last executing test programs: 10m47.069264452s ago: executing program 32 (id=477): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000300)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) r1 = openat$vmci(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0xd, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)="a6", 0x1}, {&(0x7f0000000440)="846c3f1b", 0x4}], 0x47) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0x3}, &(0x7f00000000c0)=0x28) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 10m14.566570364s ago: executing program 33 (id=614): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={0x1c, 0x18, 0x107, 0x70bd25, 0x25dfdbfb, {0x6, 0x7c, 0x3f}, [@typed={0x8, 0xb8, 0x0, 0x0, @ipv4=@multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040895}, 0x20040010) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) 9m34.479428191s ago: executing program 34 (id=944): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000140)={0x474203, 0x408, 0xb}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x1, 0xfffffff9, 0x7ff, 0xd, "006204000000002240f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0x17) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/cgroup.procs/file0\x00', 0x2002, 0x1d2) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x4a02, 0x3}, 0xb, 0x0) landlock_restrict_self(r6, 0x0) open_by_handle_at(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000020000000b"], 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x2, 0xfe, 0xfffff024}, {0x80000006}]}, 0x8) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) 8m56.700963649s ago: executing program 6 (id=1144): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c90012000e00050017420a224000000000000000"], 0x17) 8m56.698391934s ago: executing program 6 (id=1145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf255100000008000300", @ANYRES32=r3, @ANYBLOB="b5234e9f962eec03ada9bcaec18e1e03abdb6cc1f7389740e84961566cee303bf6d62c43b115bb81e692d3b29214d11a53327f1eb2307ef22fe45cfad9611db29a82ab20060b8628887e162949af9f83afcf3b449c07d0df9ccd3985"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_mark(0xffffffffffffffff, 0xa8, 0x1015, r4, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r5 = openat$autofs(0xffffff9c, &(0x7f0000000280), 0x50000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0xee5}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) unlink(&(0x7f00000002c0)='./file0\x00') link(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00') ioctl$KVM_CREATE_VM(r6, 0xae01, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) r9 = epoll_create(0x40) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000180)) r10 = socket$unix(0x1, 0x2, 0x0) syz_emit_ethernet(0xf7, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@llc={0x4, {@snap={0xaa, 0x0, "92", "36b35b", 0x10, "7022fc7c4ac109a7ed5de5abb50486492b85c76f893497247b58b1db1089d259269ac3b504f04bed94e87103131a0cb318f458aa4c0771746046cd41e2a317743c69c2a3af9307882967c4e485a099bf0cb10697cc55b5df66612bb9d49829865910790f7644fc23c57e678693e28918f3a81c7781fe5f34c0a9544fcc4fb2a380a7b351535a8e8418f2f37e466da3444bd69a3d41e73b6fd083741977e50f99fd4beb2dfeedfa2fc2611832669590d07ce70358e8e5d3fd0d01b49f879a56ff06bbc15dc1d1d947c87d25568d2d759b427157e75f311a7ad811774a26dd94ae00"}}}}}, &(0x7f0000000600)={0x9, 0x1, [0xd57, 0x125, 0xa39, 0x811]}) bind$unix(r10, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r11, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x8c2, @bearer=@l2={'ib', 0x3a, 'dvmrp0\x00'}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c810}, 0x4) 8m56.607023497s ago: executing program 6 (id=1147): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) (async) socket$unix(0x1, 0x1, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/mtrr\x00', 0x300002, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004500)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = openat(r1, &(0x7f00000001c0)='./mnt/test\x00', 0x8000, 0x12d) (async) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="020000c6fa00"}) (async) write(r2, &(0x7f0000000200)="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", 0x50000) r4 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r2) (async) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)='/dev/loop0,65536\x00', 0x11) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x1ff) (async) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000640)='./mnt/file0\x00', &(0x7f0000000a00)='jffs2\x00', 0x0, 0x0) (async) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f0000000540)) (async) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001400110500000000000000002b0000014e2200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./mnt/test\x00', 0x42, 0x1ff) write(r7, &(0x7f0000000c00)='A', 0x1000) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0x3}}, 0x20) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f0000000100)=0xffffffffffff8000) unlinkat(0xffffffffffffff9c, &(0x7f0000000b00)='./mnt/test\x00', 0x0) io_setup(0x9, &(0x7f0000000240)) openat(r2, &(0x7f0000000140)='./file0\x00', 0x40d01, 0x108) (async) connect$can_bcm(r0, &(0x7f0000000000), 0x10) 8m56.213956213s ago: executing program 6 (id=1155): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x2200010, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1}, 0x20) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x8000000, 0x2, 0x0, 0x18, 0x4, 0x3, 0xffa4}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='sysfs\x00', 0x0) r3 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x100, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x1f, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc01cf509, &(0x7f00000002c0)={r6, 0x8, 0x5, 0x1}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xffde}, {0xfff2, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 8m55.996515435s ago: executing program 6 (id=1157): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 2) 8m55.767711609s ago: executing program 6 (id=1159): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 8m55.73146454s ago: executing program 35 (id=1159): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 6m44.622101991s ago: executing program 1 (id=1846): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000040)) 6m44.573082447s ago: executing program 1 (id=1847): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = io_uring_setup(0x178e, &(0x7f00000001c0)={0x0, 0x52c1, 0x80, 0xfffffffe, 0xc}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r1, &(0x7f0000000600)=[{&(0x7f00000004c0)="99", 0x1}], 0x1, 0xfffffc01, 0x81, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, 0x0, 0x4001) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) lstat64(0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 6m43.744966178s ago: executing program 1 (id=1851): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) close(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) syz_open_pts(r0, 0x2000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x3fff, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x1000, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x200004}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x60b, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x4}, {0x0, 0x3, 0x1, 0x7437ec78, 0x2, 0x53f9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x7fffffff}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0xffc, 0x20009c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x1, 0x1000007, 0x5, 0x6, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x7f, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xff8, 0xc}, {0x6, 0x6, 0x1ff, 0xb, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x7, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x1ffffffe}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0x8, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x7ffc, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0xe}, {0x8, 0x2, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x802, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x80000009}, {0x9, 0x0, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x10, 0x1, 0x1, 0x5, 0x96e, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x8}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x9}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff001, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0xfed, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x7fd, 0x200, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0x3, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x1000, 0x9, 0x9, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e11, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x8}, {0x7ff, 0x9, 0x9, 0x6, 0x9, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x4}, {}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef, 0x1}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r8, 0x109}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 6m43.70612073s ago: executing program 1 (id=1852): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0xc}, {}, 0x8, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0xee00, &(0x7f0000000180)={0x8, 0x0, 0x1, 0x0, 0x7, 0x6, 0xa, 0x5, 0xa430}) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) munlockall() setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r3 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x40800, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000280)={0x81, "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"}) r5 = socket(0x11, 0x3, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r3], 0x78}, 0x1, 0x0, 0x0, 0x455}, 0x48001) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x1, &(0x7f0000000040)) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$KVM_CREATE_VM(r7, 0x40086806, 0x21) ioctl$BLKTRACESETUP(r7, 0x6801, 0x0) fdatasync(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) 6m43.472114132s ago: executing program 1 (id=1854): sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0x12) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000400)={'veth1_to_bond\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x6}}) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r7 = getpid() mount(0x0, 0x0, &(0x7f00000000c0)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) sched_getattr(r7, &(0x7f0000000140)={0x38}, 0x38, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00003ad000/0x3000)=nil, 0x2000, 0x2}) lseek(r0, 0x851, 0x1) (fail_nth: 2) 6m43.142213299s ago: executing program 1 (id=1856): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000080)=ANY=[@ANYBLOB="744766642c7266646e6f3f0000e9ff007cb79746134a8bb9949c1cac9319e8e8747380322c71070630296003f319e1231511243b97cb66324adcde320e8e942b21286188b5fc985bbb2483f210021cc43884ea2b7aca47b5a40fe6850471a2c9fdf9a8636806d9c08cfdceea359d17984c23b6667bf206803470d2c1504e1f4a", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmmsg$alg(r6, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x14}], 0x18, 0x20000040}], 0x1, 0x8040) syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) lsm_set_self_attr(0x65, &(0x7f0000007000)={0x68, 0xffffffffffffffff, 0x36, 0x16, "719253c233c813bb57cc2450c9c8b97d24ecc020f500"}, 0x36, 0x0) 6m42.886992541s ago: executing program 36 (id=1856): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000080)=ANY=[@ANYBLOB="744766642c7266646e6f3f0000e9ff007cb79746134a8bb9949c1cac9319e8e8747380322c71070630296003f319e1231511243b97cb66324adcde320e8e942b21286188b5fc985bbb2483f210021cc43884ea2b7aca47b5a40fe6850471a2c9fdf9a8636806d9c08cfdceea359d17984c23b6667bf206803470d2c1504e1f4a", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmmsg$alg(r6, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x14}], 0x18, 0x20000040}], 0x1, 0x8040) syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) lsm_set_self_attr(0x65, &(0x7f0000007000)={0x68, 0xffffffffffffffff, 0x36, 0x16, "719253c233c813bb57cc2450c9c8b97d24ecc020f500"}, 0x36, 0x0) 3m57.969804749s ago: executing program 8 (id=2869): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000001300)='./file0\x00', &(0x7f00000001c0), 0x2a10088, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000500)="26ef26da06fcc43959ccc53ee926b47804ba3281fcac63bf954c857621deb501478081", 0x23}, {&(0x7f0000001c40)="65e3d6347d4e5a56100bf4c4f9e05214c8f2d4656aea29151d3ca7f936d66855822d51bf7deed302d625ab319825893b4a84e477c08f8f7afbc81b14", 0x3c}], 0x2}}], 0x1, 0xc840) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c9702", 0x5e, 0x5e, 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600"], 0x84}}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xfffffffffffffddc}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0x3, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x0, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0x8, 0x9, 0x474}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x2, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0xf, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x5, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0xb, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0x6, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x1, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4de, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x3, 0x1, 0x1}, {0x7f, 0x945b, 0x0, 0x0, 0x6, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x7fd}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x800003, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7a, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x9, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x3, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0xe, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0xfffffffd, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x29b3, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) close_range(r2, r4, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r6, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f00000007c0)="89", 0x1}], 0x2) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfff) 3m57.033403069s ago: executing program 8 (id=2874): ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000040)=0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000000c0)={0xffff, 0x5, 0x80000001, 0x8, 0x9, 0xca40, 0xc}, &(0x7f0000000100)={0x5, 0x9a, 0xffff, 0x0, 0x10000, 0x0, 0x4, 0xf}, &(0x7f0000000140)={0xffff, 0xffffffff00000000, 0x2e55, 0xce, 0x7776, 0x0, 0x80000000}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB='\v\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r1}, 0x38) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000640)={0x1, 0x1, 0x8000018, 0x1a, 0x104, &(0x7f0000000240)}) clock_getres(0x4, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="4ccb6dcceb1a49790000007979617995547caef40906050600000000000000000200000005000100070000000900020073797a30000000c12b0000000000008008000140e00000020c00028008000140ac1414aa08000000"], 0x4c}}, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000680)=0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000006c0)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000700)=0x2, 0x4) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000001000)=@bca={0x3, 0xbc, "10d810558efa0fe80f44a4ae8dfab3c005e4f436d2a416ddaec1439a6ccd9d71516919d560d9d60d677fec09e9ff6a8aead095b8216599896708af96c899e31415f6c2e55ad64a8d393d5101b300c6e089406e1cc79cf1743fc6769628916c690770914e8dcde3edf9dbd377b0570ae097767a79f40d6cb3ba78ec18cedb5a8ca28e50addba17bf53f4eaeb2c09e94f5654977345f4d8719d96cee2f9cd5d99ac40412ef2bf6a2090e21b35f9d241da70f7d6d529c50821d4633752e"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000007c0)={0x2, &(0x7f0000000780)=[{0x7, 0x0, 0xff, 0x3}, {0x2, 0x88, 0x91, 0x9}]}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000a40)={'vcan0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000740), &(0x7f0000000ac0)) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000d40)={0x0, 0x0}) select(0x40, &(0x7f0000000c80)={0x16, 0x3, 0x2c, 0xffff, 0xffffffff, 0xfffffffffffffffb, 0xdb5, 0x8}, &(0x7f0000000cc0)={0x8, 0xffffffffffffffff, 0x9, 0x7a, 0x80, 0x1, 0xfff, 0x5}, &(0x7f0000000d00)={0x8, 0xe024, 0x9a89, 0x2, 0x97, 0x11, 0xa5, 0x2}, &(0x7f0000000d80)={r5, r6/1000+10000}) futex(&(0x7f0000000dc0), 0x5, 0x2, &(0x7f0000000e00)={0x0, 0x989680}, &(0x7f0000000e40)=0x1, 0x2) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000e80)=""/185, &(0x7f0000000f40)=0xb9) 3m56.73546459s ago: executing program 8 (id=2877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffecffaabbccddeeff88ca5b500028003a0000000000000100000100001267"], 0x0) 3m56.677945542s ago: executing program 8 (id=2878): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r6], 0x2c}}, 0x40080) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000440)={0x1, 0x3, 0x760adcd1, 0x800}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000440)={0x1, 0x3, 0x760adcd1, 0x800, 0xffffffffffffffff}) poll(&(0x7f0000000480)=[{r5, 0x484}, {r0, 0x2000}, {r7, 0x408}, {r1, 0x2040}], 0x4, 0x800) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x20) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r8, &(0x7f0000000240)='k', 0x1) truncate(&(0x7f00000003c0)='./sys\x00', 0x7) (async) truncate(&(0x7f00000003c0)='./sys\x00', 0x7) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) (async) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) ioctl$KVM_SET_GUEST_DEBUG_x86(r9, 0x4048ae9b, &(0x7f00000000c0)={0x180003, 0x0, {[0x5, 0xffffffffffff0002, 0xfffffffffffffffb, 0x800, 0x7, 0x5, 0x3]}}) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r10, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r10, 0x100, 0x306c}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x1}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x100}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x60}}, 0xeb64d656001f6f32) 3m56.428652534s ago: executing program 8 (id=2881): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_SET_PHYS(r2, 0x4004556c, &(0x7f0000000040)='syz1\x00') r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804) 3m54.419013273s ago: executing program 8 (id=2893): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000", 0x17}], 0x1}, 0x0) 3m54.388084153s ago: executing program 37 (id=2893): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000", 0x17}], 0x1}, 0x0) 1m20.908458615s ago: executing program 2 (id=3618): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000001d80)={0x0, 0x6, 0x0, 0x8}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000180)=""/103, 0x67}], 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r4 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(r4, 0x80811501, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) getpid() 1m19.296638182s ago: executing program 2 (id=3625): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/dri/1/Virtual-1/edid_override\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)="fdffffffffffff0000000000000000008f3b84a6c4f73ad1d35cbe137a110000010400"/128, 0x80) 1m19.130915043s ago: executing program 2 (id=3626): socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = dup(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x88000cc, 0x0) write$eventfd(r6, &(0x7f00000000c0)=0xc, 0x8) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0xf8d}}, 0x96d) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000040)=0xe6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m17.949602408s ago: executing program 2 (id=3635): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e06040c10"], 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f00000006c0), 0x65a, 0x0) close(0x3) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x195ac20, &(0x7f0000000100)={[{@mode={'mode', 0x3d, 0x5}}]}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={0x0}) 1m16.567096187s ago: executing program 2 (id=3639): ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000040)=0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000000c0)={0xffff, 0x5, 0x80000001, 0x8, 0x9, 0xca40, 0xc}, &(0x7f0000000100)={0x5, 0x9a, 0xffff, 0x0, 0x10000, 0x0, 0x4, 0xf}, &(0x7f0000000140)={0xffff, 0xffffffff00000000, 0x2e55, 0xce, 0x7776, 0x0, 0x80000000}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB='\v\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r1}, 0x38) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000640)={0x1, 0x1, 0x8000018, 0x1a, 0x104, &(0x7f0000000240)}) clock_getres(0x4, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="4ccb6dcceb1a49790000007979617995547caef40906050600000000000000000200000005000100070000000900020073797a30000000c12b0000000000008008000140e00000020c00028008000140ac1414aa08000000"], 0x4c}}, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000680)=0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000006c0)) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000700)=0x2, 0x4) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000001000)=@bca={0x3, 0xbc, "10d810558efa0fe80f44a4ae8dfab3c005e4f436d2a416ddaec1439a6ccd9d71516919d560d9d60d677fec09e9ff6a8aead095b8216599896708af96c899e31415f6c2e55ad64a8d393d5101b300c6e089406e1cc79cf1743fc6769628916c690770914e8dcde3edf9dbd377b0570ae097767a79f40d6cb3ba78ec18cedb5a8ca28e50addba17bf53f4eaeb2c09e94f5654977345f4d8719d96cee2f9cd5d99ac40412ef2bf6a2090e21b35f9d241da70f7d6d529c50821d4633752e"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000007c0)={0x2, &(0x7f0000000780)=[{0x7, 0x0, 0xff, 0x3}, {0x2, 0x88, 0x91, 0x9}]}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000a40)={'vcan0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000740), &(0x7f0000000ac0)) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000d40)={0x0, 0x0}) select(0x40, &(0x7f0000000c80)={0x16, 0x3, 0x2c, 0xffff, 