last executing test programs: 20m23.14482077s ago: executing program 32 (id=852): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) recvmsg(0xffffffffffffffff, 0x0, 0x40020000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="05a32bbd7000000000000d00000008000300", @ANYRES32=r3, @ANYBLOB="1970b33f775e8b5a3292089b4a930d6db1290e019e8af7ab4657d8889f3afb121d291238b6f0f3c462415525fdb152c15ca51b1f1ced89dd9c5f686dd23d4f37f9593571d69d748c3cd7d9cc545cf07bc7ab11300714ae9fa5739e741bd62ed275e3a815197d9d4545b7085219119d681b9755444d68c981000000000000"], 0x1c}}, 0x0) r4 = syz_clone(0xca00800, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r7, &(0x7f00000005c0)=""/4096, 0x1000) wait4(r4, 0x0, 0x40000000, 0x0) r8 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) lseek(0xffffffffffffffff, 0x101, 0x1) getdents(0xffffffffffffffff, &(0x7f00000002c0)=""/201, 0xc9) r9 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108) 20m3.87931653s ago: executing program 33 (id=956): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0xc}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x7, 0x6, 0xb762, 0x6, 0x40, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x4, 0xffff, 0x7, 0xfffffffd, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x81000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x180, 0x5f09973, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x80000007, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7f, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x8, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0x0, 0x0, 0x2, 0x1000, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0xd, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x1009, 0x3, 0x76, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x2, 0x9, 0x9a6, 0x245, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x8, 0x7, 0x5, 0x2, 0x7b, 0xfffffefe, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x4, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 10m54.634784009s ago: executing program 34 (id=4380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a108001e000140cde8dfe90e4190000900ac00060211000000160012000a0002000d48035c3b", 0x41}], 0x1}, 0x4c0c0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r1, 0x7c65, 0xa334, 0x1, 0x0, 0x0) 8m1.885400911s ago: executing program 35 (id=5317): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000200)={0x4006, 0xffffffffffffffff, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 7m12.160145121s ago: executing program 36 (id=5601): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) shmget$private(0x0, 0x3000, 0x2, &(0x7f000094d000/0x3000)=nil) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 6m39.735510618s ago: executing program 37 (id=5802): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000003c000000060a010400000000000000000100000008000b40fffffffc200004801c"], 0xb0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580"], 0x7c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='bic', 0x3) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 4m42.690514487s ago: executing program 38 (id=6265): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000480)={0x7, 0x8, 0xfa00, {r1, 0x10}}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x400b, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000240)) ioctl$FBIOGET_VSCREENINFO(r4, 0x4600, &(0x7f0000000300)) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = openat$dlm_monitor(0xffffff9c, 0x0, 0x100, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r7, 0xffffffff80000400, r8, &(0x7f0000000480)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="02126200110000002bbd7000fddbdf25010014005400000001001400db000000050017003c2000000a004e2300000004000000000000001c4000000000000001030000000000000008001200000002d6ef072614e066ab569456e91c70027f00bb6b6e000600000006002b000904000000000000000600000a010100000000000000000000000000ff1200000100"/152], 0x88}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) lstat(&(0x7f0000000140)='./file0\x00', 0x0) quotactl_fd$Q_GETFMT(r6, 0xffffffff80000400, 0x0, &(0x7f0000000200)) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd700004dbdf250900020073797a3100000000080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r13 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r13, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x11, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0012005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x3, 0x100000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) 4m23.108940787s ago: executing program 7 (id=6471): syz_open_dev$usbmon(0x0, 0x0, 0x301880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 4m20.159638601s ago: executing program 7 (id=6494): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="bbfbbbbbbbbbaaaaaaaaaabb86dd60122d9200103afffe8000000000040000000000000000bbff02000000000000000000000000000004000000000000050000000000005d344c54c2c0223ac397d6831d7bdba484f5fe8f8fe5222aa3e4eb1a96209bffb705aee14d52365495bbe889cc0ff68e378e3369625dcd2d2b76e7ea0f3c6124b41081b12b2380e1d6a82dafe4a91d61940f541649186f7d75edb5deacf659f075a41e1e31cc22e574aee80b2727ef640d3ed303c479e7a872778635912ef984b1bdb96b2a47c9b24797e5126bccc29badcba2a23564c923fc1f69f57cd1"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) read$alg(r2, &(0x7f00000001c0)=""/37, 0x25) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000140), 0x8801, 0x0) r7 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x7, 0x7fffffffffffe, 0x5, 0x4, 0x9, 0x7f, 0x800000000f4a, 0x100000000, 0xbdb], 0xc000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b30, &(0x7f0000000200)={'wlan1\x00'}) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_io_uring_setup(0xefe, 0x0, 0x0, 0x0, &(0x7f0000000000)) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 4m18.937281095s ago: executing program 7 (id=6503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x48840, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000730000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x400, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000338e03eb00", @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf252500000008000200", @ANYRES32=r7, @ANYBLOB="05002b000000000005002a"], 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x800) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3f) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="170000001400030400000000000000542d"], 0x44}}, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x1, 0x8a57034000000000, 0x7, 0xb, 0x10000, 0x8, 0x674, 0x4, 0x82a, 0x7fffffffffffffff, 0x8003, 0x7f, 0x100000000, 0x7f, 0x7, 0x4], 0x40000, 0x40010}) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000001f00)=@vmx={0x100, 0x0, 0x2080, {0x26000, 0x40000, {}, 0x0, 0x6}, {"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", "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"}}) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000680)) 4m18.645110315s ago: executing program 7 (id=6508): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r11], 0x5c}}, 0x40) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x884) 4m17.182940936s ago: executing program 7 (id=6512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x155, 0x0, 0x0, 0x0, 0x81a0}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000180)="b8746999d1f3d6d851d9265d21bc", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r5, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ad", 0x1b}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6", 0x2b}], 0x3}}], 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 4m16.727234953s ago: executing program 7 (id=6515): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x4) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYRES16=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x2, 0x2, 0x0, 0x0, 0x6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="76389e14050000007583ddd08906", 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) writev(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000d, 0x4c692a39de1bb97, r0, 0xfffff000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = syz_open_dev$sg(0x0, 0x0, 0x802) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x41, 0x0) ioctl$SNAPSHOT_UNFREEZE(r7, 0x3302) 4m4.395282819s ago: executing program 9 (id=6572): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 4m4.21989592s ago: executing program 9 (id=6573): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x80020849, 0x3, 0x1, 0x2, 0xffffff01}, 0x20, 0x100) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000580)={0x561, 0x0, 0x101, 0xfff9, 0x17, "5f730000a9003f00"}) writev(r0, &(0x7f0000000bc0)=[{&(0x7f0000000800)="14403565", 0x4}], 0x1) fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0xfffffe0d) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$panthor(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1c) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0086426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r2, 0xc0286429, &(0x7f0000000340)={r3, 0x9, &(0x7f0000000140)=[0x8001, 0x6, 0x8, 0xfff, 0x5, 0x6, 0x9, 0x0, 0x5], &(0x7f0000000180)=[0x5, 0x1e, 0xfffffffc], 0x14, 0x0, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x98, 0x9, 0x5f69, 0x6]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000080)={r3, 0x2}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 4m3.330891457s ago: executing program 9 (id=6574): syz_open_dev$usbmon(0x0, 0x0, 0x301880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 4m2.237779591s ago: executing program 9 (id=6575): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = openat2$dir(0xffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x101002, 0x145, 0x20}, 0x18) faccessat2(r1, &(0x7f0000000200)='./file0/../file0/file0\x00', 0x190, 0x1000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020}, 0x205a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@redirect_dir_follow}]}) chdir(&(0x7f00000001c0)='./bus\x00') ftruncate(0xffffffffffffffff, 0x2007ffc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x6f1dd9aa, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}) sendmsg(r4, &(0x7f0000000640)={&(0x7f0000000540)=@ll={0x11, 0x4, r5, 0x1, 0x4, 0x6, @broadcast}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000180)="d09b6d42fd81685544f46c3f0800", 0xe}, {&(0x7f0000000080)="4987", 0x2}, {&(0x7f00000000c0)="64dac7d54e547911fbd7556d3b5e63fce1cedfa868", 0x15}, {&(0x7f0000000980)="7583076989fe973a150f58a8a084842016b110af59", 0x15}], 0x4, 0x0, 0x0, 0x11000000}, 0x24008814) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$netlink(0x10, 0x3, 0xc) 4m2.170407459s ago: executing program 9 (id=6576): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x1000, 0x0, 0xffffffffffffffd0, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x500, 0x10}]) 4m1.788512987s ago: executing program 9 (id=6578): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000740)={0x182, 0x2}, 0x18, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x6, 0x4, 0x6, 0x5}, 0x50) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) (fail_nth: 5) 4m1.771352067s ago: executing program 39 (id=6515): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x4) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYRES16=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x2, 0x2, 0x0, 0x0, 0x6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="76389e14050000007583ddd08906", 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) writev(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000d, 0x4c692a39de1bb97, r0, 0xfffff000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = syz_open_dev$sg(0x0, 0x0, 0x802) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x41, 0x0) ioctl$SNAPSHOT_UNFREEZE(r7, 0x3302) 4m1.554814149s ago: executing program 40 (id=6578): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000740)={0x182, 0x2}, 0x18, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x6, 0x4, 0x6, 0x5}, 0x50) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) (fail_nth: 5) 3m48.319398071s ago: executing program 3 (id=6650): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000001900)=[0x0], 0x1}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000700)="ebe3a0e9796cfd0600e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730c5af785f0b6acb07f73e6b493e177d0f41ea9f444c9b1c759e26c0a0fcb0fc7811b38c9f091a22dfbb6cea5b13d08c3b788ee1eeb9d5262bd5797e23f4868a3083f4c7bfa5b81c2e33", 0x95}], 0x2, 0x0, 0x0, 0x20040894}], 0x1, 0x20000090) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000500)=""/83, 0x53}], 0x2}, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'osx.', '\\\',}\x00'}, &(0x7f0000000600)=""/102, 0x66) ioctl$SG_IO(r6, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x29, 0x81, &(0x7f00000002c0)=""/129}, &(0x7f0000000140)="8536b60bfad6", 0x0, 0x9, 0x10000, 0x1, 0x0}) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @remote, 0x9}, 0x1c) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, 0x52, 0x1, 0x70bd2a, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0) 3m46.279603984s ago: executing program 3 (id=6653): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x9, 0xffffffff, 0x40}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x2ee}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = getpgid(0xffffffffffffffff) getpriority(0x2, r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f00000000c0), 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000031c0)=[{&(0x7f0000003240)=ANY=[@ANYBLOB="04040000220008002bbd7000ffdbdf25913a50971c1570ecb88aa88b1e05d028382cc385615472ce0a07d8cfb86a3772a319922ebbac890c385f4c4dea5c6c2345aa07d7d8b71aa2f78c7cc081d18f7270de1ed80a7efb1c2dd33f74b7cb8259e9442b6e522e925424d0f74d7736e4fcfc39837233975a64b3424bb3c077e6d91b1eea109f6a69af80d452155eefcf4a2f27a56d676d385c190cce22f3bfb2268a83e8e74d30e7b4a58ac2aca52ce9921d896e85223ef6351b6a01c0012d5a65087d21f1c8e78d7276999bcd8b10b727bd0f7373937888e80e16fe0eb1e733b32ab7dd7c12afc3ffe6d353bdeaaef93fecfc0e13ec902a8673d076cf5cc9d7155e8a39bcc9b44d898a5b57233860936f1ad36cf09fbaa4828d5e52db8ce0b71f1e1ffaffd86e6dbad2225ffda2c4e3572e64060aac3a3c969fd86c74cb006a0031533c5ad8b1a68f4cda2050807e3ff12ff01ed9babd7c2a8d4fa808f93f476368f604f11bc721918402cf06f8a7d15275fc66ffef37897db69110cb63894ff8d7394f7a1c69a2b1199159f13552f61b3876dc94adb17a7032edabbab3be3517a274e789ef646dc7c5f1a1832333f3047939e82d4be37c3d2d5ec943588302041acc71bf2fd13e50225301ea93dd7e06cdd07d4d90626107dfc23c0308bbd6d6a665a1b705148e54503d2bd861df67e7d2d7ea6fe61fbd048123eeab2d65d905aa96607e256fc500e5f749e3360458f9001fef628d9f419530cdd12131e89dd4a3e48243f418be0e9a70d1a2875cae4eed56999b4375b692d2336cfc6c8b36a41d0c448b6c5dc139d5a5944d2fec10e378fd343871e73731cd3de86ff894af130b54993ffd3c6193a1ca6569391e3d1ddf4c82e5f6d1da0dd17689bdac6f091882654529409e482bb0d73955435d952423417b693333507db21378edc8e94d72cb8a84ee2d0ad88ef333ede324cdd0ce1ad2c0c5541b816a3b5df903f148e0b5c09f91609dbc37454fce8ce9a608ed5d3a32f36c53435e5358e22f6c5ddb9189ac4c29aa3b64d5e3a5c95860692b9e113c388a5cc01685f1aa080042000000000014001f00fe8800000000000000000000000001010c003d00ff0700000000000004001f80883f84ca7e625df3703d020600e6e35ae9f7977e0389f21dd78b43331cd990a352445327d087e26bfc57e68a9fec0cb85e1d36616c10381f3b5b7e3ac0a32fd9145bd8e4ba0bb3205d85db7eefcc1b86fa6d67c4ff77098c929d3547cbb38e558a84b4cfbca342680ba1a30aeff617d497360417d5569be3e816e997efab56c3c55d3f6d256ef667a25ce83a7ac59747d06af5eaecb50e7f9f49a95349ba07ee942329bf495f97c93576dc1d974bc3775707dc69717c78578c5348c4d7f26303ddbbae90b31afe2a92acc7fbd4b63f3a5ae105e03453be9cad00000000000051195cd06142daa623faf251882cd0703e5f177baf9a037eb1f5c3388b32fed758e8e42ae614c66a0e68a29ef534eb68baee10cd4aef0cf3193e8ee8a96716f5681b827739009656551f8b4903cbb9d0e40ffbfdaca3acf231072f1ffcc967e889f5fb12a96e3a5ae6045c2f81d99c6fcd2743189c2ce756917dde78c7c07759ad772f93bd1c76186275595c2682602b1ac15a4a04e2fc954b90e4f08a50b5dc997814bdd27d28a1dd7e2ce474a3156dca1f641c6e04cb3fb9d5c0421f641c74fb8b7d4ccbe2bd1f60f8eb2880df972efdafd5bd5d88984742d0d321ba3594ff7620800b97db0396aa0b2f42b7bd8a71a51b6376888e43de3228455d07d236b69de4d143fe4bb6fd635c5214d7e02d074763e9c75ec872dae05a315f030fc9d1aece6163a6c7f8df26311c77d5c215c26f7ad50b46b69e028f5aac9e398eadcc726d9659f981b8467716fecc1f46fd9d46a2235a02bc56f1"], 0x404}, {&(0x7f00000010c0)={0x1e8, 0x31, 0x10, 0x70bd27, 0x25dfdbfe, "", [@typed={0x5, 0x43, 0x0, 0x0, @str='\x00'}, @nested={0x38, 0x4b, 0x0, 0x1, [@generic="6ce9a3840df453ee6371cb83a66f93d1a27c764c6c29222f8444530b3b1e4294d983f5a2a814549a2c8a6f222f01d11d2bd1d23d"]}, @nested={0xc, 0xe6, 0x0, 0x1, [@typed={0x8, 0x140, 0x0, 0x0, @u32=0x8}]}, @nested={0xad, 0x75, 0x0, 0x1, [@generic="133bfcbbb4af5f88361510f8c9a6e13abfd5022534c8e372914d94a06b10e3ae2ba3d6ac756aa0c0eed8e51995a5c2260a52dc356dcd94c4233b22e5a1dbd2c24d5fb282e9a8a71b3af0813095d09d5e5f9d255c22629798e8bb49a20fca121e555c23959d10db8a76decbbb7fc1177aa38c28972b3921dab2f1675705e097aad37c84a5c43c9410383cc2fe5f09a470a41914bb5177994c1613e1be06235b93b19b87d151", @nested={0x4, 0x144}]}, @typed={0x11, 0x37, 0x0, 0x0, @str='/dev/urandom\x00'}, @nested={0x59, 0x80, 0x0, 0x1, [@generic="49022c4b5cd85b3a47b21488589dacc7574c1a060d3d1b2c56e307e033c8b2d4946c0c751a795dae9929de6e8e417f7a3aaac65cb29cc4bcd69d87d5a33d4390e88608ef110f93e346549b6b419432475a35b6195a"]}, @generic="134ca5a96c85261c97cf8928b12a6537bc46e8454dde951dcbb39cf0127c3980221aadbfd6b45e7f152b5801568dd99ebfefd12686476a26394248b30ff4110dee5bae19891034380985f8b90cd018d573d14749c1a66c7626f942d5d2ea75f328c8461590174f3f2f7408f3"]}, 0x1e8}, {&(0x7f00000012c0)={0x54, 0x35, 0xfb08f2d0c0971ced, 0x70bd28, 0x25dfdbfb, "", [@generic="474fcc26711f3f299e25039a0f4b0e6e5826e9aa01cd5f582016270191e351416d5ac5dc9545c3777e6123d6027c07b7c0a836818bf0debae3ba9df9533611c8355dfb80"]}, 0x54}, {&(0x7f00000013c0)={0x1464, 0x39, 0x0, 0x70bd28, 0x25dfdbfe, "", [@typed={0xe2, 0xbb, 0x0, 0x0, @binary="29b10366aabf6eb576cb6c12b15e182c726ad9d7e5daebf14eac869b7097169d4c24b77b1c51aab4998f4529a5ec8a4829e2042c3f71c0c1396c21576e7558c10492502814b506ec62d4d400caf02c29a4e60e446de7d8d8839f3bef4e8499f4e364ac5ca42f7771d8c34bb660de6668928178d57843a07e3a1663eb2bb66ce9128c8f278bdd096a77c14809c0d96f052fe6b9ee8e8fbe17c053b89996de5a61d893b6e1dae55fa8b0e7fe0be41ee61b15b3d83705845f0a85b4bfc6af26f6bfac655fd6e6329659edcd828576dd6ac846a7961b721220cfcea103c079e9"}, @typed={0x8, 0xef, 0x0, 0x0, @ipv4=@empty}, @generic="ec6024954b2e511af35710bd3940ac00f97f9622515653cc1db03b1b20402a868a5fa1f171833dcf6819d909aa333380a7f4033cbef3d18174397005042313679e1529b67b882227d0c4a3df9750a4db7fc9e9160f4897dcaa65e757fc61b015a2e30c5a0aa157a36807472425e343ffe23fc5cddc45eccf45e55cd3aab58bb2edd50dce94ae2d1eac90033e748433461d69e7f57d21a154c423c2e015ecff3de5907e18b6a72a66936f8f0843963e722e6d", @generic="cc051c01d122a613926a5e8b6feeabfe351b812e47cc8b8a5d410ef6ad0aeff953334efad557c77636ef216d5337a98d1eb1755ec624deadf1e40fd80478f23a8acc1d95d24fc8a41b524a4a19e867ad8afcc619809822feeb96b92044860d404cfcb072146d38becb23fd4167da5bfee69c16449c115ef222bd313d4b07d773fd731c894bd37702fe694448dd52febddf18247c71592e3df53d7dd506d6491b280e0049e3e79a908e842bb04c11e93fb90b8cc27c83fb362512b37b4ca27a0f806cc4b51a666051984d1cd6c81ab1bf2bf1726bb57c7370f7da432e0a26b7822d3d7248517c8d869e6738725ddba8b7b68dc3ab33991aa1197e4f66f9468405187bff675d5fbc32e87d4db79b55d65b256c410c4f56bb9af6f617ba309e651cd7f967388f2633f31ddebae46ef1aa6e336a9739268cc4b188c37e48f930401404e0f97e1fa093e4ddd79efd6693360afbdd85b72bb0a92a7daf082c24ff470f5d72fbd2fe9e7f3d139f6ff125c8e618c500bb77223b64f76b3183d3279a71b5ecb41f9cba797c2639c9544cb05d27a6419f76dc0335b0708f043bdde3646adb44d0fa989bd53479e8a829ddf99c22776d4201575aa021db3d8e7eab476e623f9386293cfe98a33c60ab9d131c3d14fd4d50d5dd8f2310938418f511d904d8a490ad66acdbba8096835e785957c1a240a5550e37eb3113de2b79e7015b73eaf04e933729938a957c512f2032725350255cbbe406ae82859f75e75f8c7c69321b47f4b1266823007126a9e4ecc8fe32144af5a6f73ccd9ab82763fc23cc636ecb10872ebbfb06a1b0b0c6a80fc611e7e73e6b73690e27e3292350050cfae935030f17df56d9d2c43c95db3b781acffd7d2bdfa0429e8928dd7e22951cfb15c23a4c13fb90cfe9b19be68d9fd70bd12790666112e5c099276d0b48a158c4a397b2735e34492ccbd9ccc2da4e55c54a11f4d80aea7a30bdd32010a2c86e6407dc6e731db416c5925fedfe3bd0e585a36d49dcaacac54e5c8ac6fa91e9e81af3b011706ada20b006250efdc861d263d8c2b8bdb52ad8050af876d401347f30a1ddca4ea69ef11f86c2a262562a331345b3a3fbda56b3ac8fc0bb8e05aa6dd5ec63d1922071fe6c0fd31ded91be27a62d285d0dba6066a3db94f84c69d7ef1380816052bd3ef874c954391f5fd55afe741b2458d333615416a7ba2fff2ca2554a16ff633ed3d0c8ca59cba77007a061d1445a6f50232fac956cbb33ad966b1780ebd47692173069d27d46bc3906040ea684f5a4e34d221c939a395e65d698074be52c7060e03185547d0444aa4508ecfbad9390f91560fad6f6577bcb0772550d596f66d3dde819affbe6bf7f94ee374b1fa16f2f94d6512a89cb1e820ff77ff7585afdfb46843eca83c38f4fde9a45419af1b1e746dd566176b51239a64437ceb40688b74dc5ad3a83e01efedf2d1b52184a0d50fef9924062ff31e00271a2758546292417544b50cc21672c18c7abeae9b12167fe00217da25836e2a3982c7ed2b90a74663c2124721857c4c32fb0b6c026b561f4292988a880b2076131cde96569b890fcc7ece992f9e950329ef6a67073bb474582524d69cfb306fc830a93ec8c4f21778c52ad07936418995e694a9535ca1c8a53fe048aa4a9b85cd3687c71957dd29e4829bd444aff07749caaee322498e3c9ee59697da0544ab640f221ffbdab6f4fef32be128b32b6442242528a854e07167c72418c7a08549c9004f9856bb56bc064c003c57058bd591ac9a787bebb0fe1071d65388f0c31a8a33dddf40e50e53073a9302d3990608e6b8f49c38c1172327e83815a9482e76c4434f7c18c67c267c38bf12d603b01c687140fbe61f1f4e965b1d616c7b3511433bb5bfb5a1bfb88ae07478c9f2198b50771ee368f6f344d6c461a9a47198b43f3d08d800fcc545313b0ec2a0bd7dc3b7476808d60440e44a957ada521ff94bd078a597703942c45b191266b5660722ea2b132f1fa46af881a68e7a653fd3c07addeeaaae8f30814fe1d523daa037f125a4883a1ca68b134f25fd178734a2ba9cae7c0ee96626bb492b8b33525105cea1711367b6f0dcf9ffc849f794638c9225ba32d27011766377f4eef8848b30f59aa3689ef294f038edcf75a3c24d52e556165aed4f71e9b41675b9b6a7d39523a949feb71840765462b499f87a90597d3e378e9b82a60ee5b4b2e7e671a1316d6a38f549931bcfc99b9ee15bc4ce34af9467f6c69bc5c37782730359aa51691eb5974564dad4162d9df107efd9ed8c7ddecd525f4bf46bdfafba7cafab945f8b95e45e9d78e60ca4de55412ec5cecd94eddeafbc7b7855c6390f923ce0c4d175c68f1730b996b922d672f337ea239040a5a2083ecfc6fadeca93edbfffd17c06cb7649f115f49e7323e86c6d3f0b165b0e043adec595b657921dcf1cb61c37cc99f705834a9dda7ed06e02282e92b0ce0f5abfec2ca90855cf2aa8b32de5ed2288ba53863f21da1ba3684d99331010fe2c127a81e6cfced4bb79a3ba53c2b4acbff5098d36ddbe88a9ad0d93bbfc7ef922cb69fa81cf4575578e95c2bba6049b91536036e0732766ace8dbbf8706fb0a6da9d15c04f9c7c6059bcb48515093d64c2ee062b25cb3d3e968d69c4a6d7be35293769659d9272d582103db78dff67326c3598b20532793b7d7c025e7da1b13cee5607763f50c88ed8d68173275eb36162eda85db8ab6ec114660fea815e614a17c4edce2695f44134aebbd39f3aee0b7b4857125b31bc1932c3d92218895bb43c45e4afdeb39dfbe32bb1d1aacdecd92761d10e31689f0fd0ce8212caf6818454f9e85bc9d623597e2d4b79e35b59af91289df8097a189fc4d950de2f1a658007764f2156fa32a0d888c28497b1146a2a44c972871e31e0ab8913afef68d414b3c03f2e36d88f7a434e05fe4c1bb207a463310eb6ec9354d91862a3638382a45c435d04866e6af6b9be1503ab7fc85add648c3f0f522b5958b4f9d85b435f9fc971c3fe49c10da49931f8e7fef91153d515a8ee6c03d99d1f2297e6bd25d34bab55eec312f48ec569fbe31c71947755cc42ef38323bea817ded93ce577158f9e0ce5765b9f02496f24901b5011349bbbf6e119a0f896ed351b2ac59ac6717dae0a13d1759182bb7c0fcbe93671142bafa261c7310a901824ff6170ebd841bcac3232888938dcb3008f39d8f60e252e976c80481c75b038a88b2abedb2e766b3d015149967b666c2dea0d94df6f0861de4a687af6b3e2d71269e5bb235fc62f4aed83122cded9752bd9c5475726b3274850cf5e90cdec6965a65d0ef2959fba8b3a226fc9e3b4985fe654a410136ab0e4a95a74f222828a07a93514705bb6289828582f93cfd9ee3f394593503a50f5ff0614530d9324ca874726db7aeee8c3d0974bec5e2c45951877c4d524606dfe881afc4f5f5895f5c5225f4538b223a52f3e2023ed5ae9c433d3173a8d894d51ae8e7f97d31f62eba245b0ea88cbf4973f229d3af2d825ff1e38e6a3959139a83107953424ad354a933c35a3b34194e3010019c5cc4d837d959d1693f6c70e57db76c80e133024fe09617de1fedc12c6aad64962b17bb9d373944854b27a1f2e2fc272770ca24d09886b7c2f1d652a4c362c95666630839109cd870067f22d68a567fe7628b6dfc672140af1e6bf4f0866e6d68bebf2f3844c3a5dfb34a83088dd0509b2f77b6db0d5f4e447a5b67b6b38599b6fd4a55c801283c17e9f91a258ccd4bf70a186edd496c0743489ed8b9c3202f907c0868ac8ff67a71bad361f630a03b8274b176183269e91fb1d6c9ab3b2bdfb34b635f7f181b68299fd3537d18b67f2111910007f4f8370aceec37349f8cabe5433e3e9bc8ec1c420da19e121e889a1740b3061f7f137b75275f2c5f46d9fe3c6637d898bea417dfcccfac6f1b730039ce97ae59b5c7ed9fc1b0c46ac64c0fd139d15799412998cddf32377decd8bfffa5b5858eeeeae59d32b33f7cd383393f8189f6db9195444b2a03190c9ee97f3c660f648a8906b4e62e8a9bed99ad7e077bef569d045bbfcf0f00bddd664e73ef2f1ac2bac1f76f93929bb137d8a2e4e903e5dd78b9ad389c3a6ae2859b590d49223c78c6ef9f84ef4de55b0fd465fe6ec5f7afc19be5c07cb6b4d04d3fcf15189c5acefe06f5c76a9a13cf09a9d3c63820b0fafb1798b42b21e782d7f5d1d22fd6738cfffaac6cb02e5b35ddff9d39795e0e2fe3fb88516d0d74fc972401d2dcbe758ae60f3b5ad4f1fb2ddb1b92465ff9050c58a6fb61cebc2e3e15e0f59ef331ef9635ebe3996b6bee0aff62fd753e0f7c34f197e63b95775686df53ad468c0230ff12be9d3840599f7caa7015ac6f2d271477727d551ff7454dc38c4dd77c8954dd9f0f54f0808044524a1c9f85db003e473ee45a70f3539f7019a5062e5f3b7e3f36341c3adebdd12d288bcae49f06eab7faf3057dbbbb348e933300ca54b427b576fe71702a728c0ea6e764b073ac2a758963c8108b6f70bbe565544c61f933f317e2db95dfe7aaa456bcac37d4d7cb9313c2acd47bb41e1b5dd9fa6ff6afd78c085b65dc2f86899e355c8e88d07a2b3c8d2737c356aa4881c2aa4a954391ccec785002cb9a0be62ebfb753914ee5272219dd8aac14a753f25d7c5715bb116f1e3fc2901b12a485d97a41c0a8e957906eaf50540c383ebe6b23b6e21f87cf0f8428e9cef00a82af8a256cff9289ca41cbc8fedae045e1f7b19a320b2ded233447938beef37d7e24a5939d8b893db362ec9c442633bc502cb36dbd1dd95473ae97fc05d1fa32a418093665b4d8683092178060ccea1911f44e1a004bc98a548c79a6e4d9a3af6efab061166d3f4cdeaa03460b43bc9b2d8c99ac9067a1168210b5ff9017ae3e150a5d5593e35bc75150d1f873a1aba4e0a5870ba52f9c66ef9a86540b314067166655f3ffbee472db8c5046b693021699690e398f69d8aa0cf2f22c2dac26103c05575527a9b95b3b418d885e107e824fdb346d8ecd6c2ea9b425290fa4f44727775c9c31438f366c0c6b35d777bb3dfa265dce4b14f07f5de38f695bbd043b93739c6bc0ef5b7d96fff37fb03b3bfe7e7e46af263edb50ff5528db0359afd2410fd3cd2d786b26f22f8ced8fecbcafabbc3985883b7fbb2c4997d87fdd919eab5b2c156a335ce8d0a8a02fe3416772882af75de3ab40db9830a4d61e990d44b98d9ebe30adbaf6b26903eb2339f89af5bbbd3dafede9c9a0bb49129afcc33cdf7fd6b64c1543a155c94f9959000b02dd8524025cc143964590870615ad8068750ecd13d589cea251a694795a88ecfb9ba4f989f4ca13989a91034fb727bd75a3a810f59d3fdd84d4827b56f43d379680f8ebbca9740ab28e2e596f64f3f0652cf432f01ac5a144f93cc7e7d5e420a96543d43696a0393e0df815c69bb3a642c6985cba5dd3e46aaa9971b7a01e13af84143546b65533ed49837743817cd546e5ac3efe03b88cc077216f0566b06d5625336d502542347c96106f4f7eabff613585367a463124d74c9bf9e72c8c16cf5d177ee2f889bb2bf854d08afed44be9211250645d75350b1c64f8a3b1fedfef3c6b27d0ca5d9add2af9fd8ed916b777bf9a4f5ac9382b9d2b8d588d38ceb9146992ed93d32569b750ecc5556a5432af1ae7bc89b6342a74295d10e8d3ffc7915cc428ce5e9f14232fca4d7952fd375af54b060ff63316f1439ed70f9374c2eb013c54a05d3f555f958a820b6ea37b4da1de4e7fa0053b5c0360", @typed={0xc, 