last executing test programs: 16m47.116267857s ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f00000004c0)={0xa, 0x0, 0x2, @private0, 0x2}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000540)='`', 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000600)='D', 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000440)=0x1f, 0x4) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000740)={0x2, 0x1}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x8d7, 0x4, 0x7ff, 0xf5e, 0x4, 0x7, 0x24a3, {r3, @in={{0x2, 0x4e23, @broadcast}}, 0xfffffff8, 0x401, 0x4, 0x6, 0x37e4dcea}}, &(0x7f0000000700)=0xb0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000b00)=""/115) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1582, 0x3c5d, 0x9, 0x6, 0x1, 0xd, 0xffffffff, 0xc, 0x9}}}}]}, 0x58}}, 0x0) r4 = fanotify_init(0x1200, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0xffff}, {0x2, 0x1}, {0x0, 0x6}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}]}}]}, 0x38}}, 0x40008d0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x80082, 0x0) write$vga_arbiter(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="6cb094df0f179a9367e67ec9"], 0xc) preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/155, 0x9b}], 0x1, 0x5, 0x6, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) r7 = socket$inet(0x2, 0x1, 0x6) r8 = syz_open_dev$vim2m(&(0x7f0000000800), 0x209e, 0x2) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r8, 0xc04c5609, &(0x7f0000000880)=@fd={0x6, 0x2, 0x4, 0x0, 0x2, {r9, r10/1000+60000}, {0x4, 0x1, 0x4, 0x97, 0x5, 0x3, "31e3693a"}, 0x1, 0x4, {}, 0xd4d}) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x1500, 0x0, 'dh\x00', 0x3d, 0x0, 0x36}, 0x2c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r4}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000ac0)={r11, &(0x7f00000009c0)="cb9d6f2e1a84ffd7a4a3df3a0f6f6372652ebbe68ea7ea43ffd9b32795dd61a65f78717c202ce6f9a720a932fe598277c25ba9e4f8340d1b27edf1f65aa9002153757955ed101d298f4fb62c8cbdf752e22a24182499d98f1b37b7e536b6f85ee6b80bc099d8f9fda4cb752eca73a3f3abeb0228313c5a20ebcef76ecfe288c54f08f0dfe2479b5a53b4416be99fa2686ee0aff8afb60f1e74782b09f34dc646fc371aeb1b08aebdd489ed0b08bd52ceb3396279b22a4838bd1b7a07c43c5c6c301b91130227b31e67f81b7f09fc"}, 0x1c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000180)={{0x6, @loopback, 0x4e23, 0x0, 'rr\x00', 0x19}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x4908, 0x10004, 0x1, 0x0, 0xfffffffd}}, 0x44) connect(r7, &(0x7f0000000200)=@in={0x2, 0x1500, @loopback}, 0x10) 16m47.090118463s ago: executing program 0 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x44000, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000020800010000", @ANYRES32=r1, @ANYBLOB='\t\x00'/20, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="01000000050000000500"/28], 0x50) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), &(0x7f0000000240), 0x2, 0x1) 16m47.040486982s ago: executing program 0 (id=10): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000340), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000380)=0xcde, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x31, 0x9, 0x70bd25, 0x4000, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080040) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) poll(&(0x7f0000000040)=[{r3}], 0x1, 0x401) ioctl$VHOST_NET_SET_BACKEND(r3, 0xaf02, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc01c5868, &(0x7f0000000180)={r3, &(0x7f0000000080)=',/]\x00', 0x50600, &(0x7f00000000c0)={@_ha_fsid={[0x6, 0x1]}, {0xff, 0x0, 0x3, 0xb}}, 0x763, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) socket$netlink(0x10, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000600)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="7bac378a3e485299f646"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 16m37.686197353s ago: executing program 32 (id=10): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000340), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000380)=0xcde, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x31, 0x9, 0x70bd25, 0x4000, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080040) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) poll(&(0x7f0000000040)=[{r3}], 0x1, 0x401) ioctl$VHOST_NET_SET_BACKEND(r3, 0xaf02, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc01c5868, &(0x7f0000000180)={r3, &(0x7f0000000080)=',/]\x00', 0x50600, &(0x7f00000000c0)={@_ha_fsid={[0x6, 0x1]}, {0xff, 0x0, 0x3, 0xb}}, 0x763, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) socket$netlink(0x10, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000600)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="7bac378a3e485299f646"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 15m59.127087878s ago: executing program 1 (id=386): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000900)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000940)="060000000300010000", 0x9) r4 = socket(0x26, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r6) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r8, @ANYBLOB="e15af69b130ea1be73b879bbe0fe385436a16d84d8e654b76997c43af6807d7a8df3323e9bb8f76a4190d465b6b682fc226a6095275ee17937d27e887fa04044e1a674cf08206caba7d5020433da1af3e0b6e6b1e72ac5f7f019b3a494420005a860"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$vcsu(&(0x7f00000008c0), 