last executing test programs: 18m17.844718068s ago: executing program 32 (id=193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140016001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 17m29.396455842s ago: executing program 33 (id=313): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) (async) move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) (async) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r1, &(0x7f0000010540)={0x2020}, 0x2020) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x40, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x3c}], 0x1}, 0x0) 14m14.07309055s ago: executing program 34 (id=1504): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003020000402505a1a440000102030109027700020108a0080904000001020d00000b24060001c7679d8123b605240000800d240f0106000000090003000906241a0200230424020a042402030e24070003000f00060004000700090581030002be00090904010000020d00000904010102020d00000905820200020d0404090503022000040809"], &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x42, 0x3, 0xe0, 0x20, 0xfd}, 0x28, &(0x7f0000000140)={0x5, 0xf, 0x28, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x1, 0x0, 0x0, [0x30, 0xff3fc0, 0x3ff0, 0x3fa0, 0x1fe00cf]}, @ptm_cap={0x3}]}, 0x5, [{0x7c, &(0x7f0000000180)=@string={0x7c, 0x3, "204f9bc1505aac18ed81adfe5e6c41c6edd32f974ec861295d84f68479a058fccc997aff9456c26eb860ab8521457093a8120e386f5bcd4cdd2382d3007a997663f3fe237fe7a2f2c1b54c6a6192b57523b26f08c9fa0bccc6bf87115233c703981c594f62890c63120cb3b797ed544d2ab8359b44ecbd0ca141"}}, {0x71, &(0x7f00000002c0)=ANY=[@ANYBLOB="71038e0329df24e337cf6791e3d70c777223d51caf01f5ac385bc737b14b44b44b270e5276aacd9bec20258d0caf79bfe838436af97f2c20d2284dfa3757ae2ec851c774938899349bb445e0ad54046b8706cb3acdc1de10f265e5181aee1269552379c138bc93ebeec12745b401d1e279"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x438}}, {0x91, &(0x7f0000000340)=@string={0x91, 0x3, "738223d9dfe69b36fd8b12c1dad1ce54130578d356985b7a282ef2639deab9edb88b8858f5447186b01a50e2a628f3ca1f1d4a500c45b028d3b84243825b64abf4d1ad42215538fb469331ee73c747d6e12363d69439722bae133fe653a425efb0f47307c45c8ddb1f0761a7c8d037523a7fb560bc3f630d4e0c3c6a931a9b962641c6d92d13c4de8e20f0af1ef9cf"}}, {0x92, &(0x7f0000000400)=@string={0x92, 0x3, "385dc6869bdd89a7307798d3953db022c041ad65f6f5b6e6a01020da57d863e6b9408874581419578e96de68ec09cd67a46e4de8129742b358c463a843c6c349880d2a8da6bcafd687f29927ec5cc152c3a3cc3fd7b137e63baafb6467ffd28bef2f61c2be9cc2fa8d955535ae0c1397770e9c78a19cc9b956757ed9691b0d6603b80b521fc2f3dcfbc25e7721be3319"}}]}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eca20ae40000440003"], 0x58}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x6, @string={0x6, 0x3, "cb2226b8"}}}, 0x0) 12m47.714612327s ago: executing program 35 (id=2035): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d21534081e041c40fd7bcb1fef8b000009"], 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x0, 0x13, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) syz_usb_control_io(r0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) cachestat(r4, &(0x7f0000000040)={0x5, 0xefc4}, &(0x7f0000000080), 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_stall_count', 0x2100, 0x15) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) write$UHID_INPUT(r5, &(0x7f0000000d00)={0x8, {"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", 0xfffffecb}}, 0x1006) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000100)={0x1, 0x0, 0xfffffffe, &(0x7f00000000c0)={0x16, "e80126a606499cffffff63aa8100000000a84c877a000000000000001000"}}) 10m46.218028058s ago: executing program 36 (id=2618): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x7, 0x0, 0x4, 0x0, 0x9}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x440d1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000300), 0x1) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x50, 0x0, 0xb58}, 0xc) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xc, r5}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x8000000000000000}) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000440)={0x28, 0x6, r5, r5, 0x24ccd3, 0x40000000003}) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 10m22.720989003s ago: executing program 9 (id=2724): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0xfffffffe}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x28c03, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2509dd8fcc61009ecd25b45427257b79b0894a0e7d29e488952ab60ac5c53302312c01f3e8e1fb35997f9be78b68c6370927aaa9de1b51bb4623fe68e3feb79ddc78b10d366828c1b929", @ANYRES64=r0, @ANYRES16=r2, @ANYRESHEX=r0], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x4084) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2509dd8fcc61009ecd25b45427257b79b0894a0e7d29e488952ab60ac5c53302312c01f3e8e1fb35997f9be78b68c6370927aaa9de1b51bb4623fe68e3feb79ddc78b10d366828c1b929", @ANYRES64=r0, @ANYRES16=r2, @ANYRESHEX=r0], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x4084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 10m22.509754765s ago: executing program 9 (id=2727): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x40000000015, 0x5, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) getsockopt(r4, 0x200000000114, 0x7, 0x0, &(0x7f0000000040)) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r2, 0x3ba0, &(0x7f0000000080)={0x48, 0xb, r3}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x44}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) 10m22.257486548s ago: executing program 9 (id=2731): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000280), 0x3, 0x389001) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000500)={0x40, 0xf, 0x5, 0x1ff, 0x0, 0x5, 0x0}) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)=0x40000001) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x14680, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x320, 0x78, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, {0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0xfffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x7, 0x53, 0x202, 0x1, 0xc}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000010000000000000000610000000000000000020000000000"], &(0x7f0000000340)=""/2, 0x21, 0x2, 0x1, 0x47}, 0x28) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x10, &(0x7f0000000180)=0x3000, 0x4) 10m18.878041285s ago: executing program 9 (id=2747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400fff51000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 10m18.716017831s ago: executing program 9 (id=2751): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000009000000420000004008000000000000", @ANYRES32], 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r8) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e21, @multicast1}}, [0x5, 0x4b77ef9e, 0x8, 0x74e5, 0x8, 0x7daf, 0x991c, 0x2, 0xbd, 0x81, 0x3, 0x5, 0x1, 0xc, 0xffffffffffffffff]}, &(0x7f0000000580)=0x100) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 10m17.210219932s ago: executing program 9 (id=2753): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000d0040000000000eccd"]) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x1) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000000)={'wlan1\x00', @random="c32014016800"}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100480, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r10, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0x8000000000000001, 0x8, 0x0, 0x8, 0x10001, 0x80000000000006, 0x1000000006, 0x10007ffffe]}) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc6541fc48b8e7320000000000000f23d80f21f80f23e1f8f30f1edd0f2221c74c24022063800000002c24f30f556797c483fd005b02ea6426470f01cf65666466430f3833af00580000", 0x4d}], 0x1, 0x3e, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f9edff", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xfff, 0xfff8}}}}}}, 0x0) 10m0.019866396s ago: executing program 37 (id=2753): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000d0040000000000eccd"]) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x1) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000000)={'wlan1\x00', @random="c32014016800"}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100480, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r10, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0x8000000000000001, 0x8, 0x0, 0x8, 0x10001, 0x80000000000006, 0x1000000006, 0x10007ffffe]}) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc6541fc48b8e7320000000000000f23d80f21f80f23e1f8f30f1edd0f2221c74c24022063800000002c24f30f556797c483fd005b02ea6426470f01cf65666466430f3833af00580000", 0x4d}], 0x1, 0x3e, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f9edff", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xfff, 0xfff8}}}}}}, 0x0) 9m25.151741606s ago: executing program 7 (id=2841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x600, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 9m23.128214348s ago: executing program 7 (id=2847): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6215e3c3}]}}}}}}}, 0x0) 9m21.844549625s ago: executing program 7 (id=2848): r0 = msgget$private(0x0, 0x200) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000200)={0x10000802, 0x0, 0x40000, 0x40000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200011904000000000000001c"], 0x28}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x3, 0x0, &(0x7f0000000340)=0xa1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x10, 0x9, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xb5, 0xe661, 0x4, 0xb, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0xd9af, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000004, 0x5f31, 0xd, 0x4e0, 0x2, 0x5, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x3, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x102, 0x5, 0x0, 0x2950bfaf, 0xffe, 0xa2, 0xfffff800, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0xffff, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x40009, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x10000226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x2, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2000000fc) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f00000001c0)={0x28, 0x6, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x43044) msgctl$IPC_RMID(r0, 0x0) r10 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) lseek(r10, 0x5, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000003780)={{0x12, 0x1, 0x7b1, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc53f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x90, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x598, 0x0, 0x1, {0x22, 0x40}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x9d, 0xe}}}}}]}}]}}, &(0x7f0000003b80)={0x0, 0x0, 0xf, &(0x7f0000003800)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xfa, 0x0, 0x7}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 9m17.589669544s ago: executing program 7 (id=2850): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r0, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0x7}}]}}]}, 0x3c}}, 0x24044094) ioctl$TCSBRKP(r2, 0x5425, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c6a7be57822013db999a640d02d2245ee4ad7539144477ce6c2555bfb1d0c5e8cac020a36d828f16af7ac616b1dac9883c0e391c377644bf95e9a229ad045843a8f44d14ea1af5a89cfef4c23b54cdff7de01cf", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c0002800500090089000000"], 0x3c}}, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r8, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x3, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) ioctl$TIOCGPGRP(r8, 0x5437, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x80}, 0xc) write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r9, 0x3) 9m16.369604651s ago: executing program 7 (id=2853): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r2, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x4000042) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0x2) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r6, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000280)={0x9, 0x0, 0x9, 0x7fffffffffffffff, 0xf, 0x7}) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x2c020400) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 9m11.086249952s ago: executing program 7 (id=2859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000002800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e00000000000000beff00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000010000000000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmmsg$inet6(r6, &(0x7f0000002940), 0x40000000000017d, 0x811) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 8m55.975569552s ago: executing program 38 (id=2859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000002800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e00000000000000beff00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000010000000000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmmsg$inet6(r6, &(0x7f0000002940), 0x40000000000017d, 0x811) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 8m54.368935301s ago: executing program 1 (id=2888): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0x94, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) chdir(&(0x7f0000000280)='./file0\x00') ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x3, 0x5189, 0x3}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00), 0x24200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x800, 0x0) unshare(0x40280) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') recvmsg$kcm(r3, &(0x7f00000005c0)={&(0x7f0000000640)=@nl=@proc, 0x80, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000380)=""/30, 0x1e}, {&(0x7f0000000740)=""/173, 0xad}, {&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/116, 0x74}], 0x5, &(0x7f0000000980)=""/110, 0x6e}, 0x2) setns(r6, 0x0) umount2(&(0x7f0000000000)='.\x00', 0x2) setns(r6, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}], {0x95, 0x0, 0x0, 0x20}}, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) syz_clone3(&(0x7f00000004c0)={0x11010280, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)=0x0, {0x36}, &(0x7f0000001100)=""/4096, 0x1000, &(0x7f00000003c0)=""/199, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) signalfd(0xffffffffffffffff, &(0x7f0000000480)={[0x6]}, 0x8) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000600)={r7, r8, 0xffffffffffffffff}, 0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x803840, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@fscache}], [{@fowner_gt={'fowner>', r8}}]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_int(r9, 0x1, 0xa, &(0x7f0000000000), 0x4) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) 8m46.088079608s ago: executing program 1 (id=2890): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="090000001c000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000060000000000000000000000000002000000004000"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r5, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x25, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2003041, 0x0) 8m44.800205555s ago: executing program 1 (id=2893): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xa0a7a89b}, {0x6, 0x24, 0x1a, 0x0, 0x3b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0xd5c3, 0x0, 0x0, 0x0) r7 = inotify_init() readv(r7, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x10, 0x40, 0xf2a, 0x15e, {{0x2c, 0x4, 0x3, 0xd, 0xb0, 0x65, 0x0, 0x2, 0x4, 0x0, @multicast2, @loopback, {[@rr={0x7, 0x7, 0x52, [@remote]}, @timestamp_addr={0x44, 0x34, 0x48, 0x1, 0x5, [{@private=0xa010102, 0xfffffff9}, {@empty, 0x8}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x3ff}, {@rand_addr=0x64010101, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @timestamp_prespec={0x44, 0x1c, 0x13, 0x3, 0x8, [{@private=0xa010100, 0x3}, {@private=0xa010102, 0xe76a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x928b}]}, @timestamp_addr={0x44, 0x2c, 0xb6, 0x1, 0x3, [{@broadcast, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x2}, {@broadcast, 0xa}, {@multicast2, 0xf}, {@remote, 0x1}]}, @generic={0x83, 0x6, "60f93e88"}, @generic={0x83, 0x5, "81df40"}, @lsrr={0x83, 0xb, 0x24, [@remote, @remote]}]}}}}}) r8 = io_uring_setup(0x51fa, &(0x7f0000000900)={0x0, 0xa27f, 0x1000, 0x2, 0x233}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000002340)=0x0) io_submit(r10, 0x1, &(0x7f00000014c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3ba0, &(0x7f0000000a80)={0x48}) syz_io_uring_setup(0x434c, &(0x7f0000000b40)={0x0, 0xa11, 0x20, 0x3, 0x275, 0x0, r8}, &(0x7f0000000b00), &(0x7f0000000a40)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x6}}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x1, 0x7}]}, {0x0, [0x0]}}, &(0x7f0000000600)=""/65, 0x43, 0x41, 0x5, 0x9, 0x10000, @value=r0}, 0x28) io_setup(0x1, &(0x7f00000004c0)=0x0) r12 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1214c2, 0x10) io_submit(r11, 0x3, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r12, &(0x7f0000000140)='i', 0x1, 0xfffffffe}]) 8m44.495572233s ago: executing program 8 (id=2895): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000680)={'raw\x00', 0x0, [0x3, 0x2, 0x3, 0xfffeffff, 0x23]}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00'}, 0x94) r6 = syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x84, r6, 0x100, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xeed}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8041}, 0x4048000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r7, 0x12b084226d2dad07, 0x8000000, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x4000000, 0x0) 8m37.737604304s ago: executing program 1 (id=2897): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x1e486f47, 0x4, 0xb, 0x2, 0x13, "3e9291333e2efae4bb9f8ccc2b0a3e0f8493be"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = io_uring_setup(0x5053, &(0x7f0000000140)={0x0, 0xfffffffc, 0x3681, 0x1, 0x23b}) io_uring_enter(r2, 0x0, 0x0, 0xf, 0x0, 0x0) 8m36.478697337s ago: executing program 1 (id=2898): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0x94, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) chdir(&(0x7f0000000280)='./file0\x00') ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x3, 0x5189, 0x3}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00), 0x24200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x800, 0x0) unshare(0x40280) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') recvmsg$kcm(r3, &(0x7f00000005c0)={&(0x7f0000000640)=@nl=@proc, 0x80, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000380)=""/30, 0x1e}, {&(0x7f0000000740)=""/173, 0xad}, {&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/116, 0x74}], 0x5, &(0x7f0000000980)=""/110, 0x6e}, 0x2) setns(r6, 0x0) umount2(&(0x7f0000000000)='.\x00', 0x2) setns(r6, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}], {0x95, 0x0, 0x0, 0x20}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) syz_clone3(0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) signalfd(0xffffffffffffffff, &(0x7f0000000480)={[0x6]}, 0x8) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000600)={0x0, r7, 0xffffffffffffffff}, 0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x803840, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@fscache}], [{@fowner_gt={'fowner>', r7}}]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0xa, &(0x7f0000000000), 0x4) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) 8m36.184137833s ago: executing program 1 (id=2900): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x6, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x7, 0x0, 0x3}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) socket$inet6(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) getpeername(r3, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f00000000c0)=0x80) sendmsg$nl_route_sched(r4, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0)=@newqdisc={0x0, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf0}}}, 0x10b8c}}, 0x0) 8m35.869788553s ago: executing program 8 (id=2902): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001480), r0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r5) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x310, r6, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xb4, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92c4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe670}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76fcbbb2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85ec}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12aa26a6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x688b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf85d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x294eed79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39f3c0a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ece2433}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b8efbce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b4070be}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a2bc8b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf7b}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3730}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x474d42e1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x950de54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c618fd9}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x17c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45d23ba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb644067}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x400ff257}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24b2399}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa569a3d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a1e065f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x772b7b0b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x432fe029}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x218b011c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd08666c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7054ffa1}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ed85f16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20a8ca74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xecfb0e0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73fd17b6}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0xa8, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x621bbd68}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x167e4f51}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x672f6679}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x93cc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a8c084d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77ede0dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38fb8b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef6a}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e37}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57da1b35}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4838d13a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa0c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x198655ad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e2e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43a3323f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb4b}]}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x20040811}, 0x2051) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x1}}) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) dup(r4) 8m22.713752602s ago: executing program 8 (id=2904): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x400, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x4e310}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x400, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x4e310}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async) 8m19.122964541s ago: executing program 39 (id=2900): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x6, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x7, 0x0, 0x3}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) socket$inet6(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) getpeername(r3, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f00000000c0)=0x80) sendmsg$nl_route_sched(r4, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0)=@newqdisc={0x0, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf0}}}, 0x10b8c}}, 0x0) 8m17.474561446s ago: executing program 8 (id=2908): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0)="0000000000000004ff6943b80000000800003fecf20000000086", 0x1a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r5, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x25, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2003041, 0x0) 8m16.032419781s ago: executing program 8 (id=2910): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}, 0xf4}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 8m9.101587192s ago: executing program 8 (id=2912): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000200)={0x3, 0x1}) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffffffffd6a}, 0x24000010) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0x10b49, 0x9, 0x8, 0x2, 0x7}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000100)={'gre0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$char_usb(r3, &(0x7f0000000240)="ebe12bc9c71b7e4d81679d387b8bf4235cd8e249c4b6117be51225369e5a8c150fdff09bb1050bca003d145c2dff7b865adfc6b2489b664957ca012d7baab525786cb7a53cd829579508a737f85bd84506b6db1116240b17d3592053c83446f5dea691ff10ae22641022cca5c2ccf8348e98b66f2aa4f99fe172d60e7bf1ea67f54bd4e1b0a68b6cd32dec88e707922be33fe3c44946fdfc0f1f754ce0bc6008", 0xa0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x45, 0x8, 0x1, 0xfffffff9}, {0x0, 0x78, 0x0, 0x3}, {0x6, 0x1, 0x8, 