0xec, 0x0, 0x0, @u64=0x80}, @nested={0x1de, 0x102, 0x0, 0x1, [@nested={0x4, 0x84}, @generic="eb24357ef15c9dc69e64c72f4fb4dc6a5df06fb16e2fd60cd65400fe2522191acccb6fe635749d4a7eaa5af794ce81cf9e93b478a089024647c639e8f9889354828f36b081badc0554a531c8aa43f9833ed15406522bebd481c539d2c96868c277a238c635614440fcfc60d020fe0f38554935848c0db7e78c7b96c66233f820d79648f458e7c265d86bca6d646f95a857c72f0d3a5ff11ca896d1c6bbda12459f35f70fc2a4ce332f81e043801ffa83597b1996c68c33b570b34b982c16b389b6fde0fdb6ad8cb0720b56b0a16bd7f3a1b6", @typed={0x8, 0x8f, 0x0, 0x0, @pid}, @nested={0x4, 0x34}, @generic="bcca6f2a01ba5374d8f3badb9b5db048a09814d1fb22409d884670c945662b19540934926cb3e0723c852062cb045cd8a2b7663ecdf286999ec9e1fb6c7cae92e44db15674a05b1b2c93a573b8e04cbf79403994044150d5a22f56fe9b80b876a666c52f2ff93e56d04aa6ac6ab7f5546b605d977db11b9d7d0665377bf7fce86a736609bb1f40f3e0aa9264819aca7ced77a0e1825b068f2f7b1a7de1bbe8ce2a76a2156b032c279d71e42d60cf7feb47cb4db615f7c1c089c28f876ac257c7650e52ef297d2844051ae941c46b1933586bc6c620573197ee398e303f29bf40", @typed={0x14, 0x39, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x40}]}, @typed={0xb8, 0x11b, 0x0, 0x0, @binary="0313ab3c5d27af80604fddf6e4615e57e9fe8e962039190d5726a0c4555880611571df182b28eabffd9260030f9e36ae0114170f76ace152e2bee5d76a237ec5ac288264d072e7d465fdf8e1caf86da208952829d731a945727126e1798456fcc1a3d19173323416656edba14ff501a3ff8577240af312101d3b1ee3c4cd9f1f747f8f3ced039dba3dda1df8344fc32c2bddc4ff2c48f4e7d486f163b141544fab245190a219dbdba0647167996e45fe81ce8f24"}, @nested={0x10, 0x3d, 0x0, 0x1, [@nested={0x4, 0x75}, @nested={0x4, 0xf4}, @typed={0x4, 0xc1}]}]}, 0x1464}, {&(0x7f0000002840)={0x28, 0x30, 0xa34, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x18, 0x2b, 0x0, 0x1, [@typed={0x14, 0xc9, 0x0, 0x0, @ipv6=@private1}]}]}, 0x28}, {&(0x7f0000000500)={0x1c4, 0x2f, 0x800, 0x70bd26, 0x25dfdbfc, "", [@typed={0xfe, 0x2c, 0x0, 0x0, @binary="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"}, @nested={0xb3, 0x14, 0x0, 0x1, [@generic, @typed={0x8, 0xb5, 0x0, 0x0, @u32=0x40}, @nested={0x4, 0x132}, @generic="a3c37c8e450b4385e645506c344fd618dc3b0e3ad1a90c4a1039a1142e35e206c0a75e8ca2a510ac9e78d9b33eea89e8ae43f59884b10eead8826bfa44e39444b06f7523464dad6d2d9dd9f24ec7eb019d94416e7ae4006e332b3da5f46f70788ad7cc4e97e123645c403059d062031f90f58cbd34743c58d6b88fd126b02452da3c46a33fbcb4cad650296e1a6eaa6bc1fd6f5a88849ae0d7dde3", @typed={0x8, 0xab, 0x0, 0x0, @u32=0x83d0}]}]}, 0x1c4}, {&(0x7f0000002ac0)={0x3a8, 0x1d, 0x20, 0x70bd29, 0x25dfdbfe, "", [@nested={0x1d8, 0x140, 0x0, 0x1, [@typed={0x102, 0xe5, 0x0, 0x0, @binary="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"}, @typed={0x4, 0x77}, @nested={0x4, 0xeb}, @generic="9853cf677c43b244c1878a7158a024aa8fbd606d08ba7b3daee634bae496b48679994c6d10c3aa976a4488cc47d175baa17e47c65ea98ce79fb1a5f191b0894ef9db6b93b82a0a26ec3760aa565496342e02964875f229485d58f68f682c8b6e0e8ca13605b7a91b6526306c9b196cfdde8a32b077c1ba7d4e0ec1a29318f35d7045314ad3388b591b2e20aef9d96426bbb7a73763e89ff2c81e3d05145efba36fee7e00b6a7646bf9d1a4bde99738bf13962299795180cb8221c855666987", @generic="4d0741a1df181bb60f"]}, @nested={0x2c, 0xec, 0x0, 0x1, [@nested={0x4, 0x102}, @nested={0x4, 0xfa}, @typed={0x5, 0xaf, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x140, 0x0, 0x0, @pid}, @nested={0x4, 0x59}, @typed={0x4, 0x138}, @typed={0x8, 0x111, 0x0, 0x0, @u32=0x2a0d}]}, @nested={0x193, 0x128, 0x0, 0x1, [@generic="b7fb0555c475ad685332af0145e93929e165c82fe9d3772007e4d9f0095e4eed8487da6f464ef0da9f8703e4c7d6e0faaa8f5cab6bdf0b847be56bee4fd666512dc508827b5a137b260c9b2837d871a55e91f5d17b6195c3b1dfd63c21dd96d8014e36f83100820fd09c2561f3c959f2fcaaec7918", @generic="dabbd9ed6cf1f1cfa55d2bb46e3d3f478fbd38970bfc9b4a6ed70fa1dc848aeed45140b06555f27538f5b3e72294ef402807c09479fb6936b4c0c1107fd30db1a93f4c10957eed6e209ec1ceec2afc511c649c302a26806cd59a47022a938f0d5c580fc0720faaf2f94f50a7adbcca24e2d1539a91c27ad025b503054384b9094e933e0115eff1d8068ff617e19481de41c9f6a5254a34d47d72764303abaa684ce9e6367bde36a73aa5105f992e5b4467d859939188a6144b2e14c10ff8f4e26b501151dea34274b2d4998298a240b6dbd07b9f1d526daec720ee51dfd450a2e352980a36c379a7aa163b1036a291015fca4cd31bab104750c309b3473f", @nested={0x4, 0x148}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x8c}]}]}, 0x3a8}, {&(0x7f0000002880)=ANY=[@ANYBLOB="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"], 0x150}, {&(0x7f0000003000)=ANY=[@ANYBLOB="cc0000003600000227bd7000fbdbdf2563f0372f865e46131678ef81bd2e2a1e1e4e5c580f71393f02907dcb97c7296b2b5a260430aee19d6527341faf9cd43afbe3cd337d7c8a52a85845972010795f71f5898dbbc9cfbc2a1727011dd2df533ff22a723fcc4ddfd97ee4c2e3ec4248f61a85b1bef7abfb9c27e67acca578436656a70d5602c0c144be3de7dd69061e596d32d1a57481c456eda2253de3d9cae74012f716704ec5bbd1e03a7b51aa66ff3b672c712816f5f01b00"/204], 0xcc}], 0x9, &(0x7f0000005380)=[@cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, r2, 0xffffffffffffffff, r0, 0xffffffffffffffff, r6, 0xffffffffffffffff, r6]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r4, r1]}}], 0x90, 0xc000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af}, 0x94) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc04c565d, &(0x7f00000003c0)=@fd={0x113, 0x0, 0x4, 0x1000, 0x0, {0x0, 0xea60}, {0x5, 0xd2598af09f5c086f, 0x2, 0x0, 0x48, 0xf, "3076eddd"}, 0x4, 0x4, {}, 0x7ff, 0x0, r6}) sendto$inet6(r8, &(0x7f00000002c0)='E', 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309002500000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc60efd680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca512b5f379c4eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7f804bb4713019a83353dc519d11c3cc1c22a3b86cf3c645413fcea0ce9ded703699d2bb6a4a663b99b6069da5aaf64785a58847440f064b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200216032811fadcf1e0f49a514df529061e09ce45e3f303a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a250200000000000000d23d324205000000000000000a617f22133b6cb5087f4c6057942ad995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a3cff46591ccaff3075b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8841416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedcbefc5990d7fed29a002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d559b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756d732533c2722e03002293e37966611602f297de6ff5408777d7a93c45cee3ee5c56e8a3e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f6579ef62866a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c909cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc562507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f80000000000001700000000000000000000000000000000000200"}) fchownat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0xee01, 0x1000) 3m46.070701174s ago: executing program 3 (id=6656): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (rerun: 32) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) (async, rerun: 32) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) (rerun: 32) listen(r3, 0x0) (async, rerun: 32) close_range(r1, 0xffffffffffffffff, 0x0) (async, rerun: 32) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 32) pipe2(0x0, 0x800) (async, rerun: 32) r4 = epoll_create1(0x80000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000040)={0x4, r5, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140)={0xa000201e}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff6a) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) r8 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) (async, rerun: 64) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x2}, &(0x7f0000000000)=0x0) (rerun: 64) timer_settime(r9, 0x1, 0x0, 0x0) (async) shmctl$SHM_LOCK(r8, 0xb) (async) ioprio_set$pid(0x1, 0x0, 0x2004) (async) ioprio_get$pid(0x1, r0) (async) shmctl$SHM_LOCK(r8, 0xb) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES64=r5, @ANYBLOB="100026bd7000fedbdf2501000000000000000c41e900000c00147379023000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x4010) 3m45.920332429s ago: executing program 3 (id=6658): map_shadow_stack(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socket$kcm(0x29, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c) unshare(0x28020480) shmctl$IPC_INFO(0x0, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fa0500", 0x48, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e138060072381f41e5fff9620915b6f78670dfaf9a195fcb2a79cf6b7931c9b4"}}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x303}, "e4fffffffffffbff", "9da152000004b4991192c0029200", "b6730761", "cbc5f9dc4dab64ec"}, 0x28) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000440)={@ethernet={0x0, @random="0d816b1635f4"}, {&(0x7f0000000300)=""/133, 0x85}, &(0x7f00000003c0), 0x1}, 0xa0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f00000000c0)={0x7, 0x7, 0x2}, &(0x7f0000000240)=0x28) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2, 0x2}, 0xe) shutdown(r0, 0x1) 3m45.730939604s ago: executing program 3 (id=6659): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x364, 0x0, 0x11, 0x148, 0x1d4, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff000000, 'hsr0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x6, 0x2, 0x46}, 0x0, 0x18c, 0x1d4, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc4}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xcc, 0xfc, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3c0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0xa0000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r8, 0x400caed0, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0xffffffff}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000527814da2fc496a32c4df6be7027f02dae902b03ad954891183e31b52ba75b65", @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf2525003f000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x44010) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x4, @private2, 0x400}]}, &(0x7f0000000440)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000100)={r11, 0xd}, 0x8) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000080)={0xa, 0x1}) 3m44.810076685s ago: executing program 3 (id=6668): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) socket$inet_sctp(0x2, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0x5c, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="18fa00000d14010026bd7000fbdbdf250800030004c155129f0ea488649d29a55a55c68bcd7ec9bc1e1647b4eb133e5b7c49a4e653d25876b2955b40e7d44c9e507dd0d5ced0843a8844afbcdd45dc8602146aa5494c83e3b48a7eb79273ee5f880983d9631ce56894c870dced7e4ce34b27139209725acb664830f06afd38aa5caca0e8cde75f017a6563fc37a817431f562e68592b3b1f3b346a107ce21fb4f839f712e3b9c546e93e04c8a4c9b97eafd5d64dc1ec9adfb1dbb888460d92a2ee605ca317d48b4cd21fe6c916d44f1f3ecef916ab209cc4b28567849b45d04f66ef7ad0cb36c9f73fa3466b6c0995bd424321"], 0x18}, 0x1, 0x0, 0x0, 0xc001}, 0x20040890) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="0203000210000000000000000000000002000800080e5600fd0000000000000005000600000000000a000000000000000000000000000000000000000000000100000000000000000200010000000000000000fdff80000005000500000000000a00000000000000fe80000000ac00b7f46a00000000000000000000aa000000"], 0x80}, 0x1, 0x7}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000440), 0x76, 0x160243) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20081, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000200)=ANY=[]) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(r6, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000001c0)=""/117, 0x75}], 0x1}, 0x102) 3m29.725258482s ago: executing program 41 (id=6668): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) socket$inet_sctp(0x2, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0x5c, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="18fa00000d14010026bd7000fbdbdf250800030004c155129f0ea488649d29a55a55c68bcd7ec9bc1e1647b4eb133e5b7c49a4e653d25876b2955b40e7d44c9e507dd0d5ced0843a8844afbcdd45dc8602146aa5494c83e3b48a7eb79273ee5f880983d9631ce56894c870dced7e4ce34b27139209725acb664830f06afd38aa5caca0e8cde75f017a6563fc37a817431f562e68592b3b1f3b346a107ce21fb4f839f712e3b9c546e93e04c8a4c9b97eafd5d64dc1ec9adfb1dbb888460d92a2ee605ca317d48b4cd21fe6c916d44f1f3ecef916ab209cc4b28567849b45d04f66ef7ad0cb36c9f73fa3466b6c0995bd424321"], 0x18}, 0x1, 0x0, 0x0, 0xc001}, 0x20040890) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="0203000210000000000000000000000002000800080e5600fd0000000000000005000600000000000a000000000000000000000000000000000000000000000100000000000000000200010000000000000000fdff80000005000500000000000a00000000000000fe80000000ac00b7f46a00000000000000000000aa000000"], 0x80}, 0x1, 0x7}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000440), 0x76, 0x160243) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20081, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000200)=ANY=[]) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(r6, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000001c0)=""/117, 0x75}], 0x1}, 0x102) 2m26.417752109s ago: executing program 2 (id=7143): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c0, 0x108, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x2f0, 0xffffffff, 0xffffffff, 0x2f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast2, [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xffffff00], 'bond_slave_0\x00', 'team_slave_1\x00', {}, {}, 0x3a, 0x2, 0x6, 0x8}, 0x0, 0xe0, 0x108, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x8, {0xffc0000000}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3b}}}, {{@ipv6={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'syzkaller0\x00', 'bridge_slave_1\x00', {}, {}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2c, 0x10, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000010c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x278, 0x130, 0x130, 0x98, 0x1c8, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x0, 0x5}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@ip={@loopback, @multicast2, 0xffffffff, 0xffffff00, 'gretap0\x00', 'team0\x00', {0xff}, {0xff}, 0x1d, 0x2, 0x44}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x65, 0x0, 0x24}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x325, 0x8, @ipv6=@private0, 0x4e20}}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3, 0x1, 0x2, 0x0, 0x7], 0x1, 0x3}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xc7d, 0x2, [0x4, 0x36, 0x1d, 0x1c, 0x23, 0x1e, 0x2c, 0xb, 0x1e, 0x7, 0x2d, 0x37, 0x2032, 0x9, 0x32, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x20}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x101102, 0xc0) open_by_handle_at(r3, &(0x7f00000002c0)=@ceph_nfs_fh={0x8, 0xfe, {0xa}}, 0x40c41) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) write(r4, &(0x7f0000000000)="2e000000010002", 0x7) 2m26.318078508s ago: executing program 2 (id=7144): socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) pipe(0x0) close(0xffffffffffffffff) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x480, 0x0) r0 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0xffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) gettid() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40851}, 0x40000080) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f0000000440)={0x0, @reserved}) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f00000002c0)=0x2, 0x4) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) 2m25.739834522s ago: executing program 0 (id=7146): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000100003050000fffe0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000400000140012800c0001006d6163766c616e000400028008000500", @ANYRES32, @ANYBLOB="080004"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000090) 2m25.679074342s ago: executing program 0 (id=7147): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') (async) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') (async) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') (async) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="ad56b6c582cd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x20) 2m25.309834956s ago: executing program 0 (id=7151): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, 0x0, 0x0) epoll_create1(0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0, 0x0, 0x0, 0xfe80}}], 0x400000000000126, 0xc040) 2m25.179709561s ago: executing program 2 (id=7152): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x19, 0x2, @thr={&(0x7f00000002c0)="8264623b98a0bd62355f5fa9ad2f5bff224e6c8f505e05ed176014022cdd5eef5283df", &(0x7f0000000500)="b43a18d69b6aa2fc8e3419f07019c81b0db4ebc72329ffde7b3cbf1d6f8b01c8feee8ce51d1dcc8f6a3c5fab12579e84fa6ec53875cb601c2d052dc8a8779dbe20a61a668fd902c7493e056b1d4abad55d61bd05114057e8ddda63f4a84c4981ca64866e78a1acbc46a2ab5af25e38111aff69959193e60cc1be0c50e2e07b8599a3c60664a19d2e4c26a4df220dbc2edbc6049b"}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1}) rseq(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5}, 0x22, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5) syz_io_uring_complete(r1, 0x0) syz_clone(0x406a000, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x4a000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@euid_eq}, {@smackfsdef={'smackfsdef', 0x3d, '.'}}, {@hash}, {@uid_eq}, {@permit_directio}, {@obj_role={'obj_role', 0x3d, 'sysfs\x00'}}, {@fowner_eq}], 0x2f}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffe0, 0xfff3}, {0x0, 0xffe0}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000400)='./file1\x00', &(0x7f00000000c0), 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c63616368653d667363616368652c6d6d61702c76657273696f6e3d3970323030302e4c2c756e616d653d2c6673757569f60500003132323064342d7d3433362d653739632d326432322d37636664006236662c00"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000380)={0x6, 0x1, 0x3, 0xa, 0x4}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_open_dev$tty1(0xc, 0x4, 0x2) 2m24.41393795s ago: executing program 0 (id=7154): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) unshare(0x2c020400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYRES8=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "e3", "dd"}}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f00000002c0)=0x1, 0x4) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'}) r6 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, 0x0, &(0x7f0000000080)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmmsg$inet6(r4, &(0x7f0000000540)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x8, @loopback, 0x8001}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000005c0)="7c6188a536a90fad31c380d0c54a6c59939cd17d83ee2508a164151a6d5b96c4d8983c3575e2e58a74e6b72203d5cd75024e6cf0a26052787f085d024ea9a82fbc138dbfc8a77e47bf97a38ea01f15625109a8f07c884260aeabf7", 0x5b}], 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="5400000029000000390000002c0802a00000000000000000000000000000ffffffffffff0000000000000000000000000000000020010000000000000000000000000002fc0000000000000000000000000000012c00000029000000360000003202000000000000c910ff02000000000000000000000000000101010000000020000000290000003200000000000000000000000000ffff7f000001", @ANYRES32=0x0, @ANYBLOB="1c00000029000000370000002101000000000000c2040000e76601001400000029000000390000008700010200001000"], 0xd0}}], 0x1, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r13, @ANYBLOB="0400df2a"], 0x20}}, 0x48000) 2m24.395916219s ago: executing program 0 (id=7156): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x30, r2, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x3f00, r0}}]}]}, 0x30}, 0x1, 0x0, 0x3000000}, 0x4) 2m24.329660438s ago: executing program 0 (id=7157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4028000}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r5 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x85}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x60ff, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) dup3(r2, r4, 0x6700000000000000) close_range(r1, 0xffffffffffffffff, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x48011) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900020073797a32000000000900010073797a300000000008000a400000000420000000080a01010000000000000000010000000900010073797a30"], 0x9c}, 0x1, 0x0, 0x0, 0xf3021be2a65b013}, 0x0) 2m23.329701422s ago: executing program 2 (id=7162): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002040)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x10, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$FS_IOC_SETVERSION(r3, 0x40047602, &(0x7f0000000140)=0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r5) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000540)={0xf0f024}) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x1a8}}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000007c0)={0x2, @sdr={0x34343452, 0x4}}) preadv(0xffffffffffffffff, &(0x7f0000003640)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1, 0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r8, 0x0, 0x2, 0x0) io_uring_setup(0x6a4, &(0x7f0000000040)={0x0, 0x31d, 0xc000, 0x0, 0x20002f7}) 2m23.119531555s ago: executing program 2 (id=7164): shmget(0x2, 0x1000, 0x100, &(0x7f0000ffa000/0x1000)=nil) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="07000000040000001000000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r1}, 0xc) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) accept4$vsock_stream(r3, 0x0, 0x0, 0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0xee01, 0x1000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 2m11.039070138s ago: executing program 2 (id=7167): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, 0x0, 0x42}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000020000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 2m11.03889481s ago: executing program 42 (id=7167): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, 0x0, 0x42}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000020000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 2m9.037385691s ago: executing program 43 (id=7157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4028000}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r5 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x85}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x60ff, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) dup3(r2, r4, 0x6700000000000000) close_range(r1, 0xffffffffffffffff, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x48011) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900020073797a32000000000900010073797a300000000008000a400000000420000000080a01010000000000000000010000000900010073797a30"], 0x9c}, 0x1, 0x0, 0x0, 0xf3021be2a65b013}, 0x0) 1m18.932254795s ago: executing program 1 (id=7483): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffffffffffdef, 0xffffffff, 0x0, 0x0, 0x7ff, r0, &(0x7f0000000200)="96308aa160f2677fd12c406417c678bfcf985f1836f729fa0c2647b800a96744f6", 0x21, 0x0, 0x0, 0x0, r0}]) 1m18.748222589s ago: executing program 1 (id=7487): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) readahead(r0, 0xe, 0xffffffffffffffff) 1m18.546254095s ago: executing program 1 (id=7488): syz_open_dev$usbmon(0x0, 0x0, 0x301880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 1m17.316585363s ago: executing program 1 (id=7494): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="08000800060006000000143f000045"], 0xfce) 1m16.95690753s ago: executing program 1 (id=7498): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x52ab7c11, 0xcb, &(0x7f00000005c0)=""/203, 0x41000, 0x7f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/99, 0x63, 0x91a) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0xc84d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001280)={0xc, {"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", 0x1000}}, 0x1006) getrusage(0x1, &(0x7f0000000440)) mount(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000300)='nfs\x00', 0x2840ca1, &(0x7f0000000340)='\xe0\xdb\xce6\"\xa4\x15\x9e\x14\x94K\v>c:\xde\xbb\xdb\xda\xfe\xe0aR\xffZ\xd91H\xd7\x84\x1b\x19\xc05y\x1a}\x95h\xe3\x19\xd3\xc3G\xb95\xfd\xe5\x9f\xb8\xda\xe5\x02$\x8d\x06\xb4w\xe4\x05p\xf0\xc4\x1cR\xd9z\xcbg\x93a\x11\xaa\x04\xe9e\xf1\x9d1M:\xd4\x7f\xb0\xe9\b(\xc7\xfci~S') syslog(0x3, &(0x7f0000000700)=""/231, 0xe7) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) openat$zero(0xffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) r7 = syz_clone(0xc057a500, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r3], 0x24}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRES64=r0, @ANYRES32=r7, @ANYRESHEX=r6, @ANYRES8=r5], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x80d4) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001", @ANYRES8], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m13.198233367s ago: executing program 1 (id=7515): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x400, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x4000009, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2}, 0x20) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000200)={0x4006, 0xffffffffffffffff, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102373, 0xfffffffffffffcab) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80240, 0x0) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', &(0x7f0000000280), 0x102a002, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10f8c2, 0x80a0a1240160183d) umount2(&(0x7f00000003c0)='./file0\x00', 0x7) getdents(r3, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x159882, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0xefaace022867884) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000400)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 58.183581425s ago: executing program 44 (id=7515): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x400, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x4000009, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2}, 0x20) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000200)={0x4006, 0xffffffffffffffff, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102373, 0xfffffffffffffcab) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80240, 0x0) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', &(0x7f0000000280), 0x102a002, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10f8c2, 0x80a0a1240160183d) umount2(&(0x7f00000003c0)='./file0\x00', 0x7) getdents(r3, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x159882, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0xefaace022867884) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000400)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 5.681156741s ago: executing program 5 (id=7783): mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000000020c000180080001400000fa03080008400000005c050005000200000005000100"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 5.567834828s ago: executing program 5 (id=7785): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0xb4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x200000000000001, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xb00) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 5.260651869s ago: executing program 4 (id=7789): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e001a2800000000031268e01600000700000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.166877972s ago: executing program 5 (id=7790): r0 = socket$kcm(0x10, 0x2, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185648, &(0x7f0000000100)={0x0, 0x400, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0x6, '\x00', @value64=0x4ad}}) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc4d, 0x4, 0xfffffffa, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r6 = memfd_secret(0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r6, 0x8, 0x0, 0x0, 0x14}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000140)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x41}], 0x2) r8 = gettid() r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2400000020000103000000000000ed00020000040000000012000000081238f92f74a0230fb9db2509a2a324ffb77f6b588989b40727c1e848795a3590be7ed19aae5a3d8fc073e962264b352dfa9a56e12b2a09edbffdd7cffd43e4a3c41d210436b431a4995ecd379e44013d14b472"], 0x24}, 0x1, 0xff000000, 0x0, 0x240480d4}, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x1d, 0x800000000004, @tid=r8}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$VIDIOC_DQEVENT(r10, 0x80885659, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$netlink(0x10, 0x3, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r12 = accept4(r11, 0x0, 0x0, 0x80800) sendmmsg$alg(r12, &(0x7f0000002700)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x1, 0x40800) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.087445626s ago: executing program 4 (id=7792): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) r0 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffff, r0, 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x1f, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208000f0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x8170) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22ffe6) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x80102, 0x0) writev(r5, 0x0, 0x0) 4.187625328s ago: executing program 4 (id=7796): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002180)='/sys/power/sync_on_suspend', 0xa82, 0x0) sendfile(r0, r0, 0x0, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x8, 0x0, r2, 0x0}]) r4 = eventfd(0x5) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) io_submit(r3, 0x7, &(0x7f0000000600)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x800, r0, &(0x7f0000000000)="5c7a205d8e6a3dec872a22cc755a9dfaeda50ba969fa59b0919e8c23c5c0ad3e606b3dde017e4285a8773fcd371a22eb86bc3060c134da0d915eb0facc6fe99fa9ae12e39aa88f0a428075a7d7215e74a7be191c66fa2889", 0x58, 0x8, 0x0, 0x2, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f00000000c0)="db95ed0b7b2f731cc42b24bd6d05ecdc68e9243b262300bdd34e6a230b9d3ad8eba366336a492d20fef6304645", 0x2d, 0x4, 0x0, 0x2, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000000140)="1456cd8734b5229bf080733c4faaf73fa65e6037cec7a0b18ba6f825a523a484d509ce6fc25a9333be49792703f06015068e125c627f140d8f9a880ebb78d8c28e0677e9f8468ec1fd79a4b3903907200fd1825acc5c04c9492f56d73173c9adbdc7463d43af00891fdb135c1b258b764e11d0a28343f1fbfab60235e4eba28f1c3f5852b52a4c7a8e92b1aaf890635dc1ed65ec4326cfd1b94f9a80aeb5187361d75b00fdb0105db0f55943d0dc79b1eebd9e451f1f76387766d0c93227e14dd4136c78fa21b5f9aeee2a16a9bcaeeda0398d2cd77af6567ba85dff8e4267aeb44d71b37a50dc660485f10c5aa9535b808084145ace89fc", 0xf8, 0x1, 0x0, 0x3, r0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f0000000280)="c75369429d1421b2cc3952bc506265440c1440f7b8e782daef39de20113bd453f21a0b23e55f9c2dd6803b30e5139a804e73b88bff11f6e541402310168b060463da8b2df3d4c3db2dfc3032e5fb994d6c38366d43398aa7ef728d982ba7448cb20a4228fefe644e8a65f3efbc0e0e6f0477dc52405b36f5e388eb623b971d8622819ba34cae64add337921f2825f4e5ab7bf94686bae1711ee5d067d52e8d737d5ea63deecd315ad220f5da0cb39d8824f572e120b83bd15fa816b3e2080365d2ef06e575b816a3224b84677a6e5150ddce91a302", 0xd5, 0x3, 0x0, 0x2, r4}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x8, r5, &(0x7f00000003c0)="c9d7fca5f8a23fbad061880169667c9af58a4778c2e797ba5dc314ae334daccc48b167e24450098d5a12d6e2ed9bbc", 0x2f, 0x2, 0x0, 0x3, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x95be, r0, &(0x7f0000000440)="854e812622d655897f6f563aa7f8c8d66c48f1699990898cbc4b1ac466a4a8130bf3e81274af6795d09c757c60d499ce1c346f883c7b9b43b82c58a5db68ff5177addd2a0fc492f2d3b2acf2b83df68643014d3241eb8d60a4db854d002a81dfc82c11d555d9c6af42b9c77c48270c6d33c96411530f434565c45337db4a0c4489cff3bccb331d93e2b22839cf8f54132e2ead56", 0x94, 0xedaf, 0x0, 0x2, r0}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xc, r0, &(0x7f0000000540)="13c837b5b7d830154567ad7d47d9a3140716702fb3d2c126163a645fa27100d0fb467ec388a12cbe9fb0ecb8abb435615fefc4be975ab9910d0a9742285da41cb194e39101cc06af6d", 0x49, 0x6, 0x0, 0x3, r0}]) 4.032881707s ago: executing program 4 (id=7798): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) socket(0xa, 0x3, 0x3a) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_extract_tcp_res$synack(&(0x7f0000000380)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r4, &(0x7f0000000300)={@val={0x6f01, 0x800}, @val={0x1, 0x3, 0x27, 0x0, 0x54d3}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x3, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, r5, 0x0, 0x5, 0x7, 0xc2, 0x700, 0x0, 0x18, {[@exp_smc={0xfe, 0x6}]}}}}}}, 0x3e) io_uring_setup(0x4f4f, &(0x7f0000000180)={0x0, 0x1e36, 0x1000, 0x1, 0x200002}) r6 = socket(0xa, 0x3, 0xff) sendmsg$unix(r6, &(0x7f0000001680)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x3}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40051}, 0x4802) gettid() r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) timer_settime(0x0, 0x1, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x2, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x3, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000000, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x8, 0x3, 0x9, 0x1, 0x3, 0x4, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x808003, 0x200, 0x1080, 0x3, 0x2, 0x2950bfaf, 0xfff, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x70bd2a, 0x25dfdbff, {0x2, 0x18, 0x20, 0xfd, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 4.026432074s ago: executing program 5 (id=7799): getpgid(0x0) r0 = socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x1010, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x400}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000004b00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000069dd0085000000860000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000002d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r7}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x503, 0x70bd27, 0x20000, {0x0, 0x0, 0x0, 0x0, 0x1d961}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x38}}, 0x4080) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0xffe, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x17, 0x55, 0x2e5, 0x70bd26, 0x1, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@empty}}}]}, 0x38}, 0x1, 0xfe0f0000, 0x0, 0x2000c844}, 0x20000110) 3.816932756s ago: executing program 5 (id=7800): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x60b17f360213d71e, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="20ec0100000036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f0000000080)=[{0x0, 0x6000, 0x3, &(0x7f0000000040)="aa34d1"}], 0x1}) 3.726971542s ago: executing program 8 (id=7803): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x40, 0x7}]}) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x400, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8) 3.034288966s ago: executing program 4 (id=7806): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) read$dsp(r0, &(0x7f0000000040)=""/196, 0xc4) fstat(0xffffffffffffffff, &(0x7f0000000300)) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000180)={0x50101, 0x1d1, 0xf}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200"/29], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdb3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc008641d, &(0x7f00000002c0)={r3, &(0x7f0000000200)=""/135}) 3.034063738s ago: executing program 6 (id=7807): r0 = io_uring_setup(0x666, &(0x7f00000002c0)={0x0, 0x284f, 0x40, 0xfffffffe, 0x235}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x7}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) mlockall(0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mlockall(0x5) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) r5 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000080), 0x400000, 0x0) write$snapshot(r5, &(0x7f00000000c0)="ffa8ed5ff6bc4b87deeb01e593208da66c444c63c4eed7bc0f4c613c8feed76fd9d786e08e0305b3320bd7877989ffb44ce7eda6746c53760b04c5254877584d4744956b07524020eb1b3fef25f97d250d1279d2b459f2c2d5a0625b143a9b7ec966f3e4e5a607fc04b3f123096420a5ab17a536073c1f6df2f251abd5db2768918d166b4099c98007333733e850f52f5d422d93b3d8b18f85fafe04c715", 0x9e) ioctl$EVIOCRMFF(r4, 0x40044581, 0x0) 2.955776167s ago: executing program 4 (id=7808): ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x400}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c7200000000000200000000020000000a0001006f776e6572000000090001007379000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}}, 0x4048010) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x444a43, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0xfcffffff, &(0x7f0000000580)='m'}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000800)={{0x4, 0xffffffff, 0x0, 0x9a, 0x3, 0x1, 0xf, 0x0, 0x0, 0xf9, 0x0, 0x7f}, {0x70000, 0x8080000, 0x3, 0x5, 0xc2, 0xc0, 0x9, 0x66, 0xc5, 0x7, 0x30, 0x40}, {0xdddd0000, 0xdddd1000, 0xf, 0x6, 0xb, 0x38, 0xe, 0x6, 0x3, 0xc, 0x2, 0xff}, {0x8000000, 0x6000, 0xc, 0x58, 0x7f, 0x76, 0x2, 0xc, 0x7f, 0xfc, 0x9}, {0x504ce1cb89483871, 0x1000, 0xb, 0x8f, 0x80, 0x2, 0x8, 0x3, 0x1, 0x6, 0x4, 0x6}, {0xdddd1000, 0x6000, 0xd, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x6, 0x1, 0xf8, 0xd}, {0xffff1000, 0xffff1000, 0x10, 0x2, 0x8, 0x3, 0x0, 0x0, 0x9, 0xb, 0x6, 0x7}, {0xeeee0000, 0x5000, 0x9, 0x6, 0xff, 0x0, 0x5, 0x80, 0x9, 0x8f, 0xdb, 0x31}, {0x4000, 0x59}, {0x200000, 0x9}, 0x4, 0x0, 0x1, 0x151, 0x3, 0x1000, 0xdddd1000, [0x8, 0x3, 0x3, 0x3]}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0x4f4, @private2, 0x6}}, 0x157, 0xa602}, &(0x7f0000000640)=0x88) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f00000001c0)={"04d9c8630000000000000007262069af775bedfb0a63cb8031ecdc5351097e022d45a9e67f2d2dd7f69dd5f61ac030dacac442d82b9e81e6847961e65610b8f6e25f9eaf1a9f48ac011b67d68f871246c6424cd7837f6bfc47209662ba0d0f44149fcefbbf6fa5b40644bce6cf7210107f57b850d0c9af06c766af1c637aa057167a6910e2e185b8d972e49eeda481d9a58394ef43958ce7407e73d6460653fc672aa4ab6a26bd1a631fa3a0f2b025ba137b8e3f933af28e1ea9984bc0438ea00b5f5b16893a22bb83ff1c92407a946d4dc7d347d526db0e71bb38f873937ca7343fb7248867adf5decd52e74f05c768c3b1c8282b9b1b1bc0f7ae08917b2abe3d3305e32b8db562d19dd7c83fde6dbe03ef72aa7ddc00144895b2a1981105046a28ca0852521afbcd2b6cdb0bbed4670d746c45fb5589f279cfd594911cb11f2a7336af10b2332e731f2eec8287c735f2346449f1629fde95d6c78bed900400b280e222976d5721ee6dd6068c1d6274d2382e524672a2656eed5cf34eff27c2974deebf2aa6226e3fa2f15ea8db5891a062d422607a450a32cfdfaaeadfb2498e79fe9e47089b2a8bbdbdcbb076ebbd9c8fdc6246c00a34176a1c46a924ab4c3877215e5666c7b384e9238b3ad6ac559d90e22170d6915c7150a1858eb3f20a1847642018840b49c335074496991fb319391402213846ff8bf5b389298d797dfdd4a1d116caec17f13152c9699caab72a96d364134266030e67ada0de8d2bb05091f7d855fe1c435574856b0f8de9dc6af14ce179e3c0b6b563ccbae02900fa9412784b0e5fa71ac7a85fd7cd1343d289daeb929d0cbd96f9f4501bc9d6d9d0b4f462aaf2556ce92ae6438bb307aa258c8c4ba6646f99f5a3d4e14f677353722cc81a8ef1f68d41ad1bef785b248faee830613461239487bee1b53724eb28301420ced16a8110a8680c91c665f8eff65e2d48f95db7ad4f30d079a39a2286fb3df3472d330f8a11fc7d1939a923c50263b3e03140f7cec279df5785fa2124d1650563799defc378cb9506ee7142eb108b3f4125ade3d9a73646bddac795c753895b2ad51d358eff496d1c1a885c30b85b50eca89bf15ae50ae3301805f1691b3a391d7575c9a0a514710ad398536a3037435ebe2222c66cbb155452a01cb9750da7450900000000000000bf38c8185c769c1409eb0b1c613eac8101d6784c9510790dd1df8fa6f2b4dbdbde3bdcbf6bfc456f68b680f2595853178e89a32e9c56d66fd2210fb0fc0e3cda61e6980e16e47ae8071182af80950c43ba221fe072e6945107a6edcdb8bfeb201a657969bf340960a67e30987e56c953a177404fdf67b5d99bbc06d705a0fc9659336b458ea0d575ddfe59706738d1e65c505272000000000000004000"}) syz_usb_connect(0x1, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="120101025bbe3520"], 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2.70740343s ago: executing program 6 (id=7809): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000940)=""/32, 0x20, 0x4, 0xffffffff, 0x0, 0x0, 0x3}}, 0x120) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x200) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000001a40)={0x8c, "895cd46771f00301c1ca639506f24c672ecfd2bd1050f9c5774eb3e02ce08f61bb32758aa48d8b91deae8e868458c5a16302ef180c82320b8e92c2821ee0eb19"}) (async) syz_clone(0x20024200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0xef, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632b77fbac14140ce000006a62079f4b4d2f87e505ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6e", 0x0, 0xfe, 0x60000000, 0x2c, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd40", 0x0, 0x0, 0x3}, 0x4c) (async) r3 = socket(0x10, 0x3, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="0100", 0x2, 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0d0128bd7000ffdbdf25140000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0800010001000000f5b5c421d49aa260240f45ece6fb1c651edd2829e90c84938c77be59fd85b6300f12436862b6b164fc00d2116093320bd6b6e54b50ca85abb4fb91968484c068fd04c792dcffdb273552"], 0x30}}, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000009d00), r6) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000009dc0)={0x0, 0x0, &(0x7f0000009d80)={&(0x7f0000009d40)={0x24, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0xc050) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x3c, r7, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0xfffffebb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x20010004) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) truncate(0x0, 0x8fff5) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x3c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r9, 0xffffffffffffffff, 0x4}, 0x10) (async) r10 = syz_open_pts(r8, 0x141601) write(r10, 0x0, 0x0) (async) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0xe) (async) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r11, 0xffffffffffffffff, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) 2.607482296s ago: executing program 8 (id=7810): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYRES16, @ANYRESDEC, @ANYBLOB="6887f8dbcb46d5f3bfb174b610e0635dc5a79934330631e7e1e7c96ad4b85299dfe11e3d9828e582e1a311e45136bacd651b05ac307229b9ef7fb5", @ANYRESDEC, @ANYRES64], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, 0x0, 0x0) writev(r3, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000280)=0xc) ptrace$ARCH_SHSTK_STATUS(0x1e, r5, &(0x7f0000000480), 0x5005) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000005fc0)={0x0, 0x0, &(0x7f0000005f80)={&(0x7f0000000540)=ANY=[@ANYBLOB="8800000041d162a3fb804da446d382c067035cc15250344094dc8cf4ddc618f6d55884fd2c9b06d6d28f91aef46978867c820a96c42eba8f7f93d90b5fff1d94b38f4054e0d578ac8d9d6fea", @ANYRES16=0x0, @ANYBLOB="100027bd7000ffdbdf250e000000700002805d0004009a3459ed1c431bc2e33e879a28297c19bdf9cfb642429d0a48c24ea44a8177ed671085e34c60144c891cd4bec885d2d0f8c891f349e2db4feda2d33839e4f1b823d3ba3d87ea596cf52fabe4d71d5b163c8715d81279f14eaf00000004000400040001000400050004000280"], 0x88}, 0x1, 0x0, 0x0, 0x24000800}, 0x24048081) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000002840)=""/4096, 0x1000}], 0x2}, 0x0) 1.306748422s ago: executing program 6 (id=7811): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000002080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random=' u\b\x00', @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0xb5aa1afb887001d3, @void}}}}}}}, 0x0) 1.306425102s ago: executing program 6 (id=7812): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'xfrm0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0xc, r5}, 0x10) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) creat(&(0x7f0000000140)='./file0\x00', 0x160) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x7eec}]}}]}, 0x3c}}, 0x2000400c) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc) timer_getoverrun(r2) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x78e22799f4a46f40) read$watch_queue(r8, &(0x7f00000001c0)=""/178, 0xb2) 1.117602686s ago: executing program 8 (id=7813): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00#\f \x00'}) userfaultfd(0x80801) socketpair$unix(0x1, 0x1, 0x0, 0x0) 987.564939ms ago: executing program 8 (id=7814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) 807.495879ms ago: executing program 8 (id=7815): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe67, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x2f000000, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0xf0ffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) 697.597094ms ago: executing program 8 (id=7816): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(wp256-generic)\x00'}, 0x58) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x1}, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000340)="f4", 0xfdef}], 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}], 0x10) sendto$inet6(r1, &(0x7f00000001c0)="9f", 0x1, 0x40045, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)='k', 0x1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x4044804) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x49000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0xbfa, 0xba1, 0x3, 0x0, 0x3ff, 0x6}, &(0x7f0000000340)=0x9c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000400)={r7, 0x8}, &(0x7f0000000440)=0x8) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000002060500000000000000000000fffefc05000400000000000900020073797a310000000010000300686173683a69702c6d61630005000500020000000500010006"], 0x48}}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x4}, 0xc) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="27d156241a05"}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x10, 0x3, 0x0) syz_open_dev$loop(0x0, 0x9, 0x121080) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000002aaaaaa"], 0x0) 361.158129ms ago: executing program 6 (id=7817): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x23, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271b, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x4200, 0x4) r6 = socket(0x10, 0x803, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$netlink(0x10, 0x3, 0x4) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000280)=0x8001, 0x4) write(r8, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 293.970413ms ago: executing program 5 (id=7818): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESHEX=r1, @ANYBLOB="14000100ff05000000000000080002000000001142d785000000", @ANYRES8=r2], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0x1, 0x4}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r6, r7, 0x9, 