0x8000, 0x101000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000001001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8543}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x8005) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000400000000000000000000007fffffffad0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 15m59.107626725s ago: executing program 1 (id=387): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x28102) r1 = fcntl$dupfd(r0, 0x0, r0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/183, 0xb7}], 0x1) read(r1, &(0x7f00000002c0)=""/66, 0x42) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$snddsp(r1, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m59.047142861s ago: executing program 1 (id=389): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000200)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000240)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000300)='./bus\x00') linkat(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000380)='./file0\x00', 0x1000) unlink(&(0x7f00000003c0)='.\x00') rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file1\x00') mkdir(&(0x7f0000000080)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) open(&(0x7f0000000200)='./file0\x00', 0x400, 0x43) (async) mknodat$loop(r0, &(0x7f0000000240)='./file1\x00', 0x800, 0x1) (async) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x718bb647156ec3b7) (async) chdir(&(0x7f0000000300)='./bus\x00') (async) linkat(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000380)='./file0\x00', 0x1000) (async) unlink(&(0x7f00000003c0)='.\x00') (async) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file1\x00') (async) 15m59.026626362s ago: executing program 1 (id=390): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f0000004b80)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4890) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000004c80), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000004cc0)=0x3) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000004d00)={0x21, 0x3}) r3 = dup(r1) write$cgroup_subtree(r3, &(0x7f0000002400)=ANY=[], 0x32600) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$qrtrtun(0xffffff9c, &(0x7f0000004d40), 0x4400) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000016, 0x12, r5, 0xf) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x10400, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRES64=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f0000000280)="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", 0x2000, &(0x7f0000002280)={&(0x7f0000002340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x80000000, 0xdb0078e61ebfe5fb, 0xdd2, 0x3, 0xb, 0x0, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f00000023c0)='./file0\x00', 0x8) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000002400)={0x0, 0x30b5, 0x800, 0x2, 0x158}, &(0x7f0000004500)=0x0, &(0x7f0000004600)=0x0, &(0x7f0000004640)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000004680)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000004700)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000004740)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000004780)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000004800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x95a4, 0x8, 0x2000, 0x1000000c, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x21c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0x0, 0x3e7, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20, 0x2, 0x3ad}}], 0x1, &(0x7f0000004a80)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffb, 0x4, 0x0, 0x0}}, 0x0) connect$unix(r12, &(0x7f0000004b00)=@abs={0x1, 0x0, 0x4e21}, 0x6e) lchown(&(0x7f00000045c0)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000004bc0)={0x3, 0x3, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_fuse_handle_req(r4, &(0x7f0000002480)="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", 0x2000, &(0x7f0000004480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004540)={0x78, 0x0, 0x0, {0x87, 0x3, 0x0, {0x1, 0xfffffffffffffff7, 0x3, 0x2, 0x8, 0x8, 0x2, 0x3, 0x404, 0x8000, 0x4, 0x0, 0xffffffffffffffff, 0x9, 0x408}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15m58.639629046s ago: executing program 1 (id=396): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) poll(0x0, 0x0, 0xffffffffffbffff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000100)={0x0, &(0x7f0000000140)}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000200)={0x0, 0xfffffffe, 0x800, 0xffffffff, 0x800000c4}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f00000003c0)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x96346fe8a85d2583, 0x0, 0x808}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x58401, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$CDROMPLAYMSF(r5, 0x5303, 0x0) 15m58.335873609s ago: executing program 4 (id=405): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000900)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000940)="060000000300010000", 0x9) r4 = socket(0x26, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r6) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r8, @ANYBLOB="e15af69b130ea1be73b879bbe0fe385436a16d84d8e654b76997c43af6807d7a8df3323e9bb8f76a4190d465b6b682fc226a6095275ee17937d27e887fa04044e1a674cf08206caba7d5020433da1af3e0b6e6b1e72ac5f7f019b3a494420005a860"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$vcsu(&(0x7f00000008c0), 