x115/0x870 [ 505.093583][T10732] ? clear_bhb_loop+0x40/0x90 [ 505.093610][T10732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.093633][T10732] RIP: 0033:0x7f7818b9de59 [ 505.093651][T10732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.093672][T10732] RSP: 002b:00007f78199b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.093693][T10732] RAX: ffffffffffffffda RBX: 00007f7818e25fa0 RCX: 00007f7818b9de59 [ 505.093707][T10732] RDX: 0000000000000084 RSI: 00002000000001c0 RDI: 0000000000000003 [ 505.093721][T10732] RBP: 00007f78199b6090 R08: 0000000000000000 R09: 0000000000000000 [ 505.093735][T10732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.093748][T10732] R13: 00007f7818e26038 R14: 00007f7818e25fa0 R15: 00007fffc3074398 [ 505.093779][T10732] [ 505.387383][ T11] libceph: connect (1)[c::]:6789 error -101 [ 505.415043][ T803] usb 2-1: USB disconnect, device number 49 [ 505.442769][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 505.497461][T10743] netlink: 'syz.0.1349': attribute type 1 has an invalid length. [ 505.505693][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1349'. [ 505.514728][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 505.760483][ T24] usb 5-1: device descriptor read/64, error -71 [ 506.050485][ T803] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 506.058545][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 506.406417][ T5756] libceph: connect (1)[c::]:6789 error -101 [ 506.413583][ T5756] libceph: mon0 (1)[c::]:6789 connect error [ 506.483980][T10708] ceph: No mds server is up or the cluster is laggy [ 506.581814][ T5756] usb 6-1: USB disconnect, device number 37 [ 506.587805][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 506.587859][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 506.628959][ T24] usb 5-1: device descriptor read/64, error -71 [ 506.645373][ T803] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 506.662322][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.680441][ T803] usb 2-1: Product: syz [ 506.690536][ T803] usb 2-1: Manufacturer: syz [ 506.738050][ T803] usb 2-1: SerialNumber: syz [ 506.766218][ T24] usb usb5-port1: attempt power cycle [ 506.780762][T10756] comedi comedi0: comedi_bond: 4:2 attached, 32 channels from 1 devices [ 506.797488][ T803] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 506.838635][ T5709] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 507.170853][ T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 507.205522][ T24] usb 5-1: device descriptor read/8, error -71 [ 507.394879][T10741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.443394][T10741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.484716][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 507.514776][ T24] usb 5-1: device descriptor read/8, error -71 [ 507.612964][ T803] usb 2-1: USB disconnect, device number 50 [ 507.672821][ T24] usb usb5-port1: unable to enumerate USB device [ 507.955782][ T5709] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 508.005841][ T5709] ath9k_htc: Failed to initialize the device [ 508.109329][ T803] usb 2-1: ath9k_htc: USB layer deinitialized [ 508.353414][T10766] loop9: detected capacity change from 0 to 1 [ 508.550300][T10772] 9p: Bad value for 'source' [ 508.739724][T10774] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1357'. [ 508.988515][T10766] Dev loop9: unable to read RDB block 1 [ 509.153692][T10766] loop9: unable to read partition table [ 509.226103][T10766] loop9: partition table beyond EOD, truncated [ 509.371926][T10766] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 509.437010][ T4976] Dev loop9: unable to read RDB block 1 [ 509.455431][ T4976] loop9: unable to read partition table [ 509.472009][ T4976] loop9: partition table beyond EOD, truncated [ 509.624023][ T29] audit: type=1400 audit(1783374293.476:1718): avc: denied { name_bind } for pid=10788 comm="syz.4.1361" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 509.664721][ T29] audit: type=1400 audit(1783374293.516:1719): avc: denied { mount } for pid=10796 comm="syz.0.1364" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 509.688283][T10797] overlayfs: failed to clone lowerpath [ 511.083589][T10815] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 511.118384][T10815] overlayfs: missing 'lowerdir' [ 511.133010][ T11] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 511.323999][ T11] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 511.343559][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.368959][ T11] usb 5-1: Product: syz [ 511.382785][ T11] usb 5-1: Manufacturer: syz [ 511.407311][ T11] usb 5-1: SerialNumber: syz [ 511.440308][ T11] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 511.478358][ T5756] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 512.085707][ T5748] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 512.086570][T10806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.343098][T10806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.407547][T10828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1374'. [ 