0x7fff0000}]}) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) syz_fuse_handle_req(r6, &(0x7f0000000800)="e7f268a48728435fc5b6e2d5810a1a1a161fe3559b65ac4a88b40a30486a1a23043a69e0890bb76252e61439a7ccb398196a5800ea9e61977179771119719e88ac4ae4ce6553330d8ff0f726d60e5a106a32f0186fa80ce8c91661cad2cbcadccfb6dfcdbc18e5fa7adeed6e15b67973f82dae57bc723d9ddab1e040f81c35aab7a2cb0672b31c516b1c8a7ee7dfe61a0d0c3750701e574dff72d6689f817bf3fc3452704adb41fdeda712f1de8855c8837dccd693e8c1c6ead92f8b27f7866c1dadb2a95da7ae7102ffe4a32ad806eea7ed0abdbc08abab0c462d0116772aa0c97c0868ba62028ebd8ad901fbd0a30c473e771e9003149a7660e40b574c0af1230dbf7de719cf0c1eacd04cd03e4148e887e15a6695e1ff0ae25ee4dc72e8d534bf9b09c3bf1c8caea097341a92c808e40bfa40cd5690def353e5eef9dce39ba5cf56e208e4aa86b5e3099ff333f57cdd3f95d01486d76236d374f668cfeb2b0d2682f532aa0c66946199437cd9659de42a0d04f9edffb60e62afb3cf735fad9f8adb4d14d2a2f0bc6f2d9ff29ed5eea8dace7c2a0a3bfd21f84c2571789f1043935aebfa108b1998b5a363238e638677edeaec95398985fe3cc711aa374e448f728d8d071210dac842bfc7b819634e3b03249fddb2cae6623221e4dc748681181bcdadf6c9f5432a771a8b321c31d8b649f5d3a0325a69c37d5bb16dbb53d4f08afa7d27042b04ba80a3baa7e01984a29dcf7495a4f96c690238346c51e9f25137c7bcecb271c9fadd82265498c6816a2f709e56b39b4a170ba2ef590884ce7a1bfdb98bdf2ff6670ea71c7124c3d0c18d677c3fe50e994d459462c76511dd6e45e41cf857e59d1818a9f50183ea014af17c1e5bdef4941b9f92e1ae97fc6ad74d0a970fb150529c239b5780820c7918f78ac5eb766a146933814710912782388da834d05e17cbee181e2233cb890a4333acca9406f9542ffa7f762eee6a323d57bba6047b330464ebaadcc824ab47723dca490044afea8ca882b7e3eec41af1070a9752fa043602ecb008c3c38e938e506c3dcc4e17f5b600e0b90cae102e0c09b93fafe12f4811d66f3a3ac384d751bd618e66e8cb15dde90ccbb22e4c363154472d1c4416fb6c4ea6620c723f91e05cf483c5985d7d1028de999e7f3990fd73982a01584259d4f10d9ebffd14cb0df2398dbd9f7aa5574b1afe687c15e6de800b4e960ef22d461e9164a108aef965509f4ab1da56f07f77fd8568e9581ec1e6fb3fdd776ba235b3d3ad74779fe176d28ed8ed9f9044a582119434631db1486ed992a996fc1ff772d2757a060d04c1cd5dbdbaa8c04d9f620e87f21ef79730c529de74a06d8db6c83efc50948b4e5c4b5bb49404314266149f7a5027d14ad14d8ade1ba2346b5aba477456b9dc6df4bf8435a18ef7252f4f12218162d3d226e93b664e5767b0aa5a6304477035881bf7f54e7838672e84d8e71a7288071349df4b68a076c393579cb0c4e5157d883a55f424e0e72a782d8e3283d692f457adad09eb4dbadb87f52ab411b5d057f0d9f346385d5cc205d730a27a5913d1055607706092e8a43426fa06c1de8200b784adf5a0f38f7b5b2f7e53fdb58bfbff302c0c8cfd22a451cd029e521e2f6ac34e318551f379c183aed7a22db5f84619fc738b1ab81d96f8534c9f82b9f734df3eafea1978b8304a648bd599db8ce37c4aa5ea5615a045d8664858100add204288ade384bc6834882d49aaec934cff639c67e26a66e456ce65026b1ffc5ca1e9425b13765585b69e9fdb0158057d3c14fa9df45493b95ae53d4e7245ed0a6c1606d2b3cf6d47ac97aa2ad092f2b2a272dfd69df9caac3dcc1a2fb4b03e1dcf7a5014284bac4f614f3cda5494b3aa2f6e8f44ed471ee41e2c65de96f546652582a71aead53964af9187d5e4c0c0c6fe64f99232f51a8da5d3dc466adc3edeea23c3b796d6495dfd811e32c6b8f02bb8310cccdb11e4098ae7aad6e05f70f41ddb5c25afd1245aa0b47aac9b3cd157bf6837e65c87aa35d39574bb75622acac4530b350049ba32c2ed436d4b08fecfde125f49fe80286ae57669f6ef76a2898549cceaf09c316c90c44f64cec1fa63fbe12983edc1fc280b693c00f61f63322e75362b3fd00af628fc5077979f831a0dea581beebd0c52a4ad1071517b5e1382fee2585aaffc5307f9484cd56464e5a29ddc30b12870dad56260e82620267e01ffbd3a8b31fefcefa3e0b9aa05d81067a1c7dbf243ede1bbbb0a844faa4e8f17242e14798fd6160a4d7b770018581a384c6ce381382da1145aebebd92c31f54e1a5beee1ab2e82bb2aabc461dd6545f133020e20364d0cf1551dcff7abcd6db3f28701f0bbf90e81b775dc59b7f2644cca886510fc8cffe195df2ebd510d2848995b7d1fbae36c3baac61736cf75fccf1b5b7c9693315e67e9e8492f2a8afe8763c055eaf10fa3c615f5bcf4a4019e89b675d976edbfd5bd5ec7eeb6edf064264913aed5e03bbdabba41de2dac18aa4b2ae8c245f7eda1ee7b48f0f95097b7f94c99423566753c9c0938e50b2c07428fcca4cdaf6f50422c6d42a15cdf4284282a4ac0b46e91a56302ac0ad4ba6d26e29e67a0a5f11654ca55a54cd9a66179faa9fcda5248c9a3805a970bdc54278aa311c223690c4930fb489beebded23c5313e1f20b3ee80d939be84bc7dccded4682ef0f8e8ab586b4ed55960749ffa35c042472b59cd86af5c2e2f7163aa55fddb433774490f9f173be7950cd2a01d18e7f4e5723b4a613c91696ac3ef7e170b8c412b8e733a47883f17f130f474ad5f1f93d2f152e0f12fdf851bae021f554330932f9b67cffa998a70ebd61c65991e79e5dc25ab9a47608a380a632a8745afcd5d3070367f160e531f75b7405876dcfd5760e90bff2ab08e32e994f8f81f75c9599698c25dd05bb306ff285caeb68d8b5cb69469e0dbe1077cd1116256423d6651ae3781b1969c0e9f03a32a38ec9c9b18caa671b0e73f501bcc3cec5dc16f6352c5eb975f9a6d5190cce8863b68a988866a1cd2666050294494705321d3c5630d6ed04823c9563c99a6abdda44ae0d326697c2ae6a7470e2f8f03654caf62d6881e3a6e47af426a66b27e1cb1396c210958b0041f25aa64b75e95242aba566554d766ab68eb76967d5544ef20736625e8300d39a1bd03b2ebdc520e59ba9f9322a1f228a0ede384fd54125acf8c0835b7951f5660dd7c51004c448e0ec9e6e9024bec21379a29f56966c8b437b08d4929db502a19ec52b91936ac86b65446f758d3f77c3c5d9299777c18be82f7a6d88aaf8189d2009670a9c2f4cd5d4c3f4301352c8229b69940ce6a88fe53bb698779008318bd6e4157507e304f42e238c683da0f9e5e52d6bb990bc68d8314bbbcfd94fa510d9b37778a76d8158e7ef8762c53198c23a88cbe6ce5f15095a6fcf0aecd233ed9c82d59e8a47b654bca2c7f3bc60f6d403b729cb47b69aac7c6a90cd363708338eb2f9c02718fd3443bdd7ee32cc1bd4d5021f200a51c8348f0ec9484748b552b4125341a3ad310cef4dc9416e018b9910d0cd90c4c50f1088f7be2db4dfbbfae4f4911b36eb8bdafcd674c6d2cde2ff6771963e70c1ee5ac27b1dace74863783732b93602d5647cc433dcf74b74e8b72a22c6aaa4a2b21341674daca4a26d76e6b3c17b5257e3714c5273a07251650846c8b075c7fde59677cc6252026e0c7ca8940d14b31940f430389c7b8e936032fcbc261cd07bf89c61ee090276de50ec90fe108a42e03beacf9de155295575822684f3d77b2d286cb1c0a542cc1bdf96805af08907d484892d20c4d9fe64fd4d476d7cd5c8bceb451e7664449e137c0557f8c8e69f167c66c362afbd2bffbcf1ea53cbf68ebf8cb3bedc463e800ff281d9d7a658770f83d570e53f90354bcae1f817dbedbc617775bafc802fe930bff61d91c3b6910b19da16b65030016bc426ef1bab0c4328a69f71cee71a41d30fe54a0dcd1c27d31499f028c05b23520ee23f90aa9e8a41c77ba336925ff82f1f04975551746fd5884dbd3aa967cbd72c6c451f0396cc8804ec41dfbded0277b772e01bd8b53a10eed234d65c8700c481861f37fa93814e6ccc0d14cb3a2081450ef8285dc98798d75dd0d1638631eea216c5ba95884bcec86b553d168c4d31f2a58b9d9f8006b8030d30a600b8a5943e6b002457e73187b9b04fc59854e23ff0c4316cd274b8ddb10968aaeea1e588096122b3b25992f7eeada28f22790cd11086b551cc736410087493364f0b6028d22d0aa5ce64b78c18de353ff02c7269396774dda6662562b6342872e03c90d004c3ad376d0b6d2bb79634b773966719af42d9e8dbc225305cea5d49bd29e66db7d4e7693dc77de00793a8b9611793d8b4c30482e25e3bbb5eb6c96c88006183b83fe554f626397ee611356b585e4777d21160e62a3a824852f1b2c69680aae5672ee4764a5977286ba15d428343df644cb8c8d87dfd68e5bb210fea0c16bf19486f31bed2f26c39ac28b51e7e0828af5588da8735e7e02f4004cdc8ed98ddb23a496e4c03578dec5e7ac9a2f80326b210d70f0d490af0728bf9e8ec3126f85262ed806789a2f0b16a12e761ad55703674aa6f334df539dee2be3b93d45bde8253371bb93937909c7cba3548891b174fcf52880b3ec6393c15460f0a19ee817fb680c4f1a37f1310a7d4aa9cc78e501cd56ccc761e0c21d9827b08d474af86140b89a6a5df6a71b1f41bc693884d39d8ef91bc8db1a4d6f1c58888d85996636ecabcdad0709ebfa33109b3599c61312189d5d1a90b872153490cc795ab69ca0baec12d0be26d6338e7c4c0a9d0d863aadab13cb192722c9bb25bca2dadb6a5de467c596367084f30616e67a23a0435ce2ddfc4933342c7f48769535e8639df550baa97de2df27fe51b81e48bb5e00095352a5546f14d686cce8351162a08d7a838201ef9a0ca496d4e891eb41661a84d615b15de21014bd80f3af44af7df34125d3a54f4bb89b4024a47fb5210219dd127eed4ab393fffa399bd6036012ebf55aacf86dfe2604df2fc650ba76efc1e7243e7eda7766c4cc41a107f993ead16697df8207ecfb0f4008734fa3b5d7170969ac0db7319437a8a26975215aef8660c05ea377af26920efdffac87904dc0f9cc64f8a8146960165e7698ca3962d3145e5370d3eb478a2d8f98db44b3c0273695e78aa08de17adb023351e7dc3b7462b8fb21a6a790052342f6b153b35418f6a914aff3bb1a2b3adf72acaefa2ab97fe0e0324bab97cb1be15bcd4bbbccdb1a1666c80c218b04ad2e6ce487b1c50d577c41990af907865c40e1bd5d46a096d1460f1089cf719b0049e5e631acac58af0ac9319e8d09d4af7f0b4596253208e99ab37c19aec9bb8f4170800d8eafde3d81a962ae802c72c4e1e6350683927d0c03cb9cccfeae2e2c9ece5413cce574e716fc44f675a671da6e701821ceeaee38b13dd2b6e64099fe6bec2d8de873bf3c3ddb67a14bab9dff7346bdfdb20c638256e8df566312ba54625def4d257864bb61d8b313e0069b6b93a81f64421e63a06b2a1ad2b3ad6523543f26228eab2168ef2f51e89634fc991dbf9d8a6cb0d8025bd3c4fdc0f4ff227bcb8436ec198a05a177c2b6fca6155f4a7aa746740d3cd21c3dfbc3041dac00acaed52802576d950628378733f7bf922a7a7681953800bb038f0cb2311bd04282fd839738b0fd7b380ba647f95364a1162f5f0ad2ef083a8c071264d3ba891c2615412efac22758a443315ff9d6c80c485fb93c6c8fb9318f27fdd1c257b23ead16f898a6100d018f04bb36d8a34503152fb9957ae7694afdc75a27078a64f2ce1db5c79fc12c140b568d1e6f8281bda2eaa14f8f0150d2bb2a251b344aa5d79a49491d109d01be2e4e55de7c68f2ea1ab218653ce75f88fae0b32a7aa4d3dd0c9aa1b24f1385fb80ed3107cec3ed6d97a4e2dbfaa5b58b15fce6837ccedd9f0292e0f879f2109961ff4b73245302fd2127521484ad12566a9a20d7205cbd73d6e345e0a848229a258c11e60a8e4b3c9987f288e82a8e027d90c8c469add3c1c67b6253bd099ab9b72535b443373e1338345037eb51a7a790e8fe6161258d4413c3dd59358c6ee91bbf52befb9ed56a78f460fcfbd6dc3ebf6d5052eafd83f6792ce76a017ae735732831f7d848b3f3206a743e383de153119f8d8aa774a38ee8fc616541d29674142e66e730db39e3fd14b4dafaa7abc6c888703ce82b12c22e23f830fe6d3ed27b1dd8a647a60f86bdd050cdaf8da90489cb1a548dab9490b86ec6e44bb1cf75853fd728d1ec7f414d25bc709d3e4c363953a4184867c2595ac431cb4ebae2f2667c9d322e1acd50e5c0909204dc7566814056ae86dfa8655b1175788ce868742f1dae00ddbbc8501bf64788ff0ce88dc5405fc59470b2a07bbfaa813409937d32cf785ff96547f1816405cf03960bf68c7b22f6a84259badebc6b3d507657481f539efb087685d8bfba095267715e8a26168256dca89f81184e1c6354686be367f7f4834aa990ad71efae7da20235eac580db6312a88b36f0a402acef36b81a5fb7e686de0c16b9be480634544a0c227b279339a1b9f860f83e42af9d22004f0af9e76912b0375a22e75f65bfb89fcdfa79ef9bfdfae5bd9db569f6debc8f38094502f3f7d2aeaac0710440cbb5fccc3ddf66deb235de4d5f03ed5b32c953588dc672149ac9246444fb13c1cc9f8c9d1d8c98d27dd3f1689a2edda02f069aa4b4d71fd31678c9c2187377b15fec716354e24828a5b099d5ebbda9979c8407697bf6472d8982de49445d9aa427e995a87a1852f52dd6044a83615d7fc1142f6df5d8ef464aab407be230d0efea63ccc1e3402abf58c5e95bbb049bb29a8a0c841738fc8de527e438090bd6048de26be87430bb5d311e6b5729d4436b863cbbec0ffb341e9a51bcc36a41dbeefe96de49025d1848ac6c51297c9ba23bc0c33327e2cee68ed877247055593b3d857a60bfbc5a4bd16795a7b0860a5161e0a7ee12f62b70c7e4b1ee052711f4a133bf10a0d897cfa9679a6096a622d74612612911fba4c797baec19dc6113dee702dd901be0fd035a3fac8c52873d2c122e0b7208bbf632df788c5aaf39ebfc8d2ed90b246fcf2bac7eab098131de57c3632e62f6a22c0a1a1524f2e6faa72e46d5e8bb40bc1f0e8f944bdb380d7529e95e0adcfb25184b800ffb27e90a14f4615b377ab1ad4b867625f2119b8d57a95dd753d7fbdf9140087b20160552038c9abe8317d1c476fd90fe97c75ff7b38c0a0e20609db8ec90b5c3790fecbc2ea346019232486832f1dc61f40c9a80d67e2c6455defd9ca15920be314510e485ee09ad1f4d5a3e6425c23678f93cbf71bd8fa6f15dc8b6b1de967bf84218a03487f3641591b392d28f83706fe8dfaa2abee3d8ecda6f58bf1eaeb67d531edead572b901f84a5398edd6950b24c121ba3c37b09022d9a14c767150b7707af3ae7a2ebcaced96c81aa9130da5e49f765a2e1da4abd12156971c2237e2c55caf3361f227860fb9fd5090abc4ff47151e9e7036010284048072e34a959b9af20342037f588eba8fa88bdeac8540164c218e8b42468f6db2f89cc1e9defefb4290e0509084948b62cdd28b9e6b814f501c3fb9a281ec6ec93c80ba48612dce00cbd9258b4f4a4c8dbb60ae2bd8bc7c4924e19ae655a31ff282058783b88a270efcb51c5688f3016c23dc760b1e6a88c01157f388894baa365923af20ae91bb0024895764a7212dad1f8720f10b4e6506bece4a00d301f02a1afc6f12ad52d3352208618bc79b735dccc7107ca1b08a7d0ba80e918efc44766731f1cb6e07523a16b57e148f56ac2eaf56099cfabb3288eb98b488293b9e0d097f27275e1c86471095944159a5a5eeaac391b2abddfc2fcedca7c3284a272f6439da0c5a968d1d365c8cf053ea04321460b897356e50c375d60326601faf463f0ba9c6355aeb19dad1475e3fd741b4bfeb4799c49f870e60765c86d37ab3f5958e842cf0aabfbefa9f1416f11d907a9b2d79b39d2ee14ee82e77bb7bed0a0edf3018af2b9b3b1cfa7427b099cd5e2ad73a7ce9e2e993dfd4674ae9dbb672cf6537ecfdcd1fcadde04a21af60cab8c67db90cbf0a2b17ba8b6d5a0856ad2af92be8827d289c3d20c9a8f2ba2a063686bd3a1a3531ee1c7b4289eb27c1158b5d27e2691c6fb60198c56a98a96373c1f85cb99e1532ed9b2e21328e6883a5332799bd3f614c8edcbc9c3407fac98246c72a22675e3e5c9a70e9bc73d1d0274c9b6aacbe8d2a711fea1a944f60d520847ab842106f178f57aed772843d8086b3b58e8ae2095ea5d95461fff4cfd34db66760d82ea76c19fa6163f8eefbfa10f8a85bdc0d8f7c99ec3631c278841cd324b156263a592c37cfce5d7ad51529852220fd8e780f5f2820e490eb9dd04a366ca28aaddcadef31d75cab75b66e40078046b7a9244bd8de2c24b02507df8e671930a1e0d6588f0c7fe70da9fcb38bcf93f54738017decc83bd393b0f89942933ad669ca046b39a4d56202648f586d3a08b88c34cdc2cf58ed09205ee0742ad281af399ded7786e88612f0c8e321e51daa1b2c0bda4cb6fdfdcfa788973589a14242bebaae3abfa1859b8ad634eb0cc9bc61c3994504a10181cc895b484b7d438519627b29503da4fe2b922925ce5d2996fbbcaa1d8e7669b97e64459713843ca5530b8817dcb4813ec4ed26882dfb614abfe6880f8cc3f2510b07084a4891afffa36bfd8ea96d78b9bb02d98590de43f298eb202284efa944f62ada6b290f2dc73691a615ad7dbffb96ba9411fdefe97c9bbe347401f8da5bb22df2d3e64581cc30320f32f8eb6fec9cab1cabdb4a325caecf260dc7034ebb7a8611c0fdd12c4a2f22c0fb9e9cde1713f20b6c64765c921a168279200664c1cfd63a152915bb54dff3092ea0bc5328c1707b48bc2a9da1e6e7269baa9741c6766d126853ecadd427d438cae467cea8893cf180fde2b4aa6e3b3137d6d6ecd25f448d805ef14350699bddde76f2cd7cc45664731950f890acfbcb9789163f4dc3862ac289321f11f3a54acf506c1187eaa0f2ae1ab8c7543f104af9546b914dcaf8f52141b0423874e25de63dd95e633ac77ada1a6fde3b6a402a7ab92a7d52d44f424a5ab162bebadb0b9f3a0447581c78bf07fbbfc2d345c173af645357046d96bf53f53b9650dd73dcebe02be33bbfab1ceeddf74e2a180c3f8ebf82d7961e5f23a0c8be7ef3a2d4f98f2a0ec31d08e55b36ea72f35d37bd9ad04ac6bdb2a80f9fdbb69ad2ff2cb7e3206861ddc16d459c98653096021c892755078ed887e8e6784ac71343ce43c7bd7f2ab70728c41059d5f42370932b5fd5a6a7bca3a23c3a258ad3911d9b04384fac718bbc4ed4c3d3d5ed88f9fbecae59a09ddfefd6ad2336d8adebd2a7da4ad9331e71ac523e8c694cb796ec3a4dff8f87764e69d12f73482837cc0b1a02f9ce85a905e13cc8913dd03e1b6ca3fc1e2752873f6b2aec860fb6475de4e79de5698ab86e28a8f4fd65109774585e7b54f88a0593cdb5cc620fc29c285515eeddd95063f5821be1941edd4f66864647657369afd27cee42b7f555707df6f196159ae8ec284c8298f7e4b47f0cb107eec2f78e6ed353c937e3508446184a29eeddc3484dfab2547d4c218dcba0177ead513bf51932bd8fef502982edf6fcd6342bcc1030776b753305925395096ff29d79d58472697281bee5d157a7106dafb5ec4b744375c3b7a437a68a01202327a186a17fa2e64d8c151ee90cfb98edd9fee5dd0a5cf108a147286bf3033b9dc99ef0e683da603822bf40f4cd39657b041e76ba63ff44e6f30e2104361aec6669454431955c95d8407156118cc1716bd64fc9ecae5554bc3f71510929174ffe91e3697cf2a0e7abec2f2fcffe52b6964c03c61448f6172bb866bf001a8b538c943629d73dbc05335d14e6b5609d919efb28954bb1430e35b7b5cd920fc55eb96141c0804403698b20c1eb324f75d1cb6be2ea523192b63b7031e6eb4c3408eb8feb628d379ba4ff2feb2c9026b951f0f4e28a3d1c10fc7e7d3afc3ef78a3c2114e273aa7ba3080d89c456b65b0203fd02c786f8ff8345768b770a2ccbca9a7d955d50cc863b01387bc734136d24e41f5fef94a709d170a7bac1a1b74e3d91ab0a53163ae4993588f187cf6333064709d1914c60014ae1990c331926e8e0ba089663f42d621092e7233d23bbd7d728877aa184e0b32108d4bd04553c0f15cb7d4884996a7a7e352b6962b839a704f9f7c8ecccac9b744d49da68987c77953ee0d43b835d9a976fe85b3baee747e6866d9f9df4af7033ad31fbee42b6f37bfa359b095ff7d2f0ae29223dc583d96dba364746bb4b38b23c02701e270bd9b3ce3046c0db7467d5607bf7d231b97774992eda6dc4c2e12d2db0e0b3fa09ef8d3fa8386a65e3ecee8deab1352051bf75712db72a7d5c96a3ff8aa681a91b2567c30bebd5cf1567d2d70ebe6ec78e62d404c46c6320991a80fd65a5c7f8b1df0d4c52cca12b99c04c9f00971afb3495353a67df262f367b5c04aabbf71a13084c7639974b66c0e27abd6347f21460ce094e59be82af6860e7e45a9b6ad3bdbcf7fa502901430483a96e84f9cbed52279803956c3e51a3b77b86d67281deab3ce2a2b386c9c340770bac6ff91b6d55a5dd00430f5af5f74cdf7e52f67c3fe4f2245cffb2d3cf99fc061bfdb3520fdf8864e7c07554f5fe4d27bced9a8346ee9b195c5c29b0c3adec205e18319fde255e805a1a340ce5247a7ef128d2b6d25c34db012d54f435028ee6607ac5c7795a97812c3ad0dda61726fb2435907ec730270e2ed26f87bac160002f105c91c3f89107232efec637f0a81e0e4740a54a13c26bcf94bfdee06824bf701d40d2581f7b310e414546ee37aabcbb1c4b8359f2bec1565f5a52d09ae973698e6f12bd75250c4989011e44564427f138ea421ed03b6876d3b70f4f35a372106021cf7e40e2a1175a4fcdb85ce604412956ab732b8fb9431df87279363cecf4785e31f501a173ec7454c329d49b6894b8a3124246365fd5a6a6f3785807efc6a1902a3807bc2abbd79147c482bb04eac8f2088e0ee543d230451ecf707c7253165042bcfdf395112538e65d5f12396a2880da0c45ba9d712e45c75a7fcbea675c5481ae2a42cb3890bb49a3a5363c285c69088e6cd691b6b74420c58907d514567365f2a09dd14476191ac2f3739c12af2e739d9dac6f4769ffda4a9fd61889f629825ec1985b8a99f28491d195526060d14aec47acbad946abbb3adb2638a77c417be509682fef1d79c7bf673ed90e0010183de2dcf818256ec033bc392b26bfa7a1d081a4403ce336e79859c690d7c6281a815d4e3ef3e3fb6b5788997514e83441d00860ca11223417b8e4924197b07f78550d4e27bd73cfbb940c5f48cbdcaac773004f84b99429566be93ffc3a520c73e7f50fb68ae4d8e44c482c2999e484df6aa5a6f8e94e6ea6c286ec0358c5a82efde9d0965897eef", 0x2000, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020a00000200000000000000000000014f97ea9f5230d74aad47ca7c48c0a404dc9437932977390fb8549daa1cbcb72001ae19e5ce204ad2fa4d"], 0x10}}, 0x0) 7m53.878029758s ago: executing program 40 (id=2912): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000200)={0x3, 0x1}) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffffffffd6a}, 0x24000010) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0x10b49, 0x9, 0x8, 0x2, 0x7}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000100)={'gre0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$char_usb(r3, &(0x7f0000000240)="ebe12bc9c71b7e4d81679d387b8bf4235cd8e249c4b6117be51225369e5a8c150fdff09bb1050bca003d145c2dff7b865adfc6b2489b664957ca012d7baab525786cb7a53cd829579508a737f85bd84506b6db1116240b17d3592053c83446f5dea691ff10ae22641022cca5c2ccf8348e98b66f2aa4f99fe172d60e7bf1ea67f54bd4e1b0a68b6cd32dec88e707922be33fe3c44946fdfc0f1f754ce0bc6008", 0xa0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x45, 0x8, 0x1, 0xfffffff9}, {0x0, 0x78, 0x0, 0x3}, {0x6, 0x1, 0x8, 0x7fff0000}]}) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) syz_fuse_handle_req(r6, &(0x7f0000000800)="e7f268a48728435fc5b6e2d5810a1a1a161fe3559b65ac4a88b40a30486a1a23043a69e0890bb76252e61439a7ccb398196a5800ea9e61977179771119719e88ac4ae4ce6553330d8ff0f726d60e5a106a32f0186fa80ce8c91661cad2cbcadccfb6dfcdbc18e5fa7adeed6e15b67973f82dae57bc723d9ddab1e040f81c35aab7a2cb0672b31c516b1c8a7ee7dfe61a0d0c3750701e574dff72d6689f817bf3fc3452704adb41fdeda712f1de8855c8837dccd693e8c1c6ead92f8b27f7866c1dadb2a95da7ae7102ffe4a32ad806eea7ed0abdbc08abab0c462d0116772aa0c97c0868ba62028ebd8ad901fbd0a30c473e771e9003149a7660e40b574c0af1230dbf7de719cf0c1eacd04cd03e4148e887e15a6695e1ff0ae25ee4dc72e8d534bf9b09c3bf1c8caea097341a92c808e40bfa40cd5690def353e5eef9dce39ba5cf56e208e4aa86b5e3099ff333f57cdd3f95d01486d76236d374f668cfeb2b0d2682f532aa0c66946199437cd9659de42a0d04f9edffb60e62afb3cf735fad9f8adb4d14d2a2f0bc6f2d9ff29ed5eea8dace7c2a0a3bfd21f84c2571789f1043935aebfa108b1998b5a363238e638677edeaec95398985fe3cc711aa374e448f728d8d071210dac842bfc7b819634e3b03249fddb2cae6623221e4dc748681181bcdadf6c9f5432a771a8b321c31d8b649f5d3a0325a69c37d5bb16dbb53d4f08afa7d27042b04ba80a3baa7e01984a29dcf7495a4f96c690238346c51e9f25137c7bcecb271c9fadd82265498c6816a2f709e56b39b4a170ba2ef590884ce7a1bfdb98bdf2ff6670ea71c7124c3d0c18d677c3fe50e994d459462c76511dd6e45e41cf857e59d1818a9f50183ea014af17c1e5bdef4941b9f92e1ae97fc6ad74d0a970fb150529c239b5780820c7918f78ac5eb766a146933814710912782388da834d05e17cbee181e2233cb890a4333acca9406f9542ffa7f762eee6a323d57bba6047b330464ebaadcc824ab47723dca490044afea8ca882b7e3eec41af1070a9752fa043602ecb008c3c38e938e506c3dcc4e17f5b600e0b90cae102e0c09b93fafe12f4811d66f3a3ac384d751bd618e66e8cb15dde90ccbb22e4c363154472d1c4416fb6c4ea6620c723f91e05cf483c5985d7d1028de999e7f3990fd73982a01584259d4f10d9ebffd14cb0df2398dbd9f7aa5574b1afe687c15e6de800b4e960ef22d461e9164a108aef965509f4ab1da56f07f77fd8568e9581ec1e6fb3fdd776ba235b3d3ad74779fe176d28ed8ed9f9044a582119434631db1486ed992a996fc1ff772d2757a060d04c1cd5dbdbaa8c04d9f620e87f21ef79730c529de74a06d8db6c83efc50948b4e5c4b5bb49404314266149f7a5027d14ad14d8ade1ba2346b5aba477456b9dc6df4bf8435a18ef7252f4f12218162d3d226e93b664e5767b0aa5a6304477035881bf7f54e7838672e84d8e71a7288071349df4b68a076c393579cb0c4e5157d883a55f424e0e72a782d8e3283d692f457adad09eb4dbadb87f52ab411b5d057f0d9f346385d5cc205d730a27a5913d1055607706092e8a43426fa06c1de8200b784adf5a0f38f7b5b2f7e53fdb58bfbff302c0c8cfd22a451cd029e521e2f6ac34e318551f379c183aed7a22db5f84619fc738b1ab81d96f8534c9f82b9f734df3eafea1978b8304a648bd599db8ce37c4aa5ea5615a045d8664858100add204288ade384bc6834882d49aaec934cff639c67e26a66e456ce65026b1ffc5ca1e9425b13765585b69e9fdb0158057d3c14fa9df45493b95ae53d4e7245ed0a6c1606d2b3cf6d47ac97aa2ad092f2b2a272dfd69df9caac3dcc1a2fb4b03e1dcf7a5014284bac4f614f3cda5494b3aa2f6e8f44ed471ee41e2c65de96f546652582a71aead53964af9187d5e4c0c0c6fe64f99232f51a8da5d3dc466adc3edeea23c3b796d6495dfd811e32c6b8f02bb8310cccdb11e4098ae7aad6e05f70f41ddb5c25afd1245aa0b47aac9b3cd157bf6837e65c87aa35d39574bb75622acac4530b350049ba32c2ed436d4b08fecfde125f49fe80286ae57669f6ef76a2898549cceaf09c316c90c44f64cec1fa63fbe12983edc1fc280b693c00f61f63322e75362b3fd00af628fc5077979f831a0dea581beebd0c52a4ad1071517b5e1382fee2585aaffc5307f9484cd56464e5a29ddc30b12870dad56260e82620267e01ffbd3a8b31fefcefa3e0b9aa05d81067a1c7dbf243ede1bbbb0a844faa4e8f17242e14798fd6160a4d7b770018581a384c6ce381382da1145aebebd92c31f54e1a5beee1ab2e82bb2aabc461dd6545f133020e20364d0cf1551dcff7abcd6db3f28701f0bbf90e81b775dc59b7f2644cca886510fc8cffe195df2ebd510d2848995b7d1fbae36c3baac61736cf75fccf1b5b7c9693315e67e9e8492f2a8afe8763c055eaf10fa3c615f5bcf4a4019e89b675d976edbfd5bd5ec7eeb6edf064264913aed5e03bbdabba41de2dac18aa4b2ae8c245f7eda1ee7b48f0f95097b7f94c99423566753c9c0938e50b2c07428fcca4cdaf6f50422c6d42a15cdf4284282a4ac0b46e91a56302ac0ad4ba6d26e29e67a0a5f11654ca55a54cd9a66179faa9fcda5248c9a3805a970bdc54278aa311c223690c4930fb489beebded23c5313e1f20b3ee80d939be84bc7dccded4682ef0f8e8ab586b4ed55960749ffa35c042472b59cd86af5c2e2f7163aa55fddb433774490f9f173be7950cd2a01d18e7f4e5723b4a613c91696ac3ef7e170b8c412b8e733a47883f17f130f474ad5f1f93d2f152e0f12fdf851bae021f554330932f9b67cffa998a70ebd61c65991e79e5dc25ab9a47608a380a632a8745afcd5d3070367f160e531f75b7405876dcfd5760e90bff2ab08e32e994f8f81f75c9599698c25dd05bb306ff285caeb68d8b5cb69469e0dbe1077cd1116256423d6651ae3781b1969c0e9f03a32a38ec9c9b18caa671b0e73f501bcc3cec5dc16f6352c5eb975f9a6d5190cce8863b68a988866a1cd2666050294494705321d3c5630d6ed04823c9563c99a6abdda44ae0d326697c2ae6a7470e2f8f03654caf62d6881e3a6e47af426a66b27e1cb1396c210958b0041f25aa64b75e95242aba566554d766ab68eb76967d5544ef20736625e8300d39a1bd03b2ebdc520e59ba9f9322a1f228a0ede384fd54125acf8c0835b7951f5660dd7c51004c448e0ec9e6e9024bec21379a29f56966c8b437b08d4929db502a19ec52b91936ac86b65446f758d3f77c3c5d9299777c18be82f7a6d88aaf8189d2009670a9c2f4cd5d4c3f4301352c8229b69940ce6a88fe53bb698779008318bd6e4157507e304f42e238c683da0f9e5e52d6bb990bc68d8314bbbcfd94fa510d9b37778a76d8158e7ef8762c53198c23a88cbe6ce5f15095a6fcf0aecd233ed9c82d59e8a47b654bca2c7f3bc60f6d403b729cb47b69aac7c6a90cd363708338eb2f9c02718fd3443bdd7ee32cc1bd4d5021f200a51c8348f0ec9484748b552b4125341a3ad310cef4dc9416e018b9910d0cd90c4c50f1088f7be2db4dfbbfae4f4911b36eb8bdafcd674c6d2cde2ff6771963e70c1ee5ac27b1dace74863783732b93602d5647cc433dcf74b74e8b72a22c6aaa4a2b21341674daca4a26d76e6b3c17b5257e3714c5273a07251650846c8b075c7fde59677cc6252026e0c7ca8940d14b31940f430389c7b8e936032fcbc261cd07bf89c61ee090276de50ec90fe108a42e03beacf9de155295575822684f3d77b2d286cb1c0a542cc1bdf96805af08907d484892d20c4d9fe64fd4d476d7cd5c8bceb451e7664449e137c0557f8c8e69f167c66c362afbd2bffbcf1ea53cbf68ebf8cb3bedc463e800ff281d9d7a658770f83d570e53f90354bcae1f817dbedbc617775bafc802fe930bff61d91c3b6910b19da16b65030016bc426ef1bab0c4328a69f71cee71a41d30fe54a0dcd1c27d31499f028c05b23520ee23f90aa9e8a41c77ba336925ff82f1f04975551746fd5884dbd3aa967cbd72c6c451f0396cc8804ec41dfbded0277b772e01bd8b53a10eed234d65c8700c481861f37fa93814e6ccc0d14cb3a2081450ef8285dc98798d75dd0d1638631eea216c5ba95884bcec86b553d168c4d31f2a58b9d9f8006b8030d30a600b8a5943e6b002457e73187b9b04fc59854e23ff0c4316cd274b8ddb10968aaeea1e588096122b3b25992f7eeada28f22790cd11086b551cc736410087493364f0b6028d22d0aa5ce64b78c18de353ff02c7269396774dda6662562b6342872e03c90d004c3ad376d0b6d2bb79634b773966719af42d9e8dbc225305cea5d49bd29e66db7d4e7693dc77de00793a8b9611793d8b4c30482e25e3bbb5eb6c96c88006183b83fe554f626397ee611356b585e4777d21160e62a3a824852f1b2c69680aae5672ee4764a5977286ba15d428343df644cb8c8d87dfd68e5bb210fea0c16bf19486f31bed2f26c39ac28b51e7e0828af5588da8735e7e02f4004cdc8ed98ddb23a496e4c03578dec5e7ac9a2f80326b210d70f0d490af0728bf9e8ec3126f85262ed806789a2f0b16a12e761ad55703674aa6f334df539dee2be3b93d45bde8253371bb93937909c7cba3548891b174fcf52880b3ec6393c15460f0a19ee817fb680c4f1a37f1310a7d4aa9cc78e501cd56ccc761e0c21d9827b08d474af86140b89a6a5df6a71b1f41bc693884d39d8ef91bc8db1a4d6f1c58888d85996636ecabcdad0709ebfa33109b3599c61312189d5d1a90b872153490cc795ab69ca0baec12d0be26d6338e7c4c0a9d0d863aadab13cb192722c9bb25bca2dadb6a5de467c596367084f30616e67a23a0435ce2ddfc4933342c7f48769535e8639df550baa97de2df27fe51b81e48bb5e00095352a5546f14d686cce8351162a08d7a838201ef9a0ca496d4e891eb41661a84d615b15de21014bd80f3af44af7df34125d3a54f4bb89b4024a47fb5210219dd127eed4ab393fffa399bd6036012ebf55aacf86dfe2604df2fc650ba76efc1e7243e7eda7766c4cc41a107f993ead16697df8207ecfb0f4008734fa3b5d7170969ac0db7319437a8a26975215aef8660c05ea377af26920efdffac87904dc0f9cc64f8a8146960165e7698ca3962d3145e5370d3eb478a2d8f98db44b3c0273695e78aa08de17adb023351e7dc3b7462b8fb21a6a790052342f6b153b35418f6a914aff3bb1a2b3adf72acaefa2ab97fe0e0324bab97cb1be15bcd4bbbccdb1a1666c80c218b04ad2e6ce487b1c50d577c41990af907865c40e1bd5d46a096d1460f1089cf719b0049e5e631acac58af0ac9319e8d09d4af7f0b4596253208e99ab37c19aec9bb8f4170800d8eafde3d81a962ae802c72c4e1e6350683927d0c03cb9cccfeae2e2c9ece5413cce574e716fc44f675a671da6e701821ceeaee38b13dd2b6e64099fe6bec2d8de873bf3c3ddb67a14bab9dff7346bdfdb20c638256e8df566312ba54625def4d257864bb61d8b313e0069b6b93a81f64421e63a06b2a1ad2b3ad6523543f26228eab2168ef2f51e89634fc991dbf9d8a6cb0d8025bd3c4fdc0f4ff227bcb8436ec198a05a177c2b6fca6155f4a7aa746740d3cd21c3dfbc3041dac00acaed52802576d950628378733f7bf922a7a7681953800bb038f0cb2311bd04282fd839738b0fd7b380ba647f95364a1162f5f0ad2ef083a8c071264d3ba891c2615412efac22758a443315ff9d6c80c485fb93c6c8fb9318f27fdd1c257b23ead16f898a6100d018f04bb36d8a34503152fb9957ae7694afdc75a27078a64f2ce1db5c79fc12c140b568d1e6f8281bda2eaa14f8f0150d2bb2a251b344aa5d79a49491d109d01be2e4e55de7c68f2ea1ab218653ce75f88fae0b32a7aa4d3dd0c9aa1b24f1385fb80ed3107cec3ed6d97a4e2dbfaa5b58b15fce6837ccedd9f0292e0f879f2109961ff4b73245302fd2127521484ad12566a9a20d7205cbd73d6e345e0a848229a258c11e60a8e4b3c9987f288e82a8e027d90c8c469add3c1c67b6253bd099ab9b72535b443373e1338345037eb51a7a790e8fe6161258d4413c3dd59358c6ee91bbf52befb9ed56a78f460fcfbd6dc3ebf6d5052eafd83f6792ce76a017ae735732831f7d848b3f3206a743e383de153119f8d8aa774a38ee8fc616541d29674142e66e730db39e3fd14b4dafaa7abc6c888703ce82b12c22e23f830fe6d3ed27b1dd8a647a60f86bdd050cdaf8da90489cb1a548dab9490b86ec6e44bb1cf75853fd728d1ec7f414d25bc709d3e4c363953a4184867c2595ac431cb4ebae2f2667c9d322e1acd50e5c0909204dc7566814056ae86dfa8655b1175788ce868742f1dae00ddbbc8501bf64788ff0ce88dc5405fc59470b2a07bbfaa813409937d32cf785ff96547f1816405cf03960bf68c7b22f6a84259badebc6b3d507657481f539efb087685d8bfba095267715e8a26168256dca89f81184e1c6354686be367f7f4834aa990ad71efae7da20235eac580db6312a88b36