0x8000, 0x101000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000001001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8543}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x8005) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000400000000000000000000007fffffffad0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 15m58.287792056s ago: executing program 4 (id=406): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) 15m58.224607118s ago: executing program 4 (id=407): r0 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) ioctl$OCFS2_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000280)={0x1, 0x1, 0x1, 0x7f, 0xb, 0x4}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000140)={0x900, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x80000) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x2}, 0x4) execveat(r0, 0x0, 0x0, 0x0, 0x1000) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x0, @pix={0x4, 0x6, 0x44495658, 0x6, 0x6, 0x4, 0xb, 0x8, 0x0, 0x0, 0x0, 0x2}}) 15m58.221451204s ago: executing program 4 (id=408): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) close(0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000980)={r5}, 0xc) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x101b01) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x129201, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0x8000000000000001) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000140)=0x2000) r8 = socket(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0x0, 0x1e, 0x0, &(0x7f00000004c0)="f6e4e9a1d78ad62ceef1884386ddffffffffffff8180ca8395ccfda2e499", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000500)="010a", 0x0}, 0x4c) sendmsg$nl_route(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0xa, 0x0, 0x0, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000100ffff0000000000000000850000000700000085000000d000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_open_dev$vbi(&(0x7f0000000240), 0x3, 0x2) ioctl$VIDIOC_G_FMT(r10, 0xc0d05604, &(0x7f00000009c0)={0x7, @meta={0x50314b52, 0x689315b5, 0x9076, 0x3aaa, 0x4be22d5e}}) ppoll(&(0x7f0000000800)=[{r7, 0x20}, {r7, 0x13}], 0x2, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x4001013, r7, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000840)=0x4000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) 15m57.806035314s ago: executing program 1 (id=412): mkdirat(0xffffffffffffff9c, &(0x7f00000056c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000005700)='./dev\x00', &(0x7f0000005740)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005780)='./mnt\x00', 0x1ff) mount(&(0x7f00000057c0)=@filename='./dev/sda1\x00', &(0x7f0000005800)='./mnt\x00', &(0x7f0000005840)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000005880)='./mnt\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000058c0)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000005900)=@v1={0x0, @aes256, 0x10, @desc3}) (fail_nth: 2) 15m57.307164874s ago: executing program 4 (id=414): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000900)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000940)="060000000300010000", 0x9) r4 = socket(0x26, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r6) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r8, @ANYBLOB="e15af69b130ea1be73b879bbe0fe385436a16d84d8e654b76997c43af6807d7a8df3323e9bb8f76a4190d465b6b682fc226a6095275ee17937d27e887fa04044e1a674cf08206caba7d5020433da1af3e0b6e6b1e72ac5f7f019b3a494420005a860"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$vcsu(&(0x7f00000008c0), 0x8000, 0x101000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000001001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8543}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x8005) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000400000000000000000000007fffffffad0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 15m57.286007686s ago: executing program 4 (id=415): mkdirat(0xffffffffffffff9c, &(0x7f00000056c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000005700)='./dev\x00', &(0x7f0000005740)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005780)='./mnt\x00', 0x1ff) mount(&(0x7f00000057c0)=@filename='./dev/sda1\x00', &(0x7f0000005800)='./mnt\x00', &(0x7f0000005840)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000005880)='./mnt\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x1, 0x400000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x5961, 0x10000, 0x1, 0x4e}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r4, 0x2000, 0xfffffffa, 0x9, 0x0, 0x0) ppoll(&(0x7f00000002c0)=[{r1, 0x800c}, {r1, 0x20}, {r2, 0x400}, {r3, 0x100}, {r1, 0x4}, {r4, 0x40d}], 0x6, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)={[0x401, 0xc]}, 0x8) read$usbfs(r0, &(0x7f0000000040)=""/235, 0xeb) r5 = openat(0xffffffffffffff9c, &(0x7f00000058c0)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000005900)=@v1={0x0, @aes256, 0x10, @desc3}) 15m54.000345461s ago: executing program 2 (id=430): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000100)={0x1, @pix_mp={0x10, 0x0, 0x39555659, 0x1, 0x9, [{0x3, 