0xa) sendmmsg$unix(r7, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0xc, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r8, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0xffffffffffffffea) syz_io_uring_setup(0x6b27, 0x0, 0x0, &(0x7f0000000340), 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0x0) r11 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x80) r13 = openat$cgroup_int(r12, &(0x7f0000000280)='cgroup.max.depth\x00', 0x2, 0x0) pwritev(r13, &(0x7f00000009c0)=[{&(0x7f0000000400)="d5", 0x1}], 0x1, 0x3, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r10}, './file1\x00'}) 0s ago: executing program 6 (id=7819): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d01, 0x0, 0x800000000000001}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x8) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001d14d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r6, &(0x7f0000000100)=""/68, 0x44, 0x3e) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r6, 0xc004ae0a, &(0x7f00000005c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000700)={0x0, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000000600)={r8}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x528, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x460, 0x278, 0x278, 0x460, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x354, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x19, 0x0, [{0x2, 0x0, 0x22, 0x5}, {0x7f0, 0x8, 0x8, 0x200}, {0xe, 0x9, 0x0, 0x1}, {0x1, 0x2, 0x3, 0x3}, {0x100, 0xa3, 0xf6}, {0x0, 0x2, 0x1d, 0x40}, {0xa, 0x6, 0x6, 0x3}, {0x3ff, 0xe, 0x43, 0x87}, {0x4, 0x5, 0x81, 0x5}, {0xb69, 0x2, 0x7}, {0xf2cb, 0x3, 0x7, 0x6}, {0x4, 0xf7, 0xd5, 0xd8}, {0x6, 0x0, 0x5, 0x5}, {0x4, 0x0, 0x8, 0x9}, {0xff, 0xc, 0x7f, 0x4}, {0x3, 0x3, 0x1, 0x53a}, {0x5, 0x3, 0x80, 0x80000001}, {0x3, 0x8, 0x5, 0x101}, {0x9, 0x9, 0x81, 0x5}, {0x0, 0x0, 0x40, 0x8}, {0x572b, 0x0, 0x4, 0x80}, {0x4, 0x7, 0x8, 0x7}, {0x100, 0x3, 0x31, 0x40ce}, {0x7, 0x8, 0x1, 0x5}, {0x0, 0x1, 0x0, 0x5}, {0xae44, 0x15, 0x3, 0x4}, {0xff80, 0x6, 0xaf, 0xe7}, {0x6, 0x5, 0x7, 0x5}, {0x1, 0x5, 0x3, 0xc}, {0x6, 0x7, 0xf9, 0xc2c}, {0x7197, 0xf, 0x4, 0x4}, {0xd0d, 0xd, 0x5}, {0x9, 0x7f, 0x9, 0xffffff81}, {0x6cd, 0x81, 0x6, 0x8}, {0x7, 0x5, 0x9, 0x6}, {0x6, 0x2, 0x2, 0x1}, {0xfd, 0x6, 0x4, 0x80000001}, {0x0, 0x2, 0x0, 0x1}, {0x2, 0x5, 0x7, 0x1}, {0x46, 0x1c, 0x6b, 0x3316e3f1}, {0xffff, 0x51, 0x1, 0xee27}, {0x2, 0x22, 0x0, 0x1ff}, {0x8, 0x4, 0xa3, 0xffffffff}, {0xfffc, 0xb6, 0x5, 0x4}, {0x115, 0x5, 0x3, 0x7f}, {0x400, 0x2f, 0x8, 0x8}, {0x8, 0x5, 0xd, 0xe4}, {0x3, 0x1, 0x0, 0xffffb941}, {0x9, 0x2, 0x0, 0x5}, {0xff, 0x84, 0x1b, 0xffa}, {0x401, 0x3, 0x8, 0x6b06}, {0x7ff, 0x1, 0x9, 0x200}, {0x32, 0x10, 0x1, 0x1471}, {0x57, 0x5, 0x8, 0x7}, {0x5, 0x26, 0x5}, {0x401, 0x0, 0x1, 0x1}, {0x8, 0x1, 0xb, 0x4}, {0x7, 0xb, 0x4, 0x24e0}, {0xb, 0xc1, 0x3, 0x7}, {0xfffb, 0xc4, 0x6, 0x9}, {0x2, 0xe, 0x0, 0x5}, {0x8, 0x6, 0x8, 0x7}, {0x4, 0x1, 0x97, 0x7fff}, {0x7, 0x4, 0x0, 0x5}], {0x7}}}, @inet=@rpfilter={{0x24}, {0x8}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffff00, 0xff, 0xffff00, 0x1fe], 0x4e22, 0x4e22, 0x4e20, 0x4e24, 0x5, 0x8, 0x8, 0x9, 0xeb}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x9, 0x7, 0x8000, 'syz1\x00', 'syz0\x00', {0xba4}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x584) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10, r3, 0x3d810000) kernel console output (not intermixed with test programs): udevd: iget: checksum invalid [ 1393.568916][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1393.700491][T25893] usb 11-1: Using ep0 maxpacket: 32 [ 1393.704443][T25893] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.708897][T25893] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.713896][T25893] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1393.718582][T25893] usb 11-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1393.721610][T25893] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.727093][T25893] usb 11-1: config 0 descriptor?? [ 1393.738907][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1393.870381][T21753] Bluetooth: hci0: command 0x0c1a tx timeout [ 1394.337884][T25893] usbhid 11-1:0.0: can't add hid device: -71 [ 1394.340528][T25893] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 1394.345357][T25893] usb 11-1: USB disconnect, device number 18 [ 1394.499596][T30595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.502143][T30595] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.568521][T30595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1394.574088][T30603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7316'. [ 1394.576853][T30603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7316'. [ 1394.579358][T30595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1394.633559][T30604] virtio-fs: tag not found [ 1394.678588][T27713] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.686064][T27713] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.692323][T27713] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.697068][T27713] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.095822][T30608] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7317'. [ 1395.133827][T30611] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1395.693833][T30640] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1395.889326][T30648] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7330'. [ 1396.699940][T30660] lo speed is unknown, defaulting to 1000 [ 1396.984128][ T5150] EXT4-fs error: 2 callbacks suppressed [ 1396.984140][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1397.033028][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1397.084144][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1397.357913][T30676] 9p: Bad value for 'wfdno' [ 1397.364971][T30676] tmpfs: Bad value for 'mpol' [ 1397.403705][T30678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7338'. [ 1398.011651][T30693] validate_nla: 43 callbacks suppressed [ 1398.011664][T30693] netlink: 'syz.1.7342': attribute type 1 has an invalid length. [ 1398.437201][T30693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1398.442408][T30735] FAULT_INJECTION: forcing a failure. [ 1398.442408][T30735] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.446848][T30695] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1398.449444][T30735] CPU: 3 UID: 0 PID: 30735 Comm: syz.6.7344 Tainted: G L syzkaller #0 PREEMPT(full) [ 1398.449465][T30735] Tainted: [L]=SOFTLOCKUP [ 1398.449470][T30735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1398.449479][T30735] Call Trace: [ 1398.449484][T30735] [ 1398.449491][T30735] dump_stack_lvl+0x100/0x190 [ 1398.449518][T30735] should_fail_ex.cold+0x5/0xa [ 1398.449537][T30735] should_failslab+0xc2/0x120 [ 1398.449553][T30735] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1398.449573][T30735] ? nft_match_select_ops+0x213/0x510 [ 1398.449593][T30735] nft_match_select_ops+0x213/0x510 [ 1398.449610][T30735] ? __pfx_nft_match_select_ops+0x10/0x10 [ 1398.449624][T30735] nf_tables_expr_parse+0x5fd/0x9b0 [ 1398.449648][T30735] ? __pfx_nf_tables_expr_parse+0x10/0x10 [ 1398.449671][T30735] ? __kvmalloc_node_noprof+0x6af/0xa00 [ 1398.449684][T30735] ? nf_tables_newrule+0x760/0x2be0 [ 1398.449699][T30735] ? nft_table_lookup.part.0+0x1e3/0x230 [ 1398.449719][T30735] nf_tables_newrule+0x1b51/0x2be0 [ 1398.449741][T30735] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1398.449762][T30735] ? __nla_parse+0x40/0x60 [ 1398.449780][T30735] nfnetlink_rcv_batch+0x1410/0x2880 [ 1398.449805][T30735] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 1398.449824][T30735] ? kasan_save_stack+0x3f/0x50 [ 1398.449837][T30735] ? kasan_save_stack+0x30/0x50 [ 1398.449849][T30735] ? kasan_save_track+0x14/0x30 [ 1398.449890][T30735] ? __nla_parse+0x40/0x60 [ 1398.449907][T30735] nfnetlink_rcv+0x3bd/0x440 [ 1398.449921][T30735] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1398.449941][T30735] netlink_unicast+0x585/0x850 [ 1398.449962][T30735] ? __pfx_netlink_unicast+0x10/0x10 [ 1398.449985][T30735] netlink_sendmsg+0x8b0/0xda0 [ 1398.450006][T30735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1398.450026][T30735] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1398.450044][T30735] ____sys_sendmsg+0x9e1/0xb70 [ 1398.450061][T30735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1398.450080][T30735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1398.450107][T30735] ___sys_sendmsg+0x190/0x1e0 [ 1398.450127][T30735] ? __pfx____sys_sendmsg+0x10/0x10 [ 1398.450155][T30735] ? find_held_lock+0x2b/0x80 [ 1398.450195][T30735] __sys_sendmsg+0x170/0x220 [ 1398.450212][T30735] ? __pfx___sys_sendmsg+0x10/0x10 [ 1398.450228][T30735] ? __fget_files+0x21f/0x3d0 [ 1398.450255][T30735] ? ksys_write+0x1ac/0x250 [ 1398.450275][T30735] ? rcu_is_watching+0x12/0xc0 [ 1398.450316][T30735] __do_fast_syscall_32+0xe7/0x970 [ 1398.450340][T30735] ? lockdep_hardirqs_on+0x78/0x100 [ 1398.450364][T30735] do_fast_syscall_32+0x32/0x70 [ 1398.450387][T30735] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1398.450407][T30735] RIP: 0023:0xf7f02f7c [ 1398.450421][T30735] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1398.450436][T30735] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1398.450452][T30735] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1398.450462][T30735] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1398.450472][T30735] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1398.450482][T30735] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1398.450492][T30735] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1398.450514][T30735] [ 1398.566907][T30695] bond1: (slave wlan0): Opening slave failed [ 1398.576994][T30697] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1398.592836][T30697] bond1: (slave batadv1): making interface the new active one [ 1398.596338][T30697] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1398.800197][T30754] netlink: 'syz.4.7350': attribute type 3 has an invalid length. [ 1398.962599][T30772] netlink: 'syz.6.7349': attribute type 1 has an invalid length. [ 1399.052387][T30772] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1399.746576][T30818] binder: 30817:30818 unknown command 0 [ 1399.749054][T30818] binder: 30817:30818 ioctl c0306201 800001c0 returned -22 [ 1400.231593][T30843] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7363'. [ 1400.250620][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1400.257561][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1400.268093][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1400.480764][T30852] netlink: 'syz.4.7365': attribute type 10 has an invalid length. [ 1400.607778][T30856] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1400.808052][T30868] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1400.944266][T30883] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7372'. [ 1400.956896][T30883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7372'. [ 1401.052579][T30902] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000004' [ 1401.236917][T30909] syzkaller0: entered promiscuous mode [ 1401.239056][T30909] syzkaller0: entered allmulticast mode [ 1401.303276][T30909] FAULT_INJECTION: forcing a failure. [ 1401.303276][T30909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1401.332892][T30909] CPU: 2 UID: 0 PID: 30909 Comm: syz.1.7374 Tainted: G L syzkaller #0 PREEMPT(full) [ 1401.332938][T30909] Tainted: [L]=SOFTLOCKUP [ 1401.332945][T30909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1401.332957][T30909] Call Trace: [ 1401.332963][T30909] [ 1401.332972][T30909] dump_stack_lvl+0x100/0x190 [ 1401.333006][T30909] should_fail_ex.cold+0x5/0xa [ 1401.333032][T30909] _copy_from_iter+0x1f4/0x1690 [ 1401.333062][T30909] ? _copy_from_iter+0x270/0x1690 [ 1401.333088][T30909] ? __pfx__copy_from_iter+0x10/0x10 [ 1401.333117][T30909] ? __pfx__copy_from_iter+0x10/0x10 [ 1401.333142][T30909] ? _copy_from_iter+0x270/0x1690 [ 1401.333173][T30909] copy_page_from_iter+0x238/0x300 [ 1401.333208][T30909] skb_copy_datagram_from_iter+0x399/0x720 [ 1401.333244][T30909] packet_sendmsg+0x227e/0x5100 [ 1401.333282][T30909] ? __pfx___might_resched+0x10/0x10 [ 1401.333308][T30909] ? __pfx_debug_object_activate+0x10/0x10 [ 1401.333331][T30909] ? do_raw_spin_lock+0x128/0x260 [ 1401.333358][T30909] ? aa_sk_perm+0x309/0xaa0 [ 1401.333384][T30909] ? __pfx_packet_sendmsg+0x10/0x10 [ 1401.333408][T30909] ? __pfx_aa_sk_perm+0x10/0x10 [ 1401.333430][T30909] ? __might_fault+0xc5/0x140 [ 1401.333465][T30909] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1401.333489][T30909] __sys_sendto+0x468/0x4b0 [ 1401.333516][T30909] ? __pfx_packet_sendmsg+0x10/0x10 [ 1401.333542][T30909] ? __pfx___sys_sendto+0x10/0x10 [ 1401.333590][T30909] ? xfd_validate_state+0x129/0x190 [ 1401.333615][T30909] __ia32_sys_sendto+0xdd/0x1b0 [ 1401.333643][T30909] ? __do_fast_syscall_32+0x98/0x970 [ 1401.333671][T30909] ? lockdep_hardirqs_on+0x78/0x100 [ 1401.333694][T30909] __do_fast_syscall_32+0xe7/0x970 [ 1401.333721][T30909] ? lockdep_hardirqs_on+0x78/0x100 [ 1401.333748][T30909] do_fast_syscall_32+0x32/0x70 [ 1401.333791][T30909] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1401.333812][T30909] RIP: 0023:0xf708ef7c [ 1401.333829][T30909] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1401.333847][T30909] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 1401.333866][T30909] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1401.333877][T30909] RDX: 000000000000fce0 RSI: 0000000000000004 RDI: 0000000080000140 [ 1401.333889][T30909] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 1401.333901][T30909] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1401.333911][T30909] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1401.333937][T30909] [ 1401.808076][T30920] comedi comedi3: pcmmio: I/O port conflict (0x2000,32) [ 1402.726470][T30934] vivid-008: disconnect [ 1403.120208][T30943] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:36: iget: checksum invalid [ 1403.242711][T30945] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1403.374404][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1403.380077][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1403.385794][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1403.662928][T30951] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:10: iget: checksum invalid [ 1403.669932][T30950] siw: device registration error -23 [ 1403.924593][T30917] vivid-008: reconnect [ 1404.067999][T30965] netlink: 'syz.6.7384': attribute type 3 has an invalid length. [ 1404.088573][T30965] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7384'. [ 1404.384871][T30982] 9pnet_virtio: no channels available for device syz [ 1404.388861][T30982] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1404.608231][T30993] overlayfs: missing 'workdir' [ 1404.661810][T30998] binder: 30997:30998 ioctl c0306201 80000480 returned -22 [ 1404.807835][T31017] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7394'. [ 1404.880500][T28412] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1405.170505][ T10] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1405.741839][ T10] usb 6-1: device descriptor read/64, error -71 [ 1405.990650][ T10] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1406.120471][ T10] usb 6-1: device descriptor read/64, error -71 [ 1406.231655][ T10] usb usb6-port1: attempt power cycle [ 1406.512961][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1406.518934][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1406.526960][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1406.549427][T31045] overlayfs: missing 'workdir' [ 1406.580842][ T10] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1406.601077][ T10] usb 6-1: device descriptor read/8, error -71 [ 1406.750522][T28412] Bluetooth: hci1: command 0x0c1a tx timeout [ 1406.860542][ T10] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1406.881245][ T10] usb 6-1: device descriptor read/8, error -71 [ 1406.990856][ T10] usb usb6-port1: unable to enumerate USB device [ 1407.060456][ T5933] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 1407.220417][ T5933] usb 9-1: Using ep0 maxpacket: 16 [ 1407.229209][ T5933] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1407.239328][ T5933] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1407.243918][ T5933] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.250079][ T5933] usb 9-1: Product: syz [ 1407.251591][ T5933] usb 9-1: Manufacturer: syz [ 1407.255598][ T5933] usb 9-1: SerialNumber: syz [ 1407.262794][ T5933] usb 9-1: config 0 descriptor?? [ 1407.272765][ T5933] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1407.280385][ T5933] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1407.893393][ T5933] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1408.001976][T31082] FAULT_INJECTION: forcing a failure. [ 1408.001976][T31082] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.007487][T31082] CPU: 2 UID: 0 PID: 31082 Comm: syz.8.7406 Tainted: G L syzkaller #0 PREEMPT(full) [ 1408.007505][T31082] Tainted: [L]=SOFTLOCKUP [ 1408.007510][T31082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1408.007516][T31082] Call Trace: [ 1408.007521][T31082] [ 1408.007525][T31082] dump_stack_lvl+0x100/0x190 [ 1408.007547][T31082] should_fail_ex.cold+0x5/0xa [ 1408.007561][T31082] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1408.007577][T31082] should_failslab+0xc2/0x120 [ 1408.007597][T31082] __kmalloc_noprof+0xe0/0x850 [ 1408.007613][T31082] ? kfree+0x1dd/0x6c0 [ 1408.007631][T31082] tomoyo_realpath_from_path+0xb6/0x690 [ 1408.007649][T31082] tomoyo_path2_perm+0x29f/0x700 [ 1408.007662][T31082] ? tomoyo_path2_perm+0x291/0x700 [ 1408.007674][T31082] ? fuse_dentry_revalidate+0x600/0xbd0 [ 1408.007689][T31082] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 1408.007702][T31082] ? current_check_refer_path+0x2ca/0xe00 [ 1408.007735][T31082] tomoyo_path_rename+0xfc/0x1a0 [ 1408.007751][T31082] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 1408.007769][T31082] ? do_raw_spin_unlock+0x145/0x1e0 [ 1408.007784][T31082] security_path_rename+0x18e/0x3c0 [ 1408.007801][T31082] filename_renameat2+0x731/0xa60 [ 1408.007821][T31082] ? __pfx_filename_renameat2+0x10/0x10 [ 1408.007839][T31082] ? __might_fault+0xc5/0x140 [ 1408.007863][T31082] ? do_getname+0x191/0x390 [ 1408.007879][T31082] __ia32_sys_rename+0x80/0xb0 [ 1408.007896][T31082] __do_fast_syscall_32+0xe7/0x970 [ 1408.007911][T31082] ? lockdep_hardirqs_on+0x78/0x100 [ 1408.007927][T31082] do_fast_syscall_32+0x32/0x70 [ 1408.007943][T31082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1408.007958][T31082] RIP: 0023:0xf7f53f7c [ 1408.007967][T31082] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1408.007978][T31082] RSP: 002b:00000000f53d450c EFLAGS: 00000292 ORIG_RAX: 0000000000000026 [ 1408.007989][T31082] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000080000140 [ 1408.007996][T31082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1408.008002][T31082] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1408.008008][T31082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1408.008014][T31082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1408.008028][T31082] [ 1408.008032][T31082] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1408.130019][T31089] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1408.132876][T31089] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1408.189506][T31097] siw: device registration error -23 [ 1408.235461][T31102] binder: 31099:31102 ioctl 400c620e 80002080 returned -22 [ 1408.244915][T31102] random: crng reseeded on system resumption [ 1408.305543][T31111] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7416'. [ 1408.315071][T31113] fuse: Bad value for 'fd' [ 1408.330365][ T5933] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1408.333705][ T5933] em28xx 9-1:0.0: board has no eeprom [ 1408.400511][ T5933] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1408.403385][ T5933] em28xx 9-1:0.0: dvb set to bulk mode. [ 1408.405596][ T10] em28xx 9-1:0.0: Binding DVB extension [ 1408.415389][ T5933] usb 9-1: USB disconnect, device number 94 [ 1408.418938][ T5933] em28xx 9-1:0.0: Disconnecting em28xx [ 1408.418983][T31134] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1408.420854][T31135] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:31: iget: checksum invalid [ 1408.423075][ T10] em28xx 9-1:0.0: Registering input extension [ 1408.424607][T31134] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1408.428673][ T5933] em28xx 9-1:0.0: Closing input extension [ 1408.462139][ T5933] em28xx 9-1:0.0: Freeing device [ 1408.481758][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1408.482371][T31150] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7421'. [ 1408.485344][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1408.492237][T31152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7417'. [ 1408.492438][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1408.541739][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1408.545625][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1408.550149][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1408.676965][T31161] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:10: iget: checksum invalid [ 1408.682875][T31162] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:10: iget: checksum invalid [ 1408.688424][T31163] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:10: iget: checksum invalid [ 1409.373859][T31212] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1409.377258][T31212] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1409.399607][T18308] usb 11-1: new low-speed USB device number 19 using dummy_hcd [ 1409.636590][T18308] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1409.663961][T18308] usb 11-1: config 0 has no interface number 0 [ 1409.697476][T18308] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1409.773589][T18308] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1409.785205][T18308] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1409.788722][T18308] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.937668][T18308] usb 11-1: config 0 descriptor?? [ 1409.951698][T31199] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1410.047190][T18308] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1410.181275][T18308] usb 11-1: USB disconnect, device number 19 [ 1410.183227][ C2] iowarrior 11-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1410.260269][T31231] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7432'. [ 1412.261706][T31271] overlayfs: missing 'lowerdir' [ 1413.229221][T31293] input: syz0 as /devices/virtual/input/input105 [ 1413.513040][T30413] EXT4-fs error: 28 callbacks suppressed [ 1413.513050][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1413.519425][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1413.524258][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1414.067045][ T1] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm init: iget: checksum invalid [ 1414.082154][ T1] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm init: iget: checksum invalid [ 1414.093429][ T1] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm init: iget: checksum invalid [ 1414.093842][T27730] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.102356][ T1] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm init: iget: checksum invalid [ 1414.102538][ T1] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm init: iget: checksum invalid [ 1414.121004][ T1] EXT4-fs error (device sda1): ext4_lookup:1785: inode #2001: comm init: iget: checksum invalid [ 1414.303287][T27730] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.593638][T27730] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.809450][T27730] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.248589][T31338] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:29: iget: checksum invalid [ 1415.254749][T31337] Can't find ip_set type ha‡h:net [ 1415.257017][T27730] dummy0: left allmulticast mode [ 1415.262693][T27730] bridge0: port 3(dummy0) entered disabled state [ 1415.275065][T27730] bridge_slave_1: left allmulticast mode [ 1415.277507][T27730] bridge_slave_1: left promiscuous mode [ 