f0a402acef36b81a5fb7e686de0c16b9be480634544a0c227b279339a1b9f860f83e42af9d22004f0af9e76912b0375a22e75f65bfb89fcdfa79ef9bfdfae5bd9db569f6debc8f38094502f3f7d2aeaac0710440cbb5fccc3ddf66deb235de4d5f03ed5b32c953588dc672149ac9246444fb13c1cc9f8c9d1d8c98d27dd3f1689a2edda02f069aa4b4d71fd31678c9c2187377b15fec716354e24828a5b099d5ebbda9979c8407697bf6472d8982de49445d9aa427e995a87a1852f52dd6044a83615d7fc1142f6df5d8ef464aab407be230d0efea63ccc1e3402abf58c5e95bbb049bb29a8a0c841738fc8de527e438090bd6048de26be87430bb5d311e6b5729d4436b863cbbec0ffb341e9a51bcc36a41dbeefe96de49025d1848ac6c51297c9ba23bc0c33327e2cee68ed877247055593b3d857a60bfbc5a4bd16795a7b0860a5161e0a7ee12f62b70c7e4b1ee052711f4a133bf10a0d897cfa9679a6096a622d74612612911fba4c797baec19dc6113dee702dd901be0fd035a3fac8c52873d2c122e0b7208bbf632df788c5aaf39ebfc8d2ed90b246fcf2bac7eab098131de57c3632e62f6a22c0a1a1524f2e6faa72e46d5e8bb40bc1f0e8f944bdb380d7529e95e0adcfb25184b800ffb27e90a14f4615b377ab1ad4b867625f2119b8d57a95dd753d7fbdf9140087b20160552038c9abe8317d1c476fd90fe97c75ff7b38c0a0e20609db8ec90b5c3790fecbc2ea346019232486832f1dc61f40c9a80d67e2c6455defd9ca15920be314510e485ee09ad1f4d5a3e6425c23678f93cbf71bd8fa6f15dc8b6b1de967bf84218a03487f3641591b392d28f83706fe8dfaa2abee3d8ecda6f58bf1eaeb67d531edead572b901f84a5398edd6950b24c121ba3c37b09022d9a14c767150b7707af3ae7a2ebcaced96c81aa9130da5e49f765a2e1da4abd12156971c2237e2c55caf3361f227860fb9fd5090abc4ff47151e9e7036010284048072e34a959b9af20342037f588eba8fa88bdeac8540164c218e8b42468f6db2f89cc1e9defefb4290e0509084948b62cdd28b9e6b814f501c3fb9a281ec6ec93c80ba48612dce00cbd9258b4f4a4c8dbb60ae2bd8bc7c4924e19ae655a31ff282058783b88a270efcb51c5688f3016c23dc760b1e6a88c01157f388894baa365923af20ae91bb0024895764a7212dad1f8720f10b4e6506bece4a00d301f02a1afc6f12ad52d3352208618bc79b735dccc7107ca1b08a7d0ba80e918efc44766731f1cb6e07523a16b57e148f56ac2eaf56099cfabb3288eb98b488293b9e0d097f27275e1c86471095944159a5a5eeaac391b2abddfc2fcedca7c3284a272f6439da0c5a968d1d365c8cf053ea04321460b897356e50c375d60326601faf463f0ba9c6355aeb19dad1475e3fd741b4bfeb4799c49f870e60765c86d37ab3f5958e842cf0aabfbefa9f1416f11d907a9b2d79b39d2ee14ee82e77bb7bed0a0edf3018af2b9b3b1cfa7427b099cd5e2ad73a7ce9e2e993dfd4674ae9dbb672cf6537ecfdcd1fcadde04a21af60cab8c67db90cbf0a2b17ba8b6d5a0856ad2af92be8827d289c3d20c9a8f2ba2a063686bd3a1a3531ee1c7b4289eb27c1158b5d27e2691c6fb60198c56a98a96373c1f85cb99e1532ed9b2e21328e6883a5332799bd3f614c8edcbc9c3407fac98246c72a22675e3e5c9a70e9bc73d1d0274c9b6aacbe8d2a711fea1a944f60d520847ab842106f178f57aed772843d8086b3b58e8ae2095ea5d95461fff4cfd34db66760d82ea76c19fa6163f8eefbfa10f8a85bdc0d8f7c99ec3631c278841cd324b156263a592c37cfce5d7ad51529852220fd8e780f5f2820e490eb9dd04a366ca28aaddcadef31d75cab75b66e40078046b7a9244bd8de2c24b02507df8e671930a1e0d6588f0c7fe70da9fcb38bcf93f54738017decc83bd393b0f89942933ad669ca046b39a4d56202648f586d3a08b88c34cdc2cf58ed09205ee0742ad281af399ded7786e88612f0c8e321e51daa1b2c0bda4cb6fdfdcfa788973589a14242bebaae3abfa1859b8ad634eb0cc9bc61c3994504a10181cc895b484b7d438519627b29503da4fe2b922925ce5d2996fbbcaa1d8e7669b97e64459713843ca5530b8817dcb4813ec4ed26882dfb614abfe6880f8cc3f2510b07084a4891afffa36bfd8ea96d78b9bb02d98590de43f298eb202284efa944f62ada6b290f2dc73691a615ad7dbffb96ba9411fdefe97c9bbe347401f8da5bb22df2d3e64581cc30320f32f8eb6fec9cab1cabdb4a325caecf260dc7034ebb7a8611c0fdd12c4a2f22c0fb9e9cde1713f20b6c64765c921a168279200664c1cfd63a152915bb54dff3092ea0bc5328c1707b48bc2a9da1e6e7269baa9741c6766d126853ecadd427d438cae467cea8893cf180fde2b4aa6e3b3137d6d6ecd25f448d805ef14350699bddde76f2cd7cc45664731950f890acfbcb9789163f4dc3862ac289321f11f3a54acf506c1187eaa0f2ae1ab8c7543f104af9546b914dcaf8f52141b0423874e25de63dd95e633ac77ada1a6fde3b6a402a7ab92a7d52d44f424a5ab162bebadb0b9f3a0447581c78bf07fbbfc2d345c173af645357046d96bf53f53b9650dd73dcebe02be33bbfab1ceeddf74e2a180c3f8ebf82d7961e5f23a0c8be7ef3a2d4f98f2a0ec31d08e55b36ea72f35d37bd9ad04ac6bdb2a80f9fdbb69ad2ff2cb7e3206861ddc16d459c98653096021c892755078ed887e8e6784ac71343ce43c7bd7f2ab70728c41059d5f42370932b5fd5a6a7bca3a23c3a258ad3911d9b04384fac718bbc4ed4c3d3d5ed88f9fbecae59a09ddfefd6ad2336d8adebd2a7da4ad9331e71ac523e8c694cb796ec3a4dff8f87764e69d12f73482837cc0b1a02f9ce85a905e13cc8913dd03e1b6ca3fc1e2752873f6b2aec860fb6475de4e79de5698ab86e28a8f4fd65109774585e7b54f88a0593cdb5cc620fc29c285515eeddd95063f5821be1941edd4f66864647657369afd27cee42b7f555707df6f196159ae8ec284c8298f7e4b47f0cb107eec2f78e6ed353c937e3508446184a29eeddc3484dfab2547d4c218dcba0177ead513bf51932bd8fef502982edf6fcd6342bcc1030776b753305925395096ff29d79d58472697281bee5d157a7106dafb5ec4b744375c3b7a437a68a01202327a186a17fa2e64d8c151ee90cfb98edd9fee5dd0a5cf108a147286bf3033b9dc99ef0e683da603822bf40f4cd39657b041e76ba63ff44e6f30e2104361aec6669454431955c95d8407156118cc1716bd64fc9ecae5554bc3f71510929174ffe91e3697cf2a0e7abec2f2fcffe52b6964c03c61448f6172bb866bf001a8b538c943629d73dbc05335d14e6b5609d919efb28954bb1430e35b7b5cd920fc55eb96141c0804403698b20c1eb324f75d1cb6be2ea523192b63b7031e6eb4c3408eb8feb628d379ba4ff2feb2c9026b951f0f4e28a3d1c10fc7e7d3afc3ef78a3c2114e273aa7ba3080d89c456b65b0203fd02c786f8ff8345768b770a2ccbca9a7d955d50cc863b01387bc734136d24e41f5fef94a709d170a7bac1a1b74e3d91ab0a53163ae4993588f187cf6333064709d1914c60014ae1990c331926e8e0ba089663f42d621092e7233d23bbd7d728877aa184e0b32108d4bd04553c0f15cb7d4884996a7a7e352b6962b839a704f9f7c8ecccac9b744d49da68987c77953ee0d43b835d9a976fe85b3baee747e6866d9f9df4af7033ad31fbee42b6f37bfa359b095ff7d2f0ae29223dc583d96dba364746bb4b38b23c02701e270bd9b3ce3046c0db7467d5607bf7d231b97774992eda6dc4c2e12d2db0e0b3fa09ef8d3fa8386a65e3ecee8deab1352051bf75712db72a7d5c96a3ff8aa681a91b2567c30bebd5cf1567d2d70ebe6ec78e62d404c46c6320991a80fd65a5c7f8b1df0d4c52cca12b99c04c9f00971afb3495353a67df262f367b5c04aabbf71a13084c7639974b66c0e27abd6347f21460ce094e59be82af6860e7e45a9b6ad3bdbcf7fa502901430483a96e84f9cbed52279803956c3e51a3b77b86d67281deab3ce2a2b386c9c340770bac6ff91b6d55a5dd00430f5af5f74cdf7e52f67c3fe4f2245cffb2d3cf99fc061bfdb3520fdf8864e7c07554f5fe4d27bced9a8346ee9b195c5c29b0c3adec205e18319fde255e805a1a340ce5247a7ef128d2b6d25c34db012d54f435028ee6607ac5c7795a97812c3ad0dda61726fb2435907ec730270e2ed26f87bac160002f105c91c3f89107232efec637f0a81e0e4740a54a13c26bcf94bfdee06824bf701d40d2581f7b310e414546ee37aabcbb1c4b8359f2bec1565f5a52d09ae973698e6f12bd75250c4989011e44564427f138ea421ed03b6876d3b70f4f35a372106021cf7e40e2a1175a4fcdb85ce604412956ab732b8fb9431df87279363cecf4785e31f501a173ec7454c329d49b6894b8a3124246365fd5a6a6f3785807efc6a1902a3807bc2abbd79147c482bb04eac8f2088e0ee543d230451ecf707c7253165042bcfdf395112538e65d5f12396a2880da0c45ba9d712e45c75a7fcbea675c5481ae2a42cb3890bb49a3a5363c285c69088e6cd691b6b74420c58907d514567365f2a09dd14476191ac2f3739c12af2e739d9dac6f4769ffda4a9fd61889f629825ec1985b8a99f28491d195526060d14aec47acbad946abbb3adb2638a77c417be509682fef1d79c7bf673ed90e0010183de2dcf818256ec033bc392b26bfa7a1d081a4403ce336e79859c690d7c6281a815d4e3ef3e3fb6b5788997514e83441d00860ca11223417b8e4924197b07f78550d4e27bd73cfbb940c5f48cbdcaac773004f84b99429566be93ffc3a520c73e7f50fb68ae4d8e44c482c2999e484df6aa5a6f8e94e6ea6c286ec0358c5a82efde9d0965897eef", 0x2000, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020a00000200000000000000000000014f97ea9f5230d74aad47ca7c48c0a404dc9437932977390fb8549daa1cbcb72001ae19e5ce204ad2fa4d"], 0x10}}, 0x0) 5m16.290451683s ago: executing program 2 (id=3521): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}, 0x1, 0x0, 0x100000000000000}, 0x0) 5m16.069314813s ago: executing program 2 (id=3525): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) syz_open_dev$usbfs(0x0, 0x3, 0x389001) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000000b010300000000000000000003000a0800034000000001080003400000000108000340000000000800024000000000080001"], 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x810) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)=0x40000001) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x320, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000090000000000102ed1462e6100"], &(0x7f0000000340)=""/2, 0x21, 0x2, 0x1, 0x47}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x3, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) 5m11.13073637s ago: executing program 2 (id=3548): socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x2b00, 0x0, 0x0, @mcast2, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0xff80}}]}]}}}}}}}, 0x0) 5m10.905421115s ago: executing program 2 (id=3549): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f00000001c0)='./file0/../file0/file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x103) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000300)) r5 = syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x101800) pread64(r5, 0x0, 0x0, 0xce2) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x90, 0x0, 0xf, 0xc00003, 0x7]}, &(0x7f0000000200)=0x78) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) 5m9.381692362s ago: executing program 2 (id=3551): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0xff8d, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 5m9.059447663s ago: executing program 2 (id=3557): socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f0000000200), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x101, 0x8, 0x0, 0xb}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) (async, rerun: 64) r3 = socket$kcm(0xa, 0x5, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) (async) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000040)=0x10000, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002d000124b0c1f2646ab09241c867ca7159bd3f0026bd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) (async) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r8}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3}) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500000001040101000000000000000400d900010001000000"], 0x1c}}, 0x0) (async) syz_open_dev$vim2m(0x0, 0x4, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) (async, rerun: 64) shutdown(0xffffffffffffffff, 0x1) (rerun: 64) r9 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x0, '\x00', @value64=0xfffffffffffffffe}}) 5m8.560464028s ago: executing program 41 (id=3557): socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f0000000200), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x101, 0x8, 0x0, 0xb}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) (async, rerun: 64) r3 = socket$kcm(0xa, 0x5, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) (async) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000040)=0x10000, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002d000124b0c1f2646ab09241c867ca7159bd3f0026bd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) (async) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r8}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3}) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500000001040101000000000000000400d900010001000000"], 0x1c}}, 0x0) (async) syz_open_dev$vim2m(0x0, 0x4, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) (async, rerun: 64) shutdown(0xffffffffffffffff, 0x1) (rerun: 64) r9 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x0, '\x00', @value64=0xfffffffffffffffe}}) 59.301709372s ago: executing program 3 (id=4651): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbff7f7e, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, 0x1c) r2 = userfaultfd(0x80801) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40c4010}, 0x44044800) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/86, 0x56) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) close$fd_v4l2_buffer(r0) syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r5, 0x0, 0xf69}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000480000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r7 = semget$private(0x0, 0x5, 0x0) semop(r7, &(0x7f0000000180)=[{0x3, 0x44cf, 0x800}], 0x1f4) getsockopt$inet6_buf(r1, 0x29, 0x3d, &(0x7f0000000240)=""/139, &(0x7f0000000000)=0x8b) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000180)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) syz_usb_connect(0x2, 0x24, &(0x7f00000043c0)=ANY=[], 0x0) 59.045732592s ago: executing program 6 (id=4654): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000400)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x700000000000000) 57.817640979s ago: executing program 6 (id=4657): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x73dd}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x6, 0x800, 0x0, 0xffffffffffffffff, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x101e, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000380)={0xb, {{0x2, 0x4e24, @loopback}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) syz_emit_ethernet(0x122, &(0x7f0000000240)={@remote, @random="7ad0453349dd", @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "876eb5", 0xec, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, {[@fragment={0x1d, 0x0, 0x2, 0x1, 0x0, 0x11, 0x64}, @srh={0x4, 0x12, 0x4, 0x9, 0x41, 0x68, 0x8, [@empty, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2]}], "bb522934fe1cb114188396515ea3bfdd25c9d3fb8a2a3e428f01d9f5030982ad1dbc9e19dfe488a5c89eb4617180b7d8d6d6ecb53f2cfe410a1c446b2de95a0bdeaf49428df51f4e34b55256"}}}}}, &(0x7f0000000080)={0x0, 0x3, [0x35d, 0x9, 0x2eb, 0xb42]}) socket$packet(0x11, 0x2, 0x300) 56.160032957s ago: executing program 3 (id=4663): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000036c0)=@newtfilter={0x129c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x126c, 0x2, [@TCA_FLOW_ACT={0x1268, 0x9, 0x0, 0x1, [@m_police={0x1264, 0xe, 0x0, 0x0, {{0xb}, {0x1210, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xee}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x7, 0x2400, 0x4, 0xbc, {0x9, 0x0, 0x2, 0x3c, 0x9, 0x7ce9}, {0xff, 0x1, 0xc00, 0x3, 0x0, 0xffff046a}, 0x6c, 0xfffffffd, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffff01, 0x3ff0000, 0x4, 0x7, 0x5, 0xd, 0x9, 0x4, 0xef5, 0x3, 0x0, 0xad, 0x6f4, 0x7fffffff, 0x1a, 0x1, 0x5, 0x5, 0x1, 0x0, 0x0, 0x3, 0x400, 0x2, 0x7fffffff, 0x401, 0x2, 0xf, 0x2, 0xfff, 0x4997, 0xffffffff, 0xbd67, 0x2362b46e, 0x1, 0x8000, 0x3, 0x4d69c477, 0x9, 0x7fffffff, 0x6, 0xbe, 0xcf2, 0x1, 0xa, 0x100, 0x632, 0xffffffc0, 0x8, 0x3d, 0x2, 0x54ba, 0x7, 0xfffffffe, 0x7f, 0x5, 0xce8c, 0x6, 0xffff8000, 0x800, 0x80000000, 0x2, 0x81, 0x1, 0x1ff, 0x210, 0x9, 0x4234ab76, 0x5fd374e9, 0x0, 0x800, 0xfff, 0x167, 0x1, 0x8, 0x1ff, 0x8, 0xc6, 0x76, 0xffffffff, 0x1, 0xd, 0x4, 0x1, 0x8, 0x10000, 0x4, 0x8, 0x6e25, 0x9, 0x8, 0x6, 0x3, 0x5, 0x1, 0x12, 0x9, 0x5, 0x0, 0x26e, 0x2, 0x3, 0x4, 0x7, 0x7fffffff, 0xfffffff9, 0x5, 0x9, 0x8, 0x9, 0x80000000, 0x0, 0x1, 0x7, 0xc3a, 0x2, 0x1, 0x1, 0x3, 0x400, 0xdf2e, 0x4, 0x9, 0x81, 0xffffffff, 0x9, 0x2, 0x3, 0xffffffff, 0x4, 0x1, 0x3, 0x5, 0x7fff, 0x9, 0x3ff, 0xfffff800, 0x6, 0x0, 0xffff5e3e, 0x425e, 0x2, 0x4, 0x10001, 0x200, 0x4593, 0x3, 0x80, 0x101, 0x7, 0x9, 0x81, 0x7, 0xfffffbff, 0x8, 0x3, 0x6, 0x5, 0x1ff, 0x9, 0x47d, 0x41, 0xf, 0x22d, 0x5, 0x7ff, 0x4, 0x8001, 0x1, 0x0, 0x7, 0x10001, 0x4, 0x0, 0xe, 0x2, 0x6, 0x1, 0xf20, 0xc9, 0x8, 0xd, 0x98, 0xffffffff, 0x4, 0x800, 0x7, 0x5, 0x6, 0x0, 0x3, 0x7ff, 0x6, 0x8, 0x1, 0x7, 0x2d7, 0x6, 0x10, 0x14, 0x101, 0x8, 0xa, 0x800, 0x0, 0x5, 0xf, 0x0, 0x0, 0x2, 0xfffffbff, 0x401, 0x7, 0xc69b, 0x6, 0x81, 0x3, 0x1f7, 0x0, 0xe, 0x76, 0xff06, 0x6, 0x4c640c25, 0x7, 0x7b, 0x1, 0x3, 0x485, 0x7, 0x6, 0x13, 0x9, 0x3, 0x8, 0xe9f, 0x7, 0xd, 0x5, 0x8, 0x5, 0x1000, 0x800, 0x7, 0x42cd818d, 0x9eba, 0xb4c6, 0x4, 0x3, 0x6, 0x99, 0x10000, 0x5, 0x10001, 0x3, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xb6, 0x8000, 0x1, 0x10000, 0x5, 0x87, 0x5, 0x0, 0x79502ae, 0x4, 0x50cb, 0x3db, 0x0, 0xb6600, 0x6, 0x3311, 0x1000, 0x1, 0x3, 0x201, 0x2fa7, 0x1cd, 0x8001, 0x800, 0xa49, 0xcd, 0x8, 0x7fffffff, 0x9, 0x9, 0x8000, 0x10000, 0x4, 0x3, 0x3, 0x1, 0x400, 0x80000001, 0x5, 0xffffffca, 0x354b, 0x6, 0x0, 0x30, 0xa, 0x1, 0x5, 0x3, 0x8, 0x43, 0x401, 0x8, 0x43100884, 0x0, 0x4, 0x9, 0x5, 0x10000, 0x3b, 0x6, 0x6, 0x80000001, 0xfe7c, 0x2, 0x0, 0x7, 0x8, 0x8, 0xcebc, 0x7ff, 0xfffffffa, 0x2, 0x80000000, 0xffffffff, 0x8, 0x8, 0x7, 0xffffffff, 0xad, 0x6, 0x1000, 0x0, 0x6, 0x3, 0x400, 0xc, 0x0, 0x3, 0x9, 0xffffffd6, 0x7, 0xfffffffe, 0x0, 0xfffffff8, 0x10000, 0xdc6f, 0x2, 0x4, 0xd, 0xa, 0x4, 0x2, 0x7f, 0x3, 0x1000, 0xffff, 0x8001, 0x2, 0x3, 0x200, 0x9, 0x2, 0x1348, 0x1000, 0x2, 0xfffffff9, 0x1, 0x0, 0x7, 0x5, 0x70a74a3a, 0x8, 0x7be, 0x80, 0x0, 0x115b25d2, 0x2, 0x7ff, 0x42, 0x1035, 0xc0, 0xfffffffc, 0x9ab8, 0xfffffff8, 0xfff, 0xb3a, 0x3, 0x5, 0x5, 0x4, 0x9, 0xe45c, 0xfffffff8, 0x3, 0x10be3a5f, 0x6, 0x800, 0x80, 0x7fff, 0x6, 0x0, 0x2, 0x5, 0x1, 0x10, 0x7, 0x3ff, 0x9, 0x80000000, 0x2, 0x8, 0x4, 0x5, 0xfcd, 0x0, 0x7, 0x8b, 0xc, 0x7, 0x9, 0x9, 0x3, 0x10000, 0x4, 0x3, 0x4, 0x9, 0x1, 0xf8b, 0x9, 0x1, 0x3c8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x3, 0x1, 0x0, 0x4, 0xfffffffa, 0x5, 0xfffffff9, 0xa9, 0x973, 0x5, 0xfffffffd, 0x2, 0xa37, 0x26, 0x6, 0x2, 0x6, 0x1, 0x0, 0xc, 0x8, 0x3, 0x6, 0xc, 0x0, 0x3, 0x10, 0xcc, 0x4, 0xfffffffb, 0x8, 0x4, 0x4, 0x1, 0x5, 0x3a, 0x9, 0x116, 0x54, 0xa4fc, 0x480, 0x5c9, 0x41cc, 0x2, 0xffff8eb5, 0x4, 0x2, 0x8, 0xf, 0xfe0, 0x101, 0x9, 0x8, 0x5, 0x5, 0x1, 0x2, 0x1ff, 0x3, 0x4, 0x5, 0x3, 0x9, 0x4, 0xbd, 0x3]}], [], [], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xf, 0xa, 0x4, 0x5, 0x200, 0x4, 0x6, 0xfffffe01, 0x0, 0xf37, 0x4, 0x1263, 0xad, 0x5, 0x7, 0x9, 0x8001, 0x5, 0x46, 0x1, 0x2, 0xfffffff9, 0x2, 0x5, 0x5, 0x0, 0x1, 0x3, 0xfd, 0x80000000, 0x0, 0x4, 0x2, 0x9d, 0x7, 0xffff0000, 0x9, 0xfffffffd, 0x84b22346, 0x7e, 0x0, 0x5, 0x1, 0x0, 0x7, 0xaaa, 0xda, 0x6, 0x7, 0x9, 0x9, 0x40000, 0x7, 0x5, 0xc2, 0x7, 0x5, 0x6, 0x7, 0x9, 0x9, 0xdb, 0xd1c0, 0x0, 0xf0af, 0x7ff, 0xfff, 0x8, 0xb757, 0x2, 0x3, 0x351, 0x7bacfd29, 0x7, 0x7, 0x5f5, 0x4, 0x1d60, 0x4, 0xb, 0x400, 0xffffffff, 0x47, 0x1, 0x7, 0x7f, 0x10001, 0x5, 0x8, 0x6, 0x7, 0x8, 0x6, 0x4, 0x5, 0x5, 0x3, 0x4, 0xe, 0x5, 0x80000001, 0x9, 0x3, 0x6, 0x5, 0x8, 0x6, 0x8000, 0xfffffff9, 0x4, 0x6, 0xc92, 0x0, 0x9, 0x1, 0xcaaf362, 0x7, 0x10, 0x4, 0x88, 0x9, 0x4eca, 0xffffff14, 0x9, 0x1, 0x4b, 0x0, 0x8, 0xb, 0x3, 0x1, 0xfffff3d2, 0x2, 0x8, 0x0, 0xffff, 0x8, 0x1, 0x7, 0x9, 0x1, 0x5, 0x6, 0x4, 0x400, 0x4, 0x4, 0x5, 0x5, 0x7f, 0x7, 0x6, 0x7, 0x36d, 0xa1c, 0x3, 0xc, 0x2, 0x2, 0x6, 0x6835, 0x7, 0x81, 0x0, 0x4ad, 0x10, 0x7, 0x2, 0x9, 0x44a, 0x6, 0x3, 0x4, 0x82a, 0x3, 0x5, 0x8, 0x0, 0xb, 0x6, 0x6, 0x6, 0x0, 0x1, 0x6, 0xa1, 0x9, 0xd, 0x6, 0x6, 0xfffffffa, 0x7f, 0x4, 0x5, 0x0, 0x7, 0x7fff, 0x0, 0x4b9c, 0x0, 0x685e, 0xa, 0x1ff, 0x9, 0x3, 0x0, 0x2, 0x6be6, 0xc, 0x3b68, 0xffffffff, 0x4, 0x9, 0x7, 0xf, 0xd, 0x5, 0x8000000, 0x304, 0x97a, 0x8, 0x2, 0x0, 0x1, 0x2, 0x4, 0x8, 0x0, 0x4, 0x8, 0x3a80, 0x96, 0xc, 0x2, 0x9, 0x2, 0x4d, 0x0, 0xd, 0x6, 0x474b, 0x0, 0x0, 0x5, 0x2, 0x1000, 0x0, 0x5, 0x9, 0x5, 0x9, 0x7, 0x1f9, 0x80000000, 0x9d20]}], [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x37, 0x7, 0x9, 0x8ca, 0x40000000, {0x8, 0x0, 0x1000, 0x4, 0x9, 0x5ae70d47}, {0x4, 0x0, 0x7fff, 0x6, 0xcdc, 0x8e38}, 0x5, 0x2, 0x6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x9, 0x1, 0x9, {0x3, 0x2, 0x2, 0x2, 0x7, 0x400}, {0x9, 0x1, 0x0, 0x0, 0xa8f5, 0x4}, 0x10000, 0x10}}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x9, 0x101, 0x4, {0x98, 0x2, 0x7, 0xfc00, 0x563c, 0xbc4b}, {0x0, 0x0, 0x3, 0xffd7, 0x1000, 0xfff}, 0x800, 0x6c96, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x2, 0xe, 0x5, 0xfffffff8, {0x9, 0x0, 0xc, 0x2, 0x200, 0x3}, {0x10, 0x2, 0x9, 0x9, 0x83, 0x9}, 0x8001, 0x28e7, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7d6e}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x8, 0x7, 0x2, 0x8, {0x2, 0x2, 0x6, 0x5, 0xc, 0x8}, {0xc, 0x0, 0x7, 0x8, 0x6}, 0x8, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc7, 0x2, 0x2, 0x3ac, 0x3, 0x304e, 0x4428cd16, 0x81, 0x2, 0x95c, 0x100, 0x5, 0x0, 0x1, 0x4, 0x750e, 0x6, 0x7, 0x3, 0x6, 0x3, 0x3, 0x5, 0x1, 0x9, 0x8, 0x6, 0xfffffff7, 0x5, 0x0, 0x10000, 0x8, 0xda88896b, 0x8, 0x1ff, 0x8, 0x8539, 0x8, 0x1, 0xbf77, 0xe, 0x7, 0xff, 0x1, 0x1, 0x2, 0x8, 0x400, 0xa17, 0x7, 0x1ff, 0x3ff, 0xfffffff0, 0x9, 0x5f, 0xaa, 0x1f5, 0x7ff, 0x7, 0x2, 0x8, 0x3, 0x2, 0x9, 0x8, 0x8, 0x80, 0xcfaade6, 0x5b, 0x3, 0x80000001, 0x50, 0x5, 0x80000001, 0xbdf9, 0x6, 0x2, 0x0, 0x115, 0x4, 0x8, 0xa803, 0xc, 0xc, 0x8, 0x40, 0xfffffe00, 0x4, 0x2, 0xfffffffb, 0x6, 0xa6, 0x0, 0x0, 0x0, 0x5, 0x8, 0x6, 0x81, 0x7, 0x3, 0x8297, 0x2, 0x101, 0x5, 0x6, 0x2, 0xffffffff, 0x3, 0x57a, 0x6, 0x2f7, 0x5, 0xd03f, 0x8001, 0x401, 0x3, 0xc8af, 0x40, 0xfffffffb, 0x8263, 0x5, 0x7f, 0x2, 0x6, 0x4, 0x1000, 0x200, 0xfffffff8, 0x1b, 0x3, 0x2, 0x3, 0x1, 0x401, 0x4, 0x2, 0x6, 0x5, 0x2, 0x5, 0x8, 0x2, 0x3, 0x6, 0x81, 0x5, 0x7, 0x101, 0xb, 0x77, 0x6, 0x5, 0x9, 0x3, 0xb974, 0x800, 0x2, 0x400, 0x6, 0x8, 0x0, 0x200, 0x3, 0x9, 0x4, 0x80, 0x401, 0x9, 0x9e80, 0x6, 0x5, 0xb, 0x1, 0x3, 0x2, 0x80, 0x1, 0x7, 0x3, 0x80, 0xfffffff8, 0x7, 0x0, 0x7f, 0x7fffffff, 0x6, 0xd, 0xc, 0x2, 0x400, 0x100, 0x0, 0x3, 0x9, 0x3, 0x0, 0x0, 0x2, 0x8, 0xf, 0x8001, 0xa, 0x10000, 0x2, 0x18, 0x7, 0x1, 0x8f3, 0x8, 0x6, 0x9, 0xffff, 0x0, 0x8, 0x6, 0x1, 0x8, 0x6, 0x8, 0x2, 0x2, 0x6, 0x9, 0x3, 0x4, 0xe, 0x1000, 0x6, 0x2, 0x9, 0xcc8, 0x8e0, 0x3, 0xfffffff6, 0x4, 0x6, 0xa2, 0x1, 0x9, 0x4, 0x7, 0x6, 0xffff, 0x6, 0x7fff, 0x3, 0xff, 0x81f, 0x7674, 0x101, 0x9, 0x1, 0x5, 0x908, 0x7]}]]}, {0x2c, 0x6, "efca93751eb09c1fd910e9d98183531849179990b75144df6a59f9b1a3782db7f54fccefd78fedfb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x129c}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="600000f70f000104a0518fd5000800", @ANYRES16=r1, @ANYRES64=r0], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) socket$nl_route(0x10, 0x3, 0x0) getpriority(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e20, @local}, 0x114, 0x0, 0x0, 0xfd00000000000000, 0x5, 0x0, 0x3, 0x3, 0x2}) 56.147984548s ago: executing program 4 (id=4664): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) close_range(r0, 0xffffffffffffffff, 0x10000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000001000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9e46, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) 56.077804455s ago: executing program 6 (id=4665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000200)={@link_local, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010600, 0x4}, {@private}, {@broadcast}, {@dev, 0x3}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) 55.153457267s ago: executing program 3 (id=4668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r1 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f00000003c0)) keyctl$link(0x8, r1, r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102384, 0x18ff0) setsockopt$inet_udp_int(r0, 0x11, 0x68, &(0x7f0000000240)=0x3, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000004c0)={0x1, @sdr={0x41564e57, 0x9}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed", 0x89, 0xfffffffffffffffe) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x11, r5, 0x83000000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000440)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x2, 0x9, 0x6, 0x1}) sendmsg$nl_route(r4, 0x0, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x108) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 54.600066711s ago: executing program 6 (id=4669): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) (async) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x30, r2, 0xe17131a1c005744d, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40006895}, 0x40010) (async) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_vs_stats_percpu\x00') read$eventfd(r5, &(0x7f0000000040), 0x8) add_key(&(0x7f0000000180)='id_resolver\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) (async) r6 = socket$inet(0x2, 0x80001, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, 0x0, &(0x7f0000000040)) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r7, 0x6, 0x1e, 0xffffffffffffffff, &(0x7f0000000280)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 54.28903346s ago: executing program 6 (id=4670): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0xe, 0x2, 0x87, 0xffffffff, 0x40}) pivot_root(0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) rseq(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) io_uring_setup(0x6ce9, &(0x7f0000000140)={0x0, 0x59cb, 0x10, 0x0, 0x402eb, 0x0, r2}) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="388000003e0001000000080000000000010000000400000014000180100010800c000b8008003900ac1e00010c000237260f3397e3fd95b28f3cbc073b000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=ANY=[], &(0x7f00000002c0), 0x2200) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 54.06431099s ago: executing program 5 (id=4672): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000100000800040001000000", 0x24) 54.043748223s ago: executing program 0 (id=4673): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x5, 0x3, 0xeff, 0x0, 0x84, 0xfffffff7, 0x5}, 0x9c) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f00000001c0)) r1 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r1, 0x107, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x100000000000000}, 0x18) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) pwritev2(r6, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e489bcdd", 0x4}], 0x1, 0xfffffffc, 0xa, 0x10) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000020000480000", @ANYRES32=r6, @ANYBLOB="10100000000000000800200005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r6], 0x40c}}, 0x0) 54.042166427s ago: executing program 3 (id=4674): r0 = io_uring_setup(0x3aba, &(0x7f0000000480)={0x0, 0x4178, 0x40, 0x8001002, 0x200003d7}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x4, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {0xfffffffe, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0xfe}]}) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) socket(0xa, 0x3, 0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1, 0xfa14, 0xffffffff}, 0x0) fsetxattr$security_capability(r3, 0x0, 0x0, 0xfffffe04, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0xb, 0x0, 0x0, 0x2}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010725bd7000fcdbdfb3030000"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x340, 0x121, 0x4}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = syz_io_uring_setup(0x24f7, &(0x7f0000000080)={0x0, 0x9203, 0x4, 0x0, 0xffffffff, 0x0, r0}, 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000300), 0x1) io_uring_enter(r6, 0x2d3e, 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000240), 