512.420534][ T5748] usb 6-1: device descriptor read/64, error -71 [ 512.437940][ T803] usb 5-1: USB disconnect, device number 52 [ 512.590499][ T5756] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 512.604092][ T5756] ath9k_htc: Failed to initialize the device [ 512.621946][ T803] usb 5-1: ath9k_htc: USB layer deinitialized [ 512.670467][ T5748] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 512.810481][ T5748] usb 6-1: device descriptor read/64, error -71 [ 512.920885][ T5748] usb usb6-port1: attempt power cycle [ 513.080487][ T5756] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 513.247496][ T5756] usb 2-1: unable to get BOS descriptor or descriptor too short [ 513.273560][ T5748] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 513.286651][ T5756] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 513.294988][ T5756] usb 2-1: can't read configurations, error -71 [ 513.303821][ T5748] usb 6-1: device descriptor read/8, error -71 [ 513.560571][ T5748] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 513.591144][ T5748] usb 6-1: device descriptor read/8, error -71 [ 513.712624][ T5748] usb usb6-port1: unable to enumerate USB device [ 514.012475][T10864] syz.1.1385: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 514.029361][T10864] CPU: 1 UID: 0 PID: 10864 Comm: syz.1.1385 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.029397][T10864] Tainted: [L]=SOFTLOCKUP [ 514.029405][T10864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 514.029420][T10864] Call Trace: [ 514.029427][T10864] [ 514.029435][T10864] dump_stack_lvl+0x100/0x190 [ 514.029457][T10864] warn_alloc.cold+0x94/0xa8 [ 514.029470][T10864] ? __pfx_warn_alloc+0x10/0x10 [ 514.029492][T10864] ? __lock_acquire+0x49f/0x1a40 [ 514.029512][T10864] __vmalloc_node_range_noprof+0x136c/0x1630 [ 514.029533][T10864] ? trace_contention_end+0x126/0x160 [ 514.029547][T10864] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 514.029562][T10864] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 514.029575][T10864] ? find_held_lock+0x2b/0x80 [ 514.029594][T10864] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 514.029608][T10864] ? __pfx___mutex_lock+0x10/0x10 [ 514.029632][T10864] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 514.029645][T10864] __vmalloc_node_noprof+0xad/0xf0 [ 514.029660][T10864] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 514.029675][T10864] dvb_dvr_do_ioctl+0x15d/0x270 [ 514.029692][T10864] dvb_usercopy+0x167/0x340 [ 514.029705][T10864] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 514.029720][T10864] ? __pfx_dvb_usercopy+0x10/0x10 [ 514.029742][T10864] ? selinux_file_ioctl+0x13b/0x290 [ 514.029758][T10864] ? selinux_file_ioctl+0xb6/0x290 [ 514.029775][T10864] dvb_dvr_ioctl+0x29/0x40 [ 514.029788][T10864] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 514.029804][T10864] __x64_sys_ioctl+0x18e/0x210 [ 514.029821][T10864] do_syscall_64+0x115/0x870 [ 514.029837][T10864] ? clear_bhb_loop+0x40/0x90 [ 514.029852][T10864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.029864][T10864] RIP: 0033:0x7fde6f19de59 [ 514.029874][T10864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.029885][T10864] RSP: 002b:00007fde7014f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.029896][T10864] RAX: ffffffffffffffda RBX: 00007fde6f425fa0 RCX: 00007fde6f19de59 [ 514.029904][T10864] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000004 [ 514.029911][T10864] RBP: 00007fde6f233e6f R08: 0000000000000000 R09: 0000000000000000 [ 514.029918][T10864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.029925][T10864] R13: 00007fde6f426038 R14: 00007fde6f425fa0 R15: 00007ffcf72553c8 [ 514.029942][T10864] [ 514.030002][T10864] Mem-Info: [ 514.130529][ T5748] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 514.283149][T10864] active_anon:19370 inactive_anon:0 isolated_anon:0 [ 514.283149][T10864] active_file:0 inactive_file:59230 isolated_file:0 [ 514.283149][T10864] unevictable:768 dirty:418 writeback:0 [ 514.283149][T10864] slab_reclaimable:11880 slab_unreclaimable:103080 [ 514.283149][T10864] mapped:36690 shmem:7040 pagetables:1553 [ 514.283149][T10864] sec_pagetables:0 bounce:0 [ 514.283149][T10864] kernel_misc_reclaimable:0 [ 514.283149][T10864] free:1274238 free_pcp:15001 free_cma:0 [ 514.375027][T10864] Node 0 active_anon:77580kB inactive_anon:0kB active_file:0kB inactive_file:236548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146604kB dirty:1664kB writeback:0kB shmem:26624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12988kB pagetables:6092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 514.416979][T10864] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:156kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 514.451034][T10864] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 514.486375][T10864] lowmem_reserve[]: 0 2473 2473 2473 2473 [ 514.551865][T10864] Node 0 DMA32 