0xffffffff, 0xfffffffffffffffb, 0xdb5, 0x8}, &(0x7f0000000cc0)={0x8, 0xffffffffffffffff, 0x9, 0x7a, 0x80, 0x1, 0xfff, 0x5}, &(0x7f0000000d00)={0x8, 0xe024, 0x9a89, 0x2, 0x97, 0x11, 0xa5, 0x2}, &(0x7f0000000d80)={r5, r6/1000+10000}) futex(&(0x7f0000000dc0), 0x5, 0x2, &(0x7f0000000e00)={0x0, 0x989680}, &(0x7f0000000e40)=0x1, 0x2) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000e80)=""/185, &(0x7f0000000f40)=0xb9) 1m16.115672349s ago: executing program 2 (id=3642): socket(0x10, 0x3, 0x0) r0 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \'Line\''], 0x2a) close(r1) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080), &(0x7f0000000100)={'U-', 0xf}, 0x16, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a09000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006402f000000140000001000010000000000000000000084000a"], 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001200)=ANY=[], 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x5618c2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040effff2820"], 0x7) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010000102000000fadbff2500000000003f1f609c3d1a9a945528d54a5fbcdba8534ad447935cf50533ccc12264ea993564ed804506e52c881927124908e2957c0a355e84577f10cd210b6262a44706f32f1ee7094b81afcdcc", @ANYRES32=r8, @ANYBLOB="1380000023b201001c00128009000100626f6e64000000000c0002800800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008894) ptrace(0x10, r6) ptrace$poke(0x4, r6, &(0x7f0000000140), 0x88) 1m16.065040211s ago: executing program 38 (id=3642): socket(0x10, 0x3, 0x0) r0 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \'Line\''], 0x2a) close(r1) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080), &(0x7f0000000100)={'U-', 0xf}, 0x16, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a09000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006402f000000140000001000010000000000000000000084000a"], 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001200)=ANY=[], 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x5618c2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040effff2820"], 0x7) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010000102000000fadbff2500000000003f1f609c3d1a9a945528d54a5fbcdba8534ad447935cf50533ccc12264ea993564ed804506e52c881927124908e2957c0a355e84577f10cd210b6262a44706f32f1ee7094b81afcdcc", @ANYRES32=r8, @ANYBLOB="1380000023b201001c00128009000100626f6e64000000000c0002800800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008894) ptrace(0x10, r6) ptrace$poke(0x4, r6, &(0x7f0000000140), 0x88) 1m10.298245224s ago: executing program 9 (id=3681): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2040004, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESDEC=r1, @ANYRESHEX]) 1m9.992113161s ago: executing program 9 (id=3684): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x1c, 0x47, 0x107, 0x1, 0xffffffff, {0x1, 0x7c}, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x2c, 0xf2}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c0d5}, 0xc000) (async) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x0, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x0, 0x11, 0xffffffffffffffff, 0x0) (async) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={r4, 0x4}, 0x0, &(0x7f0000005840)="00000002", 0x0) (async) r5 = dup(r2) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xd0, 0x2, 0x5, 0x100, 0x3, 0x20000000, 0x8, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x8, 0xfe9, 0x401, 0x7, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x7, 0x8]}) 1m9.821569909s ago: executing program 9 (id=3685): socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = dup(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100004) write$eventfd(0xffffffffffffffff, &(0x7f00000000c0)=0xc, 0x8) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d1bf91b4d090955f70e06d038e7ff7fc6e5539b0d3f0e8b089b3f390768090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0xf8d}}, 0x96d) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000040)=0xe6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m8.828695847s ago: executing program 9 (id=3700): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e06040c10"], 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f00000006c0), 0x65a, 0x0) close(0x3) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x195ac20, &(0x7f0000000100)={[{@mode={'mode', 0x3d, 0x5}}]}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={0x0}) 1m8.037657133s ago: executing program 9 (id=3702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000bc8596abc0000000000008000849dff0c5d46593821692aa4af6687294a2814", @ANYRES32=0x0, @ANYBLOB="fffb0000000000e0ff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f", @ANYRESHEX=r0], 0x0, 0x34}, 0x28) r1 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x43, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11", 0x30, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r6, r5}, &(0x7f00000000c0)=""/77, 0x4d, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r1, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r7) 1m7.770302122s ago: executing program 9 (id=3703): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x80, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, &(0x7f0000001300)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) 1m7.685087237s ago: executing program 39 (id=3703): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x80, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, &(0x7f0000001300)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) 47.017960673s ago: executing program 5 (id=3797): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './config/usb_gadget/g1/functions/uvc.usb0\x00'}) recvfrom$inet6(r0, &(0x7f0000000080)=""/118, 0x76, 0x20, &(0x7f0000000100)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0xb}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000002100)='usbip-vudc.0', 0xc) 47.017706193s ago: executing program 5 (id=3798): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000001d80)={0x0, 0x6, 0x0, 0x8}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000180)=""/103, 0x67}], 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSMASK(r4, 0x80811501, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getpid() 44.092489504s ago: executing program 5 (id=3809): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000001280)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r8, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 42.937959062s ago: executing program 5 (id=3817): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e06040c10"], 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f00000006c0), 0x65a, 0x0) close(0x3) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x195ac20, &(0x7f0000000100)={[{@mode={'mode', 0x3d, 0x5}}]}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) 40.905665029s ago: executing program 5 (id=3825): r0 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) 40.459583057s ago: executing program 5 (id=3829): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x8082, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000040)={0x11, 0x4}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='4096', 0x4) 40.246443483s ago: executing program 40 (id=3829): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x8082, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000040)={0x11, 0x4}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='4096', 0x4) 4.201029328s ago: executing program 3 (id=4008): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e06040c10"], 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f00000006c0), 0x65a, 0x0) close(0x3) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) io_uring_enter(0xffffffffffffffff, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x195ac20, &(0x7f0000000100)={[{@mode={'mode', 0x3d, 0x5}}]}) 3.909263403s ago: executing program 0 (id=4011): r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x37, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)=[{0x0}, {0x0}], 0x2}, 0x0, 0x100, 0x1, {0x3}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x0, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 3.872613594s ago: executing program 0 (id=4013): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e06040c10"], 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f00000006c0), 0x65a, 0x0) close(0x3) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x195ac20, &(0x7f0000000100)={[{@mode={'mode', 0x3d, 0x5}}]}) 3.602963142s ago: executing program 0 (id=4014): r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1d3}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x9, 0x0, 0x2}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x1e01, 0x90, [0x0, 0x0, 0x1e01, 0x1e01, 0xfffff9, 0x80000440], 0x0, 0x0, &(0x7f0000000440)=[{0x0, '\x00', 0x1e010000, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0xe0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x35, 0x0, r4, 0x0, &(0x7f0000002c80)={0x0, 0x59, &(0x7f0000000140)}, 0x0, 0x100, 0x1, {0xffff}}) sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000080)=0xfffffffc) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x0, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 2.618242269s ago: executing program 3 (id=4017): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x59238566, 0x4}}, './file0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xa40, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) (fail_nth: 3) 2.400740931s ago: executing program 3 (id=4018): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x2, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xffffffff}, @TCA_TBF_PBURST={0x8, 0x7, 0xa0b}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x12, 0x6, 0x81, 0x4}, {0xb5, 0x2, 0x986, 0x0, 0xf7, 0x7a}, 0xfffffffd, 0x5, 0x15cd}}]}}]}, 0x68}}, 0x4880) r2 = socket(0x10, 0x3, 0x0) r3 = syz_ublk_setup_io_uring(0x3a2c, &(0x7f00000001c0)={0x0, 0xfc9a, 0x800, 0x2, 0x76}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r4) r5 = syz_io_uring_setup(0x1b52, &(0x7f0000000000)={0x0, 0x6543, 0x10000, 0x1, 0x2eb, 0x0, r3}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000380)=[r5], 0x1) write(r2, &(0x7f0000000140)="ed0ab0420e8ad01416f6b5980dc16f75e7bd737954f5a875c554df21d0b9af4956c4616d23d6", 0x26) r6 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/failslab/space\x00', 0x1, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='9', 0x1}], 0x1) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005f000100000000000000000000050000080000d62567c5b451"], 0x1c}}, 0x0) 2.307286224s ago: executing program 3 (id=4019): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x16, 0x100, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000001000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000940300000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000001c0)="fb4b873db84c2d02427c9087e082c066a20813ed0c851b28e3c6a7dfff2a09f95989425c7878bb7cda86fe2153f4c7da23aa96a47dfdead9f02282cc0b23d383cd5a541b759081018fd641213134c7b84664c86ab0bfb4f39387a740113bb286bc2709868e7ecd81cc3f4e26bf46ed863bcb78bced156169b6669d1ffbb48344592404b51c18008942c133f25dcadf79544dd509cdac0dc8fc1e4a744308fc2af780c64f63c3e66c34141888ea6cd4bd9d6177260f88c4709735c11cd2501e5f4f4dea2a68359e3732b96c7475c782dd29dfd7466e2016be233a7895", 0xdc, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000002c0)={r1, 0xa6, 0xa0}, &(0x7f0000000300)={'enc=', 'raw', ' hash=', {'ghash-generic\x00'}}, &(0x7f0000000380)="13d80064748d5e1aa9cba1ddbb491eba531e1ba0611dd832f533ea360eff20630ae18bbe01589d828775dd8eb264d1c302f7bff4c2576a9c9fd0aff3575be481f16507790204c1a0b4bbdc3117b13e957835de6d023f90c3d470b7a6c77b02c157fa8d29ee0703972e1a205b861fb87201ecb1d5d5cc5ffcb1286e39e7f6038fe0e731e858a4645eaa659d5971dfa05d1699ac6185caf175b371cb3075b4b8936b8a8a4fec10", &(0x7f0000000500)=""/160) 2.235025954s ago: executing program 3 (id=4020): socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100004) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000040)=0xe6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.234738968s ago: executing program 0 (id=4021): openat$nmem0(0xffffff9c, &(0x7f0000002400), 0x20801, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000c80)={{r0}, 0x0, 0x2, @unused=[0x6, 0x9, 0x4, 0x1], @devid}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x279fed7a65f0a645, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="07000200000000000000050000003c00038004000380340003802000018004000300060002005c00000008000100e800008000000000000000001000018004000300080001000400000004000180"], 0x54}, 0x1, 0x0, 0x0, 0x4060850}, 0x400d4) sendto$inet6(r2, &(0x7f0000000600)="1ba0000016001d0dc5ef4e8cf2cf10a940d8b957cbddb657980000d35da03e4a33b0523d8a0d079418bdb72d82dd84ddfcec7b9c23967f3b751ebed5a4eff53073371af9cda9e4c6365b543a6f6d07fad10f9fc8110a802cf6269c1e25306bda92f31382b764fda85e88c7544bf558db2ed6220f1ba4fd6a1cb8163956d07047799586128122690e925d39778fde2c4e62430310793a160b2ce02b", 0x9b, 0x4000000, 0x0, 0x0) personality(0xbe4e602dc9e6c1d3) uname(&(0x7f0000000040)=""/138) recvfrom$inet6(r2, &(0x7f0000000000)=""/31, 0x1f, 0x2002, 0x0, 0x0) writev(r2, &(0x7f0000000280), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r3 = socket$rxrpc(0x21, 0x2, 0x2) poll(&(0x7f0000000a40)=[{r3, 0x2}], 0x1, 0x7f) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000200), 0x4) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x601, 0x80) poll(0x0, 0x0, 0x1f4) r4 = syz_open_dev$sndctrl(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc0485510, &(0x7f0000002140)=ANY=[@ANYBLOB="00000000f871a5dcce7b67b3"]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='0\n\x00', 0x2) socket$inet6(0x10, 0x3, 0x0) 2.180847875s ago: executing program 7 (id=4022): socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = dup(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x88000cc, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100004) write$eventfd(r6, &(0x7f00000000c0)=0xc, 0x8) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0xf8d}}, 0x96d) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000040)=0xe6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.648913931s ago: executing program 4 (id=4023): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e06040c10"], 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f00000006c0), 0x65a, 0x0) close(0x3) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x195ac20, &(0x7f0000000100)={[{@mode={'mode', 0x3d, 0x5}}]}) 1.569635638s ago: executing program 4 (id=4024): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) fsetxattr$system_posix_acl(r4, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000000)={{}, {0x8}, [], {0x4, 0x3}}, 0x1001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000002301"], 0x48}}, 0x4008004) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="0100000000000000feffffff00000000", @ANYRES64, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00'], 0x48}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x0, 0x3}, 0x10) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r6, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000baffda6e4a4d83"}, 0x40) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000001b40)={0x43, 0x3, 0x3, 0x3}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x400, 0x0, 0x100}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x80, 0x7, 0x3, 0xffffffff, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x68, 0x0, 0x5, 0x2f, 0x0, @remote, @rand_addr=0x640100fc}}}}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r8, &(0x7f0000001380)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="14", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000840000000200000002000800e800000009000000", @ANYRES32=0x0, @ANYBLOB="2c000000840000000105ce0900008100000004000000000000000100"/40, @ANYRES8=r2], 0x48, 0x8001}], 0x0, 0x40) r9 = syz_open_dev$sg(&(0x7f0000000040), 0xfffffffc, 0x200000) ioctl$SG_SET_KEEP_ORPHAN(r9, 0x2287, &(0x7f00000000c0)) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x14, r1, 0xb1b, 0x70bd2a, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) 1.537976664s ago: executing program 4 (id=4025): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r4 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) getsockopt$sock_timeval(r5, 0x1, 0x43, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x2, 0x4, 0x101], [0x20000000, 0x500, 0x4, 0x0, 0x0, 0x0, 0xf4e], [0x40, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000]], '\x00', [{0x1, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}, {0x1, 0x2}, {0x1}, {}, {}, {0xfffffffc, 0xab9}, {0x82}, {0x400}, {0x6}], '\x00', 0x4b4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9}, 0x94) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004091}, 0x808) 1.339732292s ago: executing program 0 (id=4026): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e06040c10"], 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f00000006c0), 0x65a, 0x0) close(0x3) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) 1.338482723s ago: executing program 4 (id=4034): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x1a5080) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) 1.215942207s ago: executing program 7 (id=4027): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x140480, &(0x7f00000001c0)={[{@volatile}, {@uuid_auto, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x30) r1 = openat$uhid(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) 1.115613199s ago: executing program 7 (id=4028): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3f00) 1.112403617s ago: executing program 4 (id=4029): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r2) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf251100000008000100", @ANYRES32=0x0, @ANYBLOB="deee0d5716dc6d4318f52d0c203d58da55d31a34c782345807c3da68c470d3c7862c3ffcf818f58f26c02212f4043c7625a9f514c1d084372770269cc78ddd313c80c17be050d21ded1c5c2cdfefd9044103208919f99592df39c8f82f790408caf0e176983bbbf50925bc69ffcbefebd4305dbc0200ed6ad6f1921e83b54cee10a8958b18131221360d0b"], 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4044802) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x24483) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="10000000000000000000003c3e3055394bf3fed8000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000fcffffff00"/28], 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32=r5, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000000200050000000000000000000000000000000000000047fdda5971f0539496ecfd19a87b0cfec906d4fd08a9febd7020851b1758693a460e29919662f819894006564ddd0adc054dd9055167ae2089d51d21f0e4060d259b29a7c2fcaaf48bf0ae3c838713433df6f16480d9eb5eb7d4e4f4349a71ee4d071418594826d75eb45d79363ca6e4a1bb49c6d9c39d4a2d14ed73c186c5b211c83d627f5731e5edcbac59f2acd4ad31ac7dad6d5cc77749375316a9a1a1a8b2144d1774184835a9b3bb9e2119695e001542468f4b0a5b57ec40d786fc15fefe626c7c13fb6760cf0a7e8fb7fee62a398911baeacc3af54279216f2e05539ecae1ad2a87887fa4d4846ef4915e8693"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000005000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0000000000005f1900000000400000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x23, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000008000000000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000575080000010000185100000b00000000000000000000001841000008000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="00000000000000000c0603820000000019110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000005bbfcfff0ffffff18000000060000000000000004000000bf91000000000000b7020000000000008500000084000000b70000000000000095000000000000"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) 1.086894816s ago: executing program 7 (id=4030): openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 853.538991ms ago: executing program 3 (id=4031): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) dup2(r2, r1) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x4000, &(0x7f0000000080)=ANY=[@ANYBLOB="744766642c7266646e6f3f0000e9ff007cb79746134a8bb9949c1cac9319e8e8747380322c71070630296003f319e1231511243b97cb66324adcde320e8e942b21286188b5fc985bbb2483f210021cc43884ea2b7aca47b5a40fe6850471a2c9fdf9a8636806d9c08cfdceea359d17984c23b6667bf206803470d2c1504e1f4a", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmmsg$alg(r6, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x14}], 0x18, 0x20000040}], 0x1, 0x8040) syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) lsm_set_self_attr(0x65, &(0x7f0000007000)={0x68, 0xffffffffffffffff, 0x36, 0x16, "719253c233c813bb57cc2450c9c8b97d24ecc020f500"}, 0x36, 0x0) 102.25049ms ago: executing program 0 (id=4032): r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0xa4e4, 0x14b302) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r2 = open(&(0x7f0000000380)='./bus\x00', 0x109240, 0x145) creat(&(0x7f0000000200)='./bus\x00', 0x48) sendfile(0xffffffffffffffff, r2, 0x0, 0x4000000053d2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) close(r1) sendmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000380)=@generic={0x23, "57815cdeea606aeb193b04509c20a908416a6894dbcdedc04f4d1740915255ea7a525fcd051c2baeb891b39db12ae77e3dfdd8c494ebcd1924887a8d717e043c45f092fef269b355c4b3e1e009c70eb8ba22fc3ea5c2b1cdc7d01c9a2b2014472ea26339286f4a71b524f572bb370fb8389d0305cd38f475d64c33b51d23"}, 0x80, 0x0}}], 0x1, 0x4000000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) clock_settime(0x8d71ca88fffffffd, 0x0) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0)}, {0x0}], 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f2ff8bd5", @ANYRES16=r4, @ANYBLOB="01002abf7001ffdbdf251400000018000180140002006e657464657673696d300000000000000800040008000000"], 