0x2b4640, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 53.942324928s ago: executing program 4 (id=4675): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000440)={r3, 0x0, {0x0, 0x0, 0x1000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x7]}}) 53.253761985s ago: executing program 4 (id=4676): socket$inet6(0xa, 0x3, 0x5) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000708000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) 53.253257199s ago: executing program 6 (id=4677): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r2, 0x0, 0x3}, 0x18) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsopen(0x0, 0x0) keyctl$search(0xa, 0x0, &(0x7f00000004c0)='cifs.idmap\x00', &(0x7f0000000500)={'syz', 0x3}, 0xfffffffffffffff9) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000300)={'pcl816\x00', [0x2f00, 0x5, 0xd097, 0xffffffff, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x7fff, 0x4, 0xfffe, 0x8, 0x5, 0x7, 0x830, 0x30000, 0x10000, 0x9, 0x800, 0x100101, 0x2, 0xffffffff, 0x7, 0x3, 0x4, 0x4, 0x70f]}) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@local, @random="9881da07fc0b", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x38, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x10001, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [], "8029335287b7a081"}}}}}}}, 0x0) 53.22245279s ago: executing program 4 (id=4678): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4b, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x800, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r3}, 0x18) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x2, r0, 'id1\x00'}) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000003c0)=""/85) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0428bd7008fcffffff1200000008000300", @ANYRES32=r6, @ANYBLOB="0a000600080211000001000008001400", @ANYRES32=r6], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x10000000) 53.153567562s ago: executing program 4 (id=4679): ioperm(0x0, 0x12e, 0x8000000000008) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() ioctl$SIOCRSACCEPT(r0, 0x89e3) syz_emit_ethernet(0x72, &(0x7f0000000180)={@link_local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x6c, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, [@hopopts={0x3a}]}}}}}}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlockall(0x7) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$inet(0x2, 0x3, 0x5) getsockopt$MRT(r3, 0x0, 0xd0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000900000030000380140002007369743000003f00000000000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 53.033773273s ago: executing program 5 (id=4680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x14, r1, 0xf21, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0xfffffffffffffff0, 0x810}, 0x8010) 52.966471016s ago: executing program 0 (id=4681): preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setrlimit(0x3, &(0x7f0000000040)={0xe8, 0x7fffffff}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xe8, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x3a, @rand_addr=0x64010102, 0x4e20, 0x1, 'rr\x00', 0x35, 0x7, 0x2b}, {@rand_addr=0x64010100, 0x5e22, 0x0, 0x80000001, 0x7ffffff7, 0x200004}}, 0x44) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000001ca80)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002, 0x0, 0x8010002}) 52.912102017s ago: executing program 3 (id=4682): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) close(0x3) syz_io_uring_setup(0xf04, &(0x7f0000000180)={0x0, 0xd96d, 0x3f, 0xfffffffe, 0x24000, 0x0, 0x0}, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) time(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x80, 0x10200}, [@IFLA_OPERSTATE={0x5, 0x10, 0x6}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$caif_stream(0x25, 0x1, 0x0) r3 = syz_io_uring_setup(0x236, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x402b6ef64d7fff94}) io_uring_enter(r3, 0x207a98, 0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)={0x20, r0, 0x329, 0xfffffffc, 0x0, {0x16}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x8004) 52.828472109s ago: executing program 5 (id=4683): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x53b, 0x70bd27, 0x0, {0x9, 0x0, 0x8100}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x5, 0x5, 0x2, 0x4}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}}, 0x0) 52.82818322s ago: executing program 0 (id=4684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0xfeff, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) 52.781049267s ago: executing program 3 (id=4685): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00') lseek(r4, 0x7, 0x1) connect$unix(r2, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r5, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) sendto$inet(r5, &(0x7f0000000100)="b4", 0x1, 0x101, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, 0x0, r6, 0x0, 0x7ffff000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c) r8 = dup2(r7, r7) sendmmsg$unix(r8, &(0x7f0000008380), 0x400000000000174, 0x4008890) socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r10, &(0x7f0000001740)={0x2020}, 0x2020) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000040)="2ef2dd05008000000f20e035000004000f22e00f23d00f21f835000000010f23f836362e6726af440f20c0350e000000440f22c0b805000000b9009800000f01d90f01c965470f01c4410f79d226450f01cb660f013b", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 52.774218596s ago: executing program 0 (id=4686): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400005) r3 = socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b8"], 0xb8) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r8, r7, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r9, 0x0, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r10, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000300)}, 0x0) connect$inet(r9, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000018010040"]) socket$unix(0x1, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 52.721642826s ago: executing program 5 (id=4687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 51.583208392s ago: executing program 0 (id=4688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x2, 0x2, 0x3, 0x2048, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0xc}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x7c35a52b3c55e133, 0xf8, 0x1, 0x8, 0x0, @remote, @private1, 0x40, 0x8000, 0xffffb175, 0xab7}}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pK \x00'}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00') (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x84, r9, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x6d}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "09bcbc27d47569f8e6b88e1ed924c33a"}, @NL80211_ATTR_PMK={0x14, 0xfe, "86a36d760e34ed6bcb4926ea5ac8b64e"}, @NL80211_ATTR_PMK={0x14, 0xfe, "9360a4c0baad2f3fab33165454589f7f"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="936a45568f64"}, @NL80211_ATTR_PMKID={0x14, 0x55, "79e25f3fcf7aaaaea8fb94a87b24e09d"}]}, 0x84}, 0x1, 0x0, 0x0, 0x48040}, 0x4) preadv(r8, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/165, 0xa5}], 0x10000000000002f1, 0x4, 0x0) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1e, 0x7, 0xa4, 0x9, 0x40, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x14, &(0x7f0000000300)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff2046}}, @map_val={0x18, 0x5, 0x2, 0x0, r4}, @tail_call], &(0x7f0000000000)='GPL\x00', 0x101, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xb, 0x80000001, 0x7fff}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000680)=[r6, r7, 0xffffffffffffffff, r8, r11], &(0x7f00000006c0)=[{0x1, 0x2, 0x2}, {0x0, 0x4, 0xb, 0xc}, {0x4, 0x3, 0x3, 0x3}, {0x4, 0x4, 0xd, 0x9}, {0x2, 0x5, 0xe, 0x6}, {0x4, 0x4, 0x3, 0xd}, {0x4, 0x3, 0x5, 0x9}], 0x10, 0x80000001}, 0x94) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv4_getnetconf={0x14, 0x1a, 0x1}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) (async) bind$phonet(r8, &(0x7f0000000a80)={0x23, 0x60, 0x5, 0x7}, 0x10) 51.547415183s ago: executing program 5 (id=4689): r0 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000280)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xf, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) openat$nvram(0xffffffffffffff9c, 0x0, 0x22000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) keyctl$clear(0x7, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0xfffffffe, 0x3, 0x4}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0x4, 0x10000000}) syz_open_dev$dri(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='hfsplus\x00', 0x410, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x103bff, 0x111) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) 51.081481713s ago: executing program 4 (id=4690): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32={[0x0, 0xffc99a3b]}}], 0xffc8) 50.295639317s ago: executing program 5 (id=4691): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb, 0x7ff, 0x8, 0x0, 0x3}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000080000000d000000010100000000000024a900000039744590c989846db6f0697ee74db3d82c92fdce8296824be031d2ccc058b49e698ff30799c6ca4520"]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x40082) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() r7 = socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$can_bcm(r7, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r6, &(0x7f0000001480)=""/4084, 0xff4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x244bc2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) 48.714829179s ago: executing program 0 (id=4692): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r0, 0x0) syz_clone3(&(0x7f0000000740)={0x4000, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=0x0, {0x27}, &(0x7f0000000640)=""/43, 0x2b, &(0x7f0000000680)=""/83, &(0x7f0000000700)=[0x0, 0x0], 0x2}, 0x58) read$FUSE(r0, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002800)={0x0, 0x0}, &(0x7f0000002840)=0xc) stat(&(0x7f0000002880)='./file0\x00', &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpid() read$FUSE(r0, &(0x7f0000003a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fstat(r0, &(0x7f0000005ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000005b40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffffff, &(0x7f0000007b80)='./file0\x00', 0x800, 0x80, &(0x7f0000007bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000007cc0)=0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000007d00)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000007d40)={0x0, 0x0}, &(0x7f0000007d80)=0xc) sendmmsg$unix(r0, &(0x7f0000007ec0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000500)=[{&(0x7f00000000c0)="7e0a876eb68051322bb1e8b6a87bc7444cce5491a6861470f8dc6dca6aef7d774cecab6a85f68ac7c18ee290ef634211eee65da8bcfca215041cd69c37c60d234566cac376430627ab4788dee81243a2abe96c9bd12d2829446f7ce037dee1fa89b12f9aaec46cceb571978477c0addb79efb3547fa2d3ddce2c9554d75ab6ae6fa95341b543aced63159dfe60e4c38d5a89", 0x92}, {&(0x7f0000000180)="c886e84ed21a12c62ed597146e6d887704007763df4935ed643ed5fb9deda4254c4cb866e27b83a0146c8526e00981e52628826a9fa3ad1044b348f0fc71921be8ae227d46e055302d1585baf854ff299b6007fd7bac44371ad1c48d629dfa51ce46ce4a0d8f49dea416da", 0x6b}, {&(0x7f0000000200)="c0f863dfd20708c2daaf637a3b81fe31b114e99b0804c1b5bcd070d2eb19c666e7a3a6e504441c64fd2ec1dccfdde51498e4f557187689b2226091f0ca5c477ba28b1b9eb73b9dc9c0b12f9264023d528b09f89a6195c5e3fef604d1904fac936c8536c059b628ed78ae0f0958d56563a7315842e91162cf88fd437e37691c90a43e02aa0defc9f34521968e702c9b66dec56dbfb85fbb481f905b29eddb048ac0b9cae4a4770252bb49d8e6b163b13fa9b73a131a02eb0202e45c9e1180a8c3acf188b21269ad8340f684c049f345578c1e0355de1a58556b5db6d1be0fd00dc59f00e77f", 0xe5}, {&(0x7f0000000300)="b68232a24d8ef5a6f9dc3ccbfbcf61a37216f4b6369cc74c5061da0bf7c56a8db82cde7fb5e9b54d959b081466e82d7caa3526a81a110b6db29b9ee82405522d506fdb", 0x43}, {&(0x7f0000000380)="c7ea90e8c655aa1b6143d7a7e10079ff49aa702c7d390a1f7f826bc50f10e93151b027cbb6700c91705dadf292c2116e8aac080c5b2ac6127d7c8b79be481d5ea33e39f399a6b93623f258682c86554581d0e99ebb1f0378f3f2bfeb3f556d1dc6c44da0e018ae29c5662a0c2eb9d3d7f75fdd21cb956a00e89a3031d3fed4d647a05bede2f42914f3e28a992ad36f63934bed6d2409c88b99707ac39138170134fd434fc566803ffe015a9bac332ff347860dcfcaf1b8f4b856b54f21442b48b433788d25e93552edd20ae458c9b7bbfb7e1dfddcb42fdb199691d655cab2", 0xdf}, {&(0x7f0000000480)="719dae9271d941ed2dcc9963a695f23733bcc48b7e068bdb8deee86e9917829d889b49c1656be5a75e7e8461e98533c7142b49cd5326c7a67af179a58ddb9d43fb3e734c8417afc9600fdbea7a3b1712a98bab887714534a0c106dcd43109f3bc0f2a7632f87c8394cfc4baa", 0x6c}], 0x6, &(0x7f0000002940)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee00, 0xee01}}}], 0x60, 0x404c050}}, {{&(0x7f00000029c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003a40)=[{&(0x7f0000002a40)="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", 0x1000}], 0x1, &(0x7f0000007dc0)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, 0xffffffffffffffff, r0, r0]}}], 0xd0, 0x20040010}}], 0x2, 0x14) r14 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000008240)={0x0, &(0x7f0000007f40)=[@wrmsr={0x1e, 0x20, {0x255, 0x8000000000000000}}, @uexit={0x0, 0x18, 0x927}, @cpuid={0x14, 0x18, {0x0, 0x4}}, @wr_crn={0x46, 0x20, {0x2, 0x5999bedf}}, @wr_crn={0x46, 0x20, {0x4, 0x9}}, @uexit={0x0, 0x18, 0x19}, @wrmsr={0x1e, 0x20, {0xb58, 0x1}}, @code={0xa, 0x5f, {"83a87dffffff02420f1bb00000008066b899008ed8c4623d963d01000000c48221bc256b220000460f0015996aaa570f011cebb9800000c00f3235010000000f302e400f017a7966b8e2000f00d8"}}, @wr_crn={0x46, 0x20, {0x2, 0xab88}}, @uexit={0x0, 0x18, 0x7}, @code={0xa, 0x68, {"66baf80cb81a674d80ef66bafc0cecc4e3d941b20000000062b8010000000f01c1c421fff034cfc74424004a000000c74424023b000000ff1c24670f01ca660f383cb1570000000f01c20f1c0066470f3882b5ad000000"}}, @wr_crn={0x46, 0x20, {0x0, 0x6ee}}, @cpuid={0x14, 0x18, {0x6e6, 0x7}}, @wr_crn={0x46, 0x20, {0x3, 0xb}}, @rdmsr={0x32, 0x18, {0x8a0}}, @wr_crn={0x46, 0x20, {0x4, 0x4}}, @rdmsr={0x32, 0x18, {0xac9}}, @cpuid={0x14, 0x18, {0x5, 0x5}}, @uexit={0x0, 0x18, 0x8}, @wr_crn={0x46, 0x20, {0x8, 0x7}}, @wrmsr={0x1e, 0x20, {0x261, 0xb}}, @cpuid={0x14, 0x18, {0x5, 0x10000}}], 0x2f7}) writev(r14, &(0x7f00000086c0)=[{&(0x7f0000008280)="f7290a059cb4232d0447a176fd15bc04f7f50ed8279af516ce1e3db8d9aae733cbf7014ab1fe2f0e11b8be0a9b89a583abf27118980be133cf0b33402556deab3625f45751ba575965b03577a67443c2b403cb3d877cbe5f2ebcc3421d004fa678cc7e2629", 0x65}, {&(0x7f0000008300)="039b03823d88cc7971fda14835a28477e000bd84c39481f0f7ba358a2cfd3b22314597eba9a42f8d8902959394", 0x2d}, {&(0x7f0000008340)="2d70b0e7dd96cce4d5fb7199a27c25ad46cf3c7c450779e5106527ccd4529ba4bcad5486278ad37766149bdaec9324dc29c16c422b9cda28a59bf8c33bc61daee32b25a17047649c1afc16015c50324703874cb4c3e2a1bc89de64e23b658a77c5a934c1c18f", 0x66}, {&(0x7f00000083c0)="0106d4f4f9bffb8d69229b3571ae45d27b4a93011f1d9136fdf08ef97cdd3a0f58c417c425162a3124a47ad383d4ef734dee0e0277ba31121c28ec310c9cde2032c676dc9e99b1705a4eb8427e76f69dc53e6919acdabc", 0x57}, {&(0x7f0000008440)="9a43521b011e14668c7090656f022c9568ed61dcc73a98f520dbdc328ce9d4cb76c73922a348d71e3248dc369e21416b54d87e2e2e6d45468dcb33c4f971f493e989f0b9a1f82f819051ec6ccf720dd30095619f42047d5c7be96e505ae1facd40fc5e9e140b425f5ffe0f32a3b656607820050d2caebae072e8ddcf7b80d1dfbc367190", 0x84}, {&(0x7f0000008500)="b50026e82d03c62a82ea421d8238", 0xe}, {&(0x7f0000008540)="83463dc3efbf53855e1d04e5a1d6ceed625fb027fc5a458297835f138bff55529623140b1f3703f5aa686024aea11a0b3721e2f509eec22196aa02b9913f1d4820bee31ed7873deb4c55c0c253ae1c6370625b5de9c00ecfeaff1b829df41c7828f7a8836fca7940a703f7e46e20a7cadb1e3cd9", 0x74}, {&(0x7f00000085c0)="1281b0ff5713f72ced8e2665a7338d3fe56e12d494a7be3be3a71f0beb4344a7df67ff6cbccd95baefb63e2a1006aa548291aab62a6454619c9747228c2aaaa76b395dcdb26da5c46d080d104b9a8b354ff101e507170e83a486285a9b54f6e47d0bc8c8d81012ad8a9502838613a473db240ca1f505e6e3450c6f230000c118bd886065fe19434ca24af3f74f5b7477125f810f0257331cd916006beb0abefccfca6596eaf606fd9ac1b5fa55e4aaaecbaa2256d67a9f9b2f3e2947f135e0a44520474389c9", 0xc6}], 0x8) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000008740)={@desc={0x1, 0x0, @desc2}}) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f00000087c0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000088c0)={&(0x7f0000008780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000008880)={&(0x7f0000008800)={0x48, r15, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r16 = syz_open_dev$dri(&(0x7f0000008900), 0x2, 0x20e540) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000089c0)={&(0x7f0000008940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000008980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0xdededede}) ioctl$DRM_IOCTL_MODE_ATOMIC(r16, 0xc03864bc, &(0x7f0000008b00)={0x600, 0x2, &(0x7f0000008a00)=[0x0, r17], &(0x7f0000008a40)=[0x9, 0x48a16295], &(0x7f0000008a80), &(0x7f0000008ac0), 0x0, 0x3ff}) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r12, 0x1, 0x5004) r18 = accept4$inet6(r0, 0x0, &(0x7f0000008b40), 0x80800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000008b80)={'caif0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r18, 0x8918, &(0x7f0000008bc0)={@mcast1, 0x26, r19}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000008c00)={'ip6_vti0\x00'}) io_uring_enter(r0, 0x5dcc, 0x3, 0x46, &(0x7f0000008c40)={[0x7]}, 0x8) 0s ago: executing program 42 (id=4677): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r2, 0x0, 0x3}, 0x18) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsopen(0x0, 0x0) keyctl$search(0xa, 0x0, &(0x7f00000004c0)='cifs.idmap\x00', &(0x7f0000000500)={'syz', 0x3}, 0xfffffffffffffff9) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000300)={'pcl816\x00', [0x2f00, 0x5, 0xd097, 0xffffffff, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x7fff, 0x4, 0xfffe, 0x8, 0x5, 0x7, 0x830, 0x30000, 0x10000, 0x9, 0x800, 0x100101, 0x2, 0xffffffff, 0x7, 0x3, 0x4, 0x4, 0x70f]}) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@local, @random="9881da07fc0b", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x38, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x10001, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [], "8029335287b7a081"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 41] tpg colorspace: 8 [ 974.145927][T19641] tpg transfer function: 0/0 [ 974.161120][T19641] tpg Y'CbCr encoding: 0/0 [ 974.166798][T19641] tpg quantization: 0/0 [ 974.171485][T19641] tpg RGB range: 0/2 [ 974.175647][T19641] vivid-000: ================== END STATUS ================== [ 974.190676][ C0] tipc: Duplicate ac1414aa using udp(172.20.20.170:20002) seen on [ 974.742613][T19653] lo speed is unknown, defaulting to 1000 [ 975.240447][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 976.654747][T19685] overlayfs: failed to resolve 'éq‰Y’3aK': -2 [ 976.662395][ T30] audit: type=1400 audit(1754689839.655:2262): avc: denied { mount } for pid=19683 comm="syz.0.3819" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 977.045227][T19689] bad cache= option: no%e [ 977.045227][T19689] [ 977.051852][T19689] CIFS: VFS: bad cache= option: no%e [ 977.310354][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 978.253874][T19698] input: syz0 as /devices/virtual/input/input18 [ 978.654803][ T30] audit: type=1400 audit(1754689841.655:2263): avc: denied { shutdown } for pid=19700 comm="syz.5.3824" lport=57671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 978.722697][ T43] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 978.933829][ T43] usb 7-1: config 9 has an invalid interface number: 96 but max is 0 [ 978.947091][ T43] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 978.968448][ T43] usb 7-1: config 9 has no interface number 0 [ 978.978950][ T43] usb 7-1: config 9 interface 96 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 979.017546][ T43] usb 7-1: config 9 interface 96 has no altsetting 0 [ 979.239052][T19711] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 979.357304][ T43] usb 7-1: New USB device found, idVendor=0bfd, idProduct=000c, bcdDevice= 8.cf [ 979.369060][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.378721][ T43] usb 7-1: Product: syz [ 979.390457][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 979.719604][ T43] usb 7-1: Manufacturer: syz [ 979.745280][ T43] usb 7-1: SerialNumber: syz [ 979.880266][ T5913] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 980.124173][ T43] kvaser_usb 7-1:9.96: error -ENODEV: Cannot get usb endpoint(s) [ 980.140460][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 980.146552][ T43] usb 7-1: USB disconnect, device number 33 [ 980.149183][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.603926][ T5913] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.615014][ T5913] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.624999][ T5913] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 980.637949][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 980.645778][ T5913] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 980.655127][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.668921][ T5913] usb 5-1: config 0 descriptor?? [ 981.275083][T19741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3835'. [ 981.480424][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 981.698771][ T5913] hid-thrustmaster 0003:044F:B65D.000E: invalid report_count 29995 [ 982.114833][ T5913] hid-thrustmaster 0003:044F:B65D.000E: item 0 2 1 9 parsing failed [ 982.123318][ T5913] hid-thrustmaster 0003:044F:B65D.000E: parse failed with error -22 [ 982.131517][ T5913] hid-thrustmaster 0003:044F:B65D.000E: probe with driver hid-thrustmaster failed with error -22 [ 982.280332][T19754] fuse: Unknown parameter 'grou00000000000000000000' [ 982.309190][ T30] audit: type=1400 audit(1754689845.295:2264): avc: denied { append } for pid=19752 comm="syz.6.3840" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 982.831171][ T43] usb 7-1: new low-speed USB device number 34 using dummy_hcd [ 982.855489][T19763] tracefs: Bad value for 'uid' [ 982.880281][T19763] tracefs: Bad value for 'uid' [ 983.025446][T19768] overlayfs: failed to resolve './bus': -2 [ 983.037837][ T43] usb 7-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 983.143463][ T43] usb 7-1: config 1 interface 0 altsetting 10 endpoint 0x82 is Bulk; changing to Interrupt [ 983.159319][ T43] usb 7-1: config 1 interface 0 altsetting 10 endpoint 0x3 is Bulk; changing to Interrupt [ 983.178305][ T43] usb 7-1: config 1 interface 0 has no altsetting 0 [ 983.247333][T19774] 9pnet_fd: Insufficient options for proto=fd [ 983.264679][T19774] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3845'. [ 983.541967][T19777] netlink: 'syz.0.3846': attribute type 21 has an invalid length. [ 983.550504][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 984.142279][T19777] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3846'. [ 984.313977][T19782] netlink: 'syz.5.3848': attribute type 21 has an invalid length. [ 984.340219][T19782] netlink: 'syz.5.3848': attribute type 1 has an invalid length. [ 984.359843][T19782] netlink: 15998 bytes leftover after parsing attributes in process `syz.5.3848'. [ 984.363891][T19775] netlink: 'syz.0.3846': attribute type 21 has an invalid length. [ 984.400063][T19775] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3846'. [ 984.944674][T19792] netlink: 'syz.0.3851': attribute type 6 has an invalid length. [ 984.954979][T19792] netlink: 'syz.0.3851': attribute type 6 has an invalid length. [ 985.419291][ T43] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 985.601099][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.609112][ T43] usb 7-1: Product: á²ç«µà¼“㌰둯ꜛ뜺誺꒯䂙솦ç–ꡥ㨸著è녽虞身둥䔺㙽í¥â²±ïжç§ê¥»ä€•朥ﰣ籅죂籒⫤텷諢çƒâ—¹ë«Ê³åŽ§àµªç¡¼é–©çŒœáˆ›ìƒ¢î“½ç¦à©«Ì¨í„쪳螅஥ዙ驠倦唠襼㡈첅䲺铔㫎ឿ⭹圽꒺毣܃â°ëƒ¨ä•‹í›‘鯵ç‚瞷㜅䑽対츠礴î‰ì„·âµ–먠 [ 985.630381][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 986.145764][ T43] usb 7-1: Manufacturer: à ¾ [ 986.188424][ T30] audit: type=1400 audit(1754689849.185:2265): avc: denied { search } for pid=19806 comm="syz.4.3857" name="/" dev="configfs" ino=1063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 986.188822][ T43] usb 7-1: can't set config #1, error -71 [ 986.334654][ T43] usb 7-1: USB disconnect, device number 34 [ 986.383522][ T30] audit: type=1400 audit(1754689849.245:2266): avc: denied { unmount } for pid=16856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 986.526795][T19814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.534335][T19814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.672926][T19814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 986.684771][T19814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.729607][T19816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.779147][T19816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.554250][T19825] ubi: mtd0 is already attached to ubi31 [ 987.710324][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 988.195678][T19822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3862'. [ 988.305049][T19829] netlink: 'syz.5.3863': attribute type 10 has an invalid length. [ 988.589811][T19829] lo: entered promiscuous mode [ 988.613585][T19829] lo: entered allmulticast mode [ 988.632290][ T976] usb 5-1: USB disconnect, device number 29 [ 988.852190][T19829] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 988.932408][T19829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 989.790327][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 990.089076][ T30] audit: type=1400 audit(1754689853.085:2267): avc: denied { connect } for pid=19841 comm="syz.0.3867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 990.116752][T19849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=19849 comm=syz.0.3867 [ 990.814001][ T30] audit: type=1400 audit(1754689853.725:2268): avc: denied { bind } for pid=19862 comm="syz.3.3873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 990.918108][ T30] audit: type=1800 audit(1754689853.905:2269): pid=19871 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3875" name="nullb0" dev="tmpfs" ino=1175 res=0 errno=0 [ 991.035687][T19873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3876'. [ 991.241635][T19873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3876'. [ 991.344974][T19883] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3878'. [ 