0x8}, {0x4, 0x8}, {0x5, 0x1}, {0x4, 0x1}, {0x9, 0x80000000}, {0x80000001, 0x80000000}, {0x4, 0x8000}, {0x80000001}], 0xff, 0xff, 0x8, 0x2}}) socket$inet_sctp(0x2, 0x1, 0x84) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f80)=@generic={&(0x7f0000000f40)='./file0\x00', 0x0, 0x18}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1c, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000005000000000000001000e4d50000"], &(0x7f0000000500)='GPL\x00', 0xf872, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x3, 0x5, 0x7fff, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000001000)=[{0x5, 0x1, 0x8}, {0x3, 0x3, 0xe, 0x8}, {0x0, 0x1, 0x8, 0xc}], 0x10, 0x9}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x36b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x115, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000280), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000005c0)={'comedi_parport\x00', [0x4f24, 0x14, 0x10000, 0xff, 0x5, 0xcc8, 0x6, 0x7, 0x9, 0x2, 0x3, 0xffffffff, 0x1, 0x9, 0x3, 0x2, 0x0, 0x7, 0x3, 0x40000003, 0x3, 0x800, 0x4, 0x20001e54, 0x3, 0x1, 0x7c, 0x207, 0x6, 0x0, 0xb]}) syz_genetlink_get_family_id$team(&(0x7f0000000480), r5) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x31ed, 0x40, 0x1ffe, 0x100da}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e94, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x3, 0x501f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x3, 0xac, 0x0, r4}}], 0x1, 0x0, 0x0) getpgrp(0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') r8 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000340)={0x9000000d}) 15m53.051575393s ago: executing program 2 (id=432): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = add_key(&(0x7f0000000300)='big_key\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f00000003c0)="1d", 0xfe3a, 0xfffffffffffffffe) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000001401"], 0x20000}, 0x1, 0x0, 0x0, 0x1}, 0x8000) keyctl$get_keyring_id(0x0, r0, 0x1) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./trace\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./trace/current_tracer\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='blk', 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x1ff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_dev$sg(0x0, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) close(r2) 15m52.09645411s ago: executing program 2 (id=433): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000100)={@lba=0x10001, 0x1, 0x3}) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0x7, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 15m50.902411162s ago: executing program 2 (id=436): r0 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) ioctl$OCFS2_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000280)={0x1, 0x1, 0x1, 0x7f, 0xb, 0x4}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000140)={0x900, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x80000) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x2}, 0x4) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, 0x0) 15m50.873767675s ago: executing program 2 (id=437): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) connect$unix(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, 0x0, 0x0, 0x200) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r5, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000019180)="97a1606ab58e71aafe5bbd52e840795961f2e9bf92796ccfdcc9d98f213a79f8ae9e01ffe3f8244b35cf18d01b8c6e180c3b4ea4621ea6b4c9288ef3adacdb4ab3164b48327ce7f5cd1500675135b589d0e2aee950702e249496924544e16375ed49effa0d77130827b59112bb1a75f51bf79b85d72479b725ea9ebc7cf8092aab09d83ec9ad5a1afaa8c319af9b98fb6db1acd8a1b2170fdbe041c9803d69426f4a5e803ec8d96f5c295c264ed29d47927ae4438cf7defb2e3536e4075b691cc208f41516c4a6212f4149ccb4") 15m50.580200693s ago: executing program 3 (id=439): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000900)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000940)="060000000300010000", 0x9) r4 = socket(0x26, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r6) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r8, @ANYBLOB="e15af69b130ea1be73b879bbe0fe385436a16d84d8e654b76997c43af6807d7a8df3323e9bb8f76a4190d465b6b682fc22"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$vcsu(&(0x7f00000008c0), 0x8000, 0x101000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000001001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8543}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x8005) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000400000000000000000000007fffffffad0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 15m50.418288356s ago: executing program 3 (id=440): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x1800, &(0x7f0000000140)="37894a9f6f09e8fc7d1b98276c4915b61e59707c08e86a31bf8d3adc92b4fd8db1a8deb3fbaa0e37c8426858fa798b1a1615d881b66535534350135087029feb329164ff4b4a74eb24896929b4b1949cb9e3e5b4226d6d0dcffdd6bb1a2a933bc316b860811d1ddb8e945421d9e5a08ca4c5e4e94aa7afdab28e1224a4e452e05cebc9d0b3e1d8a2993c6caf3736a9bbad55ccc5063e46ae0f44ea17b8159b15f277", 