free:1146404kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:77608kB inactive_anon:0kB active_file:0kB inactive_file:236548kB unevictable:1536kB writepending:1672kB zspages:0kB present:3129332kB managed:2532368kB mlocked:0kB bounce:0kB free_pcp:57956kB local_pcp:21060kB free_cma:0kB [ 514.604323][T10864] lowmem_reserve[]: 0 0 0 0 0 [ 514.629796][T10864] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 514.661522][ T5748] usb 5-1: Using ep0 maxpacket: 8 [ 514.664827][T10864] lowmem_reserve[]: 0 0 0 0 0 [ 514.691847][ T5748] usb 5-1: config 0 has no interfaces? [ 514.704056][T10864] [ 514.711684][T10864] Node 1 Normal free:3935124kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:372kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB [ 514.752312][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1387'. [ 514.758390][ T5748] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 514.801387][ T5748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.832541][ T5748] usb 5-1: config 0 descriptor?? [ 514.909114][T10864] lowmem_reserve[]: [ 514.936458][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1389'. [ 515.107002][T10864] 0 0 0 0 0 [ 515.115612][T10864] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 515.136810][T10864] Node 0 DMA32: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 2*64kB (UE) 39*128kB (ME) 32*256kB (UM) 17*512kB (UME) 12*1024kB (ME) 9*2048kB (ME) 265*4096kB (UM) = 1138224kB [ 515.158759][T10877] net_ratelimit: 17 callbacks suppressed [ 515.158773][T10877] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 515.178029][T10864] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 515.204691][ T24] usb 5-1: USB disconnect, device number 53 [ 515.211612][T10864] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 4*16kB (U) 11*32kB (UM) 10*64kB (UM) 7*128kB (UM) 6*256kB (UM) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 957*4096kB (M) = 3935176kB [ 515.232458][T10864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 515.245773][T10864] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 515.261598][T10864] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 515.300219][T10864] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 515.315291][T10864] 71407 total pagecache pages [ 515.323078][T10864] 0 pages in swap cache [ 515.329259][T10864] Free swap = 124996kB [ 515.337319][T10864] Total swap = 124996kB [ 515.344845][T10864] 2097051 pages RAM [ 515.349280][T10864] 0 pages HighMem/MovableOnly [ 515.355803][T10864] 432248 pages reserved [ 515.359974][T10864] 0 pages cma reserved [ 515.390870][ T5748] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 515.554644][ T5748] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 515.576928][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.602002][ T5748] usb 4-1: Product: syz [ 515.615882][ T5748] usb 4-1: Manufacturer: syz [ 515.624591][ T5748] usb 4-1: SerialNumber: syz [ 515.656590][ T5748] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 515.834648][ T11] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 516.551100][ T5622] Bluetooth: hci3: ISO packet for unknown connection handle 52 [ 517.029443][T10895] netlink: zone id is out of range [ 517.042424][T10895] netlink: zone id is out of range [ 517.047709][T10895] netlink: zone id is out of range [ 517.053303][T10895] netlink: zone id is out of range [ 517.059315][T10895] netlink: zone id is out of range [ 517.065570][T10895] netlink: zone id is out of range [ 517.071016][T10895] netlink: zone id is out of range [ 517.076294][T10895] netlink: zone id is out of range [ 517.081662][T10895] netlink: zone id is out of range [ 517.300342][T10879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.311041][T10879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.319936][ T11] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 517.340167][ T11] ath9k_htc: Failed to initialize the device [ 517.354948][ T5748] usb 4-1: USB disconnect, device number 40 [ 517.389941][ T5748] usb 4-1: ath9k_htc: USB layer deinitialized [ 517.610635][T10904] fuse: Bad value for 'fd' [ 517.739970][T10906] 9p: Bad value for 'source' [ 518.026017][ T24] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 518.043172][T10910] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1399'. [ 518.203033][ T24] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 518.224803][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.244305][ T24] usb 6-1: config 0 has no interface number 0 [ 518.255088][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 518.273203][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.283306][ T24] usb 6-1: Product: syz [ 518.293526][ T24] usb 6-1: Manufacturer: syz [ 518.308092][ T24] usb 6-1: SerialNumber: syz [ 518.327915][ T24] usb 6-1: config 0 descriptor?? [ 518.491241][ T803] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 518.733775][ T803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.759881][ T803] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 518.796966][ T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.846232][ T803] usb 4-1: config 0 descriptor?? [ 518.894580][ T803] pwc: Askey VC010 type 2 USB webcam detected. [ 518.923216][T10925] block device autoloading is deprecated and will be removed. [ 519.100590][ T11] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 519.150625][ T5709] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 519.262229][ T11] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 519.280449][ T11] usb 2-1: config 0 has no interface number 0 [ 519.289349][ T11] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 519.289654][ T803] pwc: recv_control_msg error -32 req 02 val 2b00 [ 519.319650][ T803] pwc: recv_control_msg error -32 req 02 val 2700 [ 519.321389][ T11] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 519.328103][ T803] pwc: recv_control_msg error -32 req 02 val 2c00 [ 519.349005][ T11] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 519.349955][ T803] pwc: recv_control_msg error -32 req 04 val 1000 [ 519.367281][ T5709] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.368736][ T11] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 519.379187][ T5709] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 519.404829][ T11] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 519.406163][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.429601][T10914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.430486][ T803] pwc: recv_control_msg error -32 req 04 val 1300 [ 519.438254][ T11] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 519.456235][ T5709] usb 5-1: config 0 descriptor?? [ 519.457461][T10914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.467864][ T5709] pwc: Askey VC010 type 2 USB webcam detected. [ 519.481137][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.492252][ T11] usb 2-1: config 0 descriptor?? [ 519.498075][T10927] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 519.511106][ T11] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 519.833126][ T803] pwc: recv_control_msg error -32 req 02 val 2000 [ 519.842298][ T803] pwc: recv_control_msg error -32 req 02 val 2100 [ 519.876273][ T5709] pwc: recv_control_msg error -32 req 02 val 2b00 [ 519.891996][ T5709] pwc: recv_control_msg error -32 req 02 val 2700 [ 519.902302][ T5709] pwc: recv_control_msg error -32 req 02 val 2c00 [ 520.621861][ T803] pwc: recv_control_msg error -71 req 02 val 2500 [ 520.675056][ T5709] pwc: recv_control_msg error -32 req 04 val 1000 [ 520.795138][ T803] pwc: recv_control_msg error -71 req 02 val 2400 [ 520.865463][ T5709] pwc: recv_control_msg error -32 req 04 val 1300 [ 520.913249][ T803] pwc: recv_control_msg error -71 req 02 val 2600 [ 520.957654][ T5709] pwc: recv_control_msg error -32 req 04 val 1400 [ 520.989434][ T803] pwc: recv_control_msg error -71 req 02 val 2900 [ 521.026894][ T5709] pwc: recv_control_msg error -32 req 02 val 2000 [ 521.064949][ T803] pwc: recv_control_msg error -71 req 02 val 2800 [ 521.096391][ T5709] pwc: recv_control_msg error -32 req 02 val 2100 [ 521.138298][ T803] pwc: recv_control_msg error -71 req 04 val 1100 [ 521.176468][ T5709] pwc: recv_control_msg error -32 req 04 val 1500 [ 521.237366][ T803] pwc: recv_control_msg error -71 req 04 val 1200 [ 521.279863][ T24] uvcvideo 6-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 521.323436][ T5709] pwc: recv_control_msg error -32 req 02 val 2500 [ 521.345438][ T803] pwc: Registered as video103. [ 521.364379][ T24] uvcvideo 6-1:0.64: No valid video chain found. [ 521.398185][ T5709] pwc: recv_control_msg error -32 req 02 val 2400 [ 521.409412][ T803] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 521.458055][ T24] usb 6-1: USB disconnect, device number 42 [ 521.500879][ T5748] usb 2-1: USB disconnect, device number 53 [ 521.563502][ T803] usb 4-1: USB disconnect, device number 41 [ 521.574037][T10941] net_ratelimit: 18 callbacks suppressed [ 521.574048][T10941] netlink: zone id is out of range [ 521.584835][T10941] netlink: zone id is out of range [ 521.589937][T10941] netlink: zone id is out of range [ 521.595059][T10941] netlink: zone id is out of range [ 521.600148][T10941] netlink: zone id is out of range [ 521.605272][T10941] netlink: zone id is out of range [ 521.610364][T10941] netlink: zone id is out of range [ 521.615548][T10941] netlink: zone id is out of range [ 521.620694][T10941] netlink: zone id is out of range [ 521.625794][T10941] netlink: zone id is out of range [ 521.727826][ T5748] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 521.816917][ T5709] pwc: recv_control_msg error -71 req 02 val 2600 [ 521.835207][ T5709] pwc: recv_control_msg error -71 req 02 val 2900 [ 521.852399][ T5709] pwc: recv_control_msg error -71 req 02 val 2800 [ 521.869672][ T5709] pwc: recv_control_msg error -71 req 04 val 1100 [ 521.891055][ T5709] pwc: recv_control_msg error -71 req 04 val 1200 [ 521.922338][ T5709] pwc: Registered as video103. [ 521.942409][ T5709] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 