991.362029][T19875] netlink: 'syz.0.3877': attribute type 10 has an invalid length. [ 991.369936][T19875] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 991.381156][T19875] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 991.394451][T19875] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 991.787862][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3880'. [ 991.870562][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 992.590841][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.597126][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.870216][T19900] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3885'. [ 993.262522][T19903] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 993.853493][ T5920] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 993.950409][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 994.190244][ T5893] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 994.333625][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 994.340313][ T5920] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 994.349349][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.522492][ T5920] pvrusb2: Hardware description: Terratec Grabster AV400 [ 994.616754][ T5920] pvrusb2: ********** [ 994.818153][ T5920] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 994.836528][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.852990][ T5893] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99 [ 994.880512][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.888635][ T5893] usb 5-1: Product: syz [ 994.892919][ T5893] usb 5-1: Manufacturer: syz [ 994.897619][ T5893] usb 5-1: SerialNumber: syz [ 994.981242][ T5893] usb 5-1: config 0 descriptor?? [ 995.894442][ T5920] pvrusb2: Important functionality might not be entirely working. [ 995.897739][ T5893] f81534a_ctrl 5-1:0.0: failed to set register 0x116: -5 [ 995.909668][ T5893] f81534a_ctrl 5-1:0.0: failed to enable ports: -5 [ 995.924487][ T5893] f81534a_ctrl 5-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 995.998085][ T5920] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 996.004945][ T5893] usb 5-1: USB disconnect, device number 30 [ 996.030348][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 996.052096][ T5920] pvrusb2: ********** [ 996.095353][ T2336] pvrusb2: Invalid write control endpoint [ 996.108078][ T5920] usb 4-1: USB disconnect, device number 13 [ 996.226861][T19926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3893'. [ 996.689156][ T2336] pvrusb2: Invalid write control endpoint [ 996.699063][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 996.903662][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 997.006764][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3897'. [ 997.013938][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 997.053485][ T2336] pvrusb2: Device being rendered inoperable [ 997.164725][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 997.171997][ T30] audit: type=1400 audit(1754689860.075:2270): avc: denied { write } for pid=19938 comm="syz.4.3898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 997.206394][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 997.262312][ T2336] pvrusb2: Attached sub-driver cx25840 [ 997.280635][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 997.292975][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 997.725509][T19961] netlink: 'syz.4.3900': attribute type 10 has an invalid length. [ 997.733653][T19961] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 997.744252][T19961] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 997.777275][T19961] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 998.110542][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 998.176740][T19969] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 998.642966][T16160] hid-generic 0000:0004:0000.000F: unknown main item tag 0x0 [ 998.650667][T16160] hid-generic 0000:0004:0000.000F: unknown main item tag 0x0 [ 998.658276][T16160] hid-generic 0000:0004:0000.000F: unknown main item tag 0x0 [ 998.680617][T16160] hid-generic 0000:0004:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 999.150716][ C0] tipc: Duplicate ac1414aa using udp(172.20.84.170:20002) seen on [ 999.160438][ T5913] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 999.174407][ T30] audit: type=1400 audit(1754689862.175:2271): avc: denied { shutdown } for pid=19978 comm="syz.5.3908" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 999.414678][T19986] netlink: 'syz.0.3909': attribute type 1 has an invalid length. [ 999.425773][T19986] sctp: [Deprecated]: syz.0.3909 (pid 19986) Use of int in max_burst socket option. [ 999.425773][T19986] Use struct sctp_assoc_value instead [ 999.444942][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 999.471076][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.528146][ T5913] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 999.567187][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.704641][ T5913] usb 4-1: Product: syz [ 999.708844][ T5913] usb 4-1: Manufacturer: syz [ 999.714404][ T5913] usb 4-1: SerialNumber: syz [ 999.752269][ T5913] usb 4-1: config 0 descriptor?? [ 999.782113][ T5913] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 999.903266][ T5913] gspca_stv06xx: st6422 sensor detected [ 1000.190866][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1001.168104][T20022] wg1: entered promiscuous mode [ 1001.175776][T20022] wg1: entered allmulticast mode [ 1001.601312][ T5913] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 1001.646315][ T5913] usb 4-1: USB disconnect, device number 14 [ 1002.270512][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1004.350334][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1004.784006][T20046] syz_tun: left allmulticast mode [ 1004.797658][T20046] syz_tun: left promiscuous mode [ 1005.180049][T20031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3925'. [ 1005.255220][T20046] bridge0: port 3(syz_tun) entered disabled state [ 1005.255364][ T30] audit: type=1400 audit(1754689868.255:2272): avc: denied { bind } for pid=20053 comm="syz.4.3934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1005.423255][T20046] bridge_slave_0: left allmulticast mode [ 1005.432168][T20046] bridge_slave_0: left promiscuous mode [ 1005.600425][T20046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.880292][ T976] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1005.961833][T20046] bridge_slave_1: left allmulticast mode [ 1005.967525][T20046] bridge_slave_1: left promiscuous mode [ 1005.988032][T20046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.017725][T20046] bond0: (slave bond_slave_0): Releasing backup interface [ 1006.049685][T20046] bond0: (slave bond_slave_1): Releasing backup interface [ 1006.060369][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.092864][ T976] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1006.106145][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.118943][ T976] usb 4-1: config 0 descriptor?? [ 1006.120705][T20046] team_slave_0: left promiscuous mode [ 1006.148262][T20066] loop3: detected capacity change from 0 to 1 [ 1006.159803][T16679] Dev loop3: unable to read RDB block 1 [ 1006.165887][T20046] team0: Port device team_slave_0 removed [ 1006.175933][T20046] team_slave_1: left promiscuous mode [ 1006.182447][T16679] loop3: unable to read partition table [ 1006.188270][T16679] loop3: partition table beyond EOD, truncated [ 1006.203330][T20046] team0: Port device team_slave_1 removed [ 1006.209738][T20066] Dev loop3: unable to read RDB block 1 [ 1006.216291][T20066] loop3: unable to read partition table [ 1006.228129][T20046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.233173][T20066] loop3: partition table beyond EOD, [ 1006.237204][T20046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.241183][T20066] truncated [ 1006.258653][T20066] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1006.279377][T20046] bond1: (slave batadv_slave_1): Releasing active interface [ 1006.319950][T20046] bond0: (slave netdevsim0): Releasing backup interface [ 1006.326159][T20064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.336165][T20064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.346818][ T976] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 1006.389549][ T976] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0010/input/input19 [ 1006.423201][T20046] batman_adv: batadv0: Interface deactivated: macvlan2 [ 1006.430476][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1006.453616][T20046] batman_adv: batadv0: Removing interface: macvlan2 [ 1006.505134][T20047] team0: Mode changed to "loadbalance" [ 1006.517566][ T2149] lo speed is unknown, defaulting to 1000 [ 1007.126212][ T30] audit: type=1400 audit(1754689869.575:2273): avc: denied { bind } for pid=20061 comm="syz.3.3935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1007.176786][ T976] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1007.279898][T16160] usb 4-1: USB disconnect, device number 15 [ 1007.298761][T20070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1007.337922][T20070] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1007.396936][T20076] fido_id[20076]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1007.411897][T20077] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1008.169505][T20092] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3944'. [ 1008.510525][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1008.972497][T20099] netlink: 'syz.6.3945': attribute type 11 has an invalid length. [ 1008.990721][T20099] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3945'. [ 1009.940262][T20111] input: syz0 as /devices/virtual/input/input20 [ 1010.145827][T20118] netlink: 'syz.5.3951': attribute type 11 has an invalid length. [ 1010.590363][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1011.786682][ T30] audit: type=1326 audit(1754689874.785:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20146 comm="syz.5.3960" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a53b8ebe9 code=0x0 [ 1012.603903][T20162] IPVS: Unknown mcast interface: sit0? [ 1012.670744][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1013.021166][ T976] usb 7-1: new low-speed USB device number 35 using dummy_hcd [ 1013.223714][ T976] usb 7-1: config 1 interface 0 altsetting 48 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1013.382469][ T976] usb 7-1: config 1 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1013.407980][ T976] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1013.418131][ T976] usb 7-1: string descriptor 0 read error: -22 [ 1013.428289][ T976] usb 7-1: New USB device found, idVendor=05ac, idProduct=0304, bcdDevice= 0.40 [ 1013.446558][ T976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.466923][T20164] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1013.699072][ T976] usbhid 7-1:1.0: can't add hid device: -71 [ 1013.706707][ T976] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1013.717698][ T976] usb 7-1: USB disconnect, device number 35 [ 1014.259382][T20188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3972'. [ 1014.335980][T20188] netlink: 'syz.3.3972': attribute type 1 has an invalid length. [ 1014.369263][T20188] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3972'. [ 1014.750367][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1016.036128][T20212] loop4: detected capacity change from 0 to 524255232 [ 1016.214217][T20213] loop4: detected capacity change from 524255232 to 524287935 [ 1016.477551][T20216] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1016.512075][T20216] macsec2: entered allmulticast mode [ 1016.517387][T20216] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1016.588847][T20216] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 1016.613936][T20216] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1016.830396][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1017.773291][ T30] audit: type=1400 audit(1754689880.765:2275): avc: denied { remount } for pid=20236 comm="syz.4.3989" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 1018.098968][T20246] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1018.652640][T13790] Bluetooth: hci0: link tx timeout [ 1018.659079][T13790] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1018.676165][T13790] Bluetooth: hci0: link tx timeout [ 1018.681685][T13790] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1018.689579][T13790] Bluetooth: hci0: link tx timeout [ 1018.695394][T13790] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1018.703416][ T30] audit: type=1400 audit(1754689881.705:2276): avc: denied { shutdown } for pid=20254 comm="syz.6.3996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1018.910416][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1020.098213][T20284] netlink: 'syz.3.4004': attribute type 11 has an invalid length. [ 1020.904055][T13790] Bluetooth: hci0: command 0x0406 tx timeout [ 1020.908258][ T30] audit: type=1400 audit(1754689883.565:2277): avc: denied { connect } for pid=20288 comm="syz.0.4008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1020.965294][ T30] audit: type=1400 audit(1754689883.565:2278): avc: denied { bind } for pid=20288 comm="syz.0.4008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1020.990396][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1021.008826][ T30] audit: type=1400 audit(1754689883.565:2279): avc: denied { write } for pid=20288 comm="syz.0.4008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1021.094937][ T30] audit: type=1400 audit(1754689884.095:2280): avc: denied { name_connect } for pid=20302 comm="syz.5.4010" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1021.329820][T20313] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4015'. [ 1021.528307][T20318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4016'. [ 1022.827010][T20319] lo speed is unknown, defaulting to 1000 [ 1022.969278][ T30] audit: type=1400 audit(1754689885.715:2281): avc: denied { write } for pid=20306 comm="syz.3.4012" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1023.070374][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1023.107314][T20324] [ 1023.128336][ T30] audit: type=1400 audit(1754689886.105:2282): avc: denied { read write } for pid=20323 comm="syz.6.4017" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1023.154361][ C1] vkms_vblank_simulate: vblank timer overrun [ 1023.172089][ T30] audit: type=1400 audit(1754689886.105:2283): avc: denied { open } for pid=20323 comm="syz.6.4017" path="/185/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1023.720374][ T5913] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 1023.902737][ T5913] usb 4-1: config 1 interface 0 altsetting 48 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1023.930480][ T5913] usb 4-1: config 1 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1024.043034][ T5913] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1024.054059][ T5913] usb 4-1: string descriptor 0 read error: -22 [ 1024.063887][ T5913] usb 4-1: New USB device found, idVendor=05ac, idProduct=0304, bcdDevice= 0.40 [ 1024.073436][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.087884][T20345] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1024.176389][T20369] afs: Unknown parameter 'GPL' [ 1024.561669][ T5913] usbhid 4-1:1.0: can't add hid device: -71 [ 1024.567716][ T5913] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1024.602063][ T5913] usb 4-1: USB disconnect, device number 16 [ 1024.867361][T20372] netlink: 'syz.6.4030': attribute type 3 has an invalid length. [ 1024.876137][T20372] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4030'. [ 1025.150492][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1025.621879][ T30] audit: type=1400 audit(1754689888.625:2284): avc: denied { create } for pid=20382 comm="syz.3.4034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1025.653384][T20384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1025.664102][T20384] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4033'. [ 1025.700328][ T30] audit: type=1400 audit(1754689888.645:2285): avc: denied { bind } for pid=20382 comm="syz.3.4034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1025.733610][ T30] audit: type=1400 audit(1754689888.645:2286): avc: denied { write } for pid=20382 comm="syz.3.4034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1025.785041][ T30] audit: type=1400 audit(1754689888.675:2287): avc: denied { ioctl } for pid=20382 comm="syz.3.4034" path="socket:[65720]" dev="sockfs" ino=65720 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1026.190720][ C0] tipc: Duplicate ac1414aa using udp(172.20.20.170:20002) seen on [ 1026.455310][ T30] audit: type=1400 audit(1754689889.175:2288): avc: denied { connect } for pid=20385 comm="syz.0.4035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1026.475511][ T30] audit: type=1400 audit(1754689889.235:2289): avc: denied { mount } for pid=20385 comm="syz.0.4035" name="/" dev="autofs" ino=65735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1027.230403][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1027.869471][T20409] afs: Unknown parameter 'GPL' [ 1028.270600][ C0] tipc: Duplicate ac1414aa using udp(172.148.20.170:20002) seen on [ 1028.270844][T20410] bridge6: entered promiscuous mode [ 1028.586440][T20418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4044'. [ 1028.988523][ T30] audit: type=1400 audit(1754689891.985:2290): avc: denied { append } for pid=20431 comm="syz.6.4051" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1029.056562][T20435] netlink: 'syz.0.4049': attribute type 6 has an invalid length. [ 1029.096413][T20435] netlink: 'syz.0.4049': attribute type 6 has an invalid length. [ 1029.115558][T20433] overlayfs: failed to clone upperpath [ 1029.310465][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1029.380268][ T5920] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1029.530251][ T5920] usb 7-1: Using ep0 maxpacket: 32 [ 1029.576946][ T5920] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 1029.725046][ T5920] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1029.829541][ T5920] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.839880][ T5920] usb 7-1: config 0 has no interface number 0 [ 1029.849395][ T5920] usb 7-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1029.865715][ T5920] usb 7-1: config 0 interface 196 has no altsetting 0 [ 1030.625534][T20449] afs: Unknown parameter 'GPL' [ 1031.027016][ T5920] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1031.061706][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.074222][ T5920] usb 7-1: Product: syz [ 1031.080013][ T5920] usb 7-1: Manufacturer: syz [ 1031.104067][ T5920] usb 7-1: SerialNumber: syz [ 1031.126154][ T5920] usb 7-1: config 0 descriptor?? [ 1031.390493][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1031.421144][T10128] wlan1: Trigger new scan to find an IBSS to join [ 1031.962411][ T30] audit: type=1400 audit(1754689894.935:2291): avc: denied { bind } for pid=20431 comm="syz.6.4051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1032.513184][T20452] mkiss: ax0: crc mode is auto. [ 1032.544852][T20436] hsr0: entered promiscuous mode [ 1032.545225][T20436] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4051'. [ 1032.551071][T20436] hsr_slave_0: left promiscuous mode [ 1032.552100][T20436] hsr_slave_1: left promiscuous mode [ 1032.614207][T20436] hsr0 (unregistering): left promiscuous mode [ 1033.473947][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1033.786940][T20473] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4062'. [ 1035.131402][T20489] afs: Unknown parameter 'GPL' [ 1035.468381][T10132] wlan1: Trigger new scan to find an IBSS to join [ 1035.549823][T20480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4064'. [ 1035.550355][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1036.063700][ T5920] usb 7-1: USB disconnect, device number 36 [ 1036.502689][T20514] lo speed is unknown, defaulting to 1000 [ 1036.846678][ T30] audit: type=1326 audit(1754689899.845:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20504 comm="syz.5.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a53b8ebe9 code=0x7ffc0000 [ 1036.881677][ T30] audit: type=1326 audit(1754689899.875:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20504 comm="syz.5.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a53b8ebe9 code=0x7ffc0000 [ 1036.977410][ T30] audit: type=1326 audit(1754689899.875:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20504 comm="syz.5.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4a53b8ebe9 code=0x7ffc0000 [ 1037.001901][ T795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.010215][ T30] audit: type=1326 audit(1754689899.875:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20504 comm="syz.5.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a53b8ebe9 code=0x7ffc0000 [ 1037.038513][ T30] audit: type=1326 audit(1754689899.875:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20504 comm="syz.5.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a53b8ebe9 code=0x7ffc0000 [ 1037.064540][ T30] audit: type=1326 audit(1754689899.885:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20504 comm="syz.5.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f4a53b8ebe9 code=0x7ffc0000 [ 1037.182680][ T30] audit: type=1326 audit(1754689899.885:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20504 comm="syz.5.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a53b8ebe9 code=0x7ffc0000 [ 1037.206782][ T30] audit: type=1326 audit(1754689899.885:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20504 comm="syz.5.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a53b8ebe9 code=0x7ffc0000 [ 1037.231603][ T30] audit: type=1326 audit(1754689899.915:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20504 comm="syz.5.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4a53b8ebe9 code=0x7ffc0000 [ 1037.257610][ T30] audit: type=1326 audit(1754689899.915:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20504 comm="syz.5.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a53b8ebe9 code=0x7ffc0000 [ 1037.309033][T20524] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4076'. [ 1037.321653][T20524] nft_compat: unsupported protocol 0 [ 1037.445283][T20528] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4076'. [ 1037.630375][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1039.578289][T20571] bridge1: entered promiscuous mode [ 1039.710301][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1040.017424][T20582] bad cache= option: no%e [ 1040.017424][T20582] [ 1040.024909][T20582] CIFS: VFS: bad cache= option: no%e [ 1040.599183][T20587] netlink: 'syz.0.4096': attribute type 13 has an invalid length. [ 1040.754085][T20589] wireguard0: entered promiscuous mode [ 1040.759673][T20589] wireguard0: entered allmulticast mode [ 1041.790440][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1041.972139][T20587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1042.518437][T20613] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1043.870385][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1043.987776][T20634] netlink: 136 bytes leftover after parsing attributes in process `syz.6.4116'. [ 1044.005968][T20628] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4111'. [ 1044.101298][T20635] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4114'. [ 1044.170156][T20635] nft_compat: unsupported protocol 0 [ 1044.490747][T20635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4114'. [ 1045.327208][ T5920] Process accounting resumed [ 1045.380538][T16526] usb 7-1: new low-speed USB device number 37 using dummy_hcd [ 1045.581537][T16526] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.593822][T16526] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 1045.614207][T20650] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4120'. [ 1045.646966][T16526] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1045.666101][T16526] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1045.679387][T16526] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1045.697079][T16526] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.762230][T16526] usb 7-1: config 0 descriptor?? [ 1045.950264][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1046.072506][T16526] usb 7-1: USB disconnect, device number 37 [ 1046.094160][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1046.094175][ T30] audit: type=1400 audit(1754689909.095:2318): avc: denied { ioctl } for pid=20652 comm="syz.0.4121" path="socket:[66633]" dev="sockfs" ino=66633 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1046.125130][ C0] vkms_vblank_simulate: vblank timer overrun [ 1046.148842][ T30] audit: type=1400 audit(1754689909.135:2319): avc: denied { connect } for pid=20652 comm="syz.0.4121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1047.341358][T20679] wireguard0: entered promiscuous mode [ 1047.348896][T20679] wireguard0: entered allmulticast mode [ 1047.597599][T20691] netlink: 'syz.4.4131': attribute type 6 has an invalid length. [ 1047.695761][T20691] netlink: 'syz.4.4131': attribute type 6 has an invalid length. [ 1047.799846][T20695] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1047.825219][T20695] macsec2: entered allmulticast mode [ 1047.830984][T20695] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1047.865423][T20695] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 1047.873741][T20695] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1048.030363][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1048.778052][T20718] program syz.3.4140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1048.787464][ T30] audit: type=1400 audit(1754689911.775:2320): avc: denied { write } for pid=20717 comm="syz.3.4140" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1048.834317][ T30] audit: type=1400 audit(1754689911.775:2321): avc: denied { open } for pid=20717 comm="syz.3.4140" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1049.560045][T20728] 9pnet_fd: Insufficient options for proto=fd [ 1049.568938][T20728] siw: device registration error -23 [ 1049.580229][ T2149] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1049.611017][ C1] sd 0:0:1:0: [sda] tag#1123 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1049.621683][ C1] sd 0:0:1:0: [sda] tag#1123 CDB: Write(6) 0a 00 00 00 00 00 [ 1049.757185][ T2149] usb 7-1: Using ep0 maxpacket: 16 [ 1049.792047][ T2149] usb 7-1: config 1 has an invalid interface number: 3 but max is 2 [ 1049.824233][ T2149] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.858927][ T2149] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1049.908745][ T2149] usb 7-1: config 1 has no interface number 1 [ 1049.933364][ T2149] usb 7-1: too many endpoints for config 1 interface 3 altsetting 4: 89, using maximum allowed: 30 [ 1050.046925][ T2149] usb 7-1: config 1 interface 3 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 1050.110313][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1050.147117][T20738] bad cache= option: no%e [ 1050.147117][T20738] [ 1050.153702][T20738] CIFS: VFS: bad cache= option: no%e [ 1050.533769][ T2149] usb 7-1: config 1 interface 3 has no altsetting 0 [ 1050.543785][ T2149] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1050.755590][ T2149] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.765572][ T2149] usb 7-1: Product: syz [ 1050.770041][ T2149] usb 7-1: Manufacturer: syz [ 1050.775235][ T2149] usb 7-1: SerialNumber: syz [ 1051.002086][ T2149] usb 7-1: 0:2 : does not exist [ 1051.021876][ T2149] usb 7-1: USB disconnect, device number 38 [ 1051.052781][T16679] udevd[16679]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1051.800277][T20762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4152'. [ 1052.190278][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1053.751825][T20778] veth3: entered promiscuous mode [ 1053.796499][T20781] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4158'. [ 1053.850302][T20781] vlan2: entered promiscuous mode [ 1053.957887][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.270342][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1054.294564][ T30] audit: type=1326 audit(1754689917.295:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20783 comm="syz.6.4160" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff8aaf8ebe9 code=0x0 [ 1054.362401][T20787] vivid-000: ================= START STATUS ================= [ 1054.382763][T20787] vivid-000: Generate PTS: true [ 1054.404215][T20787] vivid-000: Generate SCR: true [ 1054.424394][T20787] tpg source WxH: 320x180 (Y'CbCr) [ 1054.436852][T20787] tpg field: 1 [ 1054.443870][T20787] tpg crop: (0,0)/320x180 [ 1054.448390][T20787] tpg compose: (0,0)/320x180 [ 1054.462346][T20787] tpg colorspace: 8 [ 1054.466282][T20787] tpg transfer function: 0/0 [ 1054.473962][T20787] tpg Y'CbCr encoding: 0/0 [ 1054.478491][T20787] tpg quantization: 0/0 [ 1054.514215][T20787] tpg RGB range: 0/2 [ 1054.518140][T20787] vivid-000: ================== END STATUS ================== [ 1055.556072][ T30] audit: type=1400 audit(1754689917.935:2323): avc: denied { read append } for pid=20791 comm="syz.3.4162" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1055.609385][T20807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1055.906451][ T30] audit: type=1400 audit(1754689917.935:2324): avc: denied { ioctl } for pid=20791 comm="syz.3.4162" path="/dev/sg0" dev="devtmpfs" ino=758 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1056.116645][T20811] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4163'. [ 1056.228981][T20816] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1056.350287][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1056.420654][ T30] audit: type=1326 audit(1754689919.425:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20817 comm="syz.4.