0xa2, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0)="f56312f3c90f87e651008df61be16d56a7647a03dfa922820c4b6abdd1137d1bca1513649e3db955ca36ead8f13dc737badc2a77747e28ec49313d7001cd85d480b638c35a0e095d450463c7e40ad2c9f2957461d7accadd2aee34d24b2128c75993a9ac51dcaba0700cb36325ac399bb0b95066208a031b6310d20d516374922ca462b9a208df7cb93f99118399dc23059815803fbb45dc760be1de2221119e9232a083c94d18e2332f18") syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x2001) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x81, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x2}) r4 = add_key$fscrypt_v1(&(0x7f0000000a80), &(0x7f0000000c40)={'fscrypt:', @desc2}, &(0x7f0000000c80)={0x0, "3e82554dc8ccfbc2e85ec82d4edf60f6ae16b1a5f2c848722be4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2209a6b0aa0000000000f76662c8000e00", 0x19}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) keyctl$update(0x2, r4, &(0x7f0000000d40)='<', 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e40)=@delchain={0x144c, 0x65, 0x700, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {0xc, 0x7}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x788, 0x2, [@TCA_BASIC_POLICE={0x450, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x2, 0x0, 0x8, 0x8, {0x1, 0x0, 0x5, 0x8, 0x2, 0x1}, {0x8, 0x0, 0x6, 0x8a1c, 0xfffe, 0x5}, 0x6, 0xfffff917, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0x5, 0x6, 0xfff, 0x0, 0x1b27, 0x5, 0x1, 0x8, 0x7, 0x2, 0x2, 0x6, 0x63, 0xa413, 0x10, 0x34447983, 0x4, 0xf, 0x9, 0x18, 0x200, 0x9, 0x3, 0x3, 0xd, 0x2, 0x3, 0x800, 0x8000, 0x3, 0x4, 0x781, 0x0, 0xffffff77, 0x100, 0xfa7c, 0x2, 0x9, 0x10, 0xfffffffe, 0x4e, 0x6, 0x8, 0x7, 0xffffffff, 0x8, 0xfffffff7, 0x2c6, 0x3, 0x1ff, 0xc, 0x0, 0x8001, 0x94b, 0x5975d03d, 0x7fff, 0xfffffffb, 0x3, 0x8, 0xffffffdd, 0x0, 0x7fff, 0x400, 0x1ff, 0x2, 0x1000, 0xd813, 0x8, 0x40, 0x7fffffff, 0x7, 0x400, 0x200, 0x834a, 0x6, 0x1, 0x6, 0x0, 0x10000, 0x7, 0xc64, 0x8, 0x5, 0xc2f, 0xc7, 0xe, 0x6, 0xfffffff7, 0x49c, 0x7, 0x7fffffff, 0x4, 0x401, 0x1000, 0x3, 0x1, 0x8, 0x7, 0x333b, 0x10001, 0x100, 0x584, 0xfffffffb, 0xdfc, 0x1a62, 0x10001, 0x1, 0xfffffffa, 0xff, 0x634, 0x8, 0x3c38e0d4, 0x6, 0x9, 0x3, 0x2, 0x7, 0x65a4, 0x7, 0x4, 0x3, 0x4, 0x9c1c, 0x2, 0x4909, 0x3, 0x5b9, 0x5, 0x6, 0x3, 0x8, 0x684, 0x3, 0xc7, 0x2, 0x69e, 0x4, 0x2, 0x7e2630a, 0x7f, 0x10000, 0x3, 0x4, 0x6, 0x7, 0xb, 0x1, 0x0, 0xa, 0x2, 0x2, 0x6, 0x9, 0x8c4, 0x745, 0x200, 0x0, 0x6, 0x4, 0x7, 0xfffffffe, 0x7, 0xfffffffc, 0xa, 0x28a, 0x3, 0x9, 0x10000, 0x1, 0x1, 0x8, 0x4, 0x7, 0x2, 0x100, 0x7, 0x8001, 0x1ff, 0x2, 0xba, 0x0, 0x9, 0x1, 0xe, 0x5, 0x6, 0x6, 0x7, 0x1ff, 0x5, 0x2, 0x400, 0x1, 0x7ff, 0x7, 0x9, 0x8, 0x4, 0x0, 0x30000000, 0x1, 0x2d, 0x6, 0x3, 0x66b, 0xa92b5529, 0xfff, 0xc, 0x1, 0x7f, 0x4, 0x8, 0x9, 0x4, 0x81, 0x7, 0x10000, 0x1, 0x5e, 0xfffffff7, 0x0, 0x7f, 0x9, 0xfffffffa, 0x3, 0xffff670d, 0x7, 0x1, 0x4, 0x7, 0x4, 0x8, 0x7, 0x1, 0xdb, 0x5, 0xdcb, 0x10, 0x3, 0x9bbf, 0x2, 0x7, 0x6cb, 0x6, 0x4, 0x7fffffff, 0xa7fa, 0x8001, 0xadf, 0xa181, 0x6, 0x4, 0x9, 0x5, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]}, @TCA_BASIC_EMATCHES={0x334, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}, @TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xd4, 0x3, 0x0, 0x0, {{0x934, 0x0, 0xc}, "ae22d5913efda3450a5eddae580bf0a29535dd61711225c1d88cb5f50502adbc393776ce38d848df4320c013d661a3f8246da0c608de058bf3a419e665011cb852746517f4e4c83cfb6987ec657f2bfbfea1adbf14dd1d89bbd98459d0ef9b4462f3aa49d1b510fc2a98a49ca8558f1556918f92e2073319e5440b1f42b9d6ec9ad091b4bfd957cced37aff292c20b73d35dbd71c786ba48447b7b4f7101fc07c594b45701eac702fdac44d7a2e417a91a81eddf99e603f2d18b472b99452c33fa577021c00d"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x1fa}, {0x4, 0x2, 0x3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6}, {{0x0, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6, 0x8, 0x9}, {0xffffffffffffffff, 0x1, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xc000, 0x1, 0x7f}, {0xae3, 0x0, 0x9, 0x1, 0x4, 0x1, 0x2}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xfff1, 0x1, 0xde3}, {0xffffffff, 0x7, 0x5, 0x3, 0x8, 0x1, 0x3}}}, @TCF_EM_CONTAINER={0x98, 0x2, 0x0, 0x0, {{0x3752, 0x0, 0xfe01}, "ebceaff62c9ebdefa5eec34a4d8de19c65700916a30133a5593991ccd64a66fa9c6b360520b540d273c600c7feb32da9c92686b8861388f02ffb56525d21b3b4cf16b1f657a4e5150310d2020d810e0469b61c03d4f6fa4db3ba0988e50d72b2acb27f1153674eb0b76daed5929ed23627dde51fbc04fd27b8b677426b9ba8ff366230b4bb3e13c0134b2a8f"}}]}, @TCA_EMATCH_TREE_LIST={0x148, 0x2, 0x0, 0x1, [@TCF_EM_META={0x6c, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="6a54b09bb454", @TCF_META_TYPE_VAR="a0d675446b"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x3a}, {0x0, 0xc}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x0, 0x1}, {0x101, 0xf9, 0x2}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="3d15f34f", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="868db0f41341", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="b91cf498"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x400, 0x9, 0xb6d3c0747194abee}, {0x9, 0x9, 0x2}}}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x8}, {{0x0, 0x1, 0x1, 0x1}, {0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x80, 0x3, 0x0, 0x0, {{0x7, 0x0, 0x4}, "ae133b06e4fa811eb8149a01bcde7bc77c4533c04c566351a81a88f6efda13a10741fe3c23cc614b0f84d76ca833767971527383ba11d337d1c0b5b2519574891201bc164bad8a540a550d934f01263f79ea52c6b4d81d0e2b8c12484dd526ae1d36dd8ab98b039c4243358276db9a19fac153a4"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1, 0x8, 