1415.280562][T27730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.293747][T27730] bridge_slave_0: left allmulticast mode [ 1415.297886][T27730] bridge_slave_0: left promiscuous mode [ 1415.303561][T27730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.898415][T27730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1415.927666][T27730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1415.941725][T27730] bond0 (unregistering): Released all slaves [ 1415.954471][T27730] bond1 (unregistering): Released all slaves [ 1415.971758][T27730] bond2 (unregistering): Released all slaves [ 1416.211875][T31366] lo speed is unknown, defaulting to 1000 [ 1416.397371][T31406] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7460'. [ 1416.401335][T31406] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7460'. [ 1416.405020][T31411] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7461'. [ 1416.475586][T31418] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7463'. [ 1416.700130][T31416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1416.725807][T31416] 8021q: adding VLAN 0 to HW filter on device team0 [ 1416.756809][T31416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1416.797665][T31445] usb usb1: usbfs: process 31445 (syz.8.7467) did not claim interface 5 before use [ 1416.909892][T31416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1416.928180][T31416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1416.949649][T31416] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1416.974232][T31416] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1417.137643][T31426] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1417.183733][T27732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.185973][T27732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.199231][T27732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.202076][T27732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1417.325235][T27730] hsr_slave_0: left promiscuous mode [ 1417.327901][T27730] hsr_slave_1: left promiscuous mode [ 1417.329894][T27730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1417.335636][T27730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1417.343508][T27730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1417.346233][T27730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1417.364211][T27730] veth1_macvtap: left promiscuous mode [ 1417.369188][T27730] veth0_macvtap: left promiscuous mode [ 1417.376797][T27730] veth1_vlan: left promiscuous mode [ 1417.382045][T27730] veth0_vlan: left promiscuous mode [ 1417.425036][T31455] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1417.653561][T27730] team0 (unregistering): Port device team_slave_1 removed [ 1417.661953][T27730] team0 (unregistering): Port device team_slave_0 removed [ 1417.741003][T31468] 0xffffffff00020000-0xffffffff00030000 : "" [ 1417.743686][T31468] mtd: partition "" is out of reach -- disabled [ 1417.758729][T31468] ftl_cs: FTL header not found. [ 1417.765668][T31464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1417.770666][T31464] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1417.777257][T31507] udevd[31507]: failed to execute '/lib/udev/mtd_probe' 'mtd_probe /dev/mtd7ro': Bad message [ 1418.324785][T31537] input: syz0 as /devices/virtual/input/input106 [ 1418.420818][ T40] audit: type=1800 audit(1780832391.936:2191): pid=31547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7483" name="bus" dev="overlay" ino=490 res=0 errno=0 [ 1418.489655][T31552] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7485'. [ 1419.029910][ T5150] EXT4-fs error: 10 callbacks suppressed [ 1419.029922][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1419.038686][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1419.044486][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1419.065167][T31574] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7490'. [ 1419.104746][T31580] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:33: iget: checksum invalid [ 1419.733063][T31593] 9pnet_fd: Insufficient options for proto=fd [ 1420.717347][T31625] policy can only be matched on NF_INET_PRE_ROUTING [ 1420.717365][T31625] unable to load match [ 1421.798797][T31648] syzkaller0: entered promiscuous mode [ 1421.800659][T31648] syzkaller0: entered allmulticast mode [ 1421.834737][T31651] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7496'. [ 1422.123532][T31660] comedi comedi3: mpc624: I/O port conflict (0x100,16) [ 1422.145362][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1422.150650][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1422.155607][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1422.209240][T31666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1422.246329][T31670] FAULT_INJECTION: forcing a failure. [ 1422.246329][T31670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1422.260485][T31670] CPU: 0 UID: 0 PID: 31670 Comm: syz.4.7505 Tainted: G L syzkaller #0 PREEMPT(full) [ 1422.260515][T31670] Tainted: [L]=SOFTLOCKUP [ 1422.260519][T31670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1422.260526][T31670] Call Trace: [ 1422.260530][T31670] [ 1422.260535][T31670] dump_stack_lvl+0x100/0x190 [ 1422.260558][T31670] should_fail_ex.cold+0x5/0xa [ 1422.260572][T31670] _copy_from_user+0x2e/0xd0 [ 1422.260588][T31670] snd_pcm_oss_write2+0x1c2/0x400 [ 1422.260605][T31670] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1422.260620][T31670] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 1422.260631][T31670] ? snd_pcm_oss_prepare+0x11e/0x240 [ 1422.260647][T31670] snd_pcm_oss_write+0x729/0xa30 [ 1422.260663][T31670] ? security_file_permission+0x76/0x210 [ 1422.260681][T31670] vfs_write+0x2aa/0x1070 [ 1422.260694][T31670] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1422.260711][T31670] ? __pfx_vfs_write+0x10/0x10 [ 1422.260722][T31670] ? find_held_lock+0x2b/0x80 [ 1422.260734][T31670] ? __fget_files+0x215/0x3d0 [ 1422.260747][T31670] ? __fget_files+0x215/0x3d0 [ 1422.260761][T31670] ? __fget_files+0x21f/0x3d0 [ 1422.260781][T31670] ksys_write+0x12a/0x250 [ 1422.260793][T31670] ? __pfx_ksys_write+0x10/0x10 [ 1422.260804][T31670] ? ksys_write+0x1ac/0x250 [ 1422.260817][T31670] ? rcu_is_watching+0x12/0xc0 [ 1422.260831][T31670] __do_fast_syscall_32+0xe7/0x970 [ 1422.260847][T31670] ? lockdep_hardirqs_on+0x78/0x100 [ 1422.260863][T31670] do_fast_syscall_32+0x32/0x70 [ 1422.260879][T31670] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1422.260893][T31670] RIP: 0023:0xf7f33f7c [ 1422.260902][T31670] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1422.260913][T31670] RSP: 002b:00000000f53d550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1422.260924][T31670] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000500 [ 1422.260931][T31670] RDX: 000000000000fc36 RSI: 0000000000000000 RDI: 0000000000000000 [ 1422.260937][T31670] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1422.260943][T31670] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1422.260949][T31670] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1422.260963][T31670] [ 1422.395684][T31676] Cannot find del_set index 3 as target [ 1422.411188][T31676] binder: 31675:31676 ioctl c0306201 80000240 returned -14 [ 1422.472145][T31676] lo speed is unknown, defaulting to 1000 [ 1422.693601][T31707] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1422.998747][T31711] xt_cgroup: xt_cgroup: no path or classid specified [ 1423.138601][T31712] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:10: iget: checksum invalid [ 1423.152768][T31711] xt_CT: No such helper "pptp" [ 1423.958655][T31723] input: syz0 as /devices/virtual/input/input107 [ 1423.978639][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1423.993825][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1424.062322][T31723] EXT4-fs error: 1 callbacks suppressed [ 1424.062333][T31723] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.7513: iget: checksum invalid [ 1424.078432][T31723] netdevsim netdevsim8: loading /lib/firmware/updates/syzkaller/. failed with error -74 [ 1424.083511][T31723] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.7513: iget: checksum invalid [ 1424.091879][T31723] netdevsim netdevsim8: loading /lib/firmware/updates/. failed with error -74 [ 1424.101654][T31723] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.7513: iget: checksum invalid [ 1424.108021][T31723] netdevsim netdevsim8: loading /lib/firmware/syzkaller/. failed with error -74 [ 1424.112829][T31723] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.7513: iget: checksum invalid [ 1424.120907][T31723] netdevsim netdevsim8: loading /lib/firmware/. failed with error -74 [ 1424.125696][T31723] netdevsim netdevsim8: Direct firmware load for . failed with error -74 [ 1424.129987][T31723] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1424.260671][ T7566] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 1424.410898][ T7566] usb 11-1: Using ep0 maxpacket: 32 [ 1424.455602][T31728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.463236][T31728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.636692][ T7566] usb 11-1: unable to get BOS descriptor or descriptor too short [ 1424.651305][ T7566] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 1424.657526][ T7566] usb 11-1: can't read configurations, error -71 [ 1424.835279][T28412] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1424.847493][T28412] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1424.851537][T28412] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1424.856327][T28412] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1424.859133][T28412] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1424.887874][T31758] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:10: iget: checksum invalid [ 1424.893455][T31759] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:38: iget: checksum invalid [ 1424.898886][T31760] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:38: iget: checksum invalid [ 1424.911695][T31762] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:38: iget: checksum invalid [ 1424.916681][T31763] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:38: iget: checksum invalid [ 1424.925846][T31766] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:38: iget: checksum invalid [ 1424.974546][T31751] lo speed is unknown, defaulting to 1000 [ 1425.091084][T25892] bond0: (slave syz_tun): Releasing backup interface [ 1425.323537][T31846] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1425.402738][T31751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.405126][T31751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.407985][T31751] bridge_slave_0: entered allmulticast mode [ 1425.414833][T31751] bridge_slave_0: entered promiscuous mode [ 1425.418994][T31751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.422032][T31751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.424643][T31751] bridge_slave_1: entered allmulticast mode [ 1425.429254][T31751] bridge_slave_1: entered promiscuous mode [ 1425.466877][T31751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1425.476020][T31751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1425.509548][T31751] team0: Port device team_slave_0 added [ 1425.516054][T31751] team0: Port device team_slave_1 added [ 1425.549629][T31751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1425.552321][T31751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.563131][T31751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1425.563752][T31938] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.7519'. [ 1425.575002][T31751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1425.577804][T31751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.588419][T31751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1425.724054][T31751] hsr_slave_0: entered promiscuous mode [ 1425.730491][T31751] hsr_slave_1: entered promiscuous mode [ 1425.734962][T31751] debugfs: 'hsr0' already exists in 'hsr' [ 1425.737452][T31751] Cannot create hsr debugfs directory [ 1426.910996][T21753] Bluetooth: hci2: command tx timeout [ 1427.638883][T32045] syz_tun: entered allmulticast mode [ 1427.644981][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.647600][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1427.720660][T31751] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1427.743917][T31751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1427.755034][T31751] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1427.781521][T31751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1427.784953][T31751] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1427.791711][T31751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1427.801287][T31751] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1427.814419][T31751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1427.964749][T31751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.990407][T31751] 8021q: adding VLAN 0 to HW filter on device team0 [ 1428.005178][T27713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.007381][T27713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1428.021664][T27713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.024487][T27713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1428.176749][T31751] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1428.181657][T31751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1428.267805][T31751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1428.333881][T31751] veth0_vlan: entered promiscuous mode [ 1428.356231][T31751] veth1_vlan: entered promiscuous mode [ 1428.395785][T31751] veth0_macvtap: entered promiscuous mode [ 1428.404247][T31751] veth1_macvtap: entered promiscuous mode [ 1428.424298][T31751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1428.434922][T31751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1428.449271][T27730] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.456425][T27730] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.524254][T27730] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.534264][T27720] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.603466][T27732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1428.607200][T27732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1428.646350][T27739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1428.648843][T27739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1428.929295][T32044] syz_tun: left allmulticast mode [ 1428.963497][T32062] Process accounting resumed [ 1428.990414][T21753] Bluetooth: hci2: command tx timeout [ 1429.761279][T32142] netlink: 'syz.8.7526': attribute type 1 has an invalid length. [ 1429.797235][T32142] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1429.833075][T32142] bond2: (slave geneve2): making interface the new active one [ 1429.837113][T32142] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1429.979151][ T40] audit: type=1800 audit(1780832403.486:2192): pid=32185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7528" name="cgroup" dev="overlay" ino=40 res=0 errno=0 [ 1430.499229][T32193] overlayfs: failed lookup in lower (newroot/98, name='file0', err=-40): overlapping layers [ 1431.070436][T21753] Bluetooth: hci2: command tx timeout [ 1431.145647][T32205] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1431.155103][T32213] input: syz0 as /devices/virtual/input/input108 [ 1431.173888][T30413] EXT4-fs error: 32 callbacks suppressed [ 1431.173899][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1431.182277][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1431.190067][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1431.207060][T32218] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7534'. [ 1431.378951][ T40] audit: type=1326 audit(1780832404.886:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32211 comm="syz.4.7532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1431.387609][ T40] audit: type=1326 audit(1780832404.896:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32211 comm="syz.4.7532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1431.396639][ T40] audit: type=1326 audit(1780832404.896:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32211 comm="syz.4.7532" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1431.405246][ T40] audit: type=1326 audit(1780832404.896:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32211 comm="syz.4.7532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1431.414224][ T40] audit: type=1326 audit(1780832404.906:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32211 comm="syz.4.7532" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71261ab code=0x7ffc0000 [ 1431.425588][ T40] audit: type=1326 audit(1780832404.906:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32211 comm="syz.4.7532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1431.435921][T32224] pim6reg: entered allmulticast mode [ 1431.437892][ T40] audit: type=1326 audit(1780832404.906:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32211 comm="syz.4.7532" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1431.445348][ T40] audit: type=1326 audit(1780832404.906:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32211 comm="syz.4.7532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1431.454948][ T40] audit: type=1326 audit(1780832404.906:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32211 comm="syz.4.7532" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1431.988801][T32211] pim6reg: left allmulticast mode [ 1432.067108][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1432.070983][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1432.074603][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1432.329127][T32239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7537'. [ 1432.404103][T32243] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:10: iget: checksum invalid [ 1432.426359][T32242] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1432.594540][T32251] syzkaller0: entered promiscuous mode [ 1432.596462][T32251] syzkaller0: entered allmulticast mode [ 1432.712294][T32267] binfmt_misc: register: failed to install interpreter file ./bus [ 1432.784600][T32270] syzkaller0: entered promiscuous mode [ 1432.786339][T32270] syzkaller0: entered allmulticast mode [ 1432.810508][ T5933] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 1432.823329][T32270] tipc: Started in network mode [ 1432.825437][T32270] tipc: Node identity ee0395a47371, cluster identity 4711 [ 1432.832785][T32270] tipc: Enabled bearer , priority 0 [ 1432.838695][T32269] tipc: Resetting bearer [ 1432.864448][T32269] tipc: Disabling bearer [ 1432.872836][T32279] program syz.6.7546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1432.960420][ T5933] usb 13-1: Using ep0 maxpacket: 16 [ 1432.964746][ T5933] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1432.971359][ T5933] usb 13-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1432.974825][ T5933] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.977265][ T5933] usb 13-1: Product: syz [ 1432.978721][ T5933] usb 13-1: Manufacturer: syz [ 1432.980502][ T5933] usb 13-1: SerialNumber: syz [ 1432.983857][ T5933] usb 13-1: config 0 descriptor?? [ 1432.987818][ T5933] em28xx 13-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1432.991013][ T5933] em28xx 13-1:0.0: DVB interface 0 found: bulk [ 1433.150402][T21753] Bluetooth: hci2: command tx timeout [ 1433.613130][ T5933] em28xx 13-1:0.0: chip ID is em2765 [ 1434.379270][ T5933] em28xx 13-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1434.384240][ T5933] em28xx 13-1:0.0: board has no eeprom [ 1434.727214][T32307] overlayfs: failed to resolve './file1': -2 [ 1435.160610][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1435.171003][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1435.185891][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1435.390647][T32246] em28xx 13-1:0.0: writing to i2c device at 0x0 failed (error=-5) [ 1435.460610][ T5933] em28xx 13-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1435.464995][ T5933] em28xx 13-1:0.0: dvb set to bulk mode. [ 1435.467591][ T5931] em28xx 13-1:0.0: Binding DVB extension [ 1435.505692][ T5931] em28xx 13-1:0.0: Registering input extension [ 1435.509144][ T5933] usb 13-1: USB disconnect, device number 7 [ 1435.521734][ T5933] em28xx 13-1:0.0: Disconnecting em28xx [ 1435.524598][T32337] md: md2 stopped. [ 1435.528704][ T5933] em28xx 13-1:0.0: Closing input extension [ 1435.551419][ T5933] em28xx 13-1:0.0: Freeing device [ 1436.424040][T32370] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7558'. [ 1436.494471][T27740] Bluetooth: hci3: Frame reassembly failed (-84) [ 1436.497686][T27740] Bluetooth: hci3: Frame reassembly failed (-84) [ 1437.361213][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 1437.361230][ T40] audit: type=1804 audit(1780832410.866:2226): pid=32388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.7560" name="/newroot/217/bus/bus" dev="overlay" ino=1218 res=1 errno=0 [ 1437.485899][ T40] audit: type=1326 audit(1780832410.996:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32391 comm="syz.4.7562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1437.495017][ T40] audit: type=1326 audit(1780832410.996:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32391 comm="syz.4.7562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1437.503815][ T40] audit: type=1804 audit(1780832411.006:2229): pid=32388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.7560" name="/newroot/217/bus/bus" dev="overlay" ino=1218 res=1 errno=0 [ 1437.505234][T32392] input: syz0 as /devices/virtual/input/input110 [ 1437.508098][T30413] EXT4-fs error: 7 callbacks suppressed [ 1437.508108][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1437.509202][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1437.509566][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1437.513582][ T40] audit: type=1326 audit(1780832411.006:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32391 comm="syz.4.7562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1437.538506][ T40] audit: type=1326 audit(1780832411.006:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32391 comm="syz.4.7562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1437.547108][ T40] audit: type=1326 audit(1780832411.006:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32391 comm="syz.4.7562" exe="/syz-executor" sig=0 arch=40000003 syscall=275 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1437.555751][ T40] audit: type=1326 audit(1780832411.006:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32391 comm="syz.4.7562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1437.565343][ T40] audit: type=1326 audit(1780832411.006:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32391 comm="syz.4.7562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1437.573949][ T40] audit: type=1326 audit(1780832411.016:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32391 comm="syz.4.7562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 1437.963153][T32404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7564'. [ 1438.031989][T32406] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:22: iget: checksum invalid [ 1438.520911][T21753] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1438.520958][T28412] Bluetooth: hci3: command 0x1003 tx timeout [ 1438.561866][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1438.571719][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1438.577219][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1438.879299][T32427] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7567'. [ 1438.923732][T32430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7568'. [ 1438.928295][T32433] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:31: iget: checksum invalid [ 1438.970983][T25007] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 1439.131810][T25007] usb 11-1: Using ep0 maxpacket: 32 [ 1439.139325][T25007] usb 11-1: unable to get BOS descriptor or descriptor too short [ 1439.149265][T25007] usb 11-1: no configurations [ 1439.156881][T25007] usb 11-1: can't read configurations, error -22 [ 1439.223377][T32448] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:31: iget: checksum invalid [ 