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1056.494802][ T30] audit: type=1326 audit(1754689919.445:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20817 comm="syz.4.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1056.756679][ T30] audit: type=1326 audit(1754689919.445:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20817 comm="syz.4.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1056.924883][ T30] audit: type=1326 audit(1754689919.445:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20817 comm="syz.4.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1057.081042][ T30] audit: type=1326 audit(1754689919.445:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20817 comm="syz.4.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1057.106101][ T30] audit: type=1326 audit(1754689919.445:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20817 comm="syz.4.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1057.134230][ T30] audit: type=1326 audit(1754689919.445:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20817 comm="syz.4.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1057.264146][T20830] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1057.281705][T16526] hid-generic 0000:0004:0000.0011: unknown main item tag 0x0 [ 1057.295337][T16526] hid-generic 0000:0004:0000.0011: unknown main item tag 0x0 [ 1057.313437][T16526] hid-generic 0000:0004:0000.0011: unknown main item tag 0x0 [ 1057.420142][T16526] hid-generic 0000:0004:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1057.619947][ T5893] IPVS: starting estimator thread 0... [ 1057.711297][T20834] IPVS: using max 49 ests per chain, 117600 per kthread [ 1058.381142][ T976] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1058.412556][T20845] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4174'. [ 1058.430370][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1058.626065][ T976] usb 4-1: Using ep0 maxpacket: 16 [ 1058.648978][ T976] usb 4-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config [ 1058.662090][ T976] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1058.680027][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.794288][ T976] usb 4-1: Product: syz [ 1058.820155][ T976] usb 4-1: Manufacturer: syz [ 1058.824974][ T976] usb 4-1: SerialNumber: syz [ 1058.850918][ T976] usb 4-1: config 0 descriptor?? [ 1058.953026][ T976] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1058.972966][ T976] gspca_stv06xx: st6422 sensor detected [ 1059.063796][T20856] afs: Unknown parameter 'GPL' [ 1060.511169][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1060.740934][ T976] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 1060.751766][ T976] usb 4-1: USB disconnect, device number 17 [ 1060.875908][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1060.875925][ T30] audit: type=1326 audit(1754689923.875:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20876 comm="syz.3.4185" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe22978ebe9 code=0x0 [ 1060.929249][T20884] vivid-000: ================= START STATUS ================= [ 1060.938327][T20884] vivid-000: Test Pattern: 75% Colorbar [ 1060.946412][T20884] vivid-000: Fill Percentage of Frame: 100 [ 1060.952295][T20884] vivid-000: Horizontal Movement: Move Left [ 1060.959837][T20884] vivid-000: Vertical Movement: No Movement [ 1060.969195][T20884] vivid-000: OSD Text Mode: All [ 1060.975212][T20884] vivid-000: Show Border: false [ 1060.983230][T20884] vivid-000: Show Square: false [ 1060.988071][T20884] vivid-000: Sensor Flipped Horizontally: false [ 1061.048078][T20884] vivid-000: Sensor Flipped Vertically: false [ 1061.067671][T20884] vivid-000: Insert SAV Code in Image: true [ 1061.099580][T20884] vivid-000: Insert EAV Code in Image: false [ 1061.114762][T20884] vivid-000: Insert Video Guard Band: false [ 1061.121230][T20884] vivid-000: Reduced Framerate: false [ 1061.126661][T20884] vivid-000: HDMI 000-0 Is Connected To: None [ 1061.224890][T20884] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1061.241598][T20884] vivid-000: Enable Capture Cropping: true [ 1061.268181][T20884] vivid-000: Enable Capture Composing: true [ 1061.319713][T20884] vivid-000: Enable Capture Scaler: true [ 1061.354718][T20884] vivid-000: Timestamp Source: End of Frame [ 1061.360876][T20884] vivid-000: Colorspace: sRGB [ 1061.365609][T20884] vivid-000: Transfer Function: Default [ 1061.374207][T20884] vivid-000: Y'CbCr Encoding: Default [ 1061.379668][T20884] vivid-000: HSV Encoding: Hue 0-179 [ 1061.386444][T20884] vivid-000: Quantization: Default [ 1061.394425][T20884] vivid-000: Apply Alpha To Red Only: false [ 1061.401502][T20884] vivid-000: Standard Aspect Ratio: 4x3 [ 1061.409020][T20884] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1061.417876][T20884] vivid-000: DV Timings: 640x480p59 inactive [ 1061.424171][T20884] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1061.437848][T20884] vivid-000: Maximum EDID Blocks: 2 [ 1061.443364][T20884] vivid-000: Limited RGB Range (16-235): false [ 1061.452545][T20884] vivid-000: Rx RGB Quantization Range: Automatic [ 1061.496569][T20894] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4188'. [ 1061.529527][T20884] vivid-000: Power Present: 0x00000000 [ 1061.545961][T20884] tpg source WxH: 320x180 (Y'CbCr) [ 1061.736742][T20884] tpg field: 1 [ 1061.880368][T20884] tpg crop: (0,0)/320x180 [ 1062.334149][T20894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4188'. [ 1062.399850][T20884] tpg compose: (0,0)/320x180 [ 1062.481079][T20884] tpg colorspace: 8 [ 1062.494628][T20884] tpg transfer function: 0/0 [ 1062.504710][T20884] tpg Y'CbCr encoding: 0/0 [ 1062.513428][T20884] tpg quantization: 0/0 [ 1062.532232][T20884] tpg RGB range: 0/2 [ 1062.536397][T20884] vivid-000: ================== END STATUS ================== [ 1062.590319][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1062.732873][T20845] batadv_slave_1: left promiscuous mode [ 1063.154974][T20845] geneve2: left promiscuous mode [ 1063.169349][T20845] bridge1: left promiscuous mode [ 1063.183421][T20845] bridge2: left promiscuous mode [ 1063.200571][T20845] bridge3: left promiscuous mode [ 1063.209425][T20845] bridge4: left promiscuous mode [ 1063.227891][T20845] bridge6: left promiscuous mode [ 1063.243626][T20845] vlan2: left promiscuous mode [ 1063.252669][ T5893] lo speed is unknown, defaulting to 1000 [ 1063.350932][ T5893] 3yz0: Port: 1 Link DOWN [ 1063.492984][T10136] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.506920][T10136] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.516380][T10136] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.527261][T10136] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.834192][T20923] afs: Unknown parameter 'GPL' [ 1064.670315][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1064.968276][T20930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1064.988126][T16724] hid-generic 0000:0004:0000.0012: unknown main item tag 0x0 [ 1065.005697][T16724] hid-generic 0000:0004:0000.0012: unknown main item tag 0x0 [ 1065.033999][T16724] hid-generic 0000:0004:0000.0012: unknown main item tag 0x0 [ 1065.084327][T16724] hid-generic 0000:0004:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1065.635825][T20946] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 1065.770467][T12750] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1066.013625][T20951] netlink: 'syz.4.4201': attribute type 25 has an invalid length. [ 1066.029327][T20951] netlink: 'syz.4.4201': attribute type 1 has an invalid length. [ 1066.037899][T20951] bridge0: port 1(bridge_slave_0) entered learning state [ 1066.083580][T12750] usb 7-1: Using ep0 maxpacket: 16 [ 1066.092282][T12750] usb 7-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config [ 1066.109021][T12750] usb 7-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1066.144619][T12750] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.172003][T12750] usb 7-1: Product: syz [ 1066.299330][T12750] usb 7-1: Manufacturer: syz [ 1066.341722][T20963] afs: Unknown parameter 'GPL' [ 1066.713996][T12750] usb 7-1: SerialNumber: syz [ 1066.750374][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1066.816228][T12750] usb 7-1: config 0 descriptor?? [ 1066.838040][T12750] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1066.863940][T12750] gspca_stv06xx: st6422 sensor detected [ 1067.354745][T20959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4200'. [ 1068.184909][ T30] audit: type=1326 audit(1754689931.185:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20980 comm="syz.0.4207" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f852958ebe9 code=0x0 [ 1068.468211][T12750] STV06xx 7-1:0.0: probe with driver STV06xx failed with error -71 [ 1068.569744][T12750] usb 7-1: USB disconnect, device number 39 [ 1068.830440][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1068.849354][T20994] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4209'. [ 1068.859165][T20994] nft_compat: unsupported protocol 0 [ 1068.908674][T20994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4209'. [ 1070.920728][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1071.032485][T21014] netlink: 'syz.5.4218': attribute type 10 has an invalid length. [ 1072.096038][T21038] bad cache= option: no%e [ 1072.096038][T21038] [ 1072.103513][T21038] CIFS: VFS: bad cache= option: no%e [ 1072.586613][T21034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4225'. [ 1072.990336][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1072.991990][T21048] bad cache= option: no%e [ 1072.991990][T21048] [ 1073.012113][T21048] CIFS: VFS: bad cache= option: no%e [ 1073.808576][ T30] audit: type=1401 audit(1754689936.805:2358): op=setxattr invalid_context="" [ 1073.909049][T21064] netlink: 'syz.3.4228': attribute type 6 has an invalid length. [ 1073.918539][T21064] netlink: 'syz.3.4228': attribute type 6 has an invalid length. [ 1073.944136][ T30] audit: type=1326 audit(1754689936.945:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21059 comm="syz.4.4231" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe42858ebe9 code=0x0 [ 1074.537516][T21075] bond0: entered promiscuous mode [ 1074.580246][T21075] batadv0: entered promiscuous mode [ 1074.642845][T21075] debugfs: 'hsr0' already exists in 'hsr' [ 1074.669257][T21075] Cannot create hsr debugfs directory [ 1074.680592][T21075] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1074.691993][T21075] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1074.704324][T21075] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1074.994653][ T30] audit: type=1400 audit(1754689937.995:2360): avc: denied { connect } for pid=21089 comm="syz.6.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1075.080438][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1075.095517][ C0] tipc: Duplicate ac1414aa using udp(172.20.20.170:20002) seen on [ 1075.841745][T21093] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4238'. [ 1076.722602][T21113] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4248'. [ 1077.094497][T21125] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1077.113420][T21125] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4252'. [ 1077.125197][T21119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4249'. [ 1077.150349][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1077.353901][T21128] kvm: user requested TSC rate below hardware speed [ 1077.367030][T21128] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1077.875181][ T30] audit: type=1400 audit(1754689940.865:2361): avc: denied { connect } for pid=21127 comm="syz.3.4253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1077.953987][ T30] audit: type=1326 audit(1754689940.955:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21150 comm="syz.4.4260" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe42858ebe9 code=0x0 [ 1079.003148][T21166] bridge5: entered promiscuous mode [ 1079.230329][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1079.365798][T21172] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 1079.655247][T21180] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4270'. [ 1080.620923][T21195] netlink: 'syz.0.4276': attribute type 11 has an invalid length. [ 1080.738036][T21198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4277'. [ 1081.271188][T21204] Device name cannot be null; rc = [-22] [ 1081.310275][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1082.149996][T21224] mkiss: ax0: crc mode is auto. [ 1082.199742][ T30] audit: type=1400 audit(1754689945.165:2363): avc: denied { listen } for pid=21209 comm="syz.6.4280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1082.246551][ T30] audit: type=1400 audit(1754689945.175:2364): avc: denied { accept } for pid=21209 comm="syz.6.4280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1082.591093][T12750] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1082.595056][ T30] audit: type=1326 audit(1754689945.595:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21234 comm="syz.4.4289" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe42858ebe9 code=0x0 [ 1082.906561][T12750] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1082.976550][T12750] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1083.108142][T12750] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1083.117476][T12750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.127807][T12750] usb 4-1: Product: syz [ 1083.132915][T12750] usb 4-1: Manufacturer: syz [ 1083.137583][T12750] usb 4-1: SerialNumber: syz [ 1083.324812][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4291'. [ 1083.390418][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1083.407865][ C0] tipc: Duplicate ac1414aa using udp(172.20.148.170:20002) seen on [ 1083.563866][T12750] usb 4-1: config 0 descriptor?? [ 1083.609731][T12750] usb 4-1: selecting invalid altsetting 0 [ 1083.922985][T12750] usb 4-1: USB disconnect, device number 18 [ 1084.270403][T13790] Bluetooth: hci0: command 0x0406 tx timeout [ 1085.470355][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1086.104865][T21288] vlan0: entered promiscuous mode [ 1086.110027][T21288] bridge0: entered promiscuous mode [ 1086.115829][T21288] vlan0: entered allmulticast mode [ 1086.121617][T20905] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1086.126258][T21288] bridge0: entered allmulticast mode [ 1086.290306][T20905] usb 4-1: Using ep0 maxpacket: 16 [ 1086.296605][T20905] usb 4-1: config 5 has an invalid interface number: 168 but max is 0 [ 1086.344277][T20905] usb 4-1: config 5 has no interface number 0 [ 1086.398296][T20905] usb 4-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1086.431939][T20905] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1086.468033][T20905] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1086.688690][T20905] usb 4-1: config 5 interface 168 has no altsetting 0 [ 1086.727632][T20905] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 1086.749351][T20905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.765118][T20905] usb 4-1: Product: syz [ 1086.774155][T21297] pim6reg: entered allmulticast mode [ 1086.793150][T20905] usb 4-1: Manufacturer: syz [ 1086.797923][T20905] usb 4-1: SerialNumber: syz [ 1086.811846][T21284] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1086.822966][T21284] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1087.046763][ C1] usb 4-1: NFC: Urb failure (status -71) [ 1087.059215][ C1] usb 4-1: NFC: Urb failure (status -71) [ 1087.068096][T20905] usb 4-1: NFC: Unable to get FW version [ 1087.084248][T20905] pn533_usb 4-1:5.168: probe with driver pn533_usb failed with error -71 [ 1087.123166][T20905] usb 4-1: USB disconnect, device number 19 [ 1087.177872][T21292] pim6reg: left allmulticast mode [ 1087.300956][T12750] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1087.451093][T12750] usb 7-1: Using ep0 maxpacket: 8 [ 1087.469666][T12750] usb 7-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1087.499020][T12750] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.550304][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1087.639765][T12750] usb 7-1: Product: syz [ 1087.679501][T12750] usb 7-1: Manufacturer: syz [ 1088.118116][T12750] usb 7-1: SerialNumber: syz [ 1088.153814][T12750] usb 7-1: config 0 descriptor?? [ 1088.179397][T12750] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1088.418485][ T30] audit: type=1326 audit(1754689951.415:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21324 comm="syz.0.4316" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f852958ebe9 code=0x0 [ 1088.621873][T21332] wireguard0: entered promiscuous mode [ 1088.631760][T21332] wireguard0: entered allmulticast mode [ 1088.716865][T21335] IPVS: Error connecting to the multicast addr [ 1088.840355][ T5986] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1088.970282][ T5986] usb 4-1: device descriptor read/64, error -71 [ 1089.054121][T21308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.063196][T21308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.593104][T12750] gspca_sonixj: reg_r err -110 [ 1089.630339][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1089.646157][T12750] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 1089.654572][ T5986] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1089.791219][ T5986] usb 4-1: device descriptor read/64, error -71 [ 1089.870445][ T30] audit: type=1400 audit(1754689952.865:2367): avc: denied { read } for pid=21344 comm="syz.5.4322" path="socket:[68208]" dev="sockfs" ino=68208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1089.872810][T21348] lo speed is unknown, defaulting to 1000 [ 1089.910982][ T5986] usb usb4-port1: attempt power cycle [ 1090.136993][T21357] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1090.149232][T21357] macsec1: entered allmulticast mode [ 1090.178984][T21357] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1090.198344][T21357] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1090.212066][T21357] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1090.260356][ T5986] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1090.290814][ T5986] usb 4-1: device descriptor read/8, error -71 [ 1090.560246][ T5986] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1090.581012][ T5986] usb 4-1: device descriptor read/8, error -71 [ 1090.654228][T16526] usb 7-1: USB disconnect, device number 40 [ 1090.690953][ T5986] usb usb4-port1: unable to enumerate USB device [ 1090.860156][ T5893] delete_channel: no stack [ 1091.184608][T21367] bridge6: entered promiscuous mode [ 1091.189898][T21367] bridge6: entered allmulticast mode [ 1091.585548][T21373] 9pnet_fd: Insufficient options for proto=fd [ 1091.710375][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1091.779693][ T30] audit: type=1400 audit(1754689954.775:2368): avc: denied { checkpoint_restore } for pid=21374 comm="syz.3.4331" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1092.922368][T21400] netlink: 'syz.0.4336': attribute type 4 has an invalid length. [ 1093.004851][T21400] overlayfs: failed to clone upperpath [ 1093.310597][ T30] audit: type=1326 audit(1754689956.305:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21411 comm="syz.0.4340" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f852958ebe9 code=0x0 [ 1093.790369][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1094.632090][T21420] lo speed is unknown, defaulting to 1000 [ 1095.708248][T21436] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4345'. [ 1095.870321][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1096.007910][T21441] bridge2: entered promiscuous mode [ 1096.124125][T21443] afs: Unknown parameter 'GPL' [ 1096.542688][T21445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1096.577342][ T5986] hid-generic 0000:0004:0000.0013: unknown main item tag 0x0 [ 1096.594004][ T5986] hid-generic 0000:0004:0000.0013: unknown main item tag 0x0 [ 1096.613442][ T5986] hid-generic 0000:0004:0000.0013: unknown main item tag 0x0 [ 1096.669501][ T5986] hid-generic 0000:0004:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1096.743638][T21455] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1097.239576][T21471] 9pnet_fd: Insufficient options for proto=fd [ 1097.271879][T21471] siw: device registration error -23 [ 1097.950409][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1098.761760][T21491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1098.844308][ T30] audit: type=1326 audit(1754689961.835:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21489 comm="syz.5.4360" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a53b8ebe9 code=0x0 [ 1098.889411][T21491] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4359'. [ 1099.080290][ T2149] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1099.301102][ T2149] usb 4-1: Using ep0 maxpacket: 16 [ 1099.376361][ T2149] usb 4-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config [ 1099.440457][ T2149] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1099.449558][ T2149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.457612][ T2149] usb 4-1: Product: syz [ 1099.480263][ T2149] usb 4-1: Manufacturer: syz [ 1099.485311][ T2149] usb 4-1: SerialNumber: syz [ 1099.500721][ T2149] usb 4-1: config 0 descriptor?? [ 1099.553113][ T2149] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1099.559378][ T2149] gspca_stv06xx: st6422 sensor detected [ 1100.031070][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1100.219543][T21510] bad cache= option: no%e [ 1100.219543][T21510] [ 1100.226268][T21510] CIFS: VFS: bad cache= option: no%e [ 1101.421173][T21528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1101.432130][T21528] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4368'. [ 1101.522940][ T2149] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 1101.544455][ T2149] usb 4-1: USB disconnect, device number 24 [ 1102.110318][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1102.624172][T20905] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1102.724080][ T30] audit: type=1400 audit(1754689965.725:2371): avc: denied { mounton } for pid=21553 comm="syz.3.4377" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1102.850342][T20905] usb 7-1: Using ep0 maxpacket: 8 [ 1102.872546][T20905] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1102.882843][T21559] tipc: Started in network mode [ 1102.888991][T21559] tipc: Node identity ac1414aa, cluster identity 4711 [ 1102.897311][T20905] usb 7-1: config 4 interface 0 has no altsetting 0 [ 1102.906837][T20905] usb 7-1: string descriptor 0 read error: -22 [ 1102.914020][T21559] tipc: Enabling of bearer rejected, failed