0x34}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) 99.593926ms ago: executing program 7 (id=4041): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) close(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) syz_open_pts(r0, 0x2000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x3fff, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x1000, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x200004}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x60b, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x4}, {0x0, 0x3, 0x1, 0x7437ec78, 0x2, 0x53f9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x7fffffff}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0xffc, 0x20009c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x1, 0x1000007, 0x5, 0x6, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x7f, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xff8, 0xc}, {0x6, 0x6, 0x1ff, 0xb, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x7, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x1ffffffe}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0x8, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x7ffc, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0xe}, {0x8, 0x2, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x802, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x80000009}, {0x9, 0x0, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x10, 0x1, 0x1, 0x5, 0x96e, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x8}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x9}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff001, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0xfed, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x7fd, 0x200, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0x3, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x1000, 0x9, 0x9, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e11, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x8}, {0x7ff, 0x9, 0x9, 0x6, 0x9, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x4}, {}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef, 0x1}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 1.471592ms ago: executing program 4 (id=4033): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_SET_PHYS(r2, 0x4004556c, &(0x7f0000000040)='syz1\x00') r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804) 0s ago: executing program 7 (id=4035): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x8, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='romfs\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000200)={'raw\x00', 0x0, [0x1, 0x5, 0x7fffffff, 0x4]}, &(0x7f0000000180)=0x54) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0xe000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r9, &(0x7f0000000180)='0', 0x1) write(r9, &(0x7f00000001a0)='1', 0x1) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004e00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x4, 0x4}, {}, {0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) kernel console output (not intermixed with test programs): e_1 [ 638.773157][T17895] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3403'. [ 639.448962][ T5742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 639.459572][ T5742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 639.462887][ T5742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 639.467024][ T5742] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 639.469912][ T5742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 640.668521][ T12] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.802102][ T12] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.063577][ T12] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.313617][ T12] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.656255][T17912] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.664781][ T5099] Bluetooth: hci4: command tx timeout [ 641.669619][T17912] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.677764][T17912] bridge_slave_0: entered allmulticast mode [ 641.689277][T17912] bridge_slave_0: entered promiscuous mode [ 641.704238][T17912] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.713200][T17912] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.721805][T17912] bridge_slave_1: entered allmulticast mode [ 641.730283][T17912] bridge_slave_1: entered promiscuous mode [ 641.848889][T17956] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3414'. [ 642.263795][T17964] program syz.9.3415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 642.443787][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.672172][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.703496][ T12] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 642.715971][ T12] bond0 (unregistering): Released all slaves [ 642.785309][ T5452] 8021q: adding VLAN 0 to HW filter on device eth25 [ 642.798656][T17912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.809178][T17912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.902109][ T12] tipc: Disabling bearer [ 642.910022][ T12] tipc: Left network mode [ 642.913773][T17912] team0: Port device team_slave_0 added [ 642.935701][T17912] team0: Port device team_slave_1 added [ 642.996912][T17912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.000768][T17912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.008336][T17912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.014546][T17912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.016686][T17912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.025630][T17912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.047774][T17912] hsr_slave_0: entered promiscuous mode [ 643.049996][T17912] hsr_slave_1: entered promiscuous mode [ 643.052034][T17912] debugfs: 'hsr0' already exists in 'hsr' [ 643.054130][T17912] Cannot create hsr debugfs directory [ 643.173761][ T5452] 8021q: adding VLAN 0 to HW filter on device eth26 [ 643.269720][ T12] hsr_slave_0: left promiscuous mode [ 643.274949][ T12] hsr_slave_1: left promiscuous mode [ 643.278438][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.280846][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.284825][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.287254][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.297429][ T12] veth1_macvtap: left promiscuous mode [ 643.299479][ T12] veth0_macvtap: left promiscuous mode [ 643.301258][ T12] veth1_vlan: left promiscuous mode [ 643.303005][ T12] veth0_vlan: left promiscuous mode [ 643.598975][ T12] team0 (unregistering): Port device team_slave_1 removed [ 643.610893][ T12] team0 (unregistering): Port device team_slave_0 removed [ 643.754109][ T5452] 8021q: adding VLAN 0 to HW filter on device eth27 [ 643.894595][ T5099] Bluetooth: hci4: command tx timeout [ 644.367187][T17912] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 644.371151][ T12] IPVS: stop unused estimator thread 0... [ 644.375527][T17912] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 644.379524][T17912] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 644.385378][T17912] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 644.389438][T17912] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 644.394230][T17912] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 644.397148][T17912] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 644.401308][T17912] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 644.451938][T17912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.470228][T17912] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.477303][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.479462][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.488648][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.490705][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.752205][T17912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.902414][T17912] veth0_vlan: entered promiscuous mode [ 644.907528][T17912] veth1_vlan: entered promiscuous mode [ 644.925532][T17912] veth0_macvtap: entered promiscuous mode [ 644.929597][T17912] veth1_macvtap: entered promiscuous mode [ 644.941996][T17912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.948319][T17912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.997423][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.006296][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.013754][ T7996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.022438][ T7996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.037466][T15263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.039934][ T7777] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.040386][T15263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.042934][ T7777] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.267682][ T5099] Bluetooth: hci4: command tx timeout [ 647.713814][T18056] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3425'. [ 648.491542][ T5099] Bluetooth: hci4: command tx timeout [ 649.499876][T18090] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3437'. [ 654.950971][T18182] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3465'. [ 655.161541][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 657.135888][T18200] program syz.5.3469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 657.807014][T18214] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3474'. [ 658.548482][T18227] program syz.7.3478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 659.567257][T18247] program syz.2.3483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 660.105022][T18249] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3484'. [ 661.672623][T18280] netlink: 156 bytes leftover after parsing attributes in process `syz.9.3495'. [ 661.909794][T18287] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 661.912778][T18287] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 662.366029][T18291] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 662.821913][T18292] program syz.9.3497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 662.854147][ T5742] Bluetooth: hci2: command 0x0406 tx timeout [ 662.883778][T18292] syz0: rxe_newlink: already configured on bond_slave_1 [ 663.305287][T18306] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3504'. [ 665.751875][T18342] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3514'. [ 665.771545][T18346] FAULT_INJECTION: forcing a failure. [ 665.771545][T18346] name failslab, interval 1, probability 10, space 0, times 0 [ 665.775616][T18346] CPU: 3 UID: 0 PID: 18346 Comm: syz.5.3517 Tainted: G L syzkaller #0 PREEMPT(full) [ 665.775634][T18346] Tainted: [L]=SOFTLOCKUP [ 665.775638][T18346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 665.775645][T18346] Call Trace: [ 665.775650][T18346] [ 665.775655][T18346] dump_stack_lvl+0x100/0x190 [ 665.775677][T18346] should_fail_ex.cold+0x5/0xa [ 665.775694][T18346] should_failslab+0xc2/0x120 [ 665.775706][T18346] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 665.775725][T18346] ? __alloc_skb+0x5b7/0x710 [ 665.775736][T18346] ? __alloc_skb+0x140/0x710 [ 665.775748][T18346] __alloc_skb+0x140/0x710 [ 665.775758][T18346] ? __alloc_skb+0x5b7/0x710 [ 665.775768][T18346] ? __pfx___alloc_skb+0x10/0x10 [ 665.775782][T18346] netlink_alloc_large_skb+0x69/0x150 [ 665.775800][T18346] netlink_sendmsg+0x680/0xda0 [ 665.775818][T18346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 665.775835][T18346] ? apparmor_socket_sendmsg+0x15b/0x270 [ 665.775853][T18346] ____sys_sendmsg+0xa4d/0xbe0 [ 665.775868][T18346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 665.775885][T18346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 665.775904][T18346] ___sys_sendmsg+0x190/0x1e0 [ 665.775921][T18346] ? __pfx____sys_sendmsg+0x10/0x10 [ 665.775942][T18346] ? find_held_lock+0x2b/0x80 [ 665.775967][T18346] __sys_sendmsg+0x160/0x210 [ 665.775979][T18346] ? __pfx___sys_sendmsg+0x10/0x10 [ 665.775994][T18346] ? __pfx_ksys_write+0x10/0x10 [ 665.776011][T18346] __do_fast_syscall_32+0x13a/0x8b0 [ 665.776022][T18346] ? lockdep_hardirqs_on+0x7d/0x110 [ 665.776038][T18346] do_fast_syscall_32+0x32/0x70 [ 665.776049][T18346] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 665.776064][T18346] RIP: 0023:0xf7fd2fec [ 665.776078][T18346] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 665.776084][T18346] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 665.776095][T18346] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 665.776102][T18346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 665.776108][T18346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 665.776114][T18346] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 665.776121][T18346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 665.776134][T18346] [ 667.810092][T18357] program syz.7.3516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 667.881265][T18365] program syz.5.3519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 668.319226][T18357] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 668.331827][ T5742] Bluetooth: hci1: command 0x0406 tx timeout [ 668.618795][T18377] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3526'. [ 668.707497][T18381] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3535'. [ 669.863872][T18395] program syz.2.3529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 670.246596][T18401] FAULT_INJECTION: forcing a failure. [ 670.246596][T18401] name failslab, interval 1, probability 10, space 0, times 0 [ 670.252410][T18401] CPU: 3 UID: 0 PID: 18401 Comm: syz.9.3532 Tainted: G L syzkaller #0 PREEMPT(full) [ 670.252439][T18401] Tainted: [L]=SOFTLOCKUP [ 670.252446][T18401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 670.252458][T18401] Call Trace: [ 670.252465][T18401] [ 670.252473][T18401] dump_stack_lvl+0x100/0x190 [ 670.252503][T18401] should_fail_ex.cold+0x5/0xa [ 670.252527][T18401] should_failslab+0xc2/0x120 [ 670.252548][T18401] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 670.252576][T18401] ? __alloc_skb+0x5b7/0x710 [ 670.252595][T18401] ? __alloc_skb+0x140/0x710 [ 670.252617][T18401] __alloc_skb+0x140/0x710 [ 670.252634][T18401] ? __alloc_skb+0x5b7/0x710 [ 670.252651][T18401] ? __pfx___alloc_skb+0x10/0x10 [ 670.252676][T18401] netlink_alloc_large_skb+0x69/0x150 [ 670.252705][T18401] netlink_sendmsg+0x680/0xda0 [ 670.252735][T18401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.252766][T18401] ? apparmor_socket_sendmsg+0x15b/0x270 [ 670.252795][T18401] ____sys_sendmsg+0xa4d/0xbe0 [ 670.252818][T18401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.252847][T18401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 670.252882][T18401] ___sys_sendmsg+0x190/0x1e0 [ 670.252910][T18401] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.252946][T18401] ? find_held_lock+0x2b/0x80 [ 670.252989][T18401] __sys_sendmsg+0x160/0x210 [ 670.253010][T18401] ? __pfx___sys_sendmsg+0x10/0x10 [ 670.253037][T18401] ? __pfx_ksys_write+0x10/0x10 [ 670.253071][T18401] __do_fast_syscall_32+0x13a/0x8b0 [ 670.253090][T18401] ? lockdep_hardirqs_on+0x7d/0x110 [ 670.253118][T18401] do_fast_syscall_32+0x32/0x70 [ 670.253136][T18401] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 670.253160][T18401] RIP: 0023:0xf7f33fec [ 670.253181][T18401] Code: Unable to access opcode bytes at 0xf7f33fc2. [ 670.253189][T18401] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 670.253207][T18401] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 670.253219][T18401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 670.253230][T18401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 670.253240][T18401] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 670.253251][T18401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 670.253275][T18401] [ 670.324611][T18395] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 670.372953][T18407] netlink: 'syz.9.3533': attribute type 10 has an invalid length. [ 670.376955][T18408] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3533'. [ 670.458848][T18406] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.461400][T18406] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.500648][T18406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.505469][T18406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.555319][T18406] batman_adv: batadv0: Interface deactivated: gretap1 [ 670.933638][T18406] tipc: Resetting bearer [ 670.939950][T18407] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 670.956780][ T7777] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.972125][ T7777] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.996371][ T7777] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.999216][ T7777] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.129938][T18415] netlink: 156 bytes leftover after parsing attributes in process `syz.9.3537'. [ 672.691144][T18442] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3546'. [ 672.701039][T18442] ip6gretap0: entered promiscuous mode [ 672.743256][T18444] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3547'. [ 674.639579][T18476] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3556'. [ 674.861886][T18489] program syz.7.3554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 674.869888][T18489] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 676.845041][T18493] program syz.5.3563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 676.849164][T18493] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 677.226448][T18505] FAULT_INJECTION: forcing a failure. [ 677.226448][T18505] name failslab, interval 1, probability 10, space 0, times 0 [ 677.231533][T18505] CPU: 0 UID: 0 PID: 18505 Comm: syz.9.3566 Tainted: G L syzkaller #0 PREEMPT(full) [ 677.231560][T18505] Tainted: [L]=SOFTLOCKUP [ 677.231566][T18505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 677.231577][T18505] Call Trace: [ 677.231584][T18505] [ 677.231592][T18505] dump_stack_lvl+0x100/0x190 [ 677.231619][T18505] should_fail_ex.cold+0x5/0xa [ 677.231641][T18505] should_failslab+0xc2/0x120 [ 677.231659][T18505] __kmalloc_noprof+0xfc/0x820 [ 677.231689][T18505] ? do_sys_poll+0x273/0xe90 [ 677.231713][T18505] do_sys_poll+0x273/0xe90 [ 677.231731][T18505] ? find_held_lock+0x2b/0x80 [ 677.231754][T18505] ? is_bpf_text_address+0x8a/0x1a0 [ 677.231786][T18505] ? is_bpf_text_address+0x8a/0x1a0 [ 677.231804][T18505] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 677.231842][T18505] ? __pfx_do_sys_poll+0x10/0x10 [ 677.231861][T18505] ? __kernel_text_address+0xd/0x30 [ 677.231886][T18505] ? unwind_get_return_address+0x59/0xa0 [ 677.231966][T18505] ? ksys_write+0x190/0x250 [ 677.231982][T18505] ? set_compat_user_sigmask+0x1d9/0x260 [ 677.231996][T18505] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 677.232010][T18505] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 677.232029][T18505] __ia32_compat_sys_ppoll_time32+0x2b6/0x350 [ 677.232047][T18505] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 677.232062][T18505] ? fput+0x7c/0x100 [ 677.232077][T18505] ? ksys_write+0x1ac/0x250 [ 677.232089][T18505] ? __pfx_ksys_write+0x10/0x10 [ 677.232104][T18505] __do_fast_syscall_32+0x13a/0x8b0 [ 677.232115][T18505] ? lockdep_hardirqs_on+0x7d/0x110 [ 677.232132][T18505] do_fast_syscall_32+0x32/0x70 [ 677.232142][T18505] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 677.232157][T18505] RIP: 0023:0xf7f33fec [ 677.232171][T18505] Code: Unable to access opcode bytes at 0xf7f33fc2. [ 677.232176][T18505] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000135 [ 677.232187][T18505] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 677.232194][T18505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 677.232200][T18505] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 677.232207][T18505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.232213][T18505] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 677.232226][T18505] [ 677.413713][T18515] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3570'. [ 677.458818][T18518] netlink: 156 bytes leftover after parsing attributes in process `syz.9.3579'. [ 679.827952][T18539] program syz.7.3575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 679.950382][T18534] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 679.976371][T18535] program syz.2.3577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 679.980906][T18535] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 680.079114][T18549] FAULT_INJECTION: forcing a failure. [ 680.079114][T18549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.085195][T18549] CPU: 2 UID: 0 PID: 18549 Comm: syz.5.3581 Tainted: G L syzkaller #0 PREEMPT(full) [ 680.085224][T18549] Tainted: [L]=SOFTLOCKUP [ 680.085230][T18549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 680.085241][T18549] Call Trace: [ 680.085248][T18549] [ 680.085256][T18549] dump_stack_lvl+0x100/0x190 [ 680.085283][T18549] should_fail_ex.cold+0x5/0xa [ 680.085304][T18549] _copy_from_iter+0x1f4/0x1690 [ 680.085333][T18549] ? __pfx__copy_from_iter+0x10/0x10 [ 680.085357][T18549] ? find_held_lock+0x2b/0x80 [ 680.085382][T18549] ? raw_sendmsg+0x762/0x3770 [ 680.085417][T18549] ? raw_sendmsg+0x762/0x3770 [ 680.085441][T18549] raw_sendmsg+0x16b9/0x3770 [ 680.085469][T18549] ? __pfx_raw_sendmsg+0x10/0x10 [ 680.085488][T18549] ? tomoyo_check_inet_address+0x40d/0x6d0 [ 680.085521][T18549] ? tomoyo_check_inet_address+0x42a/0x6d0 [ 680.085553][T18549] ? __pfx___might_resched+0x10/0x10 [ 680.085575][T18549] ? aa_sk_perm+0x30c/0xaa0 [ 680.085602][T18549] ? __pfx_aa_sk_perm+0x10/0x10 [ 