521.991793][ T5709] usb 5-1: USB disconnect, device number 54 [ 522.398041][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1414'. [ 523.483133][T10965] xt_hashlimit: size too large, truncated to 1048576 [ 523.537832][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 523.567868][T10970] 8021q: adding VLAN 0 to HW filter on device team6 [ 523.747812][T10972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1417'. [ 523.900463][ T11] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 523.965585][T10977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1419'. [ 524.522427][ T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.534106][ T11] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 524.542593][T10979] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1420'. [ 524.544579][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.645383][ T11] usb 5-1: config 0 descriptor?? [ 524.667297][ T11] pwc: Askey VC010 type 2 USB webcam detected. [ 524.805851][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1422'. [ 525.075689][ T11] pwc: recv_control_msg error -32 req 02 val 2b00 [ 525.093602][ T11] pwc: recv_control_msg error -32 req 02 val 2700 [ 525.110059][ T11] pwc: recv_control_msg error -32 req 02 val 2c00 [ 525.123916][ T11] pwc: recv_control_msg error -32 req 04 val 1000 [ 525.141279][T10971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.149680][ T11] pwc: recv_control_msg error -32 req 04 val 1300 [ 525.161069][T10971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.387697][ T11] pwc: recv_control_msg error -32 req 02 val 2000 [ 525.408466][ T11] pwc: recv_control_msg error -32 req 02 val 2100 [ 525.639399][ T11] pwc: recv_control_msg error -71 req 02 val 2500 [ 525.665880][ T11] pwc: recv_control_msg error -71 req 02 val 2400 [ 525.692849][ T11] pwc: recv_control_msg error -71 req 02 val 2600 [ 525.714192][ T11] pwc: recv_control_msg error -71 req 02 val 2900 [ 525.745086][ T11] pwc: recv_control_msg error -71 req 02 val 2800 [ 525.772405][ T11] pwc: recv_control_msg error -71 req 04 val 1100 [ 525.791958][ T11] pwc: recv_control_msg error -71 req 04 val 1200 [ 525.845362][ T11] pwc: Registered as video103. [ 525.923402][ T11] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 525.984576][ T11] usb 5-1: USB disconnect, device number 55 [ 526.104421][T11002] tipc: Started in network mode [ 526.116099][T11002] tipc: Node identity 4, cluster identity 4711 [ 526.129337][T11002] tipc: Node number set to 4 [ 526.137824][T11002] Invalid logical block size (67108864) [ 527.176446][T11007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1426'. [ 528.284199][T11025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1431'. [ 529.894442][T11029] hfsplus: unable to find HFS+ superblock [ 530.450567][ T5756] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 530.490499][ T11] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 530.497968][T11043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1438'. [ 530.620529][ T5756] usb 5-1: Using ep0 maxpacket: 32 [ 530.664394][ T5756] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 530.733785][ T5756] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.744161][ T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.759459][ T5756] usb 5-1: config 0 descriptor?? [ 530.766569][ T11] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 530.779485][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.815675][T11041] net_ratelimit: 44 callbacks suppressed [ 530.815693][T11041] netlink: zone id is out of range [ 530.826501][T11041] netlink: zone id is out of range [ 530.831759][T11041] netlink: zone id is out of range [ 530.836860][T11041] netlink: zone id is out of range [ 530.842000][T11041] netlink: zone id is out of range [ 530.847083][T11041] netlink: zone id is out of range [ 530.852211][T11041] netlink: zone id is out of range [ 530.857306][T11041] netlink: zone id is out of range [ 530.862429][T11041] netlink: zone id is out of range [ 530.867519][T11041] netlink: zone id is out of range [ 530.887987][ T11] usb 4-1: config 0 descriptor?? [ 530.916812][ T11] pwc: Askey VC010 type 2 USB webcam detected. [ 530.999781][ T5756] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 531.183445][ T5756] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 531.192439][ T5756] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 531.342635][ T5622] Bluetooth: hci5: ISO packet for unknown connection handle 52 [ 531.646434][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1434'. [ 531.713938][ T11] pwc: recv_control_msg error -32 req 02 val 2b00 [ 531.742457][ T11] pwc: recv_control_msg error -32 req 02 val 2700 [ 531.760544][ T11] pwc: recv_control_msg error -32 req 02 val 2c00 [ 531.774119][ T11] pwc: recv_control_msg error -32 req 04 val 1000 [ 531.793541][ T11] pwc: recv_control_msg error -32 req 04 val 1300 [ 531.811043][T11037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.849379][T11037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.027085][T11061] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 