0xff}, {0x1, 0x5, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x8}, {{0x3, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x1ff, 0x2, 0x9}, {0x7, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xff, 0x8, 0x5}, {0xffffffffffffffff, 0x2, 0x5}}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x997f}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}, @filter_kind_options=@f_fw={{0x7}, {0xc74, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'tunl0\x00'}, @TCA_FW_POLICE={0xc5c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0x8, 0x4, 0x44ce, {0x3, 0x2, 0x8000, 0xf9d, 0x8, 0x2}, {0x4, 0x1, 0xd, 0xfff, 0xe, 0xe}, 0x6, 0x9, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x3, 0x6, 0x400, 0x3, 0x9, 0x3, 0x5, 0x10000000, 0x3, 0x7000, 0x4, 0x4, 0x3, 0x5, 0x80000001, 0x26f, 0x4, 0xe9, 0xa, 0x80000000, 0x9, 0x3, 0x6, 0x5, 0x9, 0x7, 0xd18c, 0x5, 0x6, 0x5, 0x3, 0x1, 0x32b, 0x5, 0x6, 0x6, 0x10, 0x8, 0x2c, 0xc, 0x9, 0x2, 0x9, 0x10, 0x100, 0x92, 0x9, 0xc5, 0x4, 0x2, 0xe, 0x8, 0x8000, 0xc, 0x80000000, 0x9, 0x9, 0x80000000, 0x1, 0x70000000, 0x2, 0x8, 0x6, 0x50000000, 0xe3, 0xc65, 0x40, 0x3, 0x7fff, 0x7a, 0x0, 0xffffffff, 0x2, 0x9, 0xd, 0x755, 0x80000000, 0x9, 0x42, 0x4, 0x8, 0x9, 0xff, 0x3cfa, 0x4, 0x7, 0x5, 0x2, 0x4, 0x5c, 0x9, 0x0, 0x7, 0xc2b, 0x70, 0x7, 0x0, 0x2, 0x3, 0x1, 0x4, 0x8001, 0x7, 0x80000001, 0x1, 0x8, 0x2, 0xb, 0x1, 0x3, 0x5, 0x7, 0x3ff, 0xb13, 0x7, 0x8, 0x9, 0x2, 0xa, 0xa13, 0x2, 0x4, 0x8001, 0x0, 0x636, 0x2, 0x1, 0x7, 0x9, 0x8, 0x10001, 0x800, 0x6, 0x4, 0x0, 0x3, 0x5, 0x3, 0x5, 0x4, 0xfffffff8, 0x0, 0x10, 0x100, 0x40, 0x78, 0x8a94, 0x100, 0x3, 0x7, 0x6, 0xfffffffb, 0x1, 0x4000001, 0x8, 0x7, 0x200, 0xe3, 0x6, 0x1, 0x2, 0x0, 0x6, 0x1, 0x1, 0x7fffffff, 0x2, 0x7, 0x0, 0x0, 0x6, 0x9, 0x4cb, 0x80000000, 0x4, 0xfffffff8, 0x8, 0x3, 0x800, 0xfffffff9, 0xfbb6, 0x2, 0x58c, 0xa144, 0x1, 0x9, 0xc, 0x4, 0xffff, 0x5, 0xdd0, 0x8, 0xa, 0x6, 0x10, 0x0, 0xb, 0x9, 0x47a, 0xc, 0x6, 0x4, 0x6d, 0x401, 0x5, 0x9, 0x7, 0x4, 0x1, 0x800, 0xff, 0x0, 0x7fffffff, 0x7fff, 0x2, 0x7, 0x10001, 0x73, 0x10, 0x7dd, 0x6, 0xf8, 0x400, 0x3fcfcbb9, 0x6, 0xfffffff7, 0x3, 0x1, 0x0, 0x3c0000, 0x3, 0x8000, 0x6, 0x7, 0xfffffffd, 0x9e0f, 0x4, 0x6, 0x2, 0x80000001, 0x6, 0x5, 0x8, 0x10001, 0x0, 0xc, 0x8001, 0xfffffffd, 0x6, 0x9, 0xa5, 0x3, 0x0, 0xffffffff, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x309, 0xd81d, 0x9, 0x40, 0x7fff, 0x5, 0x5, 0x6, 0x5a8, 0x8, 0x9, 0x3ff, 0x0, 0x154ffbbe, 0x9, 0x200, 0x6, 0x4, 0xa, 0x5, 0xfffffff7, 0x9, 0x10000, 0x5, 0x2, 0x1, 0x10, 0x3, 0x5, 0x4, 0x9, 0x6, 0x9d1b, 0x418, 0x6, 0x13, 0x7ca31606, 0x7, 0x7, 0x9, 0x3, 0x0, 0x16cd5ca9, 0x3, 0xe, 0x2, 0x2, 0x1, 0x6, 0xfffffff9, 0x5, 0x8000, 0x8, 0xd8, 0x9, 0x1, 0x3, 0x0, 0x6, 0x5, 0x101, 0x7fffffff, 0x5, 0x8, 0x0, 0x80000000, 0x1d, 0x7, 0x10, 0x9, 0x0, 0x10000, 0xff9c, 0x6, 0x9, 0x2, 0x0, 0x8, 0x5, 0x93, 0x7, 0x30, 0x6, 0x5a38, 0x10100000, 0xd, 0xa3f, 0xffffca25, 0x8, 0x7, 0x7, 0x800, 0x9, 0x9, 0x5, 0x400, 0x9, 0x4, 0x9, 0x4, 0x3, 0x2, 0x8, 0x6, 0x20, 0x1, 0x41, 0x200, 0x9, 0x101, 0xce, 0x8, 0x0, 0x6, 0xc, 0x17, 0x1000, 0x40, 0x8000, 0x8001, 0x6, 0x7ff, 0xfffffff3, 0x4e, 0x4d, 0xfffffffe, 0x71c, 0x10001, 0x3, 0x6, 0x5c36, 0x3, 0x7ff, 0x1, 0xfffffffd, 0x10001, 0xeb08, 0x30, 0xfffffffb, 0x80, 0x449f, 0x40, 0xffffffff, 0x4, 0x0, 0x6, 0xfffffffb, 0x7fff, 0x81, 0x8, 0x7, 0x4ab, 0x5, 0x5, 0x7, 0x389, 0xd64, 0x7, 0x8ac3, 0x800, 0xff, 0x1, 0x10001, 0x9, 0x3, 0x1, 0xb8e, 0x47a, 0x600, 0x11, 0x2, 0x9, 0x6, 0x1, 0x7, 0x3, 0x8, 0x2, 0x7, 0x2, 0x401, 0x100, 0xffff, 0x4, 0x98, 0x7, 0x8, 0x2, 0x1, 0x40, 0x2cb, 0x9, 0x2, 0x4, 0xcdaf, 0x1, 0x6, 0x8, 0x3, 0x200, 0x8, 0xa, 0xbe, 0x69b, 0x8, 0x86, 0x9, 0x9, 0x0, 0x8, 0xf, 0x3, 0x80000000, 0x5, 0xdc8, 0xd578, 0x4, 0x57ed, 0xfffffffd, 0x6, 0x10001, 0x8001, 0x101, 0x7, 0x2, 0x7, 0x8e3, 0xfffffff9, 0x6, 0x19e, 0x101, 0x401, 0x1fd2cdad, 0x6136, 0x80, 0x9, 0x5, 0x5, 0xa, 0x3ff, 0x8, 0x7ff, 0x7, 0x5, 0x4b2, 0x9, 0x0, 0x7, 0x5, 0xf, 0x2, 0x1, 0x8, 0x8, 0x0, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x5, 0x6, 0x10000, 0x2, 0x5, 0x4, 0x800, 0x40, 0xa00000, 0x2, 0x9, 0x6, 0x4, 0x6, 0x5, 0x10, 0x5, 0x2e, 0x9, 0xfffffffe, 0xc7, 0x9, 0x2, 0x35, 0x101, 0x3, 0x10000, 0xab5, 0x10, 0x7ff, 0xa52, 0x1, 0x89, 0x4, 0xfffffffa, 0xe49, 0xbe0, 0x8, 0xcd, 0xf6f, 0x1800000, 0x8, 0x8, 0x80000000, 0x101, 0x4, 0x4, 0x4b, 0x0, 0x80000000, 0x7, 0x800, 0x8, 0x8001, 0x83, 0x9, 0x3f000000, 0x10001, 0x8, 0xffff, 0x80000000, 0x47, 0x7, 0xf6d05040, 0x3, 0x40, 0x8, 0xff8b, 0x4, 0x5b3, 0x8, 0x101, 0x4, 0x2000000, 0x8, 0x3, 0x6, 0xfff, 0x0, 0xddfc, 0x4, 0x1596, 0xffffffff, 0x3, 0x820, 0x5, 0x3, 0xfffffff9, 0x5, 0x10001, 0x61e01203, 0x8, 0x6, 0x4, 0xf640, 0x93c, 0xf9, 0xfffffc01, 0x1ff, 0xfe, 0xd4, 0x7, 0x0, 0x9, 0x8, 0xff, 0xc54d, 0xa5, 0x4, 0x4, 0x2, 0x6, 0x10001, 0x80000000, 0xd, 0x3, 0x10000, 0x0, 0xd, 0x1c000, 0x0, 0xffffffff, 0xc9bf, 0x2, 0x9, 0x1ff, 0x10001, 0xffffdeff, 0x1, 0xf, 0xfffffffe, 0x3, 0x9, 0x0, 0x2, 0x2b8, 0xfffffffb, 0xffff, 0xa, 0x3, 0xfffffffb, 0xe0, 0x0, 0x8001, 0x401, 0x8, 0x2, 0x21, 0x0, 0x2, 0x0, 0x6, 0x87f2, 0x0, 0x8001, 0x7, 0x3, 0x200, 0x1, 0x7, 0xf60b, 0x0, 0xffffffff, 0x2, 0x5, 0x5, 0xf, 0xfffffff8, 0x2, 0x8000, 0x7, 0x1, 0x7f, 0xb7a, 0x4, 0x7ff, 0x5, 0x0, 0x0, 0x7, 0x401, 0x19f, 0x34d5, 0x3, 0x5, 0x8b4, 0x8, 0xab, 0xb85, 0x8, 0x3, 0x7ff, 0x6, 0xaa34, 0x9, 0x0, 0x8139, 0x8, 0x3, 0x7, 0x93a00000, 0x7, 0xb68, 0x8000, 0xa, 0x4, 0x7ff, 0x80000000, 