680.085637][T18549] ? aa_sock_msg_perm.isra.0+0x103/0x1c0 [ 680.085659][T18549] ? __pfx_raw_sendmsg+0x10/0x10 [ 680.085681][T18549] inet_sendmsg+0x11c/0x140 [ 680.085710][T18549] __sys_sendto+0x453/0x4e0 [ 680.085725][T18549] ? __pfx_inet_sendmsg+0x10/0x10 [ 680.085746][T18549] ? __pfx___sys_sendto+0x10/0x10 [ 680.085778][T18549] ? fput+0x7c/0x100 [ 680.085803][T18549] ? ksys_write+0x1ac/0x250 [ 680.085825][T18549] __ia32_sys_sendto+0xdd/0x1b0 [ 680.085841][T18549] ? __do_fast_syscall_32+0xb3/0x8b0 [ 680.085858][T18549] ? lockdep_hardirqs_on+0x7d/0x110 [ 680.085882][T18549] __do_fast_syscall_32+0x13a/0x8b0 [ 680.085898][T18549] ? lockdep_hardirqs_on+0x7d/0x110 [ 680.085924][T18549] do_fast_syscall_32+0x32/0x70 [ 680.085940][T18549] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 680.085963][T18549] RIP: 0023:0xf7fd2fec [ 680.085982][T18549] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 680.085990][T18549] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 680.086006][T18549] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 680.086016][T18549] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000080000400 [ 680.086025][T18549] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 680.086034][T18549] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 680.086044][T18549] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 680.086066][T18549] [ 680.302697][T18552] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3582'. [ 682.034679][T18569] netlink: 'syz.7.3589': attribute type 2 has an invalid length. [ 682.767054][T18588] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3592'. [ 683.024227][T18597] program syz.9.3591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 683.029661][T18597] syz0: rxe_newlink: already configured on bond_slave_1 [ 683.115792][T18600] program syz.5.3593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 683.122756][T18600] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 685.567204][T18626] netlink: 156 bytes leftover after parsing attributes in process `syz.9.3601'. [ 685.708548][T18630] tipc: Started in network mode [ 685.710761][T18630] tipc: Node identity 080211000001, cluster identity 4711 [ 685.718594][T18630] tipc: Enabled bearer , priority 0 [ 685.725293][T18630] tipc: Resetting bearer [ 686.791601][T18642] program syz.7.3604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 686.966811][ T5845] tipc: Node number set to 134418688 [ 686.975521][T18642] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 687.601320][T18655] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3611'. [ 688.068392][T18667] tipc: Enabling of bearer rejected, already enabled [ 688.611237][T18675] netlink: Failed to add helper -22 [ 688.613783][T18675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.892433][T18681] pim6reg: entered allmulticast mode [ 689.330820][T18675] team0: entered allmulticast mode [ 689.333003][T18675] team_slave_0: entered allmulticast mode [ 689.335410][T18675] team_slave_1: entered allmulticast mode [ 689.338378][T18675] team0: left allmulticast mode [ 689.340372][T18675] team_slave_0: left allmulticast mode [ 689.342607][T18675] team_slave_1: left allmulticast mode [ 689.345013][T18675] pim6reg: left allmulticast mode [ 689.543559][T18691] FAULT_INJECTION: forcing a failure. [ 689.543559][T18691] name failslab, interval 1, probability 10, space 0, times 0 [ 689.548443][T18691] CPU: 3 UID: 0 PID: 18691 Comm: syz.7.3620 Tainted: G L syzkaller #0 PREEMPT(full) [ 689.548462][T18691] Tainted: [L]=SOFTLOCKUP [ 689.548466][T18691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 689.548473][T18691] Call Trace: [ 689.548477][T18691] [ 689.548481][T18691] dump_stack_lvl+0x100/0x190 [ 689.548501][T18691] should_fail_ex.cold+0x5/0xa [ 689.548516][T18691] should_failslab+0xc2/0x120 [ 689.548527][T18691] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 689.548545][T18691] ? __alloc_skb+0x5b7/0x710 [ 689.548556][T18691] ? __alloc_skb+0x140/0x710 [ 689.548568][T18691] __alloc_skb+0x140/0x710 [ 689.548578][T18691] ? __alloc_skb+0x5b7/0x710 [ 689.548588][T18691] ? __pfx___alloc_skb+0x10/0x10 [ 689.548602][T18691] netlink_alloc_large_skb+0x69/0x150 [ 689.548620][T18691] netlink_sendmsg+0x680/0xda0 [ 689.548637][T18691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.548655][T18691] ? apparmor_socket_sendmsg+0x15b/0x270 [ 689.548677][T18691] ____sys_sendmsg+0xa4d/0xbe0 [ 689.548692][T18691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.548708][T18691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 689.548728][T18691] ___sys_sendmsg+0x190/0x1e0 [ 689.548744][T18691] ? __pfx____sys_sendmsg+0x10/0x10 [ 689.548765][T18691] ? find_held_lock+0x2b/0x80 [ 689.548789][T18691] __sys_sendmsg+0x160/0x210 [ 689.548801][T18691] ? __pfx___sys_sendmsg+0x10/0x10 [ 689.548816][T18691] ? __pfx_ksys_write+0x10/0x10 [ 689.548832][T18691] __do_fast_syscall_32+0x13a/0x8b0 [ 689.548843][T18691] ? lockdep_hardirqs_on+0x7d/0x110 [ 689.548860][T18691] do_fast_syscall_32+0x32/0x70 [ 689.548870][T18691] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 689.548884][T18691] RIP: 0023:0xf7f02fec [ 689.548899][T18691] Code: Unable to access opcode bytes at 0xf7f02fc2. [ 689.548904][T18691] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 689.548915][T18691] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 689.548922][T18691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 689.548928][T18691] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 689.548935][T18691] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 689.548941][T18691] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 689.548954][T18691] [ 689.660022][T18693] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3621'. [ 690.259225][T18705] program syz.7.3622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 690.266482][T18705] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 690.838763][T18713] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 691.355639][T18728] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3631'. [ 691.748161][ T5099] Bluetooth: hci2: unexpected event for opcode 0x100c [ 693.400545][T17884] bond0: (slave syz_tun): Releasing backup interface [ 693.498364][T18760] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 693.545084][T16060] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.655544][T16060] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.683285][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 693.689183][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 693.693511][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 693.697254][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 693.700166][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 693.706847][T18760] md: could not open device unknown-block(1,0). [ 693.771929][T16060] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.800413][T18762] md: could not open device unknown-block(1,1). [ 693.854219][T18760] md: could not open device unknown-block(1,3). [ 693.878879][T16060] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.123353][T18780] FAULT_INJECTION: forcing a failure. [ 694.123353][T18780] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 694.131052][T18780] CPU: 1 UID: 0 PID: 18780 Comm: syz.9.3647 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.131081][T18780] Tainted: [L]=SOFTLOCKUP [ 694.131087][T18780] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 694.131098][T18780] Call Trace: [ 694.131104][T18780] [ 694.131112][T18780] dump_stack_lvl+0x100/0x190 [ 694.131141][T18780] should_fail_ex.cold+0x5/0xa [ 694.131157][T18780] ? prepare_alloc_pages+0x16d/0x5f0 [ 694.131176][T18780] should_fail_alloc_page+0xeb/0x140 [ 694.131193][T18780] prepare_alloc_pages+0x1f0/0x5f0 [ 694.131211][T18780] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 694.131242][T18780] ? __lock_acquire+0x4c5/0x1ec0 [ 694.131260][T18780] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 694.131287][T18780] ? lock_acquire+0x1b9/0x370 [ 694.131303][T18780] ? find_held_lock+0x2b/0x80 [ 694.131331][T18780] ? page_table_check_set+0x31e/0x580 [ 694.131357][T18780] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 694.131403][T18780] ? policy_nodemask+0xed/0x4f0 [ 694.131420][T18780] alloc_pages_mpol+0x1fb/0x540 [ 694.131436][T18780] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 694.131450][T18780] ? find_held_lock+0x2b/0x80 [ 694.131491][T18780] ? find_held_lock+0x2b/0x80 [ 694.131512][T18780] ? filemap_map_pages+0x112d/0x1f80 [ 694.131549][T18780] folio_alloc_mpol_noprof+0x36/0x260 [ 694.131568][T18780] vma_alloc_folio_noprof+0xed/0x1d0 [ 694.131585][T18780] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 694.131601][T18780] ? rcu_read_unlock+0x2d/0xb0 [ 694.131620][T18780] ? rcu_read_unlock+0x2d/0xb0 [ 694.131644][T18780] do_wp_page+0x1ee1/0x4350 [ 694.131667][T18780] ? __pfx_do_wp_page+0x10/0x10 [ 694.131684][T18780] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 694.131708][T18780] __handle_mm_fault+0x1ab6/0x2a00 [ 694.131732][T18780] ? reacquire_held_locks+0xce/0x1e0 [ 694.131748][T18780] ? __pfx___handle_mm_fault+0x10/0x10 [ 694.131769][T18780] ? lock_vma_under_rcu+0x17c/0x590 [ 694.131801][T18780] handle_mm_fault+0x37b/0xa30 [ 694.131824][T18780] do_user_addr_fault+0x59c/0x12f0 [ 694.131853][T18780] exc_page_fault+0x6f/0xd0 [ 694.131876][T18780] asm_exc_page_fault+0x26/0x30 [ 694.131892][T18780] RIP: 0023:0xf7136a92 [ 694.131906][T18780] Code: c7 8d 15 29 00 56 53 83 ec 1c 8b 6c 24 30 8b 55 1c 65 a1 68 00 00 00 39 c2 0f 84 11 01 00 00 80 7d 18 02 74 2b b8 08 00 00 00 0f c1 45 00 83 c0 08 85 c0 0f 88 0e 01 00 00 a8 01 75 7a 31 d2 [ 694.131920][T18780] RSP: 002b:00000000f53f5310 EFLAGS: 00010293 [ 694.131933][T18780] RAX: 0000000000000008 RBX: 00000000f73c7ff4 RCX: 00000000f71ff5bc [ 694.131942][T18780] RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 00000000f73c7ff4 [ 694.131951][T18780] RBP: 00000000f7f26ec0 R08: 0000000000000000 R09: 0000000000000000 [ 694.131960][T18780] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 694.131969][T18780] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 694.131989][T18780] [ 694.254234][T16060] bridge_slave_1: left allmulticast mode [ 694.256648][T16060] bridge_slave_1: left promiscuous mode [ 694.264678][T16060] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.268305][T18780] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 694.279711][T16060] bridge_slave_0: left allmulticast mode [ 694.282458][T16060] bridge_slave_0: left promiscuous mode [ 694.286078][T16060] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.466175][T16060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.471554][T16060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.480533][T16060] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 694.484086][T16060] bond0 (unregistering): Released all slaves [ 694.496290][ T5452] 8021q: adding VLAN 0 to HW filter on device eth25 [ 694.588858][T16060] tipc: Disabling bearer [ 694.599276][T16060] tipc: Left network mode [ 694.696058][T18764] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.698559][T18764] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.700855][T18764] bridge_slave_0: entered allmulticast mode [ 694.734714][T18764] bridge_slave_0: entered promiscuous mode [ 694.882465][T18764] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.891031][T18764] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.901170][T18764] bridge_slave_1: entered allmulticast mode [ 694.905111][T18764] bridge_slave_1: entered promiscuous mode [ 694.910026][ T5452] 8021q: adding VLAN 0 to HW filter on device eth26 [ 694.937902][T18764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.946488][T18764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.057462][T18764] team0: Port device team_slave_0 added [ 695.078614][T18764] team0: Port device team_slave_1 added [ 695.108006][T18764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.110499][T18764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.121916][T18764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.128771][T18764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.131291][T18764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.140136][T18764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.166750][T18764] hsr_slave_0: entered promiscuous mode [ 695.170231][T18764] hsr_slave_1: entered promiscuous mode [ 695.173545][T18764] debugfs: 'hsr0' already exists in 'hsr' [ 695.175825][T18764] Cannot create hsr debugfs directory [ 695.501146][ T5452] 8021q: adding VLAN 0 to HW filter on device eth27 [ 695.765668][T16060] hsr_slave_0: left promiscuous mode [ 695.775581][T16060] hsr_slave_1: left promiscuous mode [ 695.778520][T16060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.780925][T16060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.784027][T16060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.786456][T16060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.793923][T16060] veth1_macvtap: left promiscuous mode [ 695.795743][T16060] veth0_macvtap: left promiscuous mode [ 695.797637][T16060] veth1_vlan: left promiscuous mode [ 695.799416][T16060] veth0_vlan: left promiscuous mode [ 695.935654][T16060] team0 (unregistering): Port device team_slave_1 removed [ 695.942945][T16060] team0 (unregistering): Port device team_slave_0 removed [ 695.949226][ T5742] Bluetooth: hci0: command tx timeout [ 696.021828][ T5452] 8021q: adding VLAN 0 to HW filter on device eth28 [ 696.553416][T16060] IPVS: stop unused estimator thread 0... [ 696.753661][T18764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 696.833671][T18764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 696.837193][T18764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 696.843982][T18874] Bluetooth: MGMT ver 1.23 [ 696.852880][T18874] netlink: 156 bytes leftover after parsing attributes in process `syz.9.3658'. [ 696.860310][T18863] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 696.861681][T18764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 696.872175][T18764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 696.881182][T18764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 696.886530][T18764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 696.912320][T18764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 696.978062][T18764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.989170][T18764] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.994408][T15263] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.996711][T15263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.010960][T15263] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.013908][T15263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.028225][T18863] md: could not open device unknown-block(1,0). [ 697.103251][T18863] md: could not open device unknown-block(1,1). [ 697.190516][T18892] md: could not open device unknown-block(1,3). [ 697.304561][T18912] FAULT_INJECTION: forcing a failure. [ 697.304561][T18912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.311172][T18912] CPU: 2 UID: 0 PID: 18912 Comm: syz.5.3661 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.311192][T18912] Tainted: [L]=SOFTLOCKUP [ 697.311196][T18912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 697.311203][T18912] Call Trace: [ 697.311218][T18912] [ 697.311224][T18912] dump_stack_lvl+0x100/0x190 [ 697.311245][T18912] should_fail_ex.cold+0x5/0xa [ 697.311259][T18912] _copy_from_user+0x2e/0xd0 [ 697.311275][T18912] move_addr_to_kernel+0x65/0x170 [ 697.311296][T18912] __sys_connect+0xb5/0x170 [ 697.311312][T18912] ? __pfx___sys_connect+0x10/0x10 [ 697.311328][T18912] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 697.311351][T18912] ? ksys_write+0x1ac/0x250 [ 697.311366][T18912] ? __pfx_ksys_write+0x10/0x10 [ 697.311380][T18912] __ia32_sys_connect+0x71/0xb0 [ 697.311396][T18912] ? lockdep_hardirqs_on+0x7d/0x110 [ 697.311412][T18912] __do_fast_syscall_32+0x13a/0x8b0 [ 697.311422][T18912] ? lockdep_hardirqs_on+0x7d/0x110 [ 697.311438][T18912] do_fast_syscall_32+0x32/0x70 [ 697.311449][T18912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 697.311463][T18912] RIP: 0023:0xf7fd2fec [ 697.311481][T18912] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 697.311486][T18912] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 697.311498][T18912] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 697.311505][T18912] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 697.311511][T18912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 697.311518][T18912] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 697.311524][T18912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 697.311537][T18912] [ 697.376791][T18764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.395567][T18764] veth0_vlan: entered promiscuous mode [ 697.401331][T18764] veth1_vlan: entered promiscuous mode [ 697.428639][T18764] veth0_macvtap: entered promiscuous mode [ 697.432753][T18764] veth1_macvtap: entered promiscuous mode [ 697.443629][T18764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.453485][T18764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.660100][ T7777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.666722][ T7777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.687770][T18927] program syz.5.3663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 697.692999][T18927] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 697.695488][ T7996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.701370][ T7777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.708424][ T7996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.714698][T16060] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.776723][ T7996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.782405][ T7996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.851875][T18937] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3667'. [ 697.923638][T18941] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3668'. [ 697.931826][T18941] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3668'. [ 697.988751][T18946] tipc: Started in network mode [ 697.990766][T18946] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 697.993281][T18946] tipc: Enabled bearer , priority 0 [ 698.160342][ T5742] Bluetooth: hci0: command tx timeout [ 699.087767][T18976] FAULT_INJECTION: forcing a failure. [ 699.087767][T18976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.092759][T18976] CPU: 0 UID: 0 PID: 18976 Comm: syz.5.3674 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.092779][T18976] Tainted: [L]=SOFTLOCKUP [ 699.092783][T18976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 699.092789][T18976] Call Trace: [ 699.092794][T18976] [ 699.092799][T18976] dump_stack_lvl+0x100/0x190 [ 699.092819][T18976] should_fail_ex.cold+0x5/0xa [ 699.092834][T18976] _copy_from_iter+0x1f4/0x1690 [ 699.092853][T18976] ? __pfx__copy_from_iter+0x10/0x10 [ 699.092866][T18976] ? trace_kmalloc+0xeb/0x110 [ 699.092877][T18976] ? __kasan_kmalloc+0xaa/0xb0 [ 699.092895][T18976] ? __kmalloc_noprof+0x345/0x820 [ 699.092912][T18976] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 699.092932][T18976] kernfs_fop_write_iter+0x186/0x5f0 [ 699.092946][T18976] vfs_write+0x6af/0x1050 [ 699.092959][T18976] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 699.092972][T18976] ? __pfx_vfs_write+0x10/0x10 [ 699.092983][T18976] ? find_held_lock+0x2b/0x80 [ 699.093009][T18976] ksys_write+0x12a/0x250 [ 699.093022][T18976] ? __pfx_ksys_write+0x10/0x10 [ 699.093034][T18976] ? ksys_write+0x1ac/0x250 [ 699.093046][T18976] ? __pfx_ksys_write+0x10/0x10 [ 699.093061][T18976] __do_fast_syscall_32+0x13a/0x8b0 [ 699.093072][T18976] ? lockdep_hardirqs_on+0x7d/0x110 [ 699.093090][T18976] do_fast_syscall_32+0x32/0x70 [ 699.093103][T18976] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 699.093118][T18976] RIP: 0023:0xf7fd2fec [ 699.093132][T18976] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 699.093137][T18976] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 699.093148][T18976] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800003c0 [ 699.093154][T18976] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 699.093160][T18976] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 699.093166][T18976] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 699.093173][T18976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 699.093187][T18976] [ 699.197943][T12734] tipc: Node number set to 43690 [ 699.218929][T18982] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3675'. [ 699.226041][T18984] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3676'. [ 699.240987][T18984] netlink: 'syz.5.3676': attribute type 6 has an invalid length. [ 699.282251][T18984] netlink: 'syz.5.3676': attribute type 5 has an invalid length. [ 699.284750][T18984] netlink: 'syz.5.3676': attribute type 4 has an invalid length. [ 699.851900][T19020] FAULT_INJECTION: forcing a failure. [ 699.851900][T19020] name failslab, interval 1, probability 10, space 0, times 0 [ 699.866331][T19020] CPU: 3 UID: 0 PID: 19020 Comm: syz.3.3686 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.866351][T19020] Tainted: [L]=SOFTLOCKUP [ 699.866355][T19020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 699.866363][T19020] Call Trace: [ 699.866367][T19020] [ 699.866373][T19020] dump_stack_lvl+0x100/0x190 [ 699.866392][T19020] should_fail_ex.cold+0x5/0xa [ 699.866406][T19020] should_failslab+0xc2/0x120 [ 699.866419][T19020] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 699.866443][T19020] ? sock_alloc_inode+0x26/0x2c0 [ 699.866458][T19020] ? __pfx_sock_alloc_inode+0x10/0x10 [ 699.866472][T19020] sock_alloc_inode+0x26/0x2c0 [ 699.866485][T19020] ? __pfx_sock_alloc_inode+0x10/0x10 [ 699.866498][T19020] alloc_inode+0x68/0x250 [ 699.866510][T19020] sock_alloc+0x44/0x280 [ 699.866521][T19020] ? security_socket_create+0x7f/0x250 [ 699.866536][T19020] __sock_create+0xc2/0x860 [ 699.866553][T19020] __sys_socket+0x14d/0x260 [ 699.866569][T19020] ? __pfx___sys_socket+0x10/0x10 [ 699.866588][T19020] __ia32_compat_sys_socketcall+0x65b/0x770 [ 699.866615][T19020] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 699.866633][T19020] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 699.866647][T19020] ? __fget_files+0x21f/0x3d0 [ 699.866665][T19020] ? __pfx_ksys_write+0x10/0x10 [ 699.866681][T19020] __do_fast_syscall_32+0x13a/0x8b0 [ 699.866692][T19020] ? lockdep_hardirqs_on+0x7d/0x110 [ 699.866709][T19020] do_fast_syscall_32+0x32/0x70 [ 699.866720][T19020] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 699.866741][T19020] RIP: 0023:0xf6fdefec [ 699.866762][T19020] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 699.866771][T19020] RSP: 002b:00000000f53cc4a0 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 699.866790][T19020] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f53cc4b0 [ 699.866802][T19020] RDX: 00000000f73a7ff4 RSI: 0000000000000000 RDI: 00000000f73a7ff4 [ 699.866808][T19020] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 699.866814][T19020] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 699.866821][T19020] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 699.866834][T19020] [ 699.866842][T19020] socket: no more sockets [ 699.998634][T19023] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3687'. [ 700.163073][T19028] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.3689' sets config #1 [ 700.170083][T19028] ip6gre1: entered promiscuous mode [ 700.171960][T19028] ip6gre1: entered allmulticast mode [ 700.383417][ T5742] Bluetooth: hci0: command tx timeout [ 700.663657][T19047] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3696'. [ 700.699321][T19049] FAULT_INJECTION: forcing a failure. [ 700.699321][T19049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.703591][T19049] CPU: 3 UID: 0 PID: 19049 Comm: syz.7.3697 Tainted: G L syzkaller #0 PREEMPT(full) [ 700.703612][T19049] Tainted: [L]=SOFTLOCKUP [ 700.703616][T19049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 700.703623][T19049] Call Trace: [ 700.703627][T19049] [ 700.703632][T19049] dump_stack_lvl+0x100/0x190 [ 700.703651][T19049] should_fail_ex.cold+0x5/0xa [ 700.703665][T19049] _copy_from_user+0x2e/0xd0 [ 700.703681][T19049] __sys_bpf+0x2f5/0x4e80 [ 700.703700][T19049] ? __pfx___sys_bpf+0x10/0x10 [ 700.703715][T19049] ? find_held_lock+0x2b/0x80 [ 700.703730][T19049] ? get_pid_task+0xfc/0x250 [ 700.703746][T19049] ? get_pid_task+0xfc/0x250 [ 700.703764][T19049] ? proc_fail_nth_write+0x9f/0x220 [ 700.703778][T19049] ? find_held_lock+0x2b/0x80 [ 700.703796][T19049] ? rcu_read_lock_any_held+0x6a/0x90 [ 700.703813][T19049] ? find_held_lock+0x2b/0x80 [ 700.703827][T19049] ? ksys_write+0x190/0x250 [ 700.703840][T19049] ? ksys_write+0x190/0x250 [ 700.703862][T19049] ? fput+0x7c/0x100 [ 700.703882][T19049] ? __ia32_sys_bpf+0xcc/0x170 [ 700.703901][T19049] __ia32_sys_bpf+0xcc/0x170 [ 700.703922][T19049] ? __do_fast_syscall_32+0xb3/0x8b0 [ 700.703939][T19049] __do_fast_syscall_32+0x13a/0x8b0 [ 700.703953][T19049] ? lockdep_hardirqs_on+0x7d/0x110 [ 700.703980][T19049] do_fast_syscall_32+0x32/0x70 [ 700.703996][T19049] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 700.704019][T19049] RIP: 0023:0xf7f02fec [ 700.704042][T19049] Code: Unable to access opcode bytes at 0xf7f02fc2. [ 700.704048][T19049] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 700.704060][T19049] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800003c0 [ 700.704067][T19049] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 700.704074][T19049] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 700.704080][T19049] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 700.704086][T19049] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 700.704100][T19049] [ 700.868870][ T5742] Bluetooth: hci1: unexpected event for opcode 0x100c [ 702.072412][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 702.081303][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 702.087089][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 702.090924][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 702.095343][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 702.495371][T16060] bridge_slave_1: left allmulticast mode [ 702.497227][T16060] bridge_slave_1: left promiscuous mode [ 702.499604][T16060] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.503880][T16060] bridge_slave_0: left allmulticast mode [ 702.505695][T16060] bridge_slave_0: left promiscuous mode [ 702.507644][T16060] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.605632][ T5099] Bluetooth: hci0: command tx timeout [ 702.642207][T16060] batman_adv: batadv0: Removing interface: gretap1 [ 702.674806][T16060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.680151][T16060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.687737][T16060] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 702.693720][T16060] bond0 (unregistering): Released all slaves [ 702.779503][T19070] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.781807][T19070] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.784107][T19070] bridge_slave_0: entered allmulticast mode [ 702.786762][T19070] bridge_slave_0: entered promiscuous mode [ 702.790287][T19070] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.792629][T19070] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.794921][T19070] bridge_slave_1: entered allmulticast mode [ 702.797611][T19070] bridge_slave_1: entered promiscuous mode [ 702.806919][T16060] tipc: Disabling bearer [ 702.809773][T16060] tipc: Left network mode [ 702.823791][T19070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.858568][T19070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.878006][T19097] FAULT_INJECTION: forcing a failure. [ 702.878006][T19097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.879409][T19070] team0: Port device team_slave_0 added [ 702.882534][T19097] CPU: 3 UID: 0 PID: 19097 Comm: syz.5.3706 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.882560][T19097] Tainted: [L]=SOFTLOCKUP [ 702.882567][T19097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 702.882577][T19097] Call Trace: [ 702.882584][T19097] [ 702.882591][T19097] dump_stack_lvl+0x100/0x190 [ 702.882619][T19097] should_fail_ex.cold+0x5/0xa [ 702.882641][T19097] _copy_from_user+0x2e/0xd0 [ 702.882663][T19097] do_set_thread_area+0x9c/0x620 [ 702.882708][T19097] ? __pfx_do_set_thread_area+0x10/0x10 [ 702.882738][T19097] arch_ptrace+0x36e/0x6a0 [ 702.882761][T19097] compat_arch_ptrace+0x241/0x3a0 [ 702.882784][T19097] ? __pfx_compat_arch_ptrace+0x10/0x10 [ 702.882813][T19097] __ia32_compat_sys_ptrace+0x249/0x2c0 [ 702.882842][T19097] __do_fast_syscall_32+0x13a/0x8b0 [ 702.882859][T19097] ? lockdep_hardirqs_on+0x7d/0x110 [ 702.882884][T19097] do_fast_syscall_32+0x32/0x70 [ 702.882900][T19097] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 702.882921][T19097] RIP: 0023:0xf7fd2fec [ 702.882935][T19097] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 702.882951][T19097] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 000000000000001a [ 702.882974][T19097] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000000000225 [ 702.882985][T19097] RDX: 000000000000000c RSI: 0000000080000000 RDI: 0000000000000000 [ 702.882995][T19097] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 702.883005][T19097] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 702.883015][T19097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 702.883037][T19097] [ 702.948857][T19070] team0: Port device team_slave_1 added [ 702.956000][ T5452] 8021q: adding VLAN 0 to HW filter on device eth2 [ 702.986198][T19070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.988404][T19070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.998345][T19070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.006162][T19070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.009256][T19070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.022982][T19070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.068363][T19108] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3709'. [ 703.089246][T19070] hsr_slave_0: entered promiscuous mode [ 703.092582][T19070] hsr_slave_1: entered promiscuous mode [ 703.095511][T19070] debugfs: 'hsr0' already exists in 'hsr' [ 703.101109][T19070] Cannot create hsr debugfs directory [ 703.395380][T16060] hsr_slave_0: left promiscuous mode [ 703.400253][T16060] hsr_slave_1: left promiscuous mode [ 703.402474][T16060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.405036][T16060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.545478][T16060] team0 (unregistering): Port device team_slave_1 removed [ 703.564048][T16060] team0 (unregistering): Port device team_slave_0 removed [ 703.571997][ T7998] smc: removing ib device syz0 [ 703.626617][ T5452] 8021q: adding VLAN 0 to HW filter on device eth3 [ 703.644301][ T7998] smbdirect: ib_dev[syz0] removed [ 703.833085][ T5452] 8021q: adding VLAN 0 to HW filter on device eth4 [ 704.044582][ T5452] 8021q: adding VLAN 0 to HW filter on device eth5 [ 704.315519][ T5099] Bluetooth: hci1: command tx timeout [ 704.494205][T16060] IPVS: stop unused estimator thread 0... [ 705.146551][T19190] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3717'. [ 705.154769][T19070] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 705.159840][T19070] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 705.162809][T19070] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 705.166825][T19070] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 705.170006][T19070] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 705.186657][T19070] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 705.190582][T19070] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 705.212415][T19070] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 705.269751][T19070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.280792][T19070] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.296128][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.298793][ T7998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.307185][ T7998] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.309539][ T7998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.336472][T19070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 705.523355][T19203] netlink: zone id is out of range [ 705.525477][T19203] netlink: zone id is out of range [ 705.527655][T19203] netlink: zone id is out of range [ 705.529922][T19203] netlink: zone id is out of range [ 705.532376][T19203] netlink: zone id is out of range [ 705.534627][T19203] netlink: zone id is out of range [ 705.536600][T19203] netlink: zone id is out of range [ 705.538972][T19203] netlink: zone id is out of range [ 705.541043][T19203] netlink: zone id is out of range [ 705.543271][T19203] netlink: zone id is out of range [ 705.677253][T19070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.854758][T19070] veth0_vlan: entered promiscuous mode [ 705.861617][T19070] veth1_vlan: entered promiscuous mode [ 705.886014][T19070] veth0_macvtap: entered promiscuous mode [ 705.896300][T19070] veth1_macvtap: entered promiscuous mode [ 705.904580][T19070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.909253][T19070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.951737][T19252] program syz.7.3721 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 706.004019][T16060] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.011735][T16060] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.016115][T16060] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.019437][T16060] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.132043][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.132197][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.134900][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.141986][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.540039][ T5099] Bluetooth: hci1: command tx timeout [ 706.560008][T19252] infiniband syz0: set active [ 706.562006][T19252] infiniband syz0: added bond_slave_1 [ 706.663004][T19252] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 706.667685][T19252] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 706.672902][T19252] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 706.731378][T19252] RDS/IB: syz0: added [ 706.732724][T19252] smc: adding ib device syz0 with port count 1 [ 706.734716][T19252] smc: ib device syz0 port 1 has no pnetid [ 706.740054][T19266] FAULT_INJECTION: forcing a failure. [ 706.740054][T19266] name failslab, interval 1, probability 10, space 0, times 0 [ 706.745089][T19266] CPU: 3 UID: 0 PID: 19266 Comm: syz.5.3722 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.745108][T19266] Tainted: [L]=SOFTLOCKUP [ 706.745112][T19266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 706.745118][T19266] Call Trace: [ 706.745123][T19266] [ 706.745127][T19266] dump_stack_lvl+0x100/0x190 [ 706.745147][T19266] should_fail_ex.cold+0x5/0xa [ 706.745161][T19266] should_failslab+0xc2/0x120 [ 706.745173][T19266] kmem_cache_alloc_noprof+0x91/0x6a0 [ 706.745189][T19266] ? __lock_acquire+0x4c5/0x1ec0 [ 706.745203][T19266] ? can_rx_register+0x1ef/0x700 [ 706.745234][T19266] can_rx_register+0x1ef/0x700 [ 706.745249][T19266] ? __pfx_isotp_rcv+0x10/0x10 [ 706.745264][T19266] ? __pfx_can_rx_register+0x10/0x10 [ 706.745278][T19266] ? find_held_lock+0x2b/0x80 [ 706.745299][T19266] isotp_bind+0x5d7/0xae0 [ 706.745315][T19266] __sys_bind+0x1a9/0x260 [ 706.745333][T19266] ? __pfx___sys_bind+0x10/0x10 [ 706.745347][T19266] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 706.745370][T19266] ? ksys_write+0x1ac/0x250 [ 706.745384][T19266] ? __pfx_ksys_write+0x10/0x10 [ 706.745398][T19266] __ia32_sys_bind+0x71/0xb0 [ 706.745413][T19266] ? lockdep_hardirqs_on+0x7d/0x110 [ 706.745429][T19266] __do_fast_syscall_32+0x13a/0x8b0 [ 706.745439][T19266] ? lockdep_hardirqs_on+0x7d/0x110 [ 706.745456][T19266] do_fast_syscall_32+0x32/0x70 [ 706.745466][T19266] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 706.745482][T19266] RIP: 0023:0xf7fd2fec [ 706.745496][T19266] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 706.745501][T19266] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000169 [ 706.745512][T19266] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 706.745519][T19266] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 706.745526][T19266] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 706.745532][T19266] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 706.745538][T19266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 706.745552][T19266] [ 706.745791][T19265] can: receive list entry not found for dev vxcan1, id 003, mask C00007FF [ 707.207831][T19274] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3725'. [ 707.342272][T19278] binder_alloc: binder_alloc_mmap_handler: 19276 80ffd000-81000000 already mapped failed -16 [ 707.496369][T19284] FAULT_INJECTION: forcing a failure. [ 707.496369][T19284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.501896][T19284] CPU: 2 UID: 0 PID: 19284 Comm: syz.4.3728 Tainted: G L syzkaller #0 PREEMPT(full) [ 707.501925][T19284] Tainted: [L]=SOFTLOCKUP [ 707.501934][T19284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 707.501944][T19284] Call Trace: [ 707.501952][T19284] [ 707.501960][T19284] dump_stack_lvl+0x100/0x190 [ 707.501991][T19284] should_fail_ex.cold+0x5/0xa [ 707.502015][T19284] _copy_from_iter+0x1f4/0x1690 [ 707.502047][T19284] ? __pfx__copy_from_iter+0x10/0x10 [ 707.502068][T19284] ? kasan_save_track+0x14/0x30 [ 707.502097][T19284] ? __kasan_kmalloc+0xaa/0xb0 [ 707.502126][T19284] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 707.502152][T19284] ? configfs_write_iter+0x388/0x4e0 [ 707.502186][T19284] configfs_write_iter+0xb3/0x4e0 [ 707.502218][T19284] vfs_write+0x6af/0x1050 [ 707.502265][T19284] ? __pfx_configfs_write_iter+0x10/0x10 [ 707.502294][T19284] ? __pfx_vfs_write+0x10/0x10 [ 707.502314][T19284] ? find_held_lock+0x2b/0x80 [ 707.502360][T19284] ksys_write+0x12a/0x250 [ 707.502382][T19284] ? __pfx_ksys_write+0x10/0x10 [ 707.502403][T19284] ? ksys_write+0x1ac/0x250 [ 707.502424][T19284] ? __pfx_ksys_write+0x10/0x10 [ 707.502451][T19284] __do_fast_syscall_32+0x13a/0x8b0 [ 707.502475][T19284] ? lockdep_hardirqs_on+0x7d/0x110 [ 707.502505][T19284] do_fast_syscall_32+0x32/0x70 [ 707.502524][T19284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 707.502547][T19284] RIP: 0023:0xf7fb2fec [ 707.502570][T19284] Code: Unable to access opcode bytes at 0xf7fb2fc2. [ 707.502578][T19284] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 707.502596][T19284] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002100 [ 707.502608][T19284] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 707.502619][T19284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 707.502629][T19284] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 707.502640][T19284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 707.502665][T19284] [ 708.010343][T19293] program syz.7.3731 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 708.027332][T19293] syz0: rxe_newlink: already configured on bond_slave_1 [ 708.889878][T19296] 9p: Bad value for 'wfdno' [ 709.537091][T19311] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3734'. [ 709.770777][T19326] program syz.5.3735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 709.774964][T19326] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 709.779427][T19327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3738'. [ 709.797336][ T5099] Bluetooth: hci1: command tx timeout [ 711.168720][T19358] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3744'. [ 711.314764][ T9650] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 711.507294][ T9650] usb 10-1: Using ep0 maxpacket: 32 [ 711.514454][ T9650] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 711.525878][ T9650] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.539377][ T9650] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.550318][ T9650] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.556087][ T9650] usb 10-1: config 0 descriptor?? [ 712.024763][ T9650] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 712.059088][T19367] FAULT_INJECTION: forcing a failure. [ 712.059088][T19367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.083017][T19367] CPU: 0 UID: 0 PID: 19367 Comm: syz.7.3747 Tainted: G L syzkaller #0 PREEMPT(full) [ 712.083038][T19367] Tainted: [L]=SOFTLOCKUP [ 712.083041][T19367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 712.083049][T19367] Call Trace: [ 712.083054][T19367] [ 712.083059][T19367] dump_stack_lvl+0x100/0x190 [ 712.083080][T19367] should_fail_ex.cold+0x5/0xa [ 712.083095][T19367] _copy_from_iter+0x1f4/0x1690 [ 712.083114][T19367] ? __pfx__copy_from_iter+0x10/0x10 [ 712.083127][T19367] ? kasan_save_track+0x14/0x30 [ 712.083145][T19367] ? __kasan_kmalloc+0xaa/0xb0 [ 712.083161][T19367] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 712.083176][T19367] ? configfs_write_iter+0x388/0x4e0 [ 712.083195][T19367] configfs_write_iter+0xb3/0x4e0 [ 712.083214][T19367] do_iter_readv_writev+0x6f7/0x930 [ 712.083227][T19367] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 712.083246][T19367] vfs_writev+0x360/0xdd0 [ 712.083262][T19367] ? __pfx_vfs_writev+0x10/0x10 [ 712.083275][T19367] ? find_held_lock+0x2b/0x80 [ 712.083300][T19367] ? __fget_files+0x21f/0x3d0 [ 712.083318][T19367] ? do_pwritev+0x1ac/0x270 [ 712.083329][T19367] do_pwritev+0x1ac/0x270 [ 712.083342][T19367] ? __pfx_do_pwritev+0x10/0x10 [ 712.083355][T19367] ? fput+0x7c/0x100 [ 712.083372][T19367] __ia32_compat_sys_pwritev2+0x121/0x1b0 [ 712.083390][T19367] __do_fast_syscall_32+0x13a/0x8b0 [ 712.083401][T19367] ? lockdep_hardirqs_on+0x7d/0x110 [ 712.083418][T19367] do_fast_syscall_32+0x32/0x70 [ 712.083429][T19367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 712.083444][T19367] RIP: 0023:0xf7f02fec [ 712.083457][T19367] Code: Unable to access opcode bytes at 0xf7f02fc2. [ 712.083462][T19367] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 000000000000017b [ 712.083475][T19367] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 712.083482][T19367] RDX: 0000000000000001 RSI: 0000000000000009 RDI: 000000000000007f [ 712.083488][T19367] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 712.083494][T19367] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 712.083501][T19367] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 712.083514][T19367] [ 712.480874][T14918] usb 10-1: USB disconnect, device number 30 [ 712.504195][T19379] program syz.3.3746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 712.515178][T19379] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 714.009849][T19394] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3753'. [ 714.060780][T19396] program syz.3.3752 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 714.077234][T19396] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 717.277651][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 717.448751][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 717.453709][ T10] usb 9-1: New USB