532.037494][T11061] overlayfs: missing 'lowerdir' [ 532.079679][ T5612] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 532.161232][ T11] pwc: recv_control_msg error -32 req 02 val 2000 [ 532.169582][ T11] pwc: recv_control_msg error -32 req 02 val 2100 [ 532.241455][ T5612] usb 2-1: Using ep0 maxpacket: 16 [ 532.249507][ T5612] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 532.264316][ T5612] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 532.331625][T11067] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1444'. [ 532.772243][ T11] pwc: recv_control_msg error -71 req 02 val 2500 [ 532.778941][ T5612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 532.790775][ T11] pwc: recv_control_msg error -71 req 02 val 2400 [ 532.797393][ T5612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 532.808758][ T11] pwc: recv_control_msg error -71 req 02 val 2600 [ 532.816066][ T11] pwc: recv_control_msg error -71 req 02 val 2900 [ 532.824413][ T11] pwc: recv_control_msg error -71 req 02 val 2800 [ 532.832644][ T5612] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 532.842298][ T11] pwc: recv_control_msg error -71 req 04 val 1100 [ 532.848760][ T5612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.857027][ T5612] usb 2-1: Product: syz [ 532.861361][ T11] pwc: recv_control_msg error -71 req 04 val 1200 [ 532.870202][ T11] pwc: Registered as video103. [ 532.875098][ T5612] usb 2-1: Manufacturer: syz [ 532.879746][ T5612] usb 2-1: SerialNumber: syz [ 532.997080][ T11] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 533.009943][ T5612] usb 2-1: config 0 descriptor?? [ 533.071715][ T11] usb 4-1: USB disconnect, device number 42 [ 533.856367][T11078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11078 comm=syz.5.1448 [ 534.493097][ T5612] appledisplay: Apple Cinema Display connected [ 534.534481][ T5709] usb 2-1: USB disconnect, device number 54 [ 534.534494][ C0] usb 2-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 534.621551][ T5709] appledisplay: Apple Cinema Display disconnected [ 535.122299][T11092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1452'. [ 535.500568][ T5709] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 535.670537][ T5709] usb 4-1: Using ep0 maxpacket: 8 [ 535.687639][ T5709] usb 4-1: config 0 has no interfaces? [ 535.703078][ T5709] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 535.716335][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.747762][ T5709] usb 4-1: config 0 descriptor?? [ 535.831859][T11106] ALSA: seq fatal error: cannot create timer (-22) [ 535.972391][ T24] usb 4-1: USB disconnect, device number 43 [ 536.415173][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1458'. [ 537.802760][T11135] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 537.825169][T11135] overlayfs: missing 'lowerdir' [ 537.861597][T11137] x_tables: duplicate underflow at hook 1 [ 539.472138][T11151] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1473'. [ 539.987855][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1474'. [ 540.789314][T11161] veth0_macvtap: left promiscuous mode [ 540.802077][T11161] veth0_macvtap: entered promiscuous mode [ 540.809471][T11161] veth0_macvtap: entered allmulticast mode [ 541.745861][ T5612] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 541.852227][T11172] syzkaller1: entered promiscuous mode [ 541.857850][T11172] syzkaller1: entered allmulticast mode [ 541.988214][ T5612] usb 2-1: descriptor type invalid, skip [ 542.111624][ T5612] usb 2-1: not running at top speed; connect to a high speed hub [ 542.242367][ T5612] usb 2-1: config 245 has an invalid interface number: 150 but max is 2 [ 542.260450][ T5612] usb 2-1: config 245 contains an unexpected descriptor of type 0x1, skipping [ 542.277472][ T5612] usb 2-1: config 245 has an invalid interface number: 173 but max is 2 [ 542.299711][ T5612] usb 2-1: config 245 has an invalid interface number: 185 but max is 2 [ 542.321913][ T5612] usb 2-1: config 245 has no interface number 0 [ 542.351627][ T5612] usb 2-1: config 245 has no interface number 1 [ 542.367955][ T5612] usb 2-1: config 245 has no interface number 2 [ 542.383795][ T5612] usb 2-1: config 245 interface 150 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 542.405478][ T5612] usb 2-1: config 245 interface 150 altsetting 6 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 542.418019][ T5612] usb 2-1: config 245 interface 150 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 542.429459][ T5612] usb 2-1: config 245 interface 150 altsetting 6 endpoint 0x8 has invalid wMaxPacketSize 0 [ 542.440106][ T5612] usb 2-1: config 245 interface 173 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 542.451937][ T5612] usb 2-1: config 245 interface 173 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 542.463937][ T5612] usb 2-1: config 245 interface 173 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 542.495326][ T5612] usb 2-1: config 245 