to enable media [ 1102.923361][T20905] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1102.936328][T20905] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1102.962341][T20905] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1102.997759][T20905] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1103.023806][T20905] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1103.046294][T21563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.058572][T20905] usb 7-1: media controller created [ 1103.076341][T21563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.092108][T20905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1103.167131][ T30] audit: type=1326 audit(1754689966.165:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21567 comm="syz.4.4382" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe42858ebe9 code=0x0 [ 1103.270442][ T5893] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1103.654793][ T5893] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 1103.665648][ T5893] usb 4-1: config 0 has no interface number 0 [ 1103.673384][ T5893] usb 4-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1103.686381][ T5893] usb 4-1: config 0 interface 160 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1103.699024][ T5893] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 1103.715130][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.723651][ T5893] usb 4-1: Product: syz [ 1103.728303][ T5893] usb 4-1: Manufacturer: syz [ 1103.733502][ T5893] usb 4-1: SerialNumber: syz [ 1103.743141][ T5893] usb 4-1: config 0 descriptor?? [ 1103.757831][ T5893] usb 4-1: Found UVC 0.00 device syz (05ac:8501) [ 1103.772639][ T5893] usb 4-1: No valid video chain found. [ 1104.039324][ T2149] usb 4-1: USB disconnect, device number 25 [ 1104.155032][T21585] lo speed is unknown, defaulting to 1000 [ 1104.190242][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1104.198816][T20905] zl10353_read_register: readreg error (reg=127, ret==0) [ 1104.754304][T20905] usb 7-1: USB disconnect, device number 41 [ 1106.027967][T21614] wireguard0: entered promiscuous mode [ 1106.037201][T21614] wireguard0: entered allmulticast mode [ 1106.270265][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1107.191711][ T30] audit: type=1400 audit(1754689970.185:2373): avc: denied { watch } for pid=21637 comm="syz.4.4401" path="/274/file0" dev="tmpfs" ino=1445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1107.625045][ T30] audit: type=1326 audit(1754689970.625:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21654 comm="syz.4.4407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe42858ebe9 code=0x0 [ 1108.350332][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1109.401999][T21674] lo speed is unknown, defaulting to 1000 [ 1110.430293][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1110.475991][T21683] netlink: 'syz.0.4414': attribute type 1 has an invalid length. [ 1111.149742][T21683] batadv_slave_1: entered promiscuous mode [ 1111.244916][T21701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4420'. [ 1111.395954][T21696] loop6: detected capacity change from 0 to 524287999 [ 1112.012246][T21718] batman_adv: batadv0: Adding interface: macvlan4 [ 1112.018690][T21718] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1112.062198][T21718] batman_adv: batadv0: Interface activated: macvlan4 [ 1112.306925][T21730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4430'. [ 1112.454981][T21733] team0: Unable to change to the same mode the team is in [ 1112.510261][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1113.712213][T21762] afs: Unknown parameter 'GPL' [ 1114.079942][T21761] bridge2: entered promiscuous mode [ 1114.120138][ T5893] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1114.281720][ T5893] usb 4-1: config 4 has an invalid interface number: 191 but max is 0 [ 1114.289943][ T5893] usb 4-1: config 4 has no interface number 0 [ 1114.297244][ T5893] usb 4-1: too many endpoints for config 4 interface 191 altsetting 0: 82, using maximum allowed: 30 [ 1114.312930][ T5893] usb 4-1: config 4 interface 191 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 1114.388694][ T5893] usb 4-1: New USB device found, idVendor=2639, idProduct=0013, bcdDevice=21.c0 [ 1114.398230][ T30] audit: type=1326 audit(1754689977.395:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21767 comm="syz.0.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852958ebe9 code=0x7fc00000 [ 1114.421716][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.421743][ T5893] usb 4-1: Product: syz [ 1114.421757][ T5893] usb 4-1: Manufacturer: syz [ 1114.421771][ T5893] usb 4-1: SerialNumber: syz [ 1114.590284][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1114.659824][T21752] SELinux: syz.3.4438 (21752) set checkreqprot to 1. This is no longer supported. [ 1114.679534][ T30] audit: type=1400 audit(1754689977.655:2376): avc: denied { setcheckreqprot } for pid=21751 comm="syz.3.4438" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1114.741292][ T5893] usb 4-1: USB disconnect, device number 26 [ 1115.013430][ T30] audit: type=1326 audit(1754689978.015:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21767 comm="syz.0.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f852958ebe9 code=0x7fc00000 [ 1115.394764][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.441158][ T30] audit: type=1400 audit(1754689978.445:2378): avc: denied { connect } for pid=21787 comm="syz.6.4450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1115.547304][T21802] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1115.569753][ T30] audit: type=1400 audit(1754689978.565:2379): avc: denied { name_bind } for pid=21803 comm="syz.5.4455" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1116.589216][ T30] audit: type=1400 audit(1754689979.585:2380): avc: denied { setopt } for pid=21814 comm="syz.0.4461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1116.623698][T21815] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20000 [ 1116.670278][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1117.137716][T21821] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4462'. [ 1117.218919][ T30] audit: type=1400 audit(1754689980.215:2381): avc: denied { ioctl } for pid=21824 comm="syz.3.4464" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0x64b6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1117.343822][ T30] audit: type=1400 audit(1754689980.215:2382): avc: denied { read } for pid=21824 comm="syz.3.4464" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1117.384203][ T30] audit: type=1400 audit(1754689980.215:2383): avc: denied { open } for pid=21824 comm="syz.3.4464" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1118.068898][ T30] audit: type=1326 audit(1754689981.065:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21836 comm="syz.0.4468" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f852958ebe9 code=0x0 [ 1118.173685][T21840] netlink: 'syz.0.4468': attribute type 1 has an invalid length. [ 1118.414103][T21849] netlink: 'syz.6.4469': attribute type 6 has an invalid length. [ 1118.450854][T21849] netlink: 'syz.6.4469': attribute type 6 has an invalid length. [ 1118.750324][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1119.447555][T21862] tipc: Enabled bearer , priority 0 [ 1119.704107][ T30] audit: type=1326 audit(1754689982.705:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21868 comm="syz.4.4479" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe42858ebe9 code=0x0 [ 1120.241656][T16526] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1120.295345][T21888] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4486'. [ 1120.309238][T21885] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4486'. [ 1120.322454][ T30] audit: type=1400 audit(1754689983.325:2386): avc: denied { create } for pid=21884 comm="syz.0.4486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1120.410302][T16526] usb 7-1: Using ep0 maxpacket: 8 [ 1120.437831][T16526] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1120.452759][T16526] usb 7-1: config 4 interface 0 has no altsetting 0 [ 1120.479236][T16526] usb 7-1: string descriptor 0 read error: -22 [ 1120.496971][T16526] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1120.554795][T16526] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1120.672512][T16526] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1120.719949][T16526] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1120.801944][T16526] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1120.809444][T16526] usb 7-1: media controller created [ 1120.830312][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1120.846012][ C0] tipc: Duplicate ac1414aa using udp(172.20.20.170:17954) seen on [ 1121.026296][T16526] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1121.540219][T16721] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1121.700571][T16721] usb 4-1: Using ep0 maxpacket: 32 [ 1121.714221][T16721] usb 4-1: config 252 has an invalid interface number: 206 but max is 0 [ 1121.725882][T16721] usb 4-1: config 252 has no interface number 0 [ 1121.739652][T16721] usb 4-1: config 252 interface 206 altsetting 254 endpoint 0xE has invalid maxpacket 1088, setting to 1024 [ 1121.755256][T16721] usb 4-1: config 252 interface 206 altsetting 254 bulk endpoint 0xE has invalid maxpacket 1024 [ 1121.758722][T21908] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4493'. [ 1121.766358][T16721] usb 4-1: config 252 interface 206 has no altsetting 0 [ 1121.787170][T16721] usb 4-1: New USB device found, idVendor=07c4, idProduct=a002, bcdDevice=c4.8f [ 1121.792172][T21908] vlan1: entered promiscuous mode [ 1121.804988][T16721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.815073][T16721] usb 4-1: Product: syz [ 1121.819351][T16721] usb 4-1: Manufacturer: syz [ 1121.824513][T16721] usb 4-1: SerialNumber: syz [ 1121.837794][T21900] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1122.049581][T16526] zl10353_read_register: readreg error (reg=127, ret==0) [ 1122.572169][T16526] usb 7-1: USB disconnect, device number 42 [ 1122.598565][T21900] IPv4: Oversized IP packet from 172.20.20.24 [ 1122.607894][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1122.615434][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1122.691783][T16721] ums-datafab 4-1:252.206: USB Mass Storage device detected [ 1122.711334][T16721] ums-datafab 4-1:252.206: Quirks match for vid 07c4 pid a002: 1 [ 1122.756487][T16721] usb 4-1: USB disconnect, device number 27 [ 1122.865277][ T30] audit: type=1800 audit(1754689985.865:2387): pid=21920 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4497" name="nullb0" dev="tmpfs" ino=890 res=0 errno=0 [ 1122.910340][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1122.925568][ C0] tipc: Duplicate ac1414aa using udp(172.20.20.168:20002) seen on [ 1123.253748][T16525] Bluetooth: (null): Invalid header checksum [ 1123.263199][T16525] Bluetooth: (null): Invalid header checksum [ 1123.330611][T21934] kAFS: No cell specified [ 1123.691742][T16525] Bluetooth: (null): Invalid header checksum [ 1123.702322][T16525] Bluetooth: (null): Invalid header checksum [ 1123.709439][T16525] Bluetooth: (null): Invalid header checksum [ 1123.721180][T16525] Bluetooth: (null): Invalid header checksum [ 1123.751014][T12750] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1123.950483][ C0] tipc: Duplicate ac1414aa using udp(172.20.20.170:20002) seen on [ 1124.037031][T16525] Bluetooth: (null): Invalid header checksum [ 1124.050744][T16525] Bluetooth: (null): Invalid header checksum [ 1124.056798][T16525] Bluetooth: (null): Invalid header checksum [ 1124.295267][T16525] Bluetooth: (null): Invalid header checksum [ 1124.401314][T16525] Bluetooth: (null): Invalid header checksum [ 1124.410676][T16525] Bluetooth: (null): Invalid header checksum [ 1124.432909][T12750] usb 7-1: Using ep0 maxpacket: 16 [ 1124.444102][ T30] audit: type=1326 audit(1754689987.445:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21943 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1124.464242][T10136] Bluetooth: (null): Invalid header checksum [ 1124.480268][T12750] usb 7-1: config 0 has no interfaces? [ 1124.483707][ T30] audit: type=1326 audit(1754689987.445:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21943 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1124.510310][ T30] audit: type=1326 audit(1754689987.475:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21943 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1124.560316][ T30] audit: type=1326 audit(1754689987.475:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21943 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1124.570389][T10136] Bluetooth: (null): Invalid header checksum [ 1124.596450][T12750] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1124.609066][T12750] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1124.620917][T12750] usb 7-1: Manufacturer: syz [ 1124.633841][T12750] usb 7-1: config 0 descriptor?? [ 1124.669282][ T30] audit: type=1326 audit(1754689987.475:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21943 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1124.700526][T10119] Bluetooth: (null): Invalid header checksum [ 1124.762973][T21950] vivid-000: ================= START STATUS ================= [ 1124.770728][T21950] vivid-000: Test Pattern: 75% Colorbar [ 1124.776285][T21950] vivid-000: Fill Percentage of Frame: 100 [ 1124.778989][ T30] audit: type=1326 audit(1754689987.475:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21943 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1124.782987][T21950] vivid-000: Horizontal Movement: Move Left [ 1124.808012][T16525] Bluetooth: (null): Invalid header checksum [ 1124.896582][T21951] afs: Unknown parameter 'GPL' [ 1124.990200][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1125.249209][ T30] audit: type=1326 audit(1754689987.475:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21943 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1125.263710][T21950] vivid-000: Vertical Movement: No Movement [ 1125.284466][ T30] audit: type=1326 audit(1754689987.475:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21943 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1125.285298][T16525] Bluetooth: (null): Invalid header checksum [ 1125.313765][ T30] audit: type=1326 audit(1754689987.475:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21943 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1125.340324][ T30] audit: type=1326 audit(1754689987.475:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21943 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1125.365675][T21950] vivid-000: OSD Text Mode: All [ 1125.368146][ T30] audit: type=1326 audit(1754689987.475:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21943 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1125.424875][ T30] audit: type=1326 audit(1754689987.475:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21943 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1125.462176][T21953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.498960][T21950] vivid-000: Show Border: false [ 1125.524425][T21953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.533006][T21950] vivid-000: Show Square: false [ 1125.561638][T16525] Bluetooth: (null): Invalid header checksum [ 1125.567407][T21950] vivid-000: Sensor Flipped Horizontally: false [ 1125.568024][T16525] Bluetooth: (null): Invalid header checksum [ 1125.669635][T16525] Bluetooth: (null): Invalid header checksum [ 1125.680188][T16525] Bluetooth: (null): Invalid header checksum [ 1125.686233][T16525] Bluetooth: (null): Invalid header checksum [ 1125.693938][T16525] Bluetooth: (null): Invalid header checksum [ 1125.700676][T16525] Bluetooth: (null): Invalid header checksum [ 1125.706789][T21950] vivid-000: Sensor Flipped Vertically: false [ 1125.706853][ T30] audit: type=1326 audit(1754689987.475:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21943 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1125.716585][T12750] usb 7-1: USB disconnect, device number 43 [ 1125.736928][ T30] audit: type=1326 audit(1754689987.475:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21943 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1125.736972][ T30] audit: type=1326 audit(1754689987.475:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21943 comm="syz.4.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe42858ebe9 code=0x7ffc0000 [ 1126.202854][T21950] vivid-000: Insert SAV Code in Image: true [ 1126.208832][T21950] vivid-000: Insert EAV Code in Image: false [ 1126.215366][T21950] vivid-000: Insert Video Guard Band: false [ 1126.228852][T21950] vivid-000: Reduced Framerate: false [ 1126.238183][T21950] vivid-000: HDMI 000-0 Is Connected To: None [ 1126.246058][T21950] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1126.274344][T21950] vivid-000: Enable Capture Cropping: true [ 1126.281205][T21950] vivid-000: Enable Capture Composing: true [ 1126.287215][T21950] vivid-000: Enable Capture Scaler: true [ 1126.323306][T21950] vivid-000: Timestamp Source: End of Frame [ 1126.334117][T21950] vivid-000: Colorspace: sRGB [ 1126.339449][T21950] vivid-000: Transfer Function: Default [ 1126.347372][T21950] vivid-000: Y'CbCr Encoding: Default [ 1126.357887][T21950] vivid-000: HSV Encoding: Hue 0-179 [ 1126.364429][T21950] vivid-000: Quantization: Default [ 1126.370158][T21950] vivid-000: Apply Alpha To Red Only: false [ 1126.376163][T21950] vivid-000: Standard Aspect Ratio: 4x3 [ 1126.382095][T21950] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1126.389915][T21950] vivid-000: DV Timings: 640x480p59 inactive [ 1126.445548][T21950] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1126.453999][T21950] vivid-000: Maximum EDID Blocks: 2 [ 1126.459214][T21950] vivid-000: Limited RGB Range (16-235): false [ 1126.466497][T21950] vivid-000: Rx RGB Quantization Range: Automatic [ 1126.478108][T21950] vivid-000: Power Present: 0x00000000 [ 1126.484899][T21950] tpg source WxH: 320x180 (Y'CbCr) [ 1126.490425][T21950] tpg field: 1 [ 1126.493814][T21950] tpg crop: (0,0)/320x180 [ 1126.498132][T21950] tpg compose: (0,0)/320x180 [ 1126.518691][T21950] tpg colorspace: 8 [ 1126.532578][T21950] tpg transfer function: 0/0 [ 1126.537189][T21950] tpg Y'CbCr encoding: 0/0 [ 1126.563296][T21950] tpg quantization: 0/0 [ 1126.567692][T21950] tpg RGB range: 0/2 [ 1126.680851][T21950] vivid-000: ================== END STATUS ================== [ 1126.843322][T21983] kAFS: No cell specified [ 1127.080317][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1128.280774][T12750] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1128.329181][T22001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4523'. [ 1128.490988][T12750] usb 7-1: Using ep0 maxpacket: 8 [ 1128.583650][T12750] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1128.715942][T12750] usb 7-1: config 4 interface 0 has no altsetting 0 [ 1128.742961][T12750] usb 7-1: string descriptor 0 read error: -22 [ 1128.749224][T12750] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1128.796727][T12750] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1128.863751][T12750] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1128.888091][T12750] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1128.949245][T22008] batman_adv: batadv0: Interface deactivated: macvlan3 [ 1128.956834][T22008] batman_adv: batadv0: Removing interface: macvlan3 [ 1128.987720][T12750] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1129.025281][T12750] usb 7-1: media controller created [ 1129.075243][T22008] batman_adv: batadv0: Interface deactivated: macvlan4 [ 1129.084894][T22008] batman_adv: batadv0: Removing interface: macvlan4 [ 1129.150274][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1129.161372][T12750] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1129.461948][T22011] netlink: 'syz.4.4526': attribute type 10 has an invalid length. [ 1129.592015][T22016] afs: Unknown parameter 'GPL' [ 1130.119500][T12750] zl10353_read_register: readreg error (reg=127, ret==0) [ 1130.288186][T12750] usb 7-1: USB disconnect, device number 44 [ 1130.775235][T22033] kAFS: No cell specified [ 1130.925065][T16721] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1131.100220][T16721] usb 4-1: Using ep0 maxpacket: 16 [ 1131.115191][T16721] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1131.134692][T16721] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.159364][T16721] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1131.189808][T16721] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1131.208800][T16721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.226365][T16721] usb 4-1: Product: syz [ 1131.230857][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1131.263339][T16721] usb 4-1: Manufacturer: syz [ 1131.268013][T16721] usb 4-1: SerialNumber: syz [ 1132.299480][T22060] afs: Unknown parameter 'GPL' [ 1133.298605][T12750] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 1133.310320][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1133.501860][T12750] usb 7-1: config 4 has an invalid interface number: 191 but max is 0 [ 1133.609201][T16721] usb 4-1: 0:2 : does not exist [ 1133.619965][T16721] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 1133.628771][T12750] usb 7-1: config 4 has no interface number 0 [ 1133.653016][T12750] usb 7-1: too many endpoints for config 4 interface 191 altsetting 0: 82, using maximum allowed: 30 [ 1133.665183][T12750] usb 7-1: config 4 interface 191 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 1133.776871][T16721] usb 4-1: USB disconnect, device number 28 [ 1133.815778][T12750] usb 7-1: New USB device found, idVendor=2639, idProduct=0013, bcdDevice=21.c0 [ 1133.825445][T12750] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.893151][T22083] netlink: 'syz.5.4545': attribute type 4 has an invalid length. [ 1134.332159][T12750] usb 7-1: Product: syz [ 1134.336413][T12750] usb 7-1: Manufacturer: syz [ 1134.358524][T12750] usb 7-1: SerialNumber: syz [ 1134.591724][T22067] SELinux: syz.6.4542 (22067) set checkreqprot to 1. This is no longer supported. [ 1134.732388][T12750] usb 7-1: USB disconnect, device number 45 [ 1134.932032][T22093] wireguard0: entered promiscuous mode [ 1135.010333][T22093] wireguard0: entered allmulticast mode [ 1135.390350][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1135.770820][T16721] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 1136.524318][T16721] usb 4-1: config 1 interface 0 altsetting 48 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1136.535296][T16721] usb 4-1: config 1 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1136.558905][T16721] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1136.596155][T16721] usb 4-1: string descriptor 0 read error: -22 [ 1136.616668][T16721] usb 4-1: New USB device found, idVendor=05ac, idProduct=0304, bcdDevice= 0.40 [ 1137.130825][T22117] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4556'. [ 1137.153130][T16721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.182777][T22123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.184525][T22101] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1137.222526][T22123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.423124][T22125] fuse: Unknown parameter 'al' [ 1137.436358][T16721] usbhid 4-1:1.0: can't add hid device: -71 [ 1137.445497][T16721] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1137.459073][T16721] usb 4-1: USB disconnect, device number 29 [ 1137.470237][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1139.094866][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1139.094883][ T30] audit: type=1400 audit(1754690002.095:2415): avc: denied { bind } for pid=22142 comm="syz.5.4568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1139.550209][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1139.648772][T22170] tmpfs: Bad value for 'mpol' [ 1139.953350][T22176] afs: Unknown parameter 'GPL' [ 1141.630309][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1141.732893][ T30] audit: type=1400 audit(1754690004.735:2416): avc: denied { open } for pid=22196 comm="syz.3.4582" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1142.012481][T22206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4584'. [ 1143.115903][ T5171] Bluetooth: hci0: command 0x0406 tx timeout [ 1143.254885][T22214] afs: Unknown parameter 'GPL' [ 1143.710294][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1143.725302][ C0] tipc: Duplicate ac1414aa using udp(172.20.20.170:20002) seen on [ 1143.937936][T22223] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4592'. [ 1144.290436][T22233] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4595'. [ 1144.521575][T22238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4593'. [ 1145.203611][T22242] vxlan0: entered promiscuous mode [ 1145.250041][T22242] vxlan0: entered allmulticast mode [ 1145.284416][T10132] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1145.396039][T10132] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1145.790275][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1145.918836][T10132] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1145.938867][T10132] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1146.547201][T22263] afs: Unknown parameter 'GPL' [ 1147.314504][T22276] netlink: 'syz.3.4605': attribute type 25 has an invalid length. [ 1147.332366][T22276] netlink: 'syz.3.4605': attribute type 1 has an invalid length. [ 1147.349874][T22276] bridge0: port 1(bridge_slave_0) entered learning state [ 1147.870273][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1147.890123][ C0] tipc: Duplicate ac1414aa using udp(172.20.20.170:20002) seen on [ 1149.345214][T22332] tipc: Enabled bearer , priority 0 [ 1149.713452][T22340] bad cache= option: no%e [ 1149.713452][T22340] [ 1149.720930][T22340] CIFS: VFS: bad cache= option: no%e [ 1149.950581][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1152.030284][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1153.381064][T22390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4625'. [ 1154.019032][T22397] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4622'. [ 