device found, idVendor=0499, idProduct=100a, bcdDevice=29.85 [ 717.458069][ T10] usb 9-1: config 5 has an invalid interface number: 220 but max is 0 [ 717.460984][ T10] usb 9-1: config 5 has an invalid descriptor of length 192, skipping remainder of the config [ 717.464402][ T10] usb 9-1: config 5 has no interface number 0 [ 717.466367][ T10] usb 9-1: config 5 interface 220 altsetting 226 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 717.470863][ T10] usb 9-1: config 5 interface 220 has no altsetting 0 [ 717.475329][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.477890][ T10] usb 9-1: Product: ъ [ 717.479216][ T10] usb 9-1: Manufacturer: ␁ [ 717.481082][ T10] usb 9-1: SerialNumber: ᠉ [ 717.712743][T19446] program syz.5.3765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 717.719754][ T10] usb 9-1: USB disconnect, device number 4 [ 717.721736][T19446] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 718.667814][T19475] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3774'. [ 719.065695][T19485] program syz.3.3776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 719.073507][T19485] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 720.272428][T19498] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3780'. [ 720.620125][T19508] FAULT_INJECTION: forcing a failure. [ 720.620125][T19508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.625614][T19508] CPU: 0 UID: 0 PID: 19508 Comm: syz.3.3785 Tainted: G L syzkaller #0 PREEMPT(full) [ 720.625642][T19508] Tainted: [L]=SOFTLOCKUP [ 720.625648][T19508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 720.625658][T19508] Call Trace: [ 720.625665][T19508] [ 720.625672][T19508] dump_stack_lvl+0x100/0x190 [ 720.625700][T19508] should_fail_ex.cold+0x5/0xa [ 720.625722][T19508] strncpy_from_user+0x3b/0x2d0 [ 720.625750][T19508] do_getname+0x78/0x390 [ 720.625770][T19508] __ia32_sys_symlinkat+0x7b/0xe0 [ 720.625796][T19508] __do_fast_syscall_32+0x13a/0x8b0 [ 720.625811][T19508] ? lockdep_hardirqs_on+0x7d/0x110 [ 720.625837][T19508] do_fast_syscall_32+0x32/0x70 [ 720.625853][T19508] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 720.625875][T19508] RIP: 0023:0xf6fdefec [ 720.625896][T19508] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 720.625904][T19508] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 720.625921][T19508] RAX: ffffffffffffffda RBX: 0000000080001e00 RCX: 00000000ffffff9c [ 720.625933][T19508] RDX: 0000000080001f00 RSI: 0000000000000000 RDI: 0000000000000000 [ 720.625944][T19508] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 720.625954][T19508] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 720.625965][T19508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 720.625988][T19508] [ 720.631914][T19510] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3784'. [ 720.828409][ T48] nvmet: ctrl 3 keep-alive timer (120 seconds) expired! [ 720.828501][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 720.835133][ T7998] nvmet: ctrl 2 keep-alive timer (120 seconds) expired! [ 720.848979][ T48] nvmet: ctrl 2 fatal error occurred! [ 720.850054][ T7996] nvmet: ctrl 3 fatal error occurred! [ 720.862669][ T7997] nvme nvme2: Removing ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 720.873315][ T48] nvme nvme1: Removing ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 722.444962][T19526] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 722.465161][T19531] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 722.562599][T19537] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3795'. [ 722.764951][T19547] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 722.770858][ T50] kernel write not supported for file /uinput (pid: 50 comm: kworker/2:1) [ 723.046087][T19559] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3804'. [ 723.060264][T19557] program syz.3.3802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 723.065404][T19557] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 725.537488][T19569] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 725.732848][T19586] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3809'. [ 725.882478][T19591] program syz.4.3808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 725.895634][T19591] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 726.799477][T19593] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3815'. [ 726.856180][T19598] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3815'. [ 726.859007][T19598] netlink: 43 bytes leftover after parsing attributes in process `syz.7.3815'. [ 726.861836][T19598] netlink: 'syz.7.3815': attribute type 5 has an invalid length. [ 726.864729][T19598] netlink: 43 bytes leftover after parsing attributes in process `syz.7.3815'. [ 726.869692][T19598] sd 0:0:0:0: PR command failed: 1026 [ 726.871648][T19598] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 726.874542][T19598] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 728.871375][T19625] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 729.342121][ T12] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.426231][ T12] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.533121][ T5742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 729.544018][ T5742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 729.569044][T19639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 729.592028][T19639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 729.603519][ T12] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.606187][T19639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 729.716284][ T12] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.296099][ T12] bridge_slave_1: left allmulticast mode [ 730.298053][ T12] bridge_slave_1: left promiscuous mode [ 730.299947][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.305505][ T12] bridge_slave_0: left allmulticast mode [ 730.307319][ T12] bridge_slave_0: left promiscuous mode [ 730.309264][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.940239][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.054713][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.128744][ T12] bond0 (unregistering): Released all slaves [ 731.198952][T19664] program syz.4.3835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 731.203087][T19664] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 731.346581][T19676] FAULT_INJECTION: forcing a failure. [ 731.346581][T19676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.378874][T19676] CPU: 1 UID: 0 PID: 19676 Comm: syz.3.3838 Tainted: G L syzkaller #0 PREEMPT(full) [ 731.378904][T19676] Tainted: [L]=SOFTLOCKUP [ 731.378911][T19676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 731.378921][T19676] Call Trace: [ 731.378928][T19676] [ 731.378936][T19676] dump_stack_lvl+0x100/0x190 [ 731.378965][T19676] should_fail_ex.cold+0x5/0xa [ 731.378988][T19676] _copy_from_user+0x2e/0xd0 [ 731.379011][T19676] get_compat_msghdr+0xb3/0x480 [ 731.379035][T19676] ? __pfx_get_compat_msghdr+0x10/0x10 [ 731.379065][T19676] ___sys_sendmsg+0x1b6/0x1e0 [ 731.379092][T19676] ? __pfx____sys_sendmsg+0x10/0x10 [ 731.379127][T19676] ? find_held_lock+0x2b/0x80 [ 731.379167][T19676] __sys_sendmsg+0x160/0x210 [ 731.379187][T19676] ? __pfx___sys_sendmsg+0x10/0x10 [ 731.379209][T19676] ? __pfx_ksys_write+0x10/0x10 [ 731.379235][T19676] __do_fast_syscall_32+0x13a/0x8b0 [ 731.379252][T19676] ? lockdep_hardirqs_on+0x7d/0x110 [ 731.379279][T19676] do_fast_syscall_32+0x32/0x70 [ 731.379296][T19676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 731.379316][T19676] RIP: 0023:0xf6fdefec [ 731.379331][T19676] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 731.379338][T19676] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 731.379355][T19676] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 731.379366][T19676] RDX: 0000000004040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 731.379377][T19676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 731.379386][T19676] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 731.379401][T19676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 731.379423][T19676] [ 731.442886][ T5452] 8021q: adding VLAN 0 to HW filter on device eth7 [ 731.598971][ T5452] 8021q: adding VLAN 0 to HW filter on device eth9 [ 731.717217][ T12] hsr_slave_0: left promiscuous mode [ 731.719415][ T12] hsr_slave_1: left promiscuous mode [ 731.733796][ T12] veth1_macvtap: left promiscuous mode [ 731.735520][ T12] veth0_macvtap: left promiscuous mode [ 731.737746][ T12] veth1_vlan: left promiscuous mode [ 731.739455][ T12] veth0_vlan: left promiscuous mode [ 731.853453][ T5099] Bluetooth: hci2: command tx timeout [ 731.879349][ T12] team0 (unregistering): Port device team_slave_1 removed [ 731.892095][ T12] team0 (unregistering): Port device team_slave_0 removed [ 731.965651][ T5452] 8021q: adding VLAN 0 to HW filter on device eth8 [ 732.007803][T19704] FAULT_INJECTION: forcing a failure. [ 732.007803][T19704] name failslab, interval 1, probability 10, space 0, times 0 [ 732.016349][T19704] CPU: 1 UID: 0 PID: 19704 Comm: syz.4.3841 Tainted: G L syzkaller #0 PREEMPT(full) [ 732.016377][T19704] Tainted: [L]=SOFTLOCKUP [ 732.016385][T19704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 732.016396][T19704] Call Trace: [ 732.016403][T19704] [ 732.016411][T19704] dump_stack_lvl+0x100/0x190 [ 732.016441][T19704] should_fail_ex.cold+0x5/0xa [ 732.016464][T19704] should_failslab+0xc2/0x120 [ 732.016483][T19704] __kmalloc_cache_noprof+0x91/0x6b0 [ 732.016509][T19704] ? bdi_split_work_to_wbs+0x2d7/0xfe0 [ 732.016536][T19704] bdi_split_work_to_wbs+0x2d7/0xfe0 [ 732.016560][T19704] ? __pfx_bdi_split_work_to_wbs+0x10/0x10 [ 732.016591][T19704] ? __pfx_down_write+0x10/0x10 [ 732.016610][T19704] ? __pfx___might_resched+0x10/0x10 [ 732.016634][T19704] sync_inodes_sb+0x226/0xc80 [ 732.016656][T19704] ? down_read+0x13b/0x4c0 [ 732.016673][T19704] ? __pfx_down_read+0x10/0x10 [ 732.016693][T19704] ? __pfx_sync_inodes_sb+0x10/0x10 [ 732.016719][T19704] ? super_lock+0x150/0x3f0 [ 732.016752][T19704] ? find_held_lock+0x2b/0x80 [ 732.016777][T19704] ? __iterate_supers+0x247/0x4a0 [ 732.016797][T19704] ? __iterate_supers+0x247/0x4a0 [ 732.016822][T19704] sync_inodes_one_sb+0x57/0x70 [ 732.016848][T19704] __iterate_supers+0x3b7/0x4a0 [ 732.016869][T19704] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 732.016897][T19704] ? __pfx___iterate_supers+0x10/0x10 [ 732.016925][T19704] ksys_sync+0x87/0xf0 [ 732.016951][T19704] ? __pfx_ksys_sync+0x10/0x10 [ 732.016974][T19704] ? ksys_write+0x1ac/0x250 [ 732.017000][T19704] ? __do_fast_syscall_32+0xb3/0x8b0 [ 732.017019][T19704] __do_sys_sync+0xe/0x20 [ 732.017043][T19704] __do_fast_syscall_32+0x13a/0x8b0 [ 732.017060][T19704] ? lockdep_hardirqs_on+0x7d/0x110 [ 732.017089][T19704] do_fast_syscall_32+0x32/0x70 [ 732.017107][T19704] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 732.017131][T19704] RIP: 0023:0xf7fb2fec [ 732.017152][T19704] Code: Unable to access opcode bytes at 0xf7fb2fc2. [ 732.017160][T19704] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000024 [ 732.017179][T19704] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 732.017190][T19704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 732.017201][T19704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 732.017212][T19704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.017222][T19704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 732.017247][T19704] [ 732.023422][T19635] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.116094][T19635] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.118730][T19635] bridge_slave_0: entered allmulticast mode [ 732.122682][T19635] bridge_slave_0: entered promiscuous mode [ 732.229887][T19635] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.232175][T19635] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.234554][T19635] bridge_slave_1: entered allmulticast mode [ 732.237261][T19635] bridge_slave_1: entered promiscuous mode [ 732.252607][ T5452] 8021q: adding VLAN 0 to HW filter on device eth6 [ 732.261754][T19635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.270218][ T9650] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 732.273548][T19635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.289160][T19635] team0: Port device team_slave_0 added [ 732.315216][T19635] team0: Port device team_slave_1 added [ 732.336225][T19635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.338423][T19635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.338440][T19635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.339346][T19635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.339354][T19635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.339368][T19635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.376727][T19635] hsr_slave_0: entered promiscuous mode [ 732.380567][T19635] hsr_slave_1: entered promiscuous mode [ 732.452214][ T9650] usb 12-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 732.455996][ T9650] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 732.460928][ T9650] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.464091][ T9650] usb 12-1: Product: syz [ 732.465592][ T9650] usb 12-1: Manufacturer: syz [ 732.467205][ T9650] usb 12-1: SerialNumber: syz [ 732.475281][ T9650] usbhid 12-1:1.0: couldn't find an input interrupt endpoint [ 732.695987][ T9650] usb 12-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 732.703864][ T9650] usb 12-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 732.708538][ T9650] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 732.711093][ T9650] usb 12-1: media controller created [ 732.720862][ T9650] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 732.928242][ T9650] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 732.958904][ T9650] usb 12-1: USB disconnect, device number 25 [ 733.238416][T19635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 733.269075][T19635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 733.279485][T19635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 733.285975][T19635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 733.291000][T19635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 733.298736][T19635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 733.301916][T19635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 733.307594][T19635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 733.372435][T19635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.383989][T19635] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.389354][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.391618][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.405862][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.408111][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.695871][T19635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.725714][T19635] veth0_vlan: entered promiscuous mode [ 733.733115][T19635] veth1_vlan: entered promiscuous mode [ 733.751477][T19635] veth0_macvtap: entered promiscuous mode [ 733.759395][T19635] veth1_macvtap: entered promiscuous mode [ 733.770413][T19635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.779575][T19635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.822182][ T7777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.838188][ T7777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.866590][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.871034][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.885976][ T7777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.894279][ T7777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.920393][T15266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.923533][T15266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.076112][ T5099] Bluetooth: hci2: command tx timeout [ 734.169537][T19797] program syz.0.3830 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 734.174556][T19797] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 734.592098][T19822] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 734.617977][T19817] program syz.3.3849 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 734.625025][T19817] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 734.953087][T19840] program syz.4.3853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 734.958060][T19840] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 735.824455][T19844] program syz.0.3854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 735.832076][T19844] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 735.918131][T19846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3855'. [ 735.976559][T19849] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3855'. [ 735.980192][T19849] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3855'. [ 735.983467][T19849] netlink: 'syz.3.3855': attribute type 5 has an invalid length. [ 735.985953][T19849] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3855'. [ 735.991934][T19849] sd 0:0:0:0: PR command failed: 1026 [ 735.993804][T19849] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 735.996049][T19849] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 736.299289][ T5099] Bluetooth: hci2: command tx timeout [ 736.334296][T19853] kvm: user requested TSC rate below hardware speed [ 736.337900][T19853] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 736.828555][T19858] FAULT_INJECTION: forcing a failure. [ 736.828555][T19858] name failslab, interval 1, probability 10, space 0, times 0 [ 736.832521][T19858] CPU: 1 UID: 0 PID: 19858 Comm: syz.4.3859 Tainted: G L syzkaller #0 PREEMPT(full) [ 736.832540][T19858] Tainted: [L]=SOFTLOCKUP [ 736.832544][T19858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 736.832550][T19858] Call Trace: [ 736.832555][T19858] [ 736.832560][T19858] dump_stack_lvl+0x100/0x190 [ 736.832579][T19858] should_fail_ex.cold+0x5/0xa [ 736.832593][T19858] should_failslab+0xc2/0x120 [ 736.832605][T19858] __kmalloc_noprof+0xfc/0x820 [ 736.832621][T19858] ? rcu_is_watching+0x13/0xc0 [ 736.832639][T19858] ? tomoyo_realpath_from_path+0xb6/0x690 [ 736.832653][T19858] tomoyo_realpath_from_path+0xb6/0x690 [ 736.832667][T19858] tomoyo_path_number_perm+0x23c/0x580 [ 736.832682][T19858] ? tomoyo_path_number_perm+0x22e/0x580 [ 736.832698][T19858] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 736.832714][T19858] ? get_pid_task+0x106/0x250 [ 736.832741][T19858] ? find_held_lock+0x2b/0x80 [ 736.832757][T19858] ? __fget_files+0x215/0x3d0 [ 736.832771][T19858] ? hook_file_ioctl_common+0x140/0x440 [ 736.832786][T19858] ? __fget_files+0x215/0x3d0 [ 736.832807][T19858] ? __fget_files+0x21f/0x3d0 [ 736.832822][T19858] security_file_ioctl_compat+0xd3/0x230 [ 736.832839][T19858] __ia32_compat_sys_ioctl+0xc2/0x360 [ 736.832854][T19858] __do_fast_syscall_32+0x13a/0x8b0 [ 736.832865][T19858] ? lockdep_hardirqs_on+0x7d/0x110 [ 736.832882][T19858] do_fast_syscall_32+0x32/0x70 [ 736.832904][T19858] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 736.832920][T19858] RIP: 0023:0xf7fb2fec [ 736.832933][T19858] Code: Unable to access opcode bytes at 0xf7fb2fc2. [ 736.832938][T19858] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 736.832949][T19858] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008940 [ 736.832956][T19858] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 736.832962][T19858] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 736.832968][T19858] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 736.832974][T19858] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 736.832988][T19858] [ 736.909389][T19858] ERROR: Out of memory at tomoyo_realpath_from_path. [ 737.767506][T19879] program syz.0.3864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 737.776498][T19879] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 737.904101][T19878] program syz.3.3866 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 737.908644][T19878] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 738.510703][ T5099] Bluetooth: hci2: command tx timeout [ 739.052354][T19884] FAULT_INJECTION: forcing a failure. [ 739.052354][T19884] name failslab, interval 1, probability 10, space 0, times 0 [ 739.066425][T19884] CPU: 1 UID: 0 PID: 19884 Comm: syz.0.3868 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.066444][T19884] Tainted: [L]=SOFTLOCKUP [ 739.066449][T19884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 739.066456][T19884] Call Trace: [ 739.066460][T19884] [ 739.066465][T19884] dump_stack_lvl+0x100/0x190 [ 739.066486][T19884] should_fail_ex.cold+0x5/0xa [ 739.066501][T19884] should_failslab+0xc2/0x120 [ 739.066514][T19884] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 739.066538][T19884] ? __alloc_skb+0x5b7/0x710 [ 739.066554][T19884] ? __alloc_skb+0x140/0x710 [ 739.066571][T19884] __alloc_skb+0x140/0x710 [ 739.066585][T19884] ? __alloc_skb+0x5b7/0x710 [ 739.066599][T19884] ? __pfx___alloc_skb+0x10/0x10 [ 739.066623][T19884] netlink_alloc_large_skb+0x69/0x150 [ 739.066650][T19884] netlink_sendmsg+0x680/0xda0 [ 739.066673][T19884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.066690][T19884] ? apparmor_socket_sendmsg+0x15b/0x270 [ 739.066707][T19884] ____sys_sendmsg+0xa4d/0xbe0 [ 739.066721][T19884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.066737][T19884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 739.066757][T19884] ___sys_sendmsg+0x190/0x1e0 [ 739.066773][T19884] ? __pfx____sys_sendmsg+0x10/0x10 [ 739.066794][T19884] ? find_held_lock+0x2b/0x80 [ 739.066818][T19884] __sys_sendmsg+0x160/0x210 [ 739.066830][T19884] ? __pfx___sys_sendmsg+0x10/0x10 [ 739.066845][T19884] ? __pfx_ksys_write+0x10/0x10 [ 739.066861][T19884] __do_fast_syscall_32+0x13a/0x8b0 [ 739.066873][T19884] ? lockdep_hardirqs_on+0x7d/0x110 [ 739.066891][T19884] do_fast_syscall_32+0x32/0x70 [ 739.066901][T19884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 739.066916][T19884] RIP: 0023:0xf6feefec [ 739.066930][T19884] Code: Unable to access opcode bytes at 0xf6feefc2. [ 739.066935][T19884] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 739.066946][T19884] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 739.066953][T19884] RDX: 0000000000004800 RSI: 0000000000000000 RDI: 0000000000000000 [ 739.066960][T19884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 739.066966][T19884] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 739.066973][T19884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 739.066985][T19884] [ 739.144440][T19888] syzkaller1: entered promiscuous mode [ 739.152058][T19888] syzkaller1: entered allmulticast mode [ 739.211585][T19891] syzkaller1: entered promiscuous mode [ 739.213335][T19891] syzkaller1: entered allmulticast mode [ 739.332734][T19902] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3874'. [ 739.341158][T19902] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3874'. [ 739.356390][T19902] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3874'. [ 739.357278][T19904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3875'. [ 739.361334][T19902] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3874'. [ 744.248448][T19955] program syz.0.