interface 150 has no altsetting 0 [ 542.518900][ T5612] usb 2-1: config 245 interface 185 has no altsetting 0 [ 542.553973][ T5612] usb 2-1: New USB device found, idVendor=2639, idProduct=0013, bcdDevice=30.64 [ 542.583619][ T5612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.603957][ T5612] usb 2-1: Product: 㠊 [ 542.616107][ T5612] usb 2-1: Manufacturer: ᠌ [ 542.626605][ T5612] usb 2-1: SerialNumber: 㐁 [ 542.658327][T11161] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 542.819770][ T5622] Bluetooth: hci4: ISO packet for unknown connection handle 52 [ 543.070699][ T11] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 543.234200][ T5612] usb 2-1: USB disconnect, device number 55 [ 543.280470][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 543.295147][ T11] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 543.315324][ T11] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 543.335292][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.355583][ T11] usb 4-1: Product: syz [ 543.365738][ T11] usb 4-1: Manufacturer: syz [ 543.383295][ T11] usb 4-1: SerialNumber: syz [ 543.409074][ T11] r8152-cfgselector 4-1: Unknown version 0x0000 [ 543.425914][ T11] r8152-cfgselector 4-1: config 0 descriptor?? [ 543.640263][T11191] 9p: Bad value for 'source' [ 543.650233][T11191] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1479'. [ 544.138203][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 545.429281][ T11] r8152-cfgselector 4-1: Unknown version 0x0000 [ 545.494725][ T11] r8152-cfgselector 4-1: No union descriptors [ 545.758680][ T11] r8152-cfgselector 4-1: USB disconnect, device number 44 [ 546.643334][T11224] xt_hashlimit: size too large, truncated to 1048576 [ 546.750469][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1495'. [ 547.578555][T11225] 8021q: adding VLAN 0 to HW filter on device team4 [ 547.909836][T11230] input: syz0 as /devices/virtual/input/input24 [ 548.029166][T11231] 9p: Bad value for 'source' [ 548.608740][T11241] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1496'. [ 549.979397][ T5622] Bluetooth: hci3: ISO packet for unknown connection handle 52 [ 550.193921][ T803] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 550.463783][ T803] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 550.474865][ T803] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 550.486152][ T803] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 550.495229][ T803] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 550.506902][ T803] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 550.519353][ T803] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 550.532632][ T803] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 550.543738][ T803] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 550.551919][ T803] usb 4-1: Product: syz [ 550.556186][ T803] usb 4-1: Manufacturer: syz [ 550.568584][T11253] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 550.577971][ T803] cdc_wdm 4-1:1.0: skipping garbage [ 550.586500][ T803] cdc_wdm 4-1:1.0: skipping garbage [ 550.594085][ T803] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 550.600078][ T803] cdc_wdm 4-1:1.0: Unknown control protocol [ 550.786839][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 550.793635][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 550.800051][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 550.806657][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 550.812759][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 550.832698][ T11] usb 4-1: USB disconnect, device number 45 [ 551.540728][T11265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1505'. [ 553.111178][T11274] syzkaller0: entered promiscuous mode [ 553.119837][T11274] syzkaller0: entered allmulticast mode [ 553.129671][ T29] audit: type=1400 audit(1783374336.977:1720): avc: denied { set_context_mgr } for pid=11273 comm="syz.1.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 553.169545][ T29] audit: type=1400 audit(1783374337.017:1721): avc: denied { call } for pid=11273 comm="syz.1.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 553.170137][T11274] binder: 11273:11274 ioctl c0306201 0 returned -14 [ 553.334463][T11282] overlayfs: missing 'lowerdir' [ 554.479454][T11293] netlink: 'syz.0.1513': attribute type 4 has an invalid length. [ 555.583973][ T11] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 555.729822][T11302] [ 555.732179][T11302] ============================================ [ 555.738322][T11302] WARNING: possible recursive locking detected [ 555.744465][T11302] syzkaller #0 Tainted: G L [ 555.750433][T11302] -------------------------------------------- [ 555.756571][T11302] syz.1.1517/11302 is trying to acquire lock: [ 555.762641][T11302] ffff888032d0e0f0 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_do_insn+0x2e/0x360 [ 555.771554][T11302] [ 555.771554][T11302] but task is already holding lock: [ 555.778902][T11302] ffff8880326788f0 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 