1439.228732][T32449] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:31: iget: checksum invalid [ 1439.556330][T32435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.559670][T32435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.849216][T28594] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1439.868705][T28594] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1439.873958][T28594] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1439.878769][T28594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1439.881835][T28594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1440.169263][T32435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1440.196080][T32435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1440.536897][T27713] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.547404][T27713] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.565500][T27713] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.586901][T27713] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.670069][T32452] lo speed is unknown, defaulting to 1000 [ 1440.887239][T32496] loop4: detected capacity change from 0 to 524287936 [ 1441.073774][T32452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.076058][T32452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.078152][T32452] bridge_slave_0: entered allmulticast mode [ 1441.081023][T32452] bridge_slave_0: entered promiscuous mode [ 1441.095576][T32452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.098087][T32452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.100594][T32452] bridge_slave_1: entered allmulticast mode [ 1441.106509][T32452] bridge_slave_1: entered promiscuous mode [ 1441.142084][T32452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1441.151373][T32452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1441.191644][T32452] team0: Port device team_slave_0 added [ 1441.197558][T32452] team0: Port device team_slave_1 added [ 1441.225230][T32452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.227365][T32452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1441.235862][T32452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.243322][T32452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.245543][T32452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1441.253205][T32452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1441.308738][T32452] hsr_slave_0: entered promiscuous mode [ 1441.314069][T32452] hsr_slave_1: entered promiscuous mode [ 1441.318293][T32452] debugfs: 'hsr0' already exists in 'hsr' [ 1441.321381][T32452] Cannot create hsr debugfs directory [ 1441.764885][T32756] qnx6: unable to read the first superblock [ 1441.963152][T28594] Bluetooth: hci3: command tx timeout [ 1442.133550][ T314] syzkaller0: entered promiscuous mode [ 1442.135883][ T314] syzkaller0: entered allmulticast mode [ 1442.144057][ T314] 0: reclassify loop, rule prio 0, protocol 800 [ 1442.502738][T32452] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1442.512047][T32452] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1442.515935][T32452] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1442.528154][T32452] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1442.533517][T32452] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1442.547999][T32452] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1442.561609][T32452] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1442.579317][T32452] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1442.749793][T32452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1443.382925][T32452] 8021q: adding VLAN 0 to HW filter on device team0 [ 1443.648525][ T6390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.651516][ T6390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1443.815520][T27739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.817956][T27739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1443.873748][ T359] EXT4-fs error: 14 callbacks suppressed [ 1443.873759][ T359] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:29: iget: checksum invalid [ 1443.882742][ T360] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:33: iget: checksum invalid [ 1443.888778][ T361] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:29: iget: checksum invalid [ 1443.893772][ T362] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:29: iget: checksum invalid [ 1443.920649][ T363] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:33: iget: checksum invalid [ 1443.926873][ T364] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:33: iget: checksum invalid [ 1443.934072][ T365] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:33: iget: checksum invalid [ 1443.941197][ T366] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:33: iget: checksum invalid [ 1443.947775][ T367] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:33: iget: checksum invalid [ 1443.956473][ T368] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:33: iget: checksum invalid [ 1443.973388][T32452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1444.040579][T28594] Bluetooth: hci3: command tx timeout [ 1444.103073][T32452] veth0_vlan: entered promiscuous mode [ 1444.124050][T32452] veth1_vlan: entered promiscuous mode [ 1444.182082][T32452] veth0_macvtap: entered promiscuous mode [ 1444.185375][ T377] ubi31: attaching mtd0 [ 1444.190627][T32452] veth1_macvtap: entered promiscuous mode [ 1444.205076][T32452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1444.230700][T32452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1444.276046][T27728] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.291583][T27728] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.300611][T27728] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.310022][T27728] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.001351][T27737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.003974][T27737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1445.021844][T27732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.025010][T27732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.011154][ T398] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1446.016598][ T398] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1446.023337][ T398] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1446.073752][ T398] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1446.113892][T21753] Bluetooth: hci3: command tx timeout [ 1446.220146][ T407] netlink: 'syz.6.7596': attribute type 21 has an invalid length. [ 1446.223596][ T407] IPv6: NLM_F_CREATE should be specified when creating new route [ 1446.226760][ T407] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1446.229331][ T407] IPv6: NLM_F_CREATE should be set when creating new route [ 1446.231983][ T407] IPv6: NLM_F_CREATE should be set when creating new route [ 1446.234558][ T407] IPv6: NLM_F_CREATE should be set when creating new route [ 1446.482123][ T425] program syz.8.7598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1447.764287][ T444] fuse: Bad value for 'rootmode' [ 1448.200897][T21753] Bluetooth: hci3: command tx timeout [ 1448.921908][ T5150] EXT4-fs error: 9 callbacks suppressed [ 1448.921919][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1448.939017][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1448.948022][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1449.530253][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 1449.530264][ T40] audit: type=1326 audit(1780832423.036:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=456 comm="syz.4.7605" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feef7c code=0x0 [ 1449.598856][ T460] pimreg3: entered allmulticast mode [ 1449.605010][ T460] netlink: 'syz.4.7605': attribute type 2 has an invalid length. [ 1449.649038][ T460] ÃM¯”ÛÓó: entered promiscuous mode [ 1450.230655][ T5933] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 1450.279563][ T473] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7607'. [ 1450.283290][ T473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7607'. [ 1450.343516][ T473] 9pnet: p9_errstr2errno: server reported unknown error ./file0 [ 1450.412591][ T5933] usb 13-1: config 1 has an invalid interface number: 7 but max is 0 [ 1450.430392][ T5933] usb 13-1: config 1 has no interface number 0 [ 1450.434567][ T5933] usb 13-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1450.457374][ T5933] usb 13-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1450.474452][ T5933] usb 13-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1450.483113][ T5933] usb 13-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1450.486902][ T5933] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.490213][ T5933] usb 13-1: Product: syz [ 1450.492429][ T5933] usb 13-1: Manufacturer: syz [ 1450.494733][ T5933] usb 13-1: SerialNumber: syz [ 1450.503168][ T482] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7608'. [ 1450.503234][ T467] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1450.556350][ T482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7608'. [ 1450.890831][ T489] warn_alloc: 1 callbacks suppressed [ 1450.890843][ T489] syz.5.7609: page allocation failure: order:0, mode:0x144cca(GFP_HIGHUSER_MOVABLE|__GFP_RETRY_MAYFAIL|__GFP_COMP), nodemask=0,cpuset=syz5,mems_allowed=0-1 [ 1450.899380][ T489] CPU: 0 UID: 0 PID: 489 Comm: syz.5.7609 Tainted: G L syzkaller #0 PREEMPT(full) [ 1450.899407][ T489] Tainted: [L]=SOFTLOCKUP [ 1450.899414][ T489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1450.899425][ T489] Call Trace: [ 1450.899431][ T489] [ 1450.899437][ T489] dump_stack_lvl+0x100/0x190 [ 1450.899459][ T489] warn_alloc.cold+0x95/0x1c1 [ 1450.899470][ T489] ? __pfx_warn_alloc+0x10/0x10 [ 1450.899501][ T489] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1450.899520][ T489] ? _mutex_trylock_nest_lock+0x170/0x310 [ 1450.899541][ T489] __alloc_frozen_pages_noprof+0xf25/0x2bc0 [ 1450.899581][ T489] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1450.899598][ T489] ? __pfx___schedule+0x10/0x10 [ 1450.899617][ T489] ? __lock_acquire+0x4a5/0x2630 [ 1450.899636][ T489] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1450.899651][ T489] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 1450.899664][ T489] ? policy_nodemask+0xed/0x4f0 [ 1450.899678][ T489] alloc_pages_mpol+0x1fb/0x540 [ 1450.899691][ T489] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1450.899708][ T489] folio_alloc_mpol_noprof+0x36/0x260 [ 1450.899724][ T489] alloc_migration_target_by_mpol+0x2c1/0x650 [ 1450.899740][ T489] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1450.899756][ T489] ? __pfx___might_resched+0x10/0x10 [ 1450.899767][ T489] ? arch_stack_walk+0xa6/0xf0 [ 1450.899783][ T489] migrate_pages_batch+0x5dc/0x45c0 [ 1450.899798][ T489] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1450.899815][ T489] ? stack_depot_save_flags+0x27/0x9d0 [ 1450.899834][ T489] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1450.899847][ T489] ? kasan_save_stack+0x3f/0x50 [ 1450.899857][ T489] ? kasan_save_stack+0x30/0x50 [ 1450.899867][ T489] ? kasan_save_track+0x14/0x30 [ 1450.899877][ T489] ? __mpol_dup+0x74/0x390 [ 1450.899890][ T489] ? sp_alloc+0x4d/0x160 [ 1450.899903][ T489] ? do_mbind+0x7dc/0xfd0 [ 1450.899917][ T489] ? kernel_mbind+0x1b7/0x200 [ 1450.899930][ T489] ? __do_fast_syscall_32+0xe7/0x970 [ 1450.899946][ T489] ? do_fast_syscall_32+0x32/0x70 [ 1450.899961][ T489] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1450.899982][ T489] migrate_pages_sync+0x12c/0x880 [ 1450.900005][ T489] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1450.900036][ T489] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1450.900067][ T489] ? __lock_acquire+0x4a5/0x2630 [ 1450.900084][ T489] migrate_pages+0x1aa5/0x2880 [ 1450.900100][ T489] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1450.900117][ T489] ? mpol_set_shared_policy+0x291/0x890 [ 1450.900132][ T489] ? mpol_set_shared_policy+0x291/0x890 [ 1450.900147][ T489] ? __pfx_migrate_pages+0x10/0x10 [ 1450.900162][ T489] ? find_held_lock+0x2b/0x80 [ 1450.900175][ T489] ? do_mbind+0x555/0xfd0 [ 1450.900192][ T489] ? up_write+0x28c/0x4f0 [ 1450.900204][ T489] do_mbind+0x5a4/0xfd0 [ 1450.900222][ T489] ? __pfx_do_mbind+0x10/0x10 [ 1450.900236][ T489] ? trace_sched_exit_tp+0x11c/0x160 [ 1450.900251][ T489] ? __schedule+0x12a7/0x67a0 [ 1450.900270][ T489] ? __pfx_get_nodes+0x10/0x10 [ 1450.900284][ T489] kernel_mbind+0x1b7/0x200 [ 1450.900300][ T489] ? __pfx_kernel_mbind+0x10/0x10 [ 1450.900316][ T489] ? rcu_is_watching+0x12/0xc0 [ 1450.900330][ T489] __do_fast_syscall_32+0xe7/0x970 [ 1450.900348][ T489] do_fast_syscall_32+0x32/0x70 [ 1450.900363][ T489] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1450.900377][ T489] RIP: 0023:0xf703ef7c [ 1450.900386][ T489] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1450.900397][ T489] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 1450.900408][ T489] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 1450.900415][ T489] RDX: 0000000000000002 RSI: 0000000080000000 RDI: 0000000000000008 [ 1450.900421][ T489] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1450.900427][ T489] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1450.900433][ T489] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1450.900447][ T489] [ 1451.050483][ T489] Mem-Info: [ 1451.051584][ T489] active_anon:4694 inactive_anon:2425 isolated_anon:0 [ 1451.051584][ T489] active_file:1861 inactive_file:5148 isolated_file:0 [ 1451.051584][ T489] unevictable:1768 dirty:24 writeback:0 [ 1451.051584][ T489] slab_reclaimable:7874 slab_unreclaimable:86954 [ 1451.051584][ T489] mapped:29028 shmem:6916 pagetables:1548 [ 1451.051584][ T489] sec_pagetables:375 bounce:0 [ 1451.051584][ T489] kernel_misc_reclaimable:0 [ 1451.051584][ T489] free:35277 free_pcp:0 free_cma:0 [ 1451.065677][ T489] Node 0 active_anon:16kB inactive_anon:60kB active_file:8kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:3568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7756kB pagetables:1308kB sec_pagetables:1192kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1451.076263][ T489] Node 0 DMA free:2980kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:56kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1451.109846][ T489] lowmem_reserve[]: 0 285 285 285 285 [ 1451.114691][ T489] Node 0 DMA32 free:36312kB boost:29460kB min:42556kB low:45828kB high:49100kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:60kB active_file:8kB inactive_file:0kB unevictable:3536kB writepending:0kB zspages:1344kB present:1032196kB managed:292748kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1451.135942][ T489] lowmem_reserve[]: 0 0 0 0 0 [ 1451.140267][ T489] Node 0 DMA: 93*4kB (UM) 48*8kB (UM) 29*16kB (UM) 15*32kB (UM) 2*64kB (U) 1*128kB (M) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2980kB [ 1451.154669][ T489] Node 0 DMA32: 1148*4kB (UME) 483*8kB (UME) 145*16kB (UME) 246*32kB (UME) 71*64kB (UME) 29*128kB (UM) 13*256kB (M) 6*512kB (UM) 1*1024kB (M) 1*2048kB (U) 0*4096kB = 36376kB [ 1451.168384][ T5933] usb 13-1: Error in usbnet_get_endpoints (-71) [ 1451.173818][ T489] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1451.190830][ T489] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1451.191538][ T5933] usb 13-1: USB disconnect, device number 8 [ 1451.200567][ T489] 13080 total pagecache pages [ 1451.202203][ T489] 1203 pages in swap cache [ 1451.207061][ T489] Free swap = 88788kB [ 1451.208435][ T489] Total swap = 124996kB [ 1451.209822][ T489] 524155 pages RAM [ 1451.211587][ T489] 0 pages HighMem/MovableOnly [ 1451.213285][ T489] 210075 pages reserved [ 1451.215679][ T489] 0 pages cma reserved [ 1451.388990][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1451.394095][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1451.397991][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1451.410632][ T5846] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 1451.465932][ T519] netlink: 52 bytes leftover after parsing attributes in process `syz.8.7612'. [ 1452.103797][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1452.113065][ T519] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 1452.115153][ T519] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1452.121876][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1452.128956][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1452.129320][ T519] vhci_hcd vhci_hcd.0: Device attached [ 1452.252255][ T539] vhci_hcd: connection closed [ 1452.255572][T27732] vhci_hcd vhci_hcd.8: stop threads [ 1452.259675][T27732] vhci_hcd vhci_hcd.8: release socket [ 1452.261597][T27732] vhci_hcd vhci_hcd.8: disconnect device [ 1452.484933][ T545] overlay: ./file1 is not a directory [ 1452.549168][ T546] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7616'. [ 1454.860814][ T560] openvswitch: netlink: IP tunnel dst address not specified [ 1454.862938][ T561] openvswitch: netlink: IP tunnel dst address not specified [ 1454.951521][ T5846] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1454.955525][ T5846] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1454.958794][ T5846] usb 9-1: can't read configurations, error -71 [ 1455.260530][T24758] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 1455.412085][T24758] usb 13-1: config 0 has no interfaces? [ 1455.413807][T24758] usb 13-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1455.416770][T24758] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.424553][T24758] usb 13-1: config 0 descriptor?? [ 1455.629814][T24758] usb 13-1: string descriptor 0 read error: -71 [ 1455.636229][T24758] usb 13-1: USB disconnect, device number 9 [ 1455.961011][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1455.965906][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1455.969852][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1456.450497][ T605] nbd: socks must be embedded in a SOCK_ITEM attr [ 1456.469632][ T605] block nbd5: shutting down sockets [ 1456.936443][ T614] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:31: iget: checksum invalid [ 1456.945250][ T615] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:31: iget: checksum invalid [ 1456.951108][ T616] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:31: iget: checksum invalid [ 1457.142535][ T617] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:31: iget: checksum invalid [ 1457.174544][ T627] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:31: iget: checksum invalid [ 1457.181751][ T628] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:31: iget: checksum invalid [ 1457.187718][ T629] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:31: iget: checksum invalid [ 1457.374845][ T620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.380158][ T620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1457.390664][ T7566] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 1458.122373][ T662] overlayfs: missing 'lowerdir' [ 1458.455760][ T667] xt_limit: Overflow, try lower: 324382443/0 [ 1460.323903][ T692] xt_limit: Overflow, try lower: 324382443/0 [ 1460.481377][ T695] overlayfs: missing 'lowerdir' [ 1460.516992][ T695] vivid-006: disconnect [ 1461.190843][ T677] pim6reg: entered allmulticast mode [ 1461.219277][ T679] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7636'. [ 1461.243053][ T716] EXT4-fs error: 24 callbacks suppressed [ 1461.243066][ T716] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:20: iget: checksum invalid [ 1461.361784][ T694] vivid-006: reconnect [ 1461.564689][ T733] overlayfs: missing 'lowerdir' [ 1461.698386][ T747] input: syz1 as /devices/virtual/input/input112 [ 1461.792681][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1461.796939][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1461.800772][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1461.901243][ T762] syzkaller0: entered promiscuous mode [ 1461.903120][ T762] syzkaller0: entered allmulticast mode [ 1462.091475][ T781] overlayfs: missing 'lowerdir' [ 1462.248414][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1462.249342][ T791] libceph: secret too big 289 [ 1462.257722][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1462.265844][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1462.704943][ T788] x_tables: duplicate underflow at hook 1 [ 1462.710053][ T788] hub 8-0:1.0: USB hub found [ 1462.712791][ T788] hub 8-0:1.0: 1 port detected [ 1462.933600][ T814] FAULT_INJECTION: forcing a failure. [ 1462.933600][ T814] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1462.941847][ T814] CPU: 0 UID: 0 PID: 814 Comm: syz.8.7658 Tainted: G L syzkaller #0 PREEMPT(full) [ 1462.941868][ T814] Tainted: [L]=SOFTLOCKUP [ 1462.941872][ T814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1462.941879][ T814] Call Trace: [ 1462.941883][ T814] [ 1462.941887][ T814] dump_stack_lvl+0x100/0x190 [ 1462.941909][ T814] should_fail_ex.cold+0x5/0xa [ 1462.941921][ T814] ? prepare_alloc_pages+0x16d/0x5f0 [ 1462.941937][ T814] should_fail_alloc_page+0xeb/0x140 [ 1462.941951][ T814] prepare_alloc_pages+0x1f0/0x5f0 [ 1462.941966][ T814] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1462.941986][ T814] ? mark_held_locks+0x40/0x70 [ 1462.942003][ T814] ? smp_call_function_many_cond+0x13e3/0x1700 [ 1462.942019][ T814] ? lockdep_hardirqs_on+0x78/0x100 [ 1462.942033][ T814] ? __pfx_flush_tlb_func+0x10/0x10 [ 1462.942044][ T814] ? smp_call_function_many_cond+0x5de/0x1700 [ 1462.942061][ T814] ? __pfx_should_flush_tlb+0x10/0x10 [ 1462.942076][ T814] ? __pfx_flush_tlb_func+0x10/0x10 [ 1462.942087][ T814] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1462.942107][ T814] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1462.942126][ T814] ? __lock_acquire+0x4a5/0x2630 [ 1462.942141][ T814] ? __lock_acquire+0x4a5/0x2630 [ 1462.942157][ T814] ? __css_rstat_updated+0x1ce/0x5a0 [ 1462.942173][ T814] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1462.942189][ T814] ? policy_nodemask+0xed/0x4f0 [ 1462.942203][ T814] alloc_pages_mpol+0x1fb/0x540 [ 1462.942216][ T814] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1462.942233][ T814] folio_alloc_mpol_noprof+0x36/0x260 [ 1462.942276][ T814] vma_alloc_folio_noprof+0xed/0x1d0 [ 1462.942297][ T814] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1462.942317][ T814] ? rcu_read_unlock+0x2d/0xb0 [ 1462.942340][ T814] ? rcu_read_unlock+0x2d/0xb0 [ 1462.942367][ T814] do_wp_page+0xd75/0x4350 [ 1462.942391][ T814] ? __pfx_do_wp_page+0x10/0x10 [ 1462.942405][ T814] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1462.942421][ T814] __handle_mm_fault+0x1ab6/0x2a00 [ 1462.942438][ T814] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1462.942452][ T814] ? __pfx___handle_mm_fault+0x10/0x10 [ 1462.942468][ T814] ? pte_offset_map_lock+0x174/0x320 [ 1462.942480][ T814] ? find_held_lock+0x2b/0x80 [ 1462.942497][ T814] ? follow_page_pte+0x4d0/0x13f0 [ 1462.942513][ T814] handle_mm_fault+0x37b/0xa30 [ 1462.942531][ T814] __get_user_pages+0x1178/0x32a0 [ 1462.942548][ T814] ? down_read_killable+0x307/0x4b0 [ 1462.942559][ T814] ? __pfx___get_user_pages+0x10/0x10 [ 1462.942576][ T814] __gup_longterm_locked+0x87d/0x16f0 [ 1462.942593][ T814] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1462.942607][ T814] ? lock_acquire+0x1b1/0x370 [ 1462.942625][ T814] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 1462.942640][ T814] gup_fast_fallback+0x16dc/0x2790 [ 1462.942663][ T814] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1462.942675][ T814] ? irqentry_exit+0x24d/0x970 [ 1462.942696][ T814] pin_user_pages_fast+0xa7/0xf0 [ 1462.942710][ T814] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1462.942724][ T814] ? iov_iter_advance+0xac/0x6d0 [ 1462.942740][ T814] iov_iter_extract_pages+0xa0d/0x1ef0 [ 1462.942759][ T814] ? sock_kmalloc+0x111/0x170 [ 1462.942772][ T814] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 1462.942785][ T814] ? __kasan_kmalloc+0xaa/0xb0 [ 1462.942795][ T814] ? __kmalloc_noprof+0x301/0x850 [ 1462.942813][ T814] ? sock_kmalloc+0x111/0x170 [ 1462.942830][ T814] ? af_alg_alloc_areq+0xbc/0x240 [ 1462.942863][ T814] ? skcipher_recvmsg+0x314/0x1060 [ 1462.942884][ T814] ? sock_recvmsg+0x1a4/0x1f0 [ 1462.942905][ T814] ? ____sys_recvmsg+0x218/0x640 [ 1462.942926][ T814] ? ___sys_recvmsg+0x16a/0x1a0 [ 1462.942942][ T814] ? __sys_recvmsg+0x16d/0x220 [ 1462.942952][ T814] ? __do_fast_syscall_32+0xe7/0x970 [ 1462.942967][ T814] ? do_fast_syscall_32+0x32/0x70 [ 1462.942982][ T814] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1462.942999][ T814] extract_iter_to_sg+0xaea/0x2250 [ 1462.943017][ T814] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1462.943035][ T814] ? rcu_is_watching+0x12/0xc0 [ 1462.943050][ T814] af_alg_get_rsgl+0x2bb/0x8f0 [ 1462.943068][ T814] skcipher_recvmsg+0x375/0x1060 [ 1462.943086][ T814] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1462.943100][ T814] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1462.943112][ T814] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1462.943126][ T814] sock_recvmsg+0x1a4/0x1f0 [ 1462.943140][ T814] ____sys_recvmsg+0x218/0x640 [ 1462.943157][ T814] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1462.943175][ T814] ? __lock_acquire+0x4a5/0x2630 [ 1462.943194][ T814] ___sys_recvmsg+0x16a/0x1a0 [ 1462.943209][ T814] ? __pfx____sys_recvmsg+0x10/0x10 [ 1462.943225][ T814] ? find_held_lock+0x2b/0x80 [ 1462.943247][ T814] __sys_recvmsg+0x16d/0x220 [ 1462.943258][ T814] ? __pfx___sys_recvmsg+0x10/0x10 [ 1462.943269][ T814] ? __fget_files+0x21f/0x3d0 [ 1462.943287][ T814] ? rcu_is_watching+0x12/0xc0 [ 1462.943301][ T814] __do_fast_syscall_32+0xe7/0x970 [ 1462.943316][ T814] ? lockdep_hardirqs_on+0x78/0x100 [ 1462.943332][ T814] do_fast_syscall_32+0x32/0x70 [ 1462.943349][ T814] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1462.943363][ T814] RIP: 0023:0xf7f53f7c [ 1462.943373][ T814] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1462.943383][ T814] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000174 [ 1462.943395][ T814] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800005c0 [ 1462.943402][ T814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1462.943408][ T814] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1462.943414][ T814] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1462.943420][ T814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1462.943434][ T814] [ 1463.518743][ T829] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7662'. [ 1463.519797][ T830] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.7660: iget: checksum invalid [ 1463.525220][ T830] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1463.528715][ T830] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.7660: iget: checksum invalid [ 1463.532391][ T830] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1463.535595][ T830] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.7660: iget: checksum invalid [ 1463.539069][ T830] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1463.542503][ T830] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1463.545477][ T830] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1463.548426][ T830] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1464.219941][ T848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7663'. [ 1464.752741][ T868] comedi comedi3: pcmmio: I/O port conflict (0x2000,32) [ 1465.264428][ T876] 9pnet_virtio: no channels available for device syz [ 1465.549982][ T881] program syz.4.7669 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1466.715425][ T900] syzkaller0: entered promiscuous mode [ 1466.717260][ T900] syzkaller0: entered allmulticast mode [ 1467.033735][ T908] FAULT_INJECTION: forcing a failure. [ 1467.033735][ T908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1467.041378][ T908] CPU: 0 UID: 0 PID: 908 Comm: syz.6.7668 Tainted: G L syzkaller #0 PREEMPT(full) [ 1467.041408][ T908] Tainted: [L]=SOFTLOCKUP [ 1467.041415][ T908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1467.041425][ T908] Call Trace: [ 1467.041431][ T908] [ 1467.041438][ T908] dump_stack_lvl+0x100/0x190 [ 1467.041472][ T908] should_fail_ex.cold+0x5/0xa [ 1467.041495][ T908] _copy_from_user+0x2e/0xd0 [ 1467.041520][ T908] input_event_from_user+0x137/0x290 [ 1467.041540][ T908] ? __pfx_input_event_from_user+0x10/0x10 [ 1467.041559][ T908] ? input_inject_event+0x1a6/0x390 [ 1467.041579][ T908] evdev_write+0x27a/0x430 [ 1467.041600][ T908] ? __pfx_evdev_write+0x10/0x10 [ 1467.041617][ T908] ? bpf_lsm_file_permission+0x9/0x10 [ 1467.041634][ T908] ? security_file_permission+0x76/0x210 [ 1467.041658][ T908] ? rw_verify_area+0xce/0x6d0 [ 1467.041679][ T908] vfs_write+0x2aa/0x1070 [ 1467.041700][ T908] ? __pfx_evdev_write+0x10/0x10 [ 1467.041719][ T908] ? __pfx_vfs_write+0x10/0x10 [ 1467.041738][ T908] ? find_held_lock+0x2b/0x80 [ 1467.041759][ T908] ? __fget_files+0x215/0x3d0 [ 1467.041779][ T908] ? __fget_files+0x215/0x3d0 [ 1467.041804][ T908] ? __fget_files+0x21f/0x3d0 [ 1467.041831][ T908] ksys_write+0x1f8/0x250 [ 1467.041851][ T908] ? __pfx_ksys_write+0x10/0x10 [ 1467.041870][ T908] ? ksys_write+0x1ac/0x250 [ 1467.041891][ T908] ? rcu_is_watching+0x12/0xc0 [ 1467.041915][ T908] __do_fast_syscall_32+0xe7/0x970 [ 1467.041941][ T908] ? lockdep_hardirqs_on+0x78/0x100 [ 1467.041967][ T908] do_fast_syscall_32+0x32/0x70 [ 1467.041992][ T908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1467.042014][ T908] RIP: 0023:0xf7f02f7c [ 1467.042029][ T908] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1467.042046][ T908] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1467.042062][ T908] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 1467.042073][ T908] RDX: 00000000000012d8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1467.042083][ T908] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1467.042093][ T908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1467.042103][ T908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1467.042126][ T908] [ 1467.149520][ T901] FAULT_INJECTION: forcing a failure. [ 1467.149520][ T901] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1467.153780][ T901] CPU: 3 UID: 0 PID: 901 Comm: syz.5.7673 Tainted: G L syzkaller #0 PREEMPT(full) [ 1467.153797][ T901] Tainted: [L]=SOFTLOCKUP [ 1467.153802][ T901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1467.153808][ T901] Call Trace: [ 1467.153813][ T901] [ 1467.153818][ T901] dump_stack_lvl+0x100/0x190 [ 1467.153852][ T901] should_fail_ex.cold+0x5/0xa [ 1467.153865][ T901] ? prepare_alloc_pages+0x16d/0x5f0 [ 1467.153879][ T901] should_fail_alloc_page+0xeb/0x140 [ 1467.153893][ T901] prepare_alloc_pages+0x1f0/0x5f0 [ 1467.153909][ T901] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1467.153930][ T901] ? rcu_is_watching+0x12/0xc0 [ 1467.153943][ T901] ? trace_mm_page_alloc+0x163/0x1d0 [ 1467.153956][ T901] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 1467.153975][ T901] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1467.153994][ T901] ? __pfx_stack_trace_save+0x10/0x10 [ 1467.154008][ T901] ? stack_depot_save_flags+0x27/0x9d0 [ 1467.154026][ T901] ? is_bpf_text_address+0x8a/0x1a0 [ 1467.154040][ T901] ? is_bpf_text_address+0x8a/0x1a0 [ 1467.154054][ T901] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1467.154071][ T901] ? kasan_save_stack+0x3f/0x50 [ 1467.154081][ T901] ? kasan_save_stack+0x30/0x50 [ 1467.154091][ T901] ? kasan_save_track+0x14/0x30 [ 1467.154101][ T901] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 1467.154118][ T901] ? __get_vm_area_node+0x1ca/0x330 [ 1467.154130][ T901] ? get_vm_area_caller+0x71/0xa0 [ 1467.154142][ T901] ? vmap+0x131/0x2f0 [ 1467.154153][ T901] ? xdp_umem_create+0xd13/0x11f0 [ 1467.154165][ T901] ? xsk_setsockopt+0x7d8/0xab0 [ 1467.154194][ T901] ? do_sock_setsockopt+0xf3/0x1d0 [ 1467.154214][ T901] ? __sys_setsockopt+0x119/0x190 [ 1467.154224][ T901] ? __ia32_sys_setsockopt+0xbc/0x160 [ 1467.154234][ T901] ? __do_fast_syscall_32+0xe7/0x970 [ 1467.154253][ T901] alloc_pages_bulk_noprof+0x649/0x1360 [ 1467.154278][ T901] ? policy_nodemask+0xed/0x4f0 [ 1467.154292][ T901] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1467.154317][ T901] __kasan_populate_vmalloc+0xf0/0x210 [ 1467.154337][ T901] alloc_vmap_area+0x95d/0x2b70 [ 1467.154355][ T901] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1467.154371][ T901] __get_vm_area_node+0x1ca/0x330 [ 1467.154385][ T901] ? xdp_umem_create+0xd13/0x11f0 [ 1467.154397][ T901] get_vm_area_caller+0x71/0xa0 [ 1467.154410][ T901] ? xdp_umem_create+0xd13/0x11f0 [ 1467.154423][ T901] vmap+0x131/0x2f0 [ 1467.154435][ T901] ? __pfx_vmap+0x10/0x10 [ 1467.154446][ T901] ? xdp_umem_create+0x776/0x11f0 [ 1467.154458][ T901] ? xdp_umem_create+0x776/0x11f0 [ 1467.154469][ T901] ? security_capset+0x270/0x270 [ 1467.154481][ T901] xdp_umem_create+0xd13/0x11f0 [ 1467.154498][ T901] xsk_setsockopt+0x7d8/0xab0 [ 1467.154508][ T901] ? __pfx_aa_sk_perm+0x10/0x10 [ 1467.154522][ T901] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1467.154533][ T901] ? find_held_lock+0x2b/0x80 [ 1467.154548][ T901] ? aa_sock_opt_perm+0xfe/0x1b0 [ 1467.154565][ T901] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1467.154578][ T901] do_sock_setsockopt+0xf3/0x1d0 [ 1467.154592][ T901] __sys_setsockopt+0x119/0x190 [ 1467.154608][ T901] __ia32_sys_setsockopt+0xbc/0x160 [ 1467.154618][ T901] ? __do_fast_syscall_32+0x98/0x970 [ 1467.154634][ T901] ? lockdep_hardirqs_on+0x78/0x100 [ 1467.154648][ T901] __do_fast_syscall_32+0xe7/0x970 [ 1467.154663][ T901] ? lockdep_hardirqs_on+0x78/0x100 [ 1467.154678][ T901] do_fast_syscall_32+0x32/0x70 [ 1467.154694][ T901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1467.154708][ T901] RIP: 0023:0xf703ef7c [ 1467.154718][ T901] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1467.154728][ T901] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1467.154739][ T901] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 1467.154746][ T901] RDX: 0000000000000004 RSI: 0000000080000040 RDI: 0000000000000020 [ 1467.154752][ T901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1467.154758][ T901] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1467.154765][ T901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1467.154778][ T901] [ 1467.224985][ T918] program syz.8.7675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1467.798545][ T940] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7680'. [ 1468.085368][ T943] lo speed is unknown, defaulting to 1000 [ 1468.690605][ T943] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input113 [ 1468.716075][ T5150] EXT4-fs error: 5 callbacks suppressed [ 1468.716090][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1468.723007][T21753] Bluetooth: hci5: unexpected event for opcode 0x0419 [ 1468.795844][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1468.816517][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1469.724706][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1469.731084][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1469.736960][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1470.644519][ T1010] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7687'. [ 1470.759361][ T1016] cgroup: Invalid name [ 1470.774598][ T1017] syzkaller0: entered promiscuous mode [ 1470.776955][ T1017] syzkaller0: entered allmulticast mode [ 1470.794199][ T1017] FAULT_INJECTION: forcing a failure. [ 1470.794199][ T1017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1470.801699][ T1017] CPU: 3 UID: 0 PID: 1017 Comm: syz.6.7688 Tainted: G L syzkaller #0 PREEMPT(full) [ 1470.801719][ T1017] Tainted: [L]=SOFTLOCKUP [ 1470.801723][ T1017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1470.801729][ T1017] Call Trace: [ 1470.801733][ T1017] [ 1470.801749][ T1017] dump_stack_lvl+0x100/0x190 [ 1470.801772][ T1017] should_fail_ex.cold+0x5/0xa [ 1470.801787][ T1017] _copy_from_iter+0x1f4/0x1690 [ 1470.801804][ T1017] ? _copy_from_iter+0x270/0x1690 [ 1470.801818][ T1017] ? __pfx__copy_from_iter+0x10/0x10 [ 1470.801835][ T1017] ? __pfx__copy_from_iter+0x10/0x10 [ 1470.801849][ T1017] ? _copy_from_iter+0x270/0x1690 [ 1470.801866][ T1017] copy_page_from_iter+0x238/0x300 [ 1470.801882][ T1017] skb_copy_datagram_from_iter+0x399/0x720 [ 1470.801903][ T1017] packet_sendmsg+0x227e/0x5100 [ 1470.801924][ T1017] ? __pfx___might_resched+0x10/0x10 [ 1470.801939][ T1017] ? aa_sk_perm+0x309/0xaa0 [ 1470.801954][ T1017] ? __pfx_packet_sendmsg+0x10/0x10 [ 1470.801968][ T1017] ? __pfx_aa_sk_perm+0x10/0x10 [ 1470.801980][ T1017] ? __might_fault+0xc5/0x140 [ 1470.801999][ T1017] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1470.802013][ T1017] __sys_sendto+0x468/0x4b0 [ 1470.802029][ T1017] ? __pfx_packet_sendmsg+0x10/0x10 [ 1470.802044][ T1017] ? __pfx___sys_sendto+0x10/0x10 [ 1470.802064][ T1017] ? __fget_files+0x215/0x3d0 [ 1470.802077][ T1017] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1470.802098][ T1017] ? fput+0x79/0x100 [ 1470.802112][ T1017] ? ksys_write+0x1ac/0x250 [ 1470.802156][ T1017] __ia32_sys_sendto+0xdd/0x1b0 [ 1470.802173][ T1017] ? __do_fast_syscall_32+0x98/0x970 [ 1470.802189][ T1017] ? lockdep_hardirqs_on+0x78/0x100 [ 1470.802203][ T1017] __do_fast_syscall_32+0xe7/0x970 [ 1470.802218][ T1017] ? lockdep_hardirqs_on+0x78/0x100 [ 1470.802234][ T1017] do_fast_syscall_32+0x32/0x70 [ 1470.802249][ T1017] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1470.802263][ T1017] RIP: 0023:0xf7f02f7c [ 1470.802273][ T1017] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1470.802283][ T1017] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 1470.802295][ T1017] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1470.802301][ T1017] RDX: 000000000000fce0 RSI: 0000000000000004 RDI: 0000000080000140 [ 1470.802308][ T1017] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 1470.802314][ T1017] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1470.802320][ T1017] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1470.802333][ T1017] [ 1470.911637][ T1011] lo speed is unknown, defaulting to 1000 [ 1471.396984][ T1064] program syz.6.7693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1472.055509][T21753] Bluetooth: unknown link type 97 [ 1472.057320][T21753] Bluetooth: hci1: connection err: -111 [ 1472.212576][ T1086] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:41: iget: checksum invalid [ 1472.259850][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1472.269037][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1472.289205][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1472.557693][ T1097] netlink: 264 bytes leftover after parsing attributes in process `syz.6.7700'. [ 1473.872991][ T1120] netlink: 'syz.6.7705': attribute type 4 has an invalid length. [ 1473.875581][ T1120] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7705'. [ 1473.880276][ T1120] .`: renamed from bond0 [ 1474.187065][ T1146] program syz.6.7708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1474.742389][ T1179] rdma_rxe: rxe_newlink: failed to add bond0 [ 1475.650446][ T5818] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 1475.780406][ T5818] usb 9-1: device descriptor read/64, error -71 [ 1476.030380][ T5818] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 1476.036997][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1476.051339][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1476.058899][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1476.160469][ T5818] usb 9-1: device descriptor read/64, error -71 [ 1476.362905][ T1204] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:11: iget: checksum invalid [ 1476.382577][ T1203] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1476.593195][ T5818] usb usb9-port1: attempt power cycle [ 1476.730745][ T7566] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 1476.785071][ T1216] overlayfs: failed to resolve './cgroup': -2 [ 1476.882189][ T7566] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1476.889809][ T7566] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1476.896331][ T7566] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1476.902714][ T7566] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1476.913677][ T7566] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1476.919880][ T7566] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.933638][ T7566] usb 10-1: config 0 descriptor?? [ 1476.950884][ T5818] usb 9-1: new high-speed USB device number 100 using dummy_hcd [ 1476.971006][ T5818] usb 9-1: device descriptor read/8, error -71 [ 1477.022438][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1477.026229][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1477.029813][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1477.057349][ T1221] xt_hl: Unknown TTL match mode: 255 [ 1477.240486][ T5818] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 1477.261369][ T5818] usb 9-1: device descriptor read/8, error -71 [ 1477.347012][ T7566] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1477.352912][ T7566] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1477.355675][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1477.358919][ T7566] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1477.362485][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1477.366768][ T7566] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1477.369144][ T7566] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1477.371833][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1477.376218][ T7566] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1477.379367][ T7566] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1477.381740][ T7566] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1477.383929][ T7566] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1477.384504][ T5818] usb usb9-port1: unable to enumerate USB device [ 1477.386194][ T7566] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1477.400508][ T7566] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1477.416956][ T1239] udevd[1239]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message [ 1477.757199][ T1210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.761944][ T1210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.118519][ T40] audit: type=1326 audit(1780832451.626:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1261 comm="syz.6.7730" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f7c code=0x7ffc0000 [ 1478.129609][ T40] audit: type=1326 audit(1780832451.626:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1261 comm="syz.6.7730" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f7c code=0x7ffc0000 [ 1478.138357][ T40] audit: type=1326 audit(1780832451.626:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1261 comm="syz.6.7730" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f02f7c code=0x7ffc0000 [ 1478.147127][ T40] audit: type=1326 audit(1780832451.646:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1261 comm="syz.6.7730" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f7c code=0x7ffc0000 [ 1478.155930][ T40] audit: type=1326 audit(1780832451.646:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1261 comm="syz.6.7730" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f7c code=0x7ffc0000 [ 1478.300429][ T5531] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 1478.470389][ T5531] usb 9-1: Using ep0 maxpacket: 8 [ 1478.475177][ T5531] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1478.490404][ T5531] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1478.493486][ T5531] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1478.497115][ T5531] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1478.507768][ T5531] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1478.512991][ T5531] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.740473][ T5531] usb 9-1: GET_CAPABILITIES returned 0 [ 1478.742569][ T5531] usbtmc 9-1:16.0: can't read capabilities [ 1478.935967][ T1040] usb 9-1: USB disconnect, device number 102 [ 1479.522602][T18308] usb 10-1: USB disconnect, device number 107 [ 1479.695033][ T40] audit: type=1326 audit(1780832453.206:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1306 comm="syz.6.7735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f7c code=0x7ffc0000 [ 1479.704485][ T40] audit: type=1326 audit(1780832453.206:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1306 comm="syz.6.7735" exe="/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf7f02f7c code=0x7ffc0000 [ 1479.714344][ T40] audit: type=1326 audit(1780832453.206:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1306 comm="syz.6.7735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f7c code=0x7ffc0000 [ 1479.723343][ T40] audit: type=1326 audit(1780832453.206:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1306 comm="syz.6.7735" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f02f7c code=0x7ffc0000 [ 1479.732083][ T40] audit: type=1326 audit(1780832453.206:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1306 comm="syz.6.7735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f7c code=0x7ffc0000 [ 1480.588839][T21753] Bluetooth: hci5: Dropping invalid advertising data [ 1480.591927][T21753] Bluetooth: hci5: Malformed LE Event: 0x02 [ 1480.638989][ T1353] program syz.5.7742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1481.004981][ T1367] lo speed is unknown, defaulting to 1000 [ 1481.375738][ T1369] can0: slcan on ttyS3. [ 1481.757109][ T1401] EXT4-fs error: 10 callbacks suppressed [ 1481.757122][ T1401] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:41: iget: checksum invalid [ 1481.766449][ T1369] xfrm0: entered allmulticast mode [ 1482.041403][ T5531] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 1482.222443][ T5531] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.234767][ T5531] usb 11-1: config 0 has no interfaces? [ 1482.258237][ T5531] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1482.330966][ T5531] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.375772][ T5531] usb 11-1: config 0 descriptor?? [ 1482.393950][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1482.407209][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1482.419460][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1482.457203][ T1426] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7748'. [ 1482.691969][ T1431] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:30: iget: checksum invalid [ 1482.702639][ T1432] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:30: iget: checksum invalid [ 1482.715360][ T1369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.715421][ T1367] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7745'. [ 1482.723380][ T1369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.831669][ T1369] can0 (unregistered): slcan off ttyS3. [ 1482.873651][ T5531] usb 11-1: USB disconnect, device number 24 [ 1483.232665][ T1448] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7751'. [ 1483.255725][ T1452] FAULT_INJECTION: forcing a failure. [ 1483.255725][ T1452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1483.259928][ T1452] CPU: 0 UID: 0 PID: 1452 Comm: syz.4.7750 Tainted: G L syzkaller #0 PREEMPT(full) [ 1483.259955][ T1452] Tainted: [L]=SOFTLOCKUP [ 1483.259961][ T1452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1483.259971][ T1452] Call Trace: [ 1483.259978][ T1452] [ 1483.259985][ T1452] dump_stack_lvl+0x100/0x190 [ 1483.260017][ T1452] should_fail_ex.cold+0x5/0xa [ 1483.260039][ T1452] _copy_from_iter+0x1f4/0x1690 [ 1483.260057][ T1452] ? __asan_memset+0x23/0x50 [ 1483.260074][ T1452] ? __pfx__copy_from_iter+0x10/0x10 [ 1483.260091][ T1452] ? __pfx___alloc_skb+0x10/0x10 [ 1483.260106][ T1452] netlink_sendmsg+0x808/0xda0 [ 1483.260123][ T1452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1483.260139][ T1452] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1483.260152][ T1452] ____sys_sendmsg+0x9e1/0xb70 [ 1483.260165][ T1452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1483.260180][ T1452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1483.260199][ T1452] ___sys_sendmsg+0x190/0x1e0 [ 1483.260215][ T1452] ? __pfx____sys_sendmsg+0x10/0x10 [ 1483.260235][ T1452] ? find_held_lock+0x2b/0x80 [ 1483.260255][ T1452] __sys_sendmsg+0x170/0x220 [ 1483.260267][ T1452] ? __pfx___sys_sendmsg+0x10/0x10 [ 1483.260277][ T1452] ? __fget_files+0x21f/0x3d0 [ 1483.260308][ T1452] ? ksys_write+0x1ac/0x250 [ 1483.260321][ T1452] ? rcu_is_watching+0x12/0xc0 [ 1483.260335][ T1452] __do_fast_syscall_32+0xe7/0x970 [ 1483.260351][ T1452] ? lockdep_hardirqs_on+0x78/0x100 [ 1483.260367][ T1452] do_fast_syscall_32+0x32/0x70 [ 1483.260383][ T1452] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1483.260397][ T1452] RIP: 0023:0xf6feef7c [ 1483.260406][ T1452] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1483.260417][ T1452] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1483.260429][ T1452] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800029c0 [ 1483.260435][ T1452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1483.260441][ T1452] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1483.260447][ T1452] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1483.260454][ T1452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1483.260467][ T1452] [ 1484.427389][ T1470] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1312: comm kworker/u32:30: iget: checksum invalid [ 1486.715012][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1486.723303][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1487.012967][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1487.038645][ T1498] syzkaller0: entered promiscuous mode [ 1487.040502][ T1498] syzkaller0: entered allmulticast mode [ 1487.812236][ T1508] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7762'. [ 1487.964462][ T1518] program syz.6.7764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1488.536962][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 1488.536974][ T40] audit: type=1326 audit(1780832462.046:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1525 comm="syz.8.7765" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53f7c code=0x0 [ 1488.651219][ T7566] hid_parser_main: 5 callbacks suppressed [ 1488.651234][ T7566] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1488.657720][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1488.669101][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1488.683290][ T7566] hid-generic 0000:0000:0000.001A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1488.688336][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1488.732085][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1488.887899][ T1551] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1488.954017][ T1551] udevd[1551]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message [ 1489.076044][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.080179][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.049049][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1490.054142][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1490.058388][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1490.606352][ T1710] program syz.6.7779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1491.056174][ T1714] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 1491.068549][ T1718] input: syz0 as /devices/virtual/input/input115 [ 1491.594476][T30413] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1491.609034][ T1725] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7782'. [ 1491.972060][ T1736] netlink: 'syz.8.7786': attribute type 10 has an invalid length. [ 1491.974916][ T1736] netlink: 55 bytes leftover after parsing attributes in process `syz.8.7786'. [ 1492.323004][ T1754] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7792'. [ 1492.373543][ T1755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7790'. [ 1492.569619][ T1755] netlink: 'syz.5.7790': attribute type 10 has an invalid length. [ 1492.572810][ T1755] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7790'. [ 1492.576938][ T1755] dummy0: entered promiscuous mode [ 1492.585498][ T1755] bridge0: port 3(dummy0) entered blocking state [ 1492.589706][ T1755] bridge0: port 3(dummy0) entered disabled state [ 1492.596043][ T1755] dummy0: entered allmulticast mode [ 1492.609380][ T1755] bridge0: port 3(dummy0) entered blocking state [ 1492.611740][ T1755] bridge0: port 3(dummy0) entered forwarding state [ 1493.082888][ T5150] EXT4-fs error: 2 callbacks suppressed [ 1493.082900][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1493.089380][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1493.093507][ T5150] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1493.528173][ T1786] 9p: Bad value for 'rfdno' [ 1493.710418][T25007] usb 10-1: new high-speed USB device number 108 using dummy_hcd [ 1493.778016][ T40] audit: type=1326 audit(1780832467.286:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1790 comm="syz.8.7803" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53f7c code=0x0 [ 1493.860435][T25007] usb 10-1: Using ep0 maxpacket: 16 [ 1493.864686][T25007] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1493.870846][T25007] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1493.873963][T25007] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.876523][T25007] usb 10-1: Product: syz [ 1493.878079][T25007] usb 10-1: Manufacturer: syz [ 1493.879847][T25007] usb 10-1: SerialNumber: syz [ 1493.885728][T25007] usb 10-1: config 0 descriptor?? [ 1493.892515][T25007] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1493.896660][T25007] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1494.276480][ T1811] input: syz0 as /devices/virtual/input/input116 [ 1494.380255][ T1818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7808'. [ 1494.413716][T30017] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1494.418194][T30017] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1494.422255][T30017] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1494.458046][ T1818] binder: 1817:1818 ioctl c0306201 800006c0 returned -14 [ 1494.502868][T25007] em28xx 10-1:0.0: chip ID is em2765 [ 1494.627687][ T7566] hid-generic 0004:FFFFFFFF:0000.001B: unknown main item tag 0x0 [ 1494.627713][T30414] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1494.628098][T30414] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1494.631462][ T7566] hid-generic 0004:FFFFFFFF:0000.001B: unknown main item tag 0x0 [ 1494.631488][ T7566] hid-generic 0004:FFFFFFFF:0000.001B: unknown main item tag 0x0 [ 1494.631507][ T7566] hid-generic 0004:FFFFFFFF:0000.001B: unknown main item tag 0x0 [ 1494.646379][T30414] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1494.651619][ T7566] hid-generic 0004:FFFFFFFF:0000.001B: unknown main item tag 0x0 [ 1494.655198][ T7566] hid-generic 0004:FFFFFFFF:0000.001B: unknown main item tag 0x0 [ 1494.658873][ T7566] hid-generic 0004:FFFFFFFF:0000.001B: unknown main item tag 0x0 [ 1494.664564][ T7566] hid-generic 0004:FFFFFFFF:0000.001B: unknown main item tag 0x0 [ 1494.667935][ T7566] hid-generic 0004:FFFFFFFF:0000.001B: unknown main item tag 0x0 [ 1494.671518][ T7566] hid-generic 0004:FFFFFFFF:0000.001B: unknown main item tag 0x0 [ 1494.693825][T30414] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1494.700792][ T7566] hid-generic 0004:FFFFFFFF:0000.001B: hidraw1: HID v0.00 Device [syz0] on syz0 [ 1494.719112][ T1838] udevd[1838]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message [ 1494.760702][T24758] usb 9-1: new low-speed USB device number 103 using dummy_hcd [ 1495.006069][T26378] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 1495.162457][T26378] usb 11-1: config 0 has no interfaces? [ 1495.164645][T26378] usb 11-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1495.167803][T26378] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.179293][T26378] usb 11-1: config 0 descriptor?? [ 1495.404325][ T5818] usb 11-1: USB disconnect, device number 25 [ 1495.878241][T25007] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1495.881005][T25007] em28xx 10-1:0.0: board has no eeprom [ 1495.920524][T24758] usb 9-1: Invalid ep0 maxpacket: 32 [ 1495.961456][ T1859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7811'. [ 1496.262340][T24758] usb 9-1: new low-speed USB device number 104 using dummy_hcd [ 1496.430399][T24758] usb 9-1: Invalid ep0 maxpacket: 32 [ 1496.432610][T24758] usb usb9-port1: attempt power cycle [ 1496.782001][T24758] usb 9-1: new low-speed USB device number 105 using dummy_hcd [ 1496.801367][T24758] usb 9-1: Invalid ep0 maxpacket: 32 [ 1496.920550][ T1780] em28xx 10-1:0.0: writing to i2c device at 0x0 failed (error=-5) [ 1496.950478][T24758] usb 9-1: new low-speed USB device number 106 using dummy_hcd [ 1496.982829][T24758] usb 9-1: Invalid ep0 maxpacket: 32 [ 1496.982860][T25007] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1496.985282][T24758] usb usb9-port1: unable to enumerate USB device [ 1497.002102][T25007] em28xx 10-1:0.0: dvb set to bulk mode. [ 1497.010928][ T7566] em28xx 10-1:0.0: Binding DVB extension [ 1497.028731][T25007] usb 10-1: USB disconnect, device number 108 [ 1497.042273][T25007] em28xx 10-1:0.0: Disconnecting em28xx [ 1497.046813][ T1887] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7817'. [ 1497.077009][ T1887] bond0: entered promiscuous mode [ 1497.083256][ T1887] bond0: entered allmulticast mode [ 1497.085564][ T1887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1497.092186][ T7566] kworker/3:5: page allocation failure: order:4, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1497.099743][ T7566] CPU: 3 UID: 0 PID: 7566 Comm: kworker/3:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1497.099770][ T7566] Tainted: [L]=SOFTLOCKUP [ 1497.099777][ T7566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1497.099790][ T7566] Workqueue: events request_module_async [ 1497.099815][ T7566] Call Trace: [ 1497.099822][ T7566] [ 1497.099829][ T7566] dump_stack_lvl+0x100/0x190 [ 1497.099861][ T7566] warn_alloc.cold+0x95/0x1c1 [ 1497.099880][ T7566] ? __pfx_warn_alloc+0x10/0x10 [ 1497.099929][ T7566] ? __pfx___might_resched+0x10/0x10 [ 1497.099954][ T7566] __alloc_frozen_pages_noprof+0xf25/0x2bc0 [ 1497.099991][ T7566] ? stack_trace_save+0x8e/0xc0 [ 1497.100015][ T7566] ? pick_eevdf+0x4d3/0x860 [ 1497.100037][ T7566] ? stack_depot_save_flags+0x27/0x9d0 [ 1497.100063][ T7566] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1497.100088][ T7566] ? usb_alloc_urb+0x66/0xa0 [ 1497.100108][ T7566] ? kasan_save_stack+0x30/0x50 [ 1497.100123][ T7566] ? __kasan_kmalloc+0xaa/0xb0 [ 1497.100138][ T7566] ? usb_alloc_urb+0x66/0xa0 [ 1497.100158][ T7566] ? em28xx_alloc_urbs+0x5fa/0xf60 [ 1497.100173][ T7566] ? em28xx_dvb_init.cold+0x1f2/0x7391 [ 1497.100200][ T7566] ? request_module_async+0x61/0x80 [ 1497.100217][ T7566] ? process_one_work+0xa0e/0x1980 [ 1497.100232][ T7566] ? worker_thread+0x5ef/0xe50 [ 1497.100257][ T7566] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1497.100299][ T7566] ? policy_nodemask+0xed/0x4f0 [ 1497.100324][ T7566] alloc_pages_mpol+0x1fb/0x540 [ 1497.100346][ T7566] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1497.100372][ T7566] ? em28xx_alloc_urbs+0x655/0xf60 [ 1497.100387][ T7566] ___kmalloc_large_node+0xe5/0x120 [ 1497.100426][ T7566] __kmalloc_large_node_noprof+0x1c/0x70 [ 1497.100453][ T7566] __kmalloc_noprof+0x5be/0x850 [ 1497.100478][ T7566] ? __asan_memset+0x23/0x50 [ 1497.100508][ T7566] em28xx_alloc_urbs+0x655/0xf60 [ 1497.100532][ T7566] ? kasan_save_track+0x14/0x30 [ 1497.100551][ T7566] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1497.100574][ T7566] em28xx_dvb_init.cold+0x1f2/0x7391 [ 1497.100605][ T7566] ? lock_acquire+0x1b1/0x370 [ 1497.100633][ T7566] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1497.100659][ T7566] ? rcu_is_watching+0x12/0xc0 [ 1497.100684][ T7566] ? trace_contention_end+0x122/0x170 [ 1497.100702][ T7566] ? __mutex_lock+0x26d/0x1b10 [ 1497.100727][ T7566] ? em28xx_init_extension+0x2f/0x200 [ 1497.100744][ T7566] ? register_lock_class+0x40/0x560 [ 1497.100772][ T7566] ? do_raw_spin_lock+0x128/0x260 [ 1497.100791][ T7566] ? em28xx_audio_init+0x132/0x1a0 [ 1497.100815][ T7566] ? __pfx___mutex_lock+0x10/0x10 [ 1497.100841][ T7566] ? em28xx_v4l2_init+0x89/0xb0 [ 1497.100866][ T7566] ? __pfx_em28xx_audio_init+0x10/0x10 [ 1497.100900][ T7566] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1497.100922][ T7566] em28xx_init_extension+0x13a/0x200 [ 1497.100943][ T7566] request_module_async+0x61/0x80 [ 1497.100962][ T7566] process_one_work+0xa0e/0x1980 [ 1497.100991][ T7566] ? __pfx_process_one_work+0x10/0x10 [ 1497.101016][ T7566] ? __pfx_request_module_async+0x10/0x10 [ 1497.101040][ T7566] worker_thread+0x5ef/0xe50 [ 1497.101063][ T7566] ? __pfx_worker_thread+0x10/0x10 [ 1497.101082][ T7566] ? kthread+0x13a/0x450 [ 1497.101107][ T7566] ? __pfx_worker_thread+0x10/0x10 [ 1497.101121][ T7566] kthread+0x370/0x450 [ 1497.101146][ T7566] ? __pfx_kthread+0x10/0x10 [ 1497.101173][ T7566] ret_from_fork+0x72b/0xd50 [ 1497.101193][ T7566] ? __pfx_ret_from_fork+0x10/0x10 [ 1497.101211][ T7566] ? rcu_is_watching+0x12/0xc0 [ 1497.101231][ T7566] ? __switch_to+0x800/0x1100 [ 1497.101256][ T7566] ? __pfx_kthread+0x10/0x10 [ 1497.101283][ T7566] ret_from_fork_asm+0x1a/0x30 [ 1497.101319][ T7566] [ 1497.114498][ T1887] erspan1: entered allmulticast mode [ 1497.115998][ T7566] Mem-Info: [ 1497.124719][ T1887] erspan1: entered promiscuous mode [ 1497.126274][ T7566] active_anon:717 inactive_anon:1168 isolated_anon:0 [ 1497.126274][ T7566] active_file:3855 inactive_file:13110 isolated_file:0 [ 1497.126274][ T7566] unevictable:1768 dirty:122 writeback:0 [ 1497.126274][ T7566] slab_reclaimable:7858 slab_unreclaimable:87936 [ 1497.126274][ T7566] mapped:27154 shmem:1797 pagetables:1594 [ 1497.126274][ T7566] sec_pagetables:383 bounce:0 [ 1497.126274][ T7566] kernel_misc_reclaimable:0 [ 1497.126274][ T7566] free:32364 free_pcp:583 free_cma:0 [ 1497.130982][ T1887] bond0: (slave erspan1): Enslaving as an active interface with an up link [ 1497.131692][ T7566] Node 0 active_anon:0kB inactive_anon:52kB active_file:4kB inactive_file:4kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7776kB pagetables:1304kB sec_pagetables:1212kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1497.167813][ T1887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7817'. [ 1497.169714][ T7566] Node 1 active_anon:2868kB inactive_anon:4620kB active_file:16616kB inactive_file:52436kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:108688kB dirty:488kB writeback:0kB shmem:3648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11236kB pagetables:5072kB sec_pagetables:320kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1497.256447][ T7566] Node 0 DMA free:2968kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:56kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1497.265541][ T7566] lowmem_reserve[]: 0 285 285 285 285 [ 1497.267236][ T7566] Node 0 DMA32 free:35552kB boost:29460kB min:42556kB low:45828kB high:49100kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:52kB active_file:4kB inactive_file:4kB unevictable:3536kB writepending:0kB zspages:1244kB present:1032196kB managed:292748kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1497.276782][ T7566] lowmem_reserve[]: 0 0 0 0 0 [ 1497.278439][ T7566] Node 1 DMA32 free:88924kB boost:6144kB min:53284kB low:65068kB high:76852kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3016kB inactive_anon:4592kB active_file:16616kB inactive_file:52336kB unevictable:3536kB writepending:504kB zspages:7256kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:3888kB local_pcp:1240kB free_cma:0kB [ 1497.288500][ T7566] lowmem_reserve[]: 0 0 0 0 0 [ 1497.290125][ T7566] Node 0 DMA: 94*4kB (UM) 48*8kB (UM) 28*16kB (UM) 15*32kB (UM) 2*64kB (U) 1*128kB (M) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2968kB [ 1497.301585][ T7566] Node 0 DMA32: 1190*4kB (UME) 487*8kB (UME) 141*16kB (UME) 226*32kB (UME) 72*64kB (UME) 28*128kB (UM) 12*256kB (M) 6*512kB (UM) 1*1024kB (M) 1*2048kB (U) 0*4096kB = 35552kB [ 1497.313037][ T7566] Node 1 DMA32: 375*4kB (UM) 3731*8kB (UME) 3680*16kB (UME) 16*32kB (UM) 3*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 90932kB [ 1497.317960][ T7566] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1497.321103][ T7566] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1497.323989][ T7566] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1497.326876][ T7566] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1497.329686][ T7566] 20195 total pagecache pages [ 1497.331284][ T7566] 1402 pages in swap cache [ 1497.332839][ T7566] Free swap = 86576kB [ 1497.334108][ T7566] Total swap = 124996kB [ 1497.335432][ T7566] 524155 pages RAM [ 1497.336672][ T7566] 0 pages HighMem/MovableOnly [ 1497.338139][ T7566] 210075 pages reserved [ 1497.339451][ T7566] 0 pages cma reserved [ 1497.341328][ T7566] ------------[ cut here ]------------ [ 1497.343042][ T7566] !PageLargeKmalloc(page) [ 1497.343049][ T7566] WARNING: mm/slub.c:6476 at free_large_kmalloc+0xbf/0x100, CPU#3: kworker/3:5/7566 [ 1497.347214][ T7566] Modules linked in: [ 1497.351254][ T7566] CPU: 3 UID: 0 PID: 7566 Comm: kworker/3:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1497.354711][ T7566] Tainted: [L]=SOFTLOCKUP [ 1497.356029][ T7566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1497.359149][ T7566] Workqueue: events request_module_async [ 1497.360993][ T7566] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 1497.362949][ T7566] Code: 28 90 0f 0b 90 80 3d 99 0a 57 0e 00 0f 84 97 91 bb fe 48 8b 74 24 28 48 89 ef e8 4c 00 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 a2 6a f0 8d 5b 5d 41 5c 41 [ 1497.368911][ T7566] RSP: 0018:ffffc900239e7810 EFLAGS: 00010293 [ 1497.370827][ T7566] RAX: 00000000000000f0 RBX: ffffea0001b23c00 RCX: 000000000000002e [ 1497.373472][ T7566] RDX: 0000000000000000 RSI: ffff88806c8f0000 RDI: ffffea0001b23c00 [ 1497.375888][ T7566] RBP: ffff88806c8f0000 R08: 0000000000000005 R09: 0000000000000000 [ 1497.378307][ T7566] R10: ffffffffffffffff R11: dffffc0000000000 R12: ffff88805def9e98 [ 1497.380750][ T7566] R13: ffff88807327fe00 R14: dffffc0000000000 R15: ffffed100bbdf3d5 [ 1497.383549][ T7566] FS: 0000000000000000(0000) GS:ffff88809748e000(0000) knlGS:0000000000000000 [ 1497.386246][ T7566] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1497.388259][ T7566] CR2: 000055743f30d510 CR3: 000000004f0cf000 CR4: 0000000000352ef0 [ 1497.390785][ T7566] Call Trace: [ 1497.392076][ T7566] [ 1497.393325][ T7566] usb_free_urb.part.0+0xf8/0x110 [ 1497.395459][ T7566] usb_free_urb+0x1f/0x30 [ 1497.397157][ T7566] em28xx_uninit_usb_xfer+0xf3/0x360 [ 1497.398781][ T7566] em28xx_alloc_urbs+0xb43/0xf60 [ 1497.400377][ T7566] ? kasan_save_track+0x14/0x30 [ 1497.402193][ T7566] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1497.403882][ T7566] em28xx_dvb_init.cold+0x1f2/0x7391 [ 1497.405507][ T7566] ? lock_acquire+0x1b1/0x370 [ 1497.406965][ T7566] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1497.408572][ T7566] ? rcu_is_watching+0x12/0xc0 [ 1497.410052][ T7566] ? trace_contention_end+0x122/0x170 [ 1497.411771][ T7566] ? __mutex_lock+0x26d/0x1b10 [ 1497.413233][ T7566] ? em28xx_init_extension+0x2f/0x200 [ 1497.414868][ T7566] ? register_lock_class+0x40/0x560 [ 1497.416568][ T7566] ? do_raw_spin_lock+0x128/0x260 [ 1497.418113][ T7566] ? em28xx_audio_init+0x132/0x1a0 [ 1497.419693][ T7566] ? __pfx___mutex_lock+0x10/0x10 [ 1497.421554][ T7566] ? em28xx_v4l2_init+0x89/0xb0 [ 1497.423213][ T7566] ? __pfx_em28xx_audio_init+0x10/0x10 [ 1497.424899][ T7566] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1497.426509][ T7566] em28xx_init_extension+0x13a/0x200 [ 1497.428123][ T7566] request_module_async+0x61/0x80 [ 1497.429665][ T7566] process_one_work+0xa0e/0x1980 [ 1497.431358][ T7566] ? __pfx_process_one_work+0x10/0x10 [ 1497.432996][ T7566] ? __pfx_request_module_async+0x10/0x10 [ 1497.434745][ T7566] worker_thread+0x5ef/0xe50 [ 1497.436160][ T7566] ? __pfx_worker_thread+0x10/0x10 [ 1497.437716][ T7566] ? kthread+0x13a/0x450 [ 1497.439056][ T7566] ? __pfx_worker_thread+0x10/0x10 [ 1497.440665][ T7566] kthread+0x370/0x450 [ 1497.441976][ T7566] ? __pfx_kthread+0x10/0x10 [ 1497.443348][ T7566] ret_from_fork+0x72b/0xd50 [ 1497.444759][ T7566] ? __pfx_ret_from_fork+0x10/0x10 [ 1497.446280][ T7566] ? rcu_is_watching+0x12/0xc0 [ 1497.447741][ T7566] ? __switch_to+0x800/0x1100 [ 1497.449206][ T7566] ? __pfx_kthread+0x10/0x10 [ 1497.450712][ T7566] ret_from_fork_asm+0x1a/0x30 [ 1497.452288][ T7566] [ 1497.453276][ T7566] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1497.455489][ T7566] CPU: 3 UID: 0 PID: 7566 Comm: kworker/3:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1497.458736][ T7566] Tainted: [L]=SOFTLOCKUP [ 1497.460078][ T7566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1497.463176][ T7566] Workqueue: events request_module_async [ 1497.464880][ T7566] Call Trace: [ 1497.465922][ T7566] [ 1497.466827][ T7566] dump_stack_lvl+0x100/0x190 [ 1497.468361][ T7566] vpanic+0x552/0x970 [ 1497.469590][ T7566] ? __pfx_vpanic+0x10/0x10 [ 1497.470989][ T7566] panic+0xd1/0xe0 [ 1497.472321][ T7566] ? __pfx_panic+0x10/0x10 [ 1497.473657][ T7566] ? check_panic_on_warn+0x1f/0x90 [ 1497.475240][ T7566] check_panic_on_warn.cold+0x19/0x34 [ 1497.476869][ T7566] ? free_large_kmalloc+0xbf/0x100 [ 1497.478428][ T7566] __warn.cold+0x191/0x328 [ 1497.479830][ T7566] __report_bug+0x296/0x3d0 [ 1497.481292][ T7566] ? free_large_kmalloc+0xbf/0x100 [ 1497.483059][ T7566] ? __pfx___report_bug+0x10/0x10 [ 1497.484719][ T7566] ? lockdep_hardirqs_on+0x78/0x100 [ 1497.486304][ T7566] ? irqentry_exit+0x24d/0x970 [ 1497.487771][ T7566] ? trace_reschedule_exit.constprop.0+0x6b/0x220 [ 1497.489727][ T7566] ? free_large_kmalloc+0xbf/0x100 [ 1497.491395][ T7566] ? free_large_kmalloc+0xbf/0x100 [ 1497.493214][ T7566] report_bug+0xb2/0x220 [ 1497.494538][ T7566] ? free_large_kmalloc+0xbf/0x100 [ 1497.496093][ T7566] handle_bug+0x16a/0x2a0 [ 1497.497415][ T7566] exc_invalid_op+0x17/0x50 [ 1497.498807][ T7566] asm_exc_invalid_op+0x1a/0x20 [ 1497.500301][ T7566] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 1497.502083][ T7566] Code: 28 90 0f 0b 90 80 3d 99 0a 57 0e 00 0f 84 97 91 bb fe 48 8b 74 24 28 48 89 ef e8 4c 00 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 a2 6a f0 8d 5b 5d 41 5c 41 [ 1497.508006][ T7566] RSP: 0018:ffffc900239e7810 EFLAGS: 00010293 [ 1497.509887][ T7566] RAX: 00000000000000f0 RBX: ffffea0001b23c00 RCX: 000000000000002e [ 1497.512379][ T7566] RDX: 0000000000000000 RSI: ffff88806c8f0000 RDI: ffffea0001b23c00 [ 1497.514768][ T7566] RBP: ffff88806c8f0000 R08: 0000000000000005 R09: 0000000000000000 [ 1497.517127][ T7566] R10: ffffffffffffffff R11: dffffc0000000000 R12: ffff88805def9e98 [ 1497.519518][ T7566] R13: ffff88807327fe00 R14: dffffc0000000000 R15: ffffed100bbdf3d5 [ 1497.521945][ T7566] usb_free_urb.part.0+0xf8/0x110 [ 1497.523478][ T7566] usb_free_urb+0x1f/0x30 [ 1497.524808][ T7566] em28xx_uninit_usb_xfer+0xf3/0x360 [ 1497.526429][ T7566] em28xx_alloc_urbs+0xb43/0xf60 [ 1497.527935][ T7566] ? kasan_save_track+0x14/0x30 [ 1497.529433][ T7566] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1497.531072][ T7566] em28xx_dvb_init.cold+0x1f2/0x7391 [ 1497.533005][ T7566] ? lock_acquire+0x1b1/0x370 [ 1497.534489][ T7566] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1497.536096][ T7566] ? rcu_is_watching+0x12/0xc0 [ 1497.537558][ T7566] ? trace_contention_end+0x122/0x170 [ 1497.539223][ T7566] ? __mutex_lock+0x26d/0x1b10 [ 1497.540689][ T7566] ? em28xx_init_extension+0x2f/0x200 [ 1497.542479][ T7566] ? register_lock_class+0x40/0x560 [ 1497.544082][ T7566] ? do_raw_spin_lock+0x128/0x260 [ 1497.545614][ T7566] ? em28xx_audio_init+0x132/0x1a0 [ 1497.547196][ T7566] ? __pfx___mutex_lock+0x10/0x10 [ 1497.548739][ T7566] ? em28xx_v4l2_init+0x89/0xb0 [ 1497.550268][ T7566] ? __pfx_em28xx_audio_init+0x10/0x10 [ 1497.552091][ T7566] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1497.553697][ T7566] em28xx_init_extension+0x13a/0x200 [ 1497.555312][ T7566] request_module_async+0x61/0x80 [ 1497.556847][ T7566] process_one_work+0xa0e/0x1980 [ 1497.558390][ T7566] ? __pfx_process_one_work+0x10/0x10 [ 1497.560067][ T7566] ? __pfx_request_module_async+0x10/0x10 [ 1497.561843][ T7566] worker_thread+0x5ef/0xe50 [ 1497.563275][ T7566] ? __pfx_worker_thread+0x10/0x10 [ 1497.564800][ T7566] ? kthread+0x13a/0x450 [ 1497.566098][ T7566] ? __pfx_worker_thread+0x10/0x10 [ 1497.567624][ T7566] kthread+0x370/0x450 [ 1497.568905][ T7566] ? __pfx_kthread+0x10/0x10 [ 1497.570342][ T7566] ret_from_fork+0x72b/0xd50 [ 1497.571873][ T7566] ? __pfx_ret_from_fork+0x10/0x10 [ 1497.573435][ T7566] ? rcu_is_watching+0x12/0xc0 [ 1497.574912][ T7566] ? __switch_to+0x800/0x1100 [ 1497.576343][ T7566] ? __pfx_kthread+0x10/0x10 [ 1497.577789][ T7566] ret_from_fork_asm+0x1a/0x30 [ 1497.579285][ T7566] [ 1497.580991][ T7566] Kernel Offset: disabled [ 1497.582424][ T7566] Rebooting in 86400 seconds..