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 744.252977][T19955] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 744.542992][T19964] FAULT_INJECTION: forcing a failure. [ 744.542992][T19964] name failslab, interval 1, probability 10, space 0, times 0 [ 744.548079][T19964] CPU: 0 UID: 0 PID: 19964 Comm: syz.4.3883 Tainted: G L syzkaller #0 PREEMPT(full) [ 744.548107][T19964] Tainted: [L]=SOFTLOCKUP [ 744.548114][T19964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 744.548126][T19964] Call Trace: [ 744.548133][T19964] [ 744.548141][T19964] dump_stack_lvl+0x100/0x190 [ 744.548171][T19964] should_fail_ex.cold+0x5/0xa [ 744.548195][T19964] should_failslab+0xc2/0x120 [ 744.548230][T19964] __kmalloc_noprof+0xfc/0x820 [ 744.548259][T19964] ? rcu_is_watching+0x13/0xc0 [ 744.548286][T19964] ? tomoyo_realpath_from_path+0xb6/0x690 [ 744.548312][T19964] tomoyo_realpath_from_path+0xb6/0x690 [ 744.548334][T19964] tomoyo_path_perm+0x276/0x460 [ 744.548364][T19964] ? tomoyo_path_perm+0x262/0x460 [ 744.548391][T19964] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 744.548429][T19964] ? find_held_lock+0x2b/0x80 [ 744.548471][T19964] ? __fget_files+0x21f/0x3d0 [ 744.548502][T19964] security_inode_getattr+0x116/0x280 [ 744.548529][T19964] vfs_fstat+0x4b/0xe0 [ 744.548558][T19964] __do_compat_sys_newfstat+0x8b/0x100 [ 744.548587][T19964] ? __pfx___do_compat_sys_newfstat+0x10/0x10 [ 744.548630][T19964] ? ksys_write+0x1ac/0x250 [ 744.548652][T19964] ? __pfx_ksys_write+0x10/0x10 [ 744.548679][T19964] __do_fast_syscall_32+0x13a/0x8b0 [ 744.548698][T19964] ? lockdep_hardirqs_on+0x7d/0x110 [ 744.548727][T19964] do_fast_syscall_32+0x32/0x70 [ 744.548745][T19964] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 744.548769][T19964] RIP: 0023:0xf7fb2fec [ 744.548790][T19964] Code: Unable to access opcode bytes at 0xf7fb2fc2. [ 744.548798][T19964] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 000000000000006c [ 744.548816][T19964] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080004780 [ 744.548828][T19964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 744.548838][T19964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 744.548848][T19964] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 744.548858][T19964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 744.548883][T19964] [ 744.639488][T19964] ERROR: Out of memory at tomoyo_realpath_from_path. [ 745.578775][ T24] Process accounting resumed [ 745.859463][T19995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3892'. [ 746.220065][T20000] IPVS: persistence engine module ip_vs_pe_s not found [ 746.318910][T19983] Process accounting resumed [ 746.353614][T20011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3896'. [ 746.388521][T20013] FAULT_INJECTION: forcing a failure. [ 746.388521][T20013] name failslab, interval 1, probability 10, space 0, times 0 [ 746.392668][T20013] CPU: 3 UID: 0 PID: 20013 Comm: syz.0.3897 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.392686][T20013] Tainted: [L]=SOFTLOCKUP [ 746.392690][T20013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 746.392697][T20013] Call Trace: [ 746.392702][T20013] [ 746.392707][T20013] dump_stack_lvl+0x100/0x190 [ 746.392726][T20013] should_fail_ex.cold+0x5/0xa [ 746.392741][T20013] should_failslab+0xc2/0x120 [ 746.392752][T20013] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 746.392770][T20013] ? __alloc_skb+0x5b7/0x710 [ 746.392781][T20013] ? __alloc_skb+0x140/0x710 [ 746.392794][T20013] __alloc_skb+0x140/0x710 [ 746.392803][T20013] ? __alloc_skb+0x5b7/0x710 [ 746.392814][T20013] ? __pfx___alloc_skb+0x10/0x10 [ 746.392828][T20013] netlink_alloc_large_skb+0x69/0x150 [ 746.392847][T20013] netlink_sendmsg+0x680/0xda0 [ 746.392864][T20013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.392882][T20013] ? apparmor_socket_sendmsg+0x15b/0x270 [ 746.392898][T20013] ____sys_sendmsg+0xa4d/0xbe0 [ 746.392912][T20013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.392928][T20013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 746.392945][T20013] ? _kstrtoull+0x13c/0x1f0 [ 746.392961][T20013] ? __pfx__kstrtoull+0x10/0x10 [ 746.392978][T20013] ___sys_sendmsg+0x190/0x1e0 [ 746.392994][T20013] ? __pfx____sys_sendmsg+0x10/0x10 [ 746.393009][T20013] ? __lock_acquire+0x4c5/0x1ec0 [ 746.393036][T20013] __sys_sendmmsg+0x309/0x440 [ 746.393049][T20013] ? __pfx___sys_sendmmsg+0x10/0x10 [ 746.393060][T20013] ? find_held_lock+0x2b/0x80 [ 746.393079][T20013] ? __mutex_unlock_slowpath+0x35d/0x930 [ 746.393102][T20013] ? fput+0x7c/0x100 [ 746.393117][T20013] ? ksys_write+0x1ac/0x250 [ 746.393131][T20013] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 746.393147][T20013] ? lockdep_hardirqs_on+0x7d/0x110 [ 746.393163][T20013] __do_fast_syscall_32+0x13a/0x8b0 [ 746.393173][T20013] ? lockdep_hardirqs_on+0x7d/0x110 [ 746.393189][T20013] do_fast_syscall_32+0x32/0x70 [ 746.393200][T20013] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 746.393214][T20013] RIP: 0023:0xf6feefec [ 746.393228][T20013] Code: Unable to access opcode bytes at 0xf6feefc2. [ 746.393233][T20013] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 746.393248][T20013] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 746.393254][T20013] RDX: 000000000000009f RSI: 0000000000000020 RDI: 0000000000000000 [ 746.393261][T20013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 746.393267][T20013] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 746.393274][T20013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 746.393287][T20013] [ 746.551991][T20015] program syz.4.3895 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 746.558439][T20015] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 746.725914][T20032] FAULT_INJECTION: forcing a failure. [ 746.725914][T20032] name failslab, interval 1, probability 10, space 0, times 0 [ 746.730266][T20032] CPU: 3 UID: 0 PID: 20032 Comm: syz.0.3904 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.730285][T20032] Tainted: [L]=SOFTLOCKUP [ 746.730289][T20032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 746.730296][T20032] Call Trace: [ 746.730300][T20032] [ 746.730305][T20032] dump_stack_lvl+0x100/0x190 [ 746.730325][T20032] should_fail_ex.cold+0x5/0xa [ 746.730340][T20032] should_failslab+0xc2/0x120 [ 746.730351][T20032] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 746.730371][T20032] ? __d_alloc+0x35/0xa50 [ 746.730389][T20032] __d_alloc+0x35/0xa50 [ 746.730403][T20032] ? rcu_is_watching+0x13/0xc0 [ 746.730421][T20032] d_alloc_pseudo+0x1c/0xc0 [ 746.730437][T20032] alloc_file_pseudo+0x118/0x290 [ 746.730463][T20032] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 746.730486][T20032] ? alloc_fd+0x471/0x7a0 [ 746.730501][T20032] ? do_raw_spin_unlock+0x145/0x1e0 [ 746.730517][T20032] __anon_inode_getfile+0xe8/0x280 [ 746.730531][T20032] anon_inode_getfile_fmode+0x37/0xa0 [ 746.730543][T20032] __do_sys_timerfd_create+0x2d6/0x3f0 [ 746.730555][T20032] ? __do_fast_syscall_32+0xb3/0x8b0 [ 746.730567][T20032] __do_fast_syscall_32+0x13a/0x8b0 [ 746.730577][T20032] ? lockdep_hardirqs_on+0x7d/0x110 [ 746.730594][T20032] do_fast_syscall_32+0x32/0x70 [ 746.730604][T20032] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 746.730619][T20032] RIP: 0023:0xf6feefec [ 746.730634][T20032] Code: Unable to access opcode bytes at 0xf6feefc2. [ 746.730639][T20032] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000142 [ 746.730650][T20032] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 746.730657][T20032] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 746.730663][T20032] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 746.730669][T20032] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 746.730675][T20032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 746.730688][T20032] [ 746.817660][T20040] FAULT_INJECTION: forcing a failure. [ 746.817660][T20040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.821986][T20040] CPU: 1 UID: 0 PID: 20040 Comm: syz.7.3906 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.822004][T20040] Tainted: [L]=SOFTLOCKUP [ 746.822008][T20040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 746.822016][T20040] Call Trace: [ 746.822020][T20040] [ 746.822025][T20040] dump_stack_lvl+0x100/0x190 [ 746.822045][T20040] should_fail_ex.cold+0x5/0xa [ 746.822081][T20040] _copy_from_user+0x2e/0xd0 [ 746.822097][T20040] move_addr_to_kernel+0x65/0x170 [ 746.822115][T20040] get_compat_msghdr+0x3c7/0x480 [ 746.822130][T20040] ? __pfx_get_compat_msghdr+0x10/0x10 [ 746.822145][T20040] ? _kstrtoull+0x13c/0x1f0 [ 746.822161][T20040] ? __pfx__kstrtoull+0x10/0x10 [ 746.822179][T20040] ___sys_sendmsg+0x1b6/0x1e0 [ 746.822195][T20040] ? __pfx____sys_sendmsg+0x10/0x10 [ 746.822215][T20040] ? __lock_acquire+0x4c5/0x1ec0 [ 746.822243][T20040] __sys_sendmmsg+0x309/0x440 [ 746.822257][T20040] ? __pfx___sys_sendmmsg+0x10/0x10 [ 746.822268][T20040] ? find_held_lock+0x2b/0x80 [ 746.822287][T20040] ? __mutex_unlock_slowpath+0x35d/0x930 [ 746.822312][T20040] ? fput+0x7c/0x100 [ 746.822328][T20040] ? ksys_write+0x1ac/0x250 [ 746.822347][T20040] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 746.822361][T20040] ? lockdep_hardirqs_on+0x7d/0x110 [ 746.822377][T20040] __do_fast_syscall_32+0x13a/0x8b0 [ 746.822387][T20040] ? lockdep_hardirqs_on+0x7d/0x110 [ 746.822404][T20040] do_fast_syscall_32+0x32/0x70 [ 746.822414][T20040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 746.822429][T20040] RIP: 0023:0xf7f02fec [ 746.822443][T20040] Code: Unable to access opcode bytes at 0xf7f02fc2. [ 746.822448][T20040] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 746.822460][T20040] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000bc0 [ 746.822467][T20040] RDX: 0000000000000002 RSI: 0000000024044044 RDI: 0000000000000000 [ 746.822473][T20040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 746.822479][T20040] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 746.822486][T20040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 746.822499][T20040] [ 747.369695][ T5099] Bluetooth: hci1: unexpected event 0x33 length: 17 > 10 [ 747.619956][T20072] FAULT_INJECTION: forcing a failure. [ 747.619956][T20072] name failslab, interval 1, probability 10, space 0, times 0 [ 747.629363][T20072] CPU: 0 UID: 0 PID: 20072 Comm: syz.4.3918 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.629382][T20072] Tainted: [L]=SOFTLOCKUP [ 747.629386][T20072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 747.629392][T20072] Call Trace: [ 747.629397][T20072] [ 747.629402][T20072] dump_stack_lvl+0x100/0x190 [ 747.629421][T20072] should_fail_ex.cold+0x5/0xa [ 747.629436][T20072] should_failslab+0xc2/0x120 [ 747.629448][T20072] __kmalloc_noprof+0xfc/0x820 [ 747.629465][T20072] ? tomoyo_encode2+0xfb/0x3c0 [ 747.629479][T20072] tomoyo_encode2+0xfb/0x3c0 [ 747.629490][T20072] tomoyo_encode+0x29/0x50 [ 747.629500][T20072] tomoyo_realpath_from_path+0x18c/0x690 [ 747.629514][T20072] tomoyo_path_number_perm+0x23c/0x580 [ 747.629529][T20072] ? tomoyo_path_number_perm+0x22e/0x580 [ 747.629545][T20072] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 747.629575][T20072] ? get_pid_task+0x106/0x250 [ 747.629604][T20072] ? find_held_lock+0x2b/0x80 [ 747.629620][T20072] ? __fget_files+0x215/0x3d0 [ 747.629634][T20072] ? hook_file_ioctl_common+0x140/0x440 [ 747.629651][T20072] ? __fget_files+0x215/0x3d0 [ 747.629667][T20072] ? __fget_files+0x21f/0x3d0 [ 747.629686][T20072] security_file_ioctl_compat+0xd3/0x230 [ 747.629711][T20072] __ia32_compat_sys_ioctl+0xc2/0x360 [ 747.629735][T20072] __do_fast_syscall_32+0x13a/0x8b0 [ 747.629754][T20072] ? lockdep_hardirqs_on+0x7d/0x110 [ 747.629782][T20072] do_fast_syscall_32+0x32/0x70 [ 747.629800][T20072] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 747.629824][T20072] RIP: 0023:0xf7fb2fec [ 747.629846][T20072] Code: Unable to access opcode bytes at 0xf7fb2fc2. [ 747.629852][T20072] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 747.629863][T20072] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004040534e [ 747.629870][T20072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 747.629877][T20072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 747.629883][T20072] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 747.629890][T20072] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 747.629904][T20072] [ 747.630545][T20072] ERROR: Out of memory at tomoyo_realpath_from_path. [ 747.711835][T20070] binder_alloc: 20069: binder_alloc_buf size 66480 failed, no address space [ 747.716084][T20070] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 747.947608][T20083] netlink: 'syz.4.3921': attribute type 8 has an invalid length. [ 748.257440][ T29] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 748.264171][T20091] program syz.3.3923 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 748.277117][T20091] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 748.304469][T20095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3924'. [ 748.438922][ T29] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 748.443292][ T29] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 748.446185][ T29] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 748.449916][ T29] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 748.452998][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.456489][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.465634][ T29] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 748.468356][ T29] usb 9-1: Product: syz [ 748.469855][ T29] usb 9-1: Manufacturer: syz [ 748.480138][ T29] cdc_wdm 9-1:1.0: skipping garbage [ 748.482131][ T29] cdc_wdm 9-1:1.0: skipping garbage [ 748.499117][ T29] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 748.501275][ T29] cdc_wdm 9-1:1.0: Unknown control protocol [ 748.690893][T20083] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 748.702774][T16097] usb 9-1: USB disconnect, device number 5 [ 749.199567][T20107] FAULT_INJECTION: forcing a failure. [ 749.199567][T20107] name failslab, interval 1, probability 10, space 0, times 0 [ 749.212047][T20107] CPU: 2 UID: 0 PID: 20107 Comm: syz.3.3928 Tainted: G L syzkaller #0 PREEMPT(full) [ 749.212066][T20107] Tainted: [L]=SOFTLOCKUP [ 749.212070][T20107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 749.212077][T20107] Call Trace: [ 749.212081][T20107] [ 749.212086][T20107] dump_stack_lvl+0x100/0x190 [ 749.212106][T20107] should_fail_ex.cold+0x5/0xa [ 749.212119][T20107] should_failslab+0xc2/0x120 [ 749.212131][T20107] kmem_cache_alloc_noprof+0x91/0x6a0 [ 749.212150][T20107] ? io_submit_one+0x124/0x1fb0 [ 749.212168][T20107] io_submit_one+0x124/0x1fb0 [ 749.212185][T20107] ? __lock_acquire+0x4c5/0x1ec0 [ 749.212199][T20107] ? lockdep_hardirqs_on+0x7d/0x110 [ 749.212222][T20107] ? __pfx_io_submit_one+0x10/0x10 [ 749.212242][T20107] ? __might_fault+0xc5/0x140 [ 749.212260][T20107] ? __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 749.212277][T20107] __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 749.212293][T20107] ? __fget_files+0x21f/0x3d0 [ 749.212308][T20107] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 749.212327][T20107] ? ksys_write+0x1ac/0x250 [ 749.212340][T20107] ? __pfx_ksys_write+0x10/0x10 [ 749.212355][T20107] __do_fast_syscall_32+0x13a/0x8b0 [ 749.212365][T20107] ? lockdep_hardirqs_on+0x7d/0x110 [ 749.212382][T20107] do_fast_syscall_32+0x32/0x70 [ 749.212392][T20107] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 749.212407][T20107] RIP: 0023:0xf6fdefec [ 749.212420][T20107] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 749.212425][T20107] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 00000000000000f8 [ 749.212436][T20107] RAX: ffffffffffffffda RBX: 00000000f7f0c000 RCX: 0000000000000001 [ 749.212443][T20107] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 749.212450][T20107] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 749.212456][T20107] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 749.212462][T20107] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 749.212475][T20107] [ 749.300106][T20113] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 751.096454][T20125] program syz.0.3935 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 751.108825][T20125] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 753.440347][T20158] program syz.3.3945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 753.445576][T20158] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 755.605544][T20196] program syz.4.3959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 755.609869][T20196] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 756.868534][T20225] netlink: 'syz.4.3965': attribute type 1 has an invalid length. [ 756.871092][T20225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3965'. [ 757.098808][T20231] syz_tun: entered allmulticast mode [ 757.693336][T20240] program syz.0.3971 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 757.697131][T20240] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 757.769097][T20243] netlink: 'syz.0.3972': attribute type 2 has an invalid length. [ 757.773478][T20243] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 758.017588][T20229] syz_tun: left allmulticast mode [ 759.009525][T20249] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3974'. [ 759.291232][T20262] FAULT_INJECTION: forcing a failure. [ 759.291232][T20262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.295994][T20262] CPU: 3 UID: 0 PID: 20262 Comm: syz.3.3978 Tainted: G L syzkaller #0 PREEMPT(full) [ 759.296025][T20262] Tainted: [L]=SOFTLOCKUP [ 759.296030][T20262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 759.296037][T20262] Call Trace: [ 759.296042][T20262] [ 759.296047][T20262] dump_stack_lvl+0x100/0x190 [ 759.296070][T20262] should_fail_ex.cold+0x5/0xa [ 759.296086][T20262] _copy_to_user+0x32/0xd0 [ 759.296105][T20262] simple_read_from_buffer+0xcb/0x170 [ 759.296123][T20262] proc_fail_nth_read+0x1af/0x230 [ 759.296139][T20262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 759.296153][T20262] ? rw_verify_area+0xce/0x6d0 [ 759.296165][T20262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 759.296178][T20262] vfs_read+0x1e4/0xb40 [ 759.296193][T20262] ? __pfx_vfs_read+0x10/0x10 [ 759.296204][T20262] ? find_held_lock+0x2b/0x80 [ 759.296223][T20262] ? __fget_files+0x215/0x3d0 [ 759.296239][T20262] ? __fget_files+0x21f/0x3d0 [ 759.296256][T20262] ksys_read+0x12a/0x250 [ 759.296269][T20262] ? __pfx_ksys_read+0x10/0x10 [ 759.296285][T20262] do_int80_emulation+0x166/0x650 [ 759.296299][T20262] asm_int80_emulation+0x1a/0x20 [ 759.296316][T20262] RIP: 0023:0xf71174eb [ 759.296326][T20262] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 759.296337][T20262] RSP: 002b:00000000f53cd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 759.296348][T20262] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53cd5d0 [ 759.296354][T20262] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 759.296361][T20262] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 759.296367][T20262] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 759.296373][T20262] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 759.296387][T20262] [ 760.054473][T20268] program syz.3.3981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 760.061900][T20268] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 760.094997][T20276] veth1_macvtap: left promiscuous mode [ 760.097586][T20276] macsec0: entered promiscuous mode [ 760.105690][T20276] net_ratelimit: 9 callbacks suppressed [ 760.105705][T20276] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 760.144118][T20278] FAULT_INJECTION: forcing a failure. [ 760.144118][T20278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.148618][T20278] CPU: 2 UID: 0 PID: 20278 Comm: syz.3.3983 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.148637][T20278] Tainted: [L]=SOFTLOCKUP [ 760.148641][T20278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 760.148648][T20278] Call Trace: [ 760.148652][T20278] [ 760.148657][T20278] dump_stack_lvl+0x100/0x190 [ 760.148677][T20278] should_fail_ex.cold+0x5/0xa [ 760.148691][T20278] _copy_from_user+0x2e/0xd0 [ 760.148705][T20278] msr_io+0x93/0x480 [ 760.148735][T20278] ? __pfx_do_get_feature_msr+0x10/0x10 [ 760.148752][T20278] ? find_held_lock+0x2b/0x80 [ 760.148771][T20278] ? tomoyo_path_number_perm+0x28f/0x580 [ 760.148787][T20278] ? tomoyo_path_number_perm+0x28f/0x580 [ 760.148802][T20278] ? __pfx_msr_io+0x10/0x10 [ 760.148818][T20278] ? tomoyo_path_number_perm+0x188/0x580 [ 760.148834][T20278] kvm_arch_dev_ioctl+0x487/0x770 [ 760.148852][T20278] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 760.148870][T20278] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 760.148893][T20278] ? do_vfs_ioctl+0x226/0x13e0 [ 760.148906][T20278] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 760.148919][T20278] kvm_dev_ioctl+0x730/0x1b50 [ 760.148946][T20278] ? find_held_lock+0x2b/0x80 [ 760.148961][T20278] ? __fget_files+0x215/0x3d0 [ 760.148974][T20278] ? hook_file_ioctl_common+0x140/0x440 [ 760.148991][T20278] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 760.149009][T20278] ? __fget_files+0x21f/0x3d0 [ 760.149025][T20278] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 760.149041][T20278] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 760.149055][T20278] __do_fast_syscall_32+0x13a/0x8b0 [ 760.149066][T20278] ? lockdep_hardirqs_on+0x7d/0x110 [ 760.149083][T20278] do_fast_syscall_32+0x32/0x70 [ 760.149093][T20278] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 760.149108][T20278] RIP: 0023:0xf6fdefec [ 760.149122][T20278] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 760.149127][T20278] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 760.149138][T20278] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c008ae88 [ 760.149145][T20278] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 760.149152][T20278] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 760.149158][T20278] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 760.149164][T20278] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 760.149177][T20278] [ 760.985854][T20293] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3986'. [ 761.075744][T20303] FAULT_INJECTION: forcing a failure. [ 761.075744][T20303] name failslab, interval 1, probability 10, space 0, times 0 [ 761.082276][T20303] CPU: 3 UID: 0 PID: 20303 Comm: syz.4.3990 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.082306][T20303] Tainted: [L]=SOFTLOCKUP [ 761.082313][T20303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 761.082325][T20303] Call Trace: [ 761.082332][T20303] [ 761.082340][T20303] dump_stack_lvl+0x100/0x190 [ 761.082370][T20303] should_fail_ex.cold+0x5/0xa [ 761.082394][T20303] should_failslab+0xc2/0x120 [ 761.082414][T20303] __kmalloc_noprof+0xfc/0x820 [ 761.082441][T20303] ? rcu_is_watching+0x13/0xc0 [ 761.082468][T20303] ? tomoyo_realpath_from_path+0xb6/0x690 [ 761.082493][T20303] tomoyo_realpath_from_path+0xb6/0x690 [ 761.082518][T20303] tomoyo_path_number_perm+0x23c/0x580 [ 761.082542][T20303] ? tomoyo_path_number_perm+0x22e/0x580 [ 761.082569][T20303] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 761.082594][T20303] ? get_pid_task+0x106/0x250 [ 761.082645][T20303] ? find_held_lock+0x2b/0x80 [ 761.082671][T20303] ? __fget_files+0x215/0x3d0 [ 761.082693][T20303] ? hook_file_ioctl_common+0x140/0x440 [ 761.082719][T20303] ? __fget_files+0x215/0x3d0 [ 761.082747][T20303] ? __fget_files+0x21f/0x3d0 [ 761.082773][T20303] security_file_ioctl_compat+0xd3/0x230 [ 761.082807][T20303] __ia32_compat_sys_ioctl+0xc2/0x360 [ 761.082834][T20303] __do_fast_syscall_32+0x13a/0x8b0 [ 761.082853][T20303] ? lockdep_hardirqs_on+0x7d/0x110 [ 761.082882][T20303] do_fast_syscall_32+0x32/0x70 [ 761.082900][T20303] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 761.082924][T20303] RIP: 0023:0xf7fb2fec [ 761.082944][T20303] Code: Unable to access opcode bytes at 0xf7fb2fc2. [ 761.082952][T20303] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 761.082972][T20303] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000f504 [ 761.082983][T20303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 761.082994][T20303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 761.083005][T20303] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 761.083016][T20303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 761.083041][T20303] [ 761.083049][T20303] ERROR: Out of memory at tomoyo_realpath_from_path. [ 761.220113][T20307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3991'. [ 761.243728][T20307] hsr_slave_1 (unregistering): left promiscuous mode [ 761.283003][T20309] program syz.7.3993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 761.292024][T20309] syz0: rxe_newlink: already configured on bond_slave_1 [ 761.440670][T20318] CacheFiles: Empty directory specified [ 762.974855][T20329] netlink: 'syz.4.4002': attribute type 1 has an invalid length. [ 762.987884][T20329] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 762.994666][T20329] bond1 (unregistering): Released all slaves [ 763.035478][ T24] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 763.222649][ T24] usb 12-1: Using ep0 maxpacket: 8 [ 763.224791][ T24] usb 12-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 763.271486][ T24] usb 12-1: config 0 has an invalid interface number: 186 but max is 0 [ 763.274295][ T24] usb 12-1: config 0 has no interface number 0 [ 763.277408][ T24] usb 12-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 763.280831][ T24] usb 12-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 763.290810][ T24] usb 12-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 763.296648][ T24] usb 12-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 763.300036][ T24] usb 12-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 763.306000][ T24] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.308506][ T24] usb 12-1: Product: syz [ 763.309948][ T24] usb 12-1: Manufacturer: syz [ 763.311418][ T24] usb 12-1: SerialNumber: syz [ 763.314434][ T24] usb 12-1: config 0 descriptor?? [ 763.533331][ T24] iowarrior 12-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 763.570987][T20349] pim6reg: entered allmulticast mode [ 763.620023][T20346] pim6reg: left allmulticast mode [ 765.282472][T20357] program syz.3.4007 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 765.288207][T20357] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 765.609675][ T853] usb 12-1: USB disconnect, device number 26 [ 767.116420][T20385] FAULT_INJECTION: forcing a failure. [ 767.116420][T20385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.120962][T20385] CPU: 2 UID: 0 PID: 20385 Comm: syz.3.4017 Tainted: G L syzkaller #0 PREEMPT(full) [ 767.120980][T20385] Tainted: [L]=SOFTLOCKUP [ 767.120984][T20385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 767.120991][T20385] Call Trace: [ 767.120996][T20385] [ 767.121001][T20385] dump_stack_lvl+0x100/0x190 [ 767.121020][T20385] should_fail_ex.cold+0x5/0xa [ 767.121034][T20385] _copy_from_user+0x2e/0xd0 [ 767.121049][T20385] bpf_ctx_init+0x14e/0x1e0 [ 767.121064][T20385] bpf_prog_test_run_skb+0x2be/0x3540 [ 767.121084][T20385] ? find_held_lock+0x2b/0x80 [ 767.121101][T20385] ? __fget_files+0x1d1/0x3d0 [ 767.121119][T20385] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 767.121135][T20385] ? fput+0x7c/0x100 [ 767.121152][T20385] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 767.121180][T20385] __sys_bpf+0x2a12/0x4e80 [ 767.121202][T20385] ? __pfx___sys_bpf+0x10/0x10 [ 767.121216][T20385] ? find_held_lock+0x2b/0x80 [ 767.121231][T20385] ? get_pid_task+0xfc/0x250 [ 767.121246][T20385] ? get_pid_task+0xfc/0x250 [ 767.121264][T20385] ? proc_fail_nth_write+0x9f/0x220 [ 767.121277][T20385] ? find_held_lock+0x2b/0x80 [ 767.121295][T20385] ? rcu_read_lock_any_held+0x6a/0x90 [ 767.121312][T20385] ? find_held_lock+0x2b/0x80 [ 767.121326][T20385] ? ksys_write+0x190/0x250 [ 767.121343][T20385] ? ksys_write+0x190/0x250 [ 767.121365][T20385] ? fput+0x7c/0x100 [ 767.121382][T20385] ? __ia32_sys_bpf+0xcc/0x170 [ 767.121395][T20385] __ia32_sys_bpf+0xcc/0x170 [ 767.121410][T20385] ? __do_fast_syscall_32+0xb3/0x8b0 [ 767.121422][T20385] __do_fast_syscall_32+0x13a/0x8b0 [ 767.121432][T20385] ? lockdep_hardirqs_on+0x7d/0x110 [ 767.121449][T20385] do_fast_syscall_32+0x32/0x70 [ 767.121459][T20385] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 767.121474][T20385] RIP: 0023:0xf6fdefec [ 767.121488][T20385] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 767.121493][T20385] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 767.121504][T20385] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000280 [ 767.121511][T20385] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 767.121517][T20385] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 767.121524][T20385] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 767.121530][T20385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 767.121544][T20385] [ 767.231724][T20388] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4016'. [ 767.286467][T20388] hsr_slave_1 (unregistering): left promiscuous mode [ 767.449414][T20374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.153273][T20411] program syz.4.4025 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 768.158416][T20411] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 768.477532][T20420] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 769.603013][T20438] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode [ 769.606054][T20438] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode [ 769.949146][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 769.949164][ T42] audit: type=1400 audit(1787223607.721:407): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20433 comm="syz.3.4031" [ 769.955403][T20443] MTD: Couldn't look up './file0': -15 [ 770.214006][ T27] ================================================================== [ 770.216823][ T27] BUG: KASAN: slab-use-after-free in irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 770.219801][ T27] Read of size 8 at addr ffff88806d09a9a8 by task migration/1/27 [ 770.222858][ T27] [ 770.224233][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.224253][ T27] Tainted: [L]=SOFTLOCKUP [ 770.224257][ T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 770.224264][ T27] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 770.224290][ T27] Call Trace: [ 770.224296][ T27] [ 770.224302][ T27] dump_stack_lvl+0x100/0x190 [ 770.224316][ T27] print_report+0x13d/0x4b0 [ 770.224344][ T27] ? __virt_addr_valid+0x239/0x430 [ 770.224359][ T27] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 770.224375][ T27] kasan_report+0xdf/0x1c0 [ 770.224387][ T27] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 770.224403][ T27] irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 770.224419][ T27] ? native_cpu_disable+0x54/0x80 [ 770.224434][ T27] ? __pfx_take_cpu_down+0x10/0x10 [ 770.224448][ T27] fixup_irqs+0x2b/0x280 [ 770.224470][ T27] ? __pfx_take_cpu_down+0x10/0x10 [ 770.224482][ T27] native_cpu_disable+0x59/0x80 [ 770.224495][ T27] take_cpu_down+0xb6/0x190 [ 770.224508][ T27] multi_cpu_stop+0x16a/0x4b0 [ 770.224522][ T27] ? __stop_cpus.constprop.0+0xb1/0x140 [ 770.224534][ T27] ? __pfx_multi_cpu_stop+0x10/0x10 [ 770.224547][ T27] cpu_stopper_thread+0x21e/0x450 [ 770.224561][ T27] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 770.224574][ T27] smpboot_thread_fn+0x3d3/0xab0 [ 770.224591][ T27] ? kthread+0x13a/0x450 [ 770.224606][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 770.224620][ T27] kthread+0x373/0x450 [ 770.224635][ T27] ? __pfx_kthread+0x10/0x10 [ 770.224650][ T27] ret_from_fork+0x730/0xd60 [ 770.224665][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 770.224679][ T27] ? __switch_to+0x800/0x10f0 [ 770.224690][ T27] ? __pfx_kthread+0x10/0x10 [ 770.224705][ T27] ret_from_fork_asm+0x1a/0x30 [ 770.224723][ T27] [ 770.224727][ T27] [ 770.282607][ T27] Allocated by task 15263: [ 770.284015][ T27] kasan_save_stack+0x30/0x50 [ 770.285504][ T27] kasan_save_track+0x14/0x30 [ 770.287007][ T27] __kasan_kmalloc+0xaa/0xb0 [ 770.288494][ T27] __kmalloc_noprof+0x324/0x820 [ 770.290042][ T27] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 770.291907][ T27] ieee80211_ibss_rx_queued_mgmt+0xc96/0x1c70 [ 770.293851][ T27] ieee80211_iface_work+0xa9a/0x1070 [ 770.295515][ T27] cfg80211_wiphy_work+0x2b7/0x550 [ 770.297139][ T27] process_one_work+0xa23/0x1940 [ 770.298750][ T27] worker_thread+0x5ef/0xe50 [ 770.300240][ T27] kthread+0x373/0x450 [ 770.301536][ T27] ret_from_fork+0x730/0xd60 [ 770.303013][ T27] ret_from_fork_asm+0x1a/0x30 [ 770.304532][ T27] [ 770.305292][ T27] Freed by task 15263: [ 770.306587][ T27] kasan_save_stack+0x30/0x50 [ 770.308088][ T27] kasan_save_track+0x14/0x30 [ 770.309571][ T27] kasan_save_free_info+0x3b/0x70 [ 770.311174][ T27] __kasan_slab_free+0x5f/0x80 [ 770.312711][ T27] kfree+0x22b/0x6c0 [ 770.313968][ T27] ieee80211_ibss_rx_queued_mgmt+0xf2f/0x1c70 [ 770.315873][ T27] ieee80211_iface_work+0xa9a/0x1070 [ 770.317531][ T27] cfg80211_wiphy_work+0x2b7/0x550 [ 770.319165][ T27] process_one_work+0xa23/0x1940 [ 770.320738][ T27] worker_thread+0x5ef/0xe50 [ 770.322230][ T27] kthread+0x373/0x450 [ 770.323528][ T27] ret_from_fork+0x730/0xd60 [ 770.325002][ T27] ret_from_fork_asm+0x1a/0x30 [ 770.326519][ T27] [ 770.327288][ T27] The buggy address belongs to the object at ffff88806d09a800 [ 770.327288][ T27] which belongs to the cache kmalloc-1k of size 1024 [ 770.331627][ T27] The buggy address is located 424 bytes inside of [ 770.331627][ T27] freed 1024-byte region [ffff88806d09a800, ffff88806d09ac00) [ 770.335913][ T27] [ 770.336678][ T27] The buggy address belongs to the physical page: [ 770.338683][ T27] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806d09d800 pfn:0x6d098 [ 770.341811][ T27] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 770.344447][ T27] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 770.347121][ T27] page_type: f5(slab) [ 770.348411][ T27] raw: 04fff00000000240 ffff88801c042dc0 ffffea00012f0810 ffffea00017d8810 [ 770.351094][ T27] raw: ffff88806d09d800 0000000800100007 00000000f5000000 0000000000000000 [ 770.353761][ T27] head: 04fff00000000240 ffff88801c042dc0 ffffea00012f0810 ffffea00017d8810 [ 770.356447][ T27] head: ffff88806d09d800 0000000800100007 00000000f5000000 0000000000000000 [ 770.359175][ T27] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 770.361851][ T27] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 770.364490][ T27] page dumped because: kasan: bad access detected [ 770.366526][ T27] page_owner tracks the page as allocated [ 770.368302][ T27] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5740, tgid 5740 (syz-executor), ts 50667570532, free_ts 0 [ 770.374469][ T27] post_alloc_hook+0xfd/0x120 [ 770.375960][ T27] get_page_from_freelist+0xf46/0x3500 [ 770.377663][ T27] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 770.379485][ T27] new_slab+0xa2/0x660 [ 770.380751][ T27] refill_objects+0xe3/0x410 [ 770.382213][ T27] __pcs_replace_empty_main+0x372/0x680 [ 770.383919][ T27] __kmalloc_node_noprof+0x67f/0x830 [ 770.385560][ T27] qdisc_alloc+0xbb/0xb30 [ 770.386914][ T27] qdisc_create_dflt+0x93/0x490 [ 770.388421][ T27] dev_activate+0x64f/0xce0 [ 770.389817][ T27] __dev_open+0x490/0x8f0 [ 770.391173][ T27] __dev_change_flags+0x596/0x850 [ 770.392761][ T27] netif_change_flags+0x8d/0x160 [ 770.394317][ T27] dev_change_flags+0xba/0x260 [ 770.395790][ T27] devinet_ioctl+0x110b/0x1f10 [ 770.397280][ T27] inet_ioctl+0x3aa/0x3f0 [ 770.398622][ T27] page_owner free stack trace missing [ 770.400279][ T27] [ 770.401040][ T27] Memory state around the buggy address: [ 770.402859][ T27] ffff88806d09a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 770.405314][ T27] ffff88806d09a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 770.407777][ T27] >ffff88806d09a980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 770.410246][ T27] ^ [ 770.411855][ T27] ffff88806d09aa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 770.414318][ T27] ffff88806d09aa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 770.416772][ T27] ================================================================== [ 770.419214][ T27] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 770.421424][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.424675][ T27] Tainted: [L]=SOFTLOCKUP [ 770.426021][ T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 770.429067][ T27] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 770.431632][ T27] Call Trace: [ 770.432705][ T27] [ 770.433633][ T27] dump_stack_lvl+0x100/0x190 [ 770.435107][ T27] vpanic+0x553/0x970 [ 770.436380][ T27] ? __pfx_vpanic+0x10/0x10 [ 770.437770][ T27] ? __pfx_vprintk_emit+0x10/0x10 [ 770.439358][ T27] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 770.441243][ T27] panic+0xd1/0xe0 [ 770.442465][ T27] ? __pfx_panic+0x10/0x10 [ 770.443853][ T27] check_panic_on_warn.cold+0x19/0x34 [ 770.445772][ T27] end_report.part.0+0x3a/0x90 [ 770.447445][ T27] kasan_report.cold+0xe/0x18 [ 770.449063][ T27] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 770.451124][ T27] irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 770.453152][ T27] ? native_cpu_disable+0x54/0x80 [ 770.454869][ T27] ? __pfx_take_cpu_down+0x10/0x10 [ 770.456665][ T27] fixup_irqs+0x2b/0x280 [ 770.458161][ T27] ? __pfx_take_cpu_down+0x10/0x10 [ 770.459984][ T27] native_cpu_disable+0x59/0x80 [ 770.461687][ T27] take_cpu_down+0xb6/0x190 [ 770.463287][ T27] multi_cpu_stop+0x16a/0x4b0 [ 770.465011][ T27] ? __stop_cpus.constprop.0+0xb1/0x140 [ 770.467030][ T27] ? __pfx_multi_cpu_stop+0x10/0x10 [ 770.468929][ T27] cpu_stopper_thread+0x21e/0x450 [ 770.470645][ T27] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 770.472557][ T27] smpboot_thread_fn+0x3d3/0xab0 [ 770.474352][ T27] ? kthread+0x13a/0x450 [ 770.475858][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 770.477682][ T27] kthread+0x373/0x450 [ 770.479005][ T27] ? __pfx_kthread+0x10/0x10 [ 770.480483][ T27] ret_from_fork+0x730/0xd60 [ 770.481994][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 770.483621][ T27] ? __switch_to+0x800/0x10f0 [ 770.485114][ T27] ? __pfx_kthread+0x10/0x10 [ 770.486674][ T27] ret_from_fork_asm+0x1a/0x30 [ 770.488226][ T27] [ 771.563836][ T27] Shutting down cpus with NMI [ 771.566231][ T27] Kernel Offset: disabled [ 771.567846][ T27] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:56:33 Registers: info registers vcpu 0 CPU#0 RAX=000000000098aa0c RBX=ffff88801cb5cb00 RCX=0000000000000001 RDX=0000000000000001 RSI=ffffffff8bf1a600 RDI=ffffffff8c603680 RBP=0000000000000000 RSP=ffffc9000045fcf0 R8 =0000000000000007 R9 =0000000000000000 R10=000000000000079f R11=0000000000000000 R12=ffffc90002e97870 R13=fffff520005d2f12 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff8bbda8aa RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880969cf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000558d8207e168 CR3=000000006b26c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a33c75 RDI=ffffffff9bbe79a0 RBP=ffffffff9bbe7960 RSP=ffffc90000557658 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000037 R14=ffffffff9b8e71e4 R15=ffffffff85a33c10 RIP=ffffffff85a33c9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096acf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000558d56e9f660 CR3=000000000eb94000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000121 Opmask01=0000000000000001 Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f955a275b20 0000558d82099a90 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f955a275b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69622f3a6e6962 732f7273752f3a6e 69622f7273752f00 0a732520202d2000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b4c470a1f4b4c47 560a5756500a1f4b 4c470a5756500a00 0a56000505080500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000e803e0034 0000006d69737665 6474656e0039000e 0000386d69737665 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8041000400000003 0003000800000008 00b800080000386d 697376656474656e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002000f0000006d 697376656474656e 0001000e803e0034 0000006d69737665 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6474656e0039000e 0000386d69737665 6474656e0038000f 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000e002400000001 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64626265200a3364 6820202020626262 20000a2036626d69 665f640064655f65 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000002 RCX=0000000000000001 RDX=ffff88801cf32580 RSI=ffffffff81d084be RDI=ffffffff8e678930 RBP=00000000000036b0 RSP=ffffc900004ffcf0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000002 R11=0000000000000000 R12=000000010000a201 R13=ffffffff8ea0f280 R14=000000010000a80e R15=ffff88802b424238 RIP=ffffffff8bc0d3a0 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bcf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f4f61da4 CR3=000000006b9af000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000017800000000 0000000700000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000001 RDX=ffff88801d300000 RSI=ffffffff820a57a9 RDI=0000000000000003 RBP=ffffc90002e97894 RSP=ffffc900005afd10 R8 =0000000000000005 R9 =0000000000000001 R10=0000000000000003 R11=0000000000000000 R12=ffffc90002e97870 R13=fffff520005d2f12 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff81d083fa RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ccf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000f000 CR3=000000006b9af000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000