555.788567][T11302] [ 555.788567][T11302] other info that might help us debug this: [ 555.796609][T11302] Possible unsafe locking scenario: [ 555.796609][T11302] [ 555.804039][T11302] CPU0 [ 555.807300][T11302] ---- [ 555.810559][T11302] lock(&dev->mutex#4); [ 555.814795][T11302] lock(&dev->mutex#4); [ 555.819031][T11302] [ 555.819031][T11302] *** DEADLOCK *** [ 555.819031][T11302] [ 555.827152][T11302] May be due to missing lock nesting notation [ 555.827152][T11302] [ 555.835449][T11302] 1 lock held by syz.1.1517/11302: [ 555.840541][T11302] #0: ffff8880326788f0 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 555.850644][T11302] [ 555.850644][T11302] stack backtrace: [ 555.856528][T11302] CPU: 1 UID: 0 PID: 11302 Comm: syz.1.1517 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.856560][T11302] Tainted: [L]=SOFTLOCKUP [ 555.856567][T11302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 555.856580][T11302] Call Trace: [ 555.856587][T11302] [ 555.856595][T11302] dump_stack_lvl+0x100/0x190 [ 555.856623][T11302] print_deadlock_bug.cold+0xbd/0xca [ 555.856658][T11302] __lock_acquire+0x1256/0x1a40 [ 555.856685][T11302] lock_acquire+0x1b9/0x370 [ 555.856711][T11302] ? comedi_do_insn+0x2e/0x360 [ 555.856742][T11302] ? __pfx___might_resched+0x10/0x10 [ 555.856767][T11302] __mutex_lock+0x1a4/0x1bd0 [ 555.856796][T11302] ? comedi_do_insn+0x2e/0x360 [ 555.856825][T11302] ? comedi_do_insn+0x2e/0x360 [ 555.856856][T11302] ? __pfx___mutex_lock+0x10/0x10 [ 555.856888][T11302] ? __pfx___might_resched+0x10/0x10 [ 555.856912][T11302] ? rcu_is_watching+0x12/0xc0 [ 555.856939][T11302] ? __up_read+0x333/0x980 [ 555.856966][T11302] ? comedi_do_insn+0x2e/0x360 [ 555.856994][T11302] comedi_do_insn+0x2e/0x360 [ 555.857024][T11302] comedi_dio_bitfield2+0x3c0/0x420 [ 555.857056][T11302] ? __pfx_comedi_dio_bitfield2+0x10/0x10 [ 555.857086][T11302] ? __pfx_widen_string+0x10/0x10 [ 555.857107][T11302] ? __kernel_text_address+0xd/0x30 [ 555.857127][T11302] ? unwind_get_return_address+0x59/0xa0 [ 555.857161][T11302] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 555.857197][T11302] bonding_dio_insn_bits+0x2b9/0x570 [ 555.857221][T11302] ? __pfx_bonding_dio_insn_bits+0x10/0x10 [ 555.857244][T11302] ? __lock_acquire+0x49f/0x1a40 [ 555.857267][T11302] insn_rw_emulate_bits+0x2a2/0x5e0 [ 555.857296][T11302] ? __pfx_insn_rw_emulate_bits+0x10/0x10 [ 555.857321][T11302] ? find_held_lock+0x2b/0x80 [ 555.857350][T11302] ? rcu_read_unlock+0x17/0x60 [ 555.857377][T11302] ? comedi_check_chanlist+0x27e/0x300 [ 555.857404][T11302] parse_insn+0x83f/0x19f0 [ 555.857424][T11302] ? __pfx_parse_insn+0x10/0x10 [ 555.857442][T11302] ? __might_fault+0xc5/0x140 [ 555.857471][T11302] ? do_insn_ioctl+0xda/0x4e0 [ 555.857494][T11302] do_insn_ioctl+0x152/0x4e0 [ 555.857517][T11302] comedi_unlocked_ioctl+0xf68/0x3310 [ 555.857541][T11302] ? tomoyo_path_number_perm+0x188/0x580 [ 555.857568][T11302] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 555.857594][T11302] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 555.857616][T11302] ? do_vfs_ioctl+0x226/0x13e0 [ 555.857643][T11302] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 555.857671][T11302] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 555.857715][T11302] ? __fget_files+0x215/0x3d0 [ 555.857749][T11302] ? hook_file_ioctl_common+0x140/0x440 [ 555.857785][T11302] ? selinux_file_ioctl+0x13b/0x290 [ 555.857812][T11302] ? selinux_file_ioctl+0xb6/0x290 [ 555.857840][T11302] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 555.857865][T11302] __x64_sys_ioctl+0x18e/0x210 [ 555.857892][T11302] do_syscall_64+0x115/0x870 [ 555.857920][T11302] ? clear_bhb_loop+0x40/0x90 [ 555.857943][T11302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.857964][T11302] RIP: 0033:0x7fde6f19de59 [ 555.857981][T11302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.858002][T11302] RSP: 002b:00007fde7014f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 555.858021][T11302] RAX: ffffffffffffffda RBX: 00007fde6f425fa0 RCX: 00007fde6f19de59 [ 555.858035][T11302] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000004 [ 555.858049][T11302] RBP: 00007fde6f233e6f R08: 0000000000000000 R09: 0000000000000000 [ 555.858062][T11302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.858075][T11302] R13: 00007fde6f426038 R14: 00007fde6f425fa0 R15: 00007ffcf72553c8 [ 555.858096][T11302] [ 555.933465][ T11] usb 6-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config [ 556.023481][T11308] netlink: 400 bytes leftover after parsing attributes in process `syz.1.1517'. [ 556.089625][ T11] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 556.254753][ T11] usb 6-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.00 [ 556.263928][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.278902][ T11] usb 6-1: config 0 descriptor?? [ 557.471515][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.477853][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 558.502154][ T5709] usb 6-1: USB disconnect, device number 43