1154.092696][T22399] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1154.101490][T22399] bridge3: entered allmulticast mode [ 1154.110239][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1154.177968][T22397] nft_compat: unsupported protocol 0 [ 1154.409441][T22397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4622'. [ 1156.041353][T22427] tipc: New replicast peer: 255.255.255.255 [ 1156.047965][T22427] tipc: Enabled bearer , priority 10 [ 1156.090903][T22427] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4637'. [ 1156.102774][T22427] tipc: Disabling bearer [ 1156.190354][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1156.405586][T22436] afs: Unknown parameter 'GPL' [ 1156.893144][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 1156.903782][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 1157.129643][T22437] ceph: No mds server is up or the cluster is laggy [ 1157.191545][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 1157.223489][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 1157.324946][ T30] audit: type=1400 audit(1754690020.325:2417): avc: denied { mount } for pid=22440 comm="syz.5.4642" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1158.258071][T22472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=22472 comm=syz.6.4650 [ 1158.271198][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1158.763862][T22484] netlink: 188 bytes leftover after parsing attributes in process `syz.6.4654'. [ 1159.594755][ T2149] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1159.821111][T22494] afs: Unknown parameter 'GPL' [ 1160.153043][ T2149] usb 4-1: device descriptor read/64, error -71 [ 1160.350256][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1160.732086][ T2149] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1161.390332][ T2149] usb 4-1: device descriptor read/64, error -71 [ 1161.500968][ T2149] usb usb4-port1: attempt power cycle [ 1162.430805][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1162.760582][T22528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4667'. [ 1162.803588][T22528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4667'. [ 1163.162807][T22528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4667'. [ 1163.201737][T22528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4667'. [ 1163.441554][T22528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4667'. [ 1163.463729][T22528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4667'. [ 1163.845089][ T30] audit: type=1800 audit(1754690026.845:2418): pid=22554 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.4675" name="nullb0" dev="tmpfs" ino=1783 res=0 errno=0 [ 1163.997457][T22555] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4673'. [ 1164.397338][T22562] netlink: 'syz.4.4678': attribute type 12 has an invalid length. [ 1164.510272][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1164.658539][T22564] IPVS: Error connecting to the multicast addr [ 1164.692334][ T5893] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1164.880291][ T5893] usb 7-1: Using ep0 maxpacket: 8 [ 1164.883786][T22578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1165.005755][T22582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1165.009292][ T5893] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1165.033304][ T5893] usb 7-1: config 4 interface 0 has no altsetting 0 [ 1165.042584][ T5893] usb 7-1: string descriptor 0 read error: -22 [ 1165.048931][ T5893] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1165.504298][ T5893] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1165.652877][ T5893] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1166.087728][ T5893] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1166.157711][ T5893] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1166.315403][T22588] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4688'. [ 1166.325568][ T5893] usb 7-1: media controller created [ 1166.335260][T22590] overlayfs: failed to clone upperpath [ 1166.402096][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1166.591799][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1168.673946][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1170.753259][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1170.767976][ C0] tipc: Duplicate ac1414aa using udp(172.20.20.170:20002) seen on [ 1171.795110][ C0] tipc: Duplicate ac1414aa using udp(172.20.16.170:20002) seen on [ 1172.832673][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1174.910442][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1176.991691][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1179.071752][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1179.086423][ C0] tipc: Duplicate ac1414aa using udp(172.20.20.170:20002) seen on [ 1181.152487][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1183.202316][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.231864][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1185.312595][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1187.393618][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1189.471020][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1189.485695][ C0] tipc: Duplicate ac1414aa using udp(172.20.4.170:20002) seen on [ 1191.551539][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1193.634596][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1193.649315][ C0] tipc: Invalid UDP media address [ 1193.654382][ C0] tipc: Duplicate ac1414aa using UNKNOWN(3)-8-2-4e-22-ac-14-14-aa-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0- seen on [ 1195.716459][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1197.792360][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1199.874407][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1200.913346][ C0] tipc: Invalid UDP media address [ 1200.918426][ C0] tipc: Duplicate ac1414aa using UNKNOWN(3)-a-0-4e-22-ac-14-14-aa-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0- seen on [ 1201.956308][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1202.432501][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1204.034677][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1206.111160][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1208.191718][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1210.271171][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1210.285831][ C0] tipc: Duplicate ac1414aa using udp(172.20.28.170:20002) seen on [ 1212.354623][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1214.432900][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1216.511738][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1218.592787][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1220.670233][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1222.752560][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1224.835752][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1226.910700][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1228.992060][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1231.075864][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1233.151531][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1235.230906][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1237.313950][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1238.384565][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.391929][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1241.471493][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1243.550407][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1245.631126][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1245.645794][ C0] tipc: Duplicate ac1414aa using udp(172.20.20.170:20000) seen on [ 1247.714837][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1248.751747][ C0] tipc: Duplicate ac1414aa using udp(172.20.20.170:20002) seen on [ 1249.791786][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1250.835468][ C0] tipc: Invalid UDP media address [ 1250.840579][ C0] tipc: Duplicate ac1414aa using UNKNOWN(3)-8-2-4e-22-ac-14-14-aa-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0- seen on [ 1251.870392][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1253.951212][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1256.031638][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1258.115279][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1260.192207][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1262.273831][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1264.353662][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1266.430627][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1268.510264][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1270.592505][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1272.673664][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1274.752981][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1276.835676][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1278.915265][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1280.994509][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1283.071276][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1284.351977][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1285.150585][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1287.230813][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1289.313620][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1291.396566][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1293.473716][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1295.552529][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1296.595887][ C0] tipc: Duplicate ac1414aa using udp(172.20.20.170:20002) seen on [ 1297.634773][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1299.717470][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1301.791744][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1301.806484][ C0] tipc: Duplicate ac1414aa using udp(172.20.20.170:20002) seen on [ 1302.911141][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.874549][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1303.889257][ C0] tipc: Duplicate ac1414aa using udp(172.20.20.170:20002) seen on [ 1305.954622][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1308.030671][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1310.112694][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1312.191652][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1314.272401][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1316.350385][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1318.436452][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1318.451169][ C0] tipc: Invalid UDP media address [ 1318.456215][ C0] tipc: Duplicate ac1414aa using UNKNOWN(3)-88-0-4e-22-ac-14-14-aa-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0 seen on [ 1320.512586][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1322.592178][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1324.672548][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1325.529876][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1325.536828][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P49/2:b..l [ 1325.545221][ C1] rcu: (detected by 1, t=10503 jiffies, g=94573, q=3701 ncpus=2) [ 1325.553014][ C1] task:kworker/u8:3 state:R running task stack:23368 pid:49 tgid:49 ppid:2 task_flags:0x24208160 flags:0x00004000 [ 1325.568088][ C1] Workqueue: writeback wb_workfn (flush-250:0) [ 1325.574276][ C1] Call Trace: [ 1325.577549][ C1] [ 1325.580477][ C1] __schedule+0x1190/0x5de0 [ 1325.584985][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1325.589926][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1325.596090][ C1] ? __pfx___schedule+0x10/0x10 [ 1325.600956][ C1] ? mark_held_locks+0x49/0x80 [ 1325.605727][ C1] preempt_schedule_irq+0x51/0x90 [ 1325.610751][ C1] irqentry_exit+0x36/0x90 [ 1325.615172][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1325.621161][ C1] RIP: 0010:lock_release+0x183/0x2f0 [ 1325.626456][ C1] Code: 0f c1 05 38 3e 3e 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 4d fc 3d 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 1325.646064][ C1] RSP: 0018:ffffc90000b966d0 EFLAGS: 00000206 [ 1325.652133][ C1] RAX: 3b3eba0f4d09c500 RBX: ffffffff8e5c1160 RCX: ffffc90000b966dc [ 1325.660116][ C1] RDX: 0000000000000004 RSI: ffffffff8de29498 RDI: ffffffff8c161180 [ 1325.668076][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1325.676043][ C1] R10: 0000000000000004 R11: 000000000003c3d8 R12: ffffffff816ae8a4 [ 1325.684004][ C1] R13: 0000000000000202 R14: ffff88801eaf2440 R15: 0000000000000005 [ 1325.691969][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 1325.697187][ C1] unwind_next_frame+0x3f9/0x20a0 [ 1325.702204][ C1] ? blk_mq_submit_bio+0x1a1c/0x2880 [ 1325.707491][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1325.713647][ C1] arch_stack_walk+0x94/0x100 [ 1325.718327][ C1] ? __submit_bio+0x3cf/0x690 [ 1325.723011][ C1] stack_trace_save+0x8e/0xc0 [ 1325.727685][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1325.733056][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 1325.737995][ C1] kasan_save_stack+0x33/0x60 [ 1325.742661][ C1] ? kasan_save_stack+0x33/0x60 [ 1325.747502][ C1] ? kasan_save_track+0x14/0x30 [ 1325.752356][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 1325.757113][ C1] ? kmem_cache_free+0x142/0x4d0 [ 1325.762056][ C1] ? mempool_free+0x102/0x750 [ 1325.766733][ C1] ? bio_put+0x355/0x5b0 [ 1325.770967][ C1] ? bio_endio+0x70a/0x850 [ 1325.775374][ C1] ? blk_update_request+0x93e/0x15f0 [ 1325.780657][ C1] ? blk_mq_end_request+0x5b/0x630 [ 1325.785768][ C1] ? blk_mq_complete_request+0x88/0xb0 [ 1325.791232][ C1] ? null_queue_rq+0xb69/0xfd0 [ 1325.795997][ C1] ? null_queue_rqs+0xe9/0x2f0 [ 1325.800769][ C1] ? __blk_mq_flush_list+0x9a/0xc0 [ 1325.805877][ C1] ? blk_mq_dispatch_queue_requests+0x184/0x7b0 [ 1325.812116][ C1] ? blk_mq_flush_plug_list+0x1f2/0x600 [ 1325.817658][ C1] ? blk_add_rq_to_plug+0x1ca/0x540 [ 1325.822853][ C1] ? blk_mq_submit_bio+0x1a1c/0x2880 [ 1325.828166][ C1] kasan_save_track+0x14/0x30 [ 1325.832831][ C1] __kasan_kmalloc+0xaa/0xb0 [ 1325.837416][ C1] kmem_cache_free+0x142/0x4d0 [ 1325.842169][ C1] ? mempool_free+0x102/0x750 [ 1325.846842][ C1] ? __pfx_mempool_free_slab+0x10/0x10 [ 1325.852296][ C1] mempool_free+0x102/0x750 [ 1325.856795][ C1] ? __pfx_end_bio_bh_io_sync+0x10/0x10 [ 1325.862339][ C1] bio_put+0x355/0x5b0 [ 1325.866400][ C1] ? __pfx_end_bio_bh_io_sync+0x10/0x10 [ 1325.871941][ C1] bio_endio+0x70a/0x850 [ 1325.876172][ C1] ? blk_account_io_completion.part.0+0x146/0x280 [ 1325.882586][ C1] blk_update_request+0x93e/0x15f0 [ 1325.887710][ C1] blk_mq_end_request+0x5b/0x630 [ 1325.892658][ C1] blk_mq_complete_request+0x88/0xb0 [ 1325.897940][ C1] null_queue_rq+0xb69/0xfd0 [ 1325.902538][ C1] null_queue_rqs+0xe9/0x2f0 [ 1325.907135][ C1] ? __pfx_null_queue_rqs+0x10/0x10 [ 1325.912337][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1325.918408][ C1] __blk_mq_flush_list+0x9a/0xc0 [ 1325.923348][ C1] blk_mq_dispatch_queue_requests+0x184/0x7b0 [ 1325.929422][ C1] blk_mq_flush_plug_list+0x1f2/0x600 [ 1325.934797][ C1] ? update_io_ticks+0x137/0x2a0 [ 1325.939739][ C1] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1325.945631][ C1] ? __pfx_update_io_ticks+0x10/0x10 [ 1325.950919][ C1] blk_add_rq_to_plug+0x1ca/0x540 [ 1325.955951][ C1] blk_mq_submit_bio+0x1a1c/0x2880 [ 1325.961069][ C1] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 1325.966546][ C1] __submit_bio+0x3cf/0x690 [ 1325.971056][ C1] ? __pfx___submit_bio+0x10/0x10 [ 1325.976090][ C1] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 1325.981816][ C1] ? bio_associate_blkg+0x137/0x2a0 [ 1325.987019][ C1] ? submit_bio_noacct_nocheck+0x660/0xd30 [ 1325.992830][ C1] submit_bio_noacct_nocheck+0x660/0xd30 [ 1325.998466][ C1] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1326.004626][ C1] ? __pfx___might_resched+0x10/0x10 [ 1326.009909][ C1] ? perf_trace_block_plug+0x111/0x360 [ 1326.015365][ C1] ? submit_bio_noacct+0x7bf/0x1eb0 [ 1326.020564][ C1] submit_bio_noacct+0xb49/0x1eb0 [ 1326.025593][ C1] __block_write_full_folio+0x735/0xe00 [ 1326.031140][ C1] ? __pfx_blkdev_get_block+0x10/0x10 [ 1326.036510][ C1] block_write_full_folio+0x341/0x400 [ 1326.041881][ C1] ? __pfx_blkdev_get_block+0x10/0x10 [ 1326.047253][ C1] blkdev_writepages+0xb8/0x140 [ 1326.052109][ C1] ? __pfx_blkdev_writepages+0x10/0x10 [ 1326.057585][ C1] ? do_writepages+0x4b7/0x600 [ 1326.062356][ C1] ? __pfx_blkdev_writepages+0x10/0x10 [ 1326.067820][ C1] do_writepages+0x27a/0x600 [ 1326.072417][ C1] ? __pfx_do_writepages+0x10/0x10 [ 1326.077533][ C1] ? reacquire_held_locks+0xcd/0x1f0 [ 1326.082822][ C1] ? writeback_sb_inodes+0x3b0/0xfa0 [ 1326.088113][ C1] __writeback_single_inode+0x160/0xfb0 [ 1326.093663][ C1] ? __pfx___writeback_single_inode+0x10/0x10 [ 1326.099730][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 1326.104926][ C1] writeback_sb_inodes+0x60d/0xfa0 [ 1326.110051][ C1] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1326.115688][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 1326.120659][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1326.125509][ C1] ? move_expired_inodes+0x5a0/0x850 [ 1326.130795][ C1] __writeback_inodes_wb+0xf8/0x2d0 [ 1326.136002][ C1] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 1326.141811][ C1] ? queue_io+0x3f6/0x520 [ 1326.146143][ C1] wb_writeback+0x7f3/0xb70 [ 1326.150650][ C1] ? __pfx_wb_writeback+0x10/0x10 [ 1326.155683][ C1] ? get_nr_dirty_inodes+0x170/0x1e0 [ 1326.160969][ C1] wb_workfn+0x8ca/0xbe0 [ 1326.165215][ C1] ? try_to_wake_up+0x160/0x1870 [ 1326.170147][ C1] ? __pfx_wb_workfn+0x10/0x10 [ 1326.174918][ C1] ? rcu_is_watching+0x12/0xc0 [ 1326.179682][ C1] process_one_work+0x9cc/0x1b70 [ 1326.184623][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 1326.191294][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1326.196670][ C1] ? assign_work+0x1a0/0x250 [ 1326.201255][ C1] worker_thread+0x6c8/0xf10 [ 1326.205848][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1326.210952][ C1] kthread+0x3c5/0x780 [ 1326.215018][ C1] ? __pfx_kthread+0x10/0x10 [ 1326.219599][ C1] ? rcu_is_watching+0x12/0xc0 [ 1326.224379][ C1] ? __pfx_kthread+0x10/0x10 [ 1326.228960][ C1] ret_from_fork+0x5d4/0x6f0 [ 1326.233540][ C1] ? __pfx_kthread+0x10/0x10 [ 1326.238120][ C1] ret_from_fork_asm+0x1a/0x30 [ 1326.242892][ C1] [ 1326.245899][ C1] rcu: rcu_preempt kthread starved for 729 jiffies! g94573 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1326.256904][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1326.266859][ C1] rcu: RCU grace-period kthread stack dump: [ 1326.272729][ C1] task:rcu_preempt state:R running task stack:27392 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1326.286217][ C1] Call Trace: [ 1326.289487][ C1] [ 1326.292409][ C1] __schedule+0x1190/0x5de0 [ 1326.296924][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 1326.301866][ C1] ? __pfx___schedule+0x10/0x10 [ 1326.306717][ C1] ? find_held_lock+0x2b/0x80 [ 1326.311387][ C1] ? schedule+0x2d7/0x3a0 [ 1326.315719][ C1] schedule+0xe7/0x3a0 [ 1326.319790][ C1] schedule_timeout+0x123/0x290 [ 1326.324637][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1326.330007][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1326.335291][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1326.341093][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1326.346555][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 1326.351314][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1326.356595][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1326.361790][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1326.366723][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1326.371567][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1326.377376][ C1] rcu_gp_kthread+0x270/0x380 [ 1326.382045][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1326.387230][ C1] ? rcu_is_watching+0x12/0xc0 [ 1326.391989][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1326.397188][ C1] ? __kthread_parkme+0x19e/0x250 [ 1326.402210][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1326.407397][ C1] kthread+0x3c5/0x780 [ 1326.411458][ C1] ? __pfx_kthread+0x10/0x10 [ 1326.416043][ C1] ? rcu_is_watching+0x12/0xc0 [ 1326.420804][ C1] ? __pfx_kthread+0x10/0x10 [ 1326.425384][ C1] ret_from_fork+0x5d4/0x6f0 [ 1326.429975][ C1] ? __pfx_kthread+0x10/0x10 [ 1326.434558][ C1] ret_from_fork_asm+0x1a/0x30 [ 1326.439327][ C1] [ 1326.442337][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1326.448642][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1326.453834][ C0] NMI backtrace for cpu 0 [ 1326.453847][ C0] CPU: 0 UID: 0 PID: 22326 Comm: kworker/u8:20 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 1326.453865][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1326.453874][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 1326.453895][ C0] RIP: 0010:rcu_is_watching+0x12/0xc0 [ 1326.453914][ C0] Code: 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 65 ff 05 f3 0c 35 12 e8 5e 11 f2 09 <48> c7 c3 a8 f2 d6 93 89 c5 83 f8 07 0f 87 82 00 00 00 48 8d 3c ed [ 1326.453928][ C0] RSP: 0018:ffffc90000007950 EFLAGS: 00000296 [ 1326.453939][ C0] RAX: 0000000000000000 RBX: ffff8880807b4880 RCX: ffffffff896f5de7 [ 1326.453949][ C0] RDX: 0000000000000001 RSI: ffffffff8c161100 RDI: ffffffff8c161140 [ 1326.453958][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1326.453967][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90000007bf0 [ 1326.453975][ C0] R13: 0000000000000001 R14: ffff8881d798b640 R15: ffff8881d798b640 [ 1326.453985][ C0] FS: 0000000000000000(0000) GS:ffff8881246c4000(0000) knlGS:0000000000000000 [ 1326.454000][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1326.454009][ C0] CR2: fffffffffffffffd CR3: 00000000433cd000 CR4: 00000000003526f0 [ 1326.454019][ C0] Call Trace: [ 1326.454023][ C0] [ 1326.454030][ C0] rcu_read_lock_held+0x1e/0x50 [ 1326.454049][ C0] __netif_receive_skb_core.constprop.0+0x2452/0x48c0 [ 1326.454072][ C0] ? lock_acquire+0x179/0x350 [ 1326.454092][ C0] ? find_held_lock+0x2b/0x80 [ 1326.454109][ C0] ? nf_hook.constprop.0+0x451/0x750 [ 1326.454128][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1326.454148][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1326.454167][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 1326.454184][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1326.454203][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1326.454224][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 1326.454246][ C0] ? process_backlog+0x3f0/0x15e0 [ 1326.454264][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 1326.454282][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1326.454301][ C0] ? lock_acquire+0x179/0x350 [ 1326.454324][ C0] ? process_backlog+0x3f0/0x15e0 [ 1326.454341][ C0] __netif_receive_skb+0x1d/0x160 [ 1326.454358][ C0] process_backlog+0x442/0x15e0 [ 1326.454378][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 1326.454397][ C0] net_rx_action+0xa9f/0xfe0 [ 1326.454418][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1326.454437][ C0] ? tmigr_handle_remote+0x132/0x380 [ 1326.454457][ C0] ? run_timer_base+0x121/0x190 [ 1326.454477][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1326.454498][ C0] handle_softirqs+0x216/0x8e0 [ 1326.454517][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1326.454535][ C0] ? kernel_fpu_end+0x59/0x70 [ 1326.454556][ C0] do_softirq+0xb2/0xf0 [ 1326.454571][ C0] [ 1326.454575][ C0] [ 1326.454581][ C0] __local_bh_enable_ip+0x100/0x120 [ 1326.454598][ C0] kernel_fpu_end+0x5e/0x70 [ 1326.454612][ C0] blake2s_compress+0x7f/0xe0 [ 1326.454632][ C0] blake2s_update+0xef/0x360 [ 1326.454650][ C0] hmac.constprop.0+0x32a/0x420 [ 1326.454663][ C0] ? point_double+0x115/0x440 [ 1326.454678][ C0] ? __pfx_hmac.constprop.0+0x10/0x10 [ 1326.454695][ C0] ? __pfx_curve25519_ever64_base+0x10/0x10 [ 1326.454711][ C0] ? crng_fast_key_erasure+0x1ce/0x250 [ 1326.454730][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 1326.454747][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1326.454766][ C0] ? kernel_fpu_end+0x59/0x70 [ 1326.454780][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 1326.454799][ C0] kdf.constprop.0+0x14b/0x280 [ 1326.454813][ C0] ? __pfx_kdf.constprop.0+0x10/0x10 [ 1326.454825][ C0] ? __pfx_mix_hash+0x10/0x10 [ 1326.454844][ C0] message_ephemeral+0x5f/0x70 [ 1326.454858][ C0] wg_noise_handshake_create_initiation+0x2c6/0x650 [ 1326.454875][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 1326.454891][ C0] ? find_held_lock+0x2b/0x80 [ 1326.454908][ C0] ? ktime_get_coarse_with_offset+0x1af/0x240 [ 1326.454928][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1326.454946][ C0] ? ktime_get_coarse_with_offset+0x1c1/0x240 [ 1326.454965][ C0] ? ktime_get_coarse_with_offset+0x150/0x240 [ 1326.454986][ C0] wg_packet_send_handshake_initiation+0x19a/0x360 [ 1326.455005][ C0] ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10 [ 1326.455022][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 1326.455051][ C0] wg_packet_handshake_send_worker+0x1c/0x30 [ 1326.455068][ C0] process_one_work+0x9cc/0x1b70 [ 1326.455086][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 1326.455105][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1326.455122][ C0] ? assign_work+0x1a0/0x250 [ 1326.455137][ C0] worker_thread+0x6c8/0xf10 [ 1326.455155][ C0] ? __kthread_parkme+0x19e/0x250 [ 1326.455174][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1326.455189][ C0] kthread+0x3c5/0x780 [ 1326.455202][ C0] ? __pfx_kthread+0x10/0x10 [ 1326.455216][ C0] ? rcu_is_watching+0x12/0xc0 [ 1326.455232][ C0] ? __pfx_kthread+0x10/0x10 [ 1326.455246][ C0] ret_from_fork+0x5d4/0x6f0 [ 1326.455258][ C0] ? __pfx_kthread+0x10/0x10 [ 1326.455271][ C0] ret_from_fork_asm+0x1a/0x30 [ 1326.455292][ C0] [ 1326.754850][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1328.995212][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1330.912807][ C0] tipc: Duplicate ac1414aa using udp(172.20.20.170:20002) seen on [ 1331.071985][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1333.155150][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1335.235732][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17