0xb147, 0x3, 0x7, 0x1, 0x0, 0xf40, 0x7f, 0xc, 0x8, 0x80000001, 0xc, 0x7d0, 0x7f, 0x3, 0x3ff, 0x9, 0x9, 0x9a2, 0x1, 0x5, 0x2, 0x6, 0x204, 0xa0, 0x2, 0x4, 0x9, 0xffff3ccb, 0xfffffffc, 0x1, 0x4, 0x6, 0x5b7, 0xee, 0x0, 0x9ad, 0x80, 0x10000, 0x48000000, 0x5443, 0x3, 0x7, 0x400, 0x9f67, 0xa0f, 0x3bf, 0x5]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x144c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000880)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x0, &(0x7f0000000980)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000009c0)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x4007, @fd=r7, 0x2, 0x0, 0x0, 0xa, 0x1, {0x1, 0x0, 0x0, '\x00', &(0x7f0000000a40)={0x0, 0x0, 0x10, &(0x7f0000000000)="fe6bee3acf779bd883d86cf6258b2a21"}}}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/46, 0x2e}], 0x1) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000b40)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000bc0)=@any_dev={0x4, 0xd72, 0x0, 0x0, 0x1000, 0x68ba, 0xffffffffffffffff}}}, &(0x7f0000000c00)) bind$packet(0xffffffffffffffff, &(0x7f0000000d80)={0x11, 0x1c, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000780)=[{0x3d, 0x0, 0x0, 0xfd, @time={0x44fa450f, 0xc}, {0xff}, {0xf5}, @control={0x9, 0x8, 0x5}}], 0x1c) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x87, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {0x0, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40044}, 0x200000c4) r14 = socket$netlink(0x10, 0x3, 0x5) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r16, {0x4}, {0xffe0, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc038563b, &(0x7f00000000c0)={0x0, 0x1, @stop_pts=0x468}) 15m47.401200629s ago: executing program 3 (id=441): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000900)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000940)="060000000300010000", 0x9) r4 = socket(0x26, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r6) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r8, @ANYBLOB="e15af69b130ea1be73b879bbe0fe385436a16d84d8e654b76997c43af6807d7a8df3323e9bb8f76a4190d465b6b682fc226a6095275ee17937d27e887fa04044e1a674cf08206caba7d5020433da1af3e0b6e6b1e72ac5f7f019b3a4944200"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$vcsu(&(0x7f00000008c0), 0x8000, 0x101000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000001001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8543}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x8005) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000400000000000000000000007fffffffad0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 15m47.195030769s ago: executing program 3 (id=442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000d40)='./file0\x00') openat$autofs(0xffffff9c, 0x0, 0x8000, 0x0) lstat(&(0x7f0000000040)='./sec\x00', 0x0) r2 = open(&(0x7f0000000dc0)='.\x00', 0x8000, 0x112) getdents(r2, &(0x7f0000000e00)=""/177, 0xb1) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000940)={0x10, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd2c, 0x25dfd9fc}, 0x10}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002600090122bd7008faffffff0200000008003f80040000000800030046"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x22008870) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1d, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000800000000000000ffff0000050000000000d417924900000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x48) r5 = syz_open_dev$video(&(0x7f0000000ec0), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000f00)={0x9, @pix_mp={0xe9, 0x82, 0x32315659, 0x7, 0x0, [{}, {}, {0x0, 0x9}, {0x0, 0x320}, {0x0, 0x4}, {0x2, 0xfffffff9}, {0x0, 0x8}, {0x5b1, 0x3}], 0x0, 0x5, 0x8, 0x0, 0x6}}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000680)={0x13, 0x10, 0xfa00, {&(0x7f0000000b00), r8}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) io_setup(0x8, &(0x7f00000004c0)=0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') io_submit(r10, 0x1, &(0x7f0000000540)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x0, r11, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r9, @ANYRES8=r7, @ANYRESDEC=r10, @ANYRESDEC=r3, @ANYRES8, @ANYBLOB="b28cfe5fc19915b0205f025498d06835ecfa396a701fe1f30d4b85434c1dda0a9820eb7d053571cb04353279", @ANYRES8=r6, @ANYRES16=r3, @ANYBLOB="b7df8af6d255e745cfa8f47742658ca2111cd4214708784ddcd21dd7a1147eca26ee0842d4b9946c28e70e54c5ae459d0ad5550804a5ab708ada2cfe5bca44926b39615dbc94d20e947189e4d9fc291d92342f1ce4067eb24b8f6fb7e568bcfe8eb6d9d18ce3ff81523b2fa599e59812c7182e5d198389137d5d08034be6a50c6c4258ee11c11eb9aed53f244e9e59dac486b0c114d57f7fd1bc7ae6529acd22efe9d281ec49b4d208b4f9588256582b0e66a31f152c444424e23b", @ANYRESOCT=r4], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x3, 0xc, &(0x7f00000010c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000013000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001140)={r12, 0x0, 0xe, 0x0, &(0x7f00000011c0)="196a348fbba6e75ce3e37fd3d3fc", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = syz_open_procfs(0x0, &(0x7f0000001200)='smaps\x00') read$FUSE(r13, &(0x7f0000001240)={0x2020}, 0x2020) 15m47.192089828s ago: executing program 2 (id=450): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x1800, &(0x7f0000000140)="37894a9f6f09e8fc7d1b98276c4915b61e59707c08e86a31bf8d3adc92b4fd8db1a8deb3fbaa0e37c8426858fa798b1a1615d881b66535534350135087029feb329164ff4b4a74eb24896929b4b1949cb9e3e5b4226d6d0dcffdd6bb1a2a933bc316b860811d1ddb8e945421d9e5a08ca4c5e4e94aa7afdab28e1224a4e452e05cebc9d0b3e1d8a2993c6caf3736a9bbad55ccc5063e46ae0f44ea17b8159b15f277", 0xa2, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0)="f56312f3c90f87e651008df61be16d56a7647a03dfa922820c4b6abdd1137d1bca1513649e3db955ca36ead8f13dc737badc2a77747e28ec49313d7001cd85d480b638c35a0e095d450463c7e40ad2c9f2957461d7accadd2aee34d24b2128c75993a9ac51dcaba0700cb36325ac399bb0b95066208a031b6310d20d516374922ca462b9a208df7cb93f99118399dc23059815803fbb45dc760be1de2221119e9232a083c94d18e2332f18") syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x2001) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x81, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x2}) r3 = add_key$fscrypt_v1(&(0x7f0000000a80), &(0x7f0000000c40)={'fscrypt:', @desc2}, &(0x7f0000000c80)={0x0, "3e82554dc8ccfbc2e85ec82d4edf60f6ae16b1a5f2c848722be4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2209a6b0aa0000000000f76662c8000e00", 0x19}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) keyctl$update(0x2, r3, &(0x7f0000000d40)='<', 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e40)=@delchain={0x144c, 0x65, 0x700, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {0xc, 0x7}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x788, 0x2, [@TCA_BASIC_POLICE={0x450, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x2, 0x0, 0x8, 0x8, {0x1, 0x0, 0x5, 0x8, 0x2, 0x1}, {0x8, 0x0, 0x6, 0x8a1c, 0xfffe, 0x5}, 0x6, 0xfffff917, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0x5, 0x6, 0xfff, 0x0, 0x1b27, 0x5, 0x1, 0x8, 0x7, 0x2, 0x2, 0x6, 0x63, 0xa413, 0x10, 0x34447983, 0x4, 0xf, 0x9, 0x18, 0x200, 0x9, 0x3, 0x3, 0xd, 0x2, 0x3, 0x800, 0x8000, 0x3, 0x4, 0x781, 0x0, 0xffffff77, 0x100, 0xfa7c, 0x2, 0x9, 0x10, 0xfffffffe, 0x4e, 0x6, 0x8, 0x7, 0xffffffff, 0x8, 0xfffffff7, 0x2c6, 0x3, 0x1ff, 0xc, 0x0, 0x8001, 0x94b, 0x5975d03d, 0x7fff, 0xfffffffb, 0x3, 0x8, 0xffffffdd, 0x0, 0x7fff, 0x400, 0x1ff, 0x2, 0x1000, 0xd813, 0x8, 0x40, 0x7fffffff, 0x7, 0x400, 0x200, 0x834a, 0x6, 0x1, 0x6, 0x0, 0x10000, 0x7, 0xc64, 0x8, 0x5, 0xc2f, 0xc7, 0xe, 0x6, 0xfffffff7, 0x49c, 0x7, 0x7fffffff, 0x4, 0x401, 0x1000, 0x3, 0x1, 0x8, 0x7, 0x333b, 0x10001, 0x100, 0x584, 0xfffffffb, 0xdfc, 0x1a62, 0x10001, 0x1, 0xfffffffa, 0xff, 0x634, 0x8, 0x3c38e0d4, 0x6, 0x9, 0x3, 0x2, 0x7, 0x65a4, 0x7, 0x4, 0x3, 0x4, 0x9c1c, 0x2, 0x4909, 0x3, 0x5b9, 0x5, 0x6, 0x3, 0x8, 0x684, 0x3, 0xc7, 0x2, 0x69e, 0x4, 0x2, 0x7e2630a, 0x7f, 0x10000, 0x3, 0x4, 0x6, 0x7, 0xb, 0x1, 0x0, 0xa, 0x2, 0x2, 0x6, 0x9, 0x8c4, 0x745, 0x200, 0x0, 0x6, 0x4, 0x7, 0xfffffffe, 0x7, 0xfffffffc, 0xa, 0x28a, 0x3, 0x9, 0x10000, 0x1, 0x1, 0x8, 0x4, 0x7, 0x2, 0x100, 0x7, 0x8001, 0x1ff, 0x2, 0xba, 0x0, 0x9, 0x1, 0xe, 0x5, 0x6, 0x6, 0x7, 0x1ff, 0x5, 0x2, 0x400, 0x1, 0x7ff, 0x7, 0x9, 0x8, 0x4, 0x0, 0x30000000, 0x1, 0x2d, 0x6, 0x3, 0x66b, 0xa92b5529, 0xfff, 0xc, 0x1, 0x7f, 0x4, 0x8, 0x9, 0x4, 0x81, 0x7, 0x10000, 0x1, 0x5e, 0xfffffff7, 0x0, 0x7f, 0x9, 0xfffffffa, 0x3, 0xffff670d, 0x7, 0x1, 0x4, 0x7, 0x4, 0x8, 0x7, 0x1, 0xdb, 0x5, 0xdcb, 0x10, 0x3, 0x9bbf, 0x2, 0x7, 0x6cb, 0x6, 0x4, 0x7fffffff, 0xa7fa, 0x8001, 0xadf, 0xa181, 0x6, 0x4, 0x9, 0x5, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]}, @TCA_BASIC_EMATCHES={0x334, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}, @TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xd4, 0x3, 0x0, 0x0, {{0x934, 0x0, 0xc}, "ae22d5913efda3450a5eddae580bf0a29535dd61711225c1d88cb5f50502adbc393776ce38d848df4320c013d661a3f8246da0c608de058bf3a419e665011cb852746517f4e4c83cfb6987ec657f2bfbfea1adbf14dd1d89bbd98459d0ef9b4462f3aa49d1b510fc2a98a49ca8558f1556918f92e2073319e5440b1f42b9d6ec9ad091b4bfd957cced37aff292c20b73d35dbd71c786ba48447b7b4f7101fc07c594b45701eac702fdac44d7a2e417a91a81eddf99e603f2d18b472b99452c33fa577021c00d"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x1fa}, {0x4, 0x2, 0x3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6}, {{0x0, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6, 0x8, 0x9}, {0xffffffffffffffff, 0x1, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xc000, 0x1, 0x7f}, {0xae3, 0x0, 0x9, 0x1, 0x4, 0x1, 0x2}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xfff1, 0x1, 0xde3}, {0xffffffff, 0x7, 0x5, 0x3, 0x8, 0x1, 0x3}}}, @TCF_EM_CONTAINER={0x98, 0x2, 0x0, 0x0, {{0x3752, 0x0, 0xfe01}, "ebceaff62c9ebdefa5eec34a4d8de19c65700916a30133a5593991ccd64a66fa9c6b360520b540d273c600c7feb32da9c92686b8861388f02ffb56525d21b3b4cf16b1f657a4e5150310d2020d810e0469b61c03d4f6fa4db3ba0988e50d72b2acb27f1153674eb0b76daed5929ed23627dde51fbc04fd27b8b677426b9ba8ff366230b4bb3e13c0134b2a8f"}}]}, @TCA_EMATCH_TREE_LIST={0x148, 0x2, 0x0, 0x1, [@TCF_EM_META={0x6c, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="6a54b09bb454", @TCF_META_TYPE_VAR="a0d675446b"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x3a}, {0x0, 0xc}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x0, 0x1}, {0x101, 0xf9, 0x2}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="3d15f34f", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="868db0f41341", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="b91cf498"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x400, 0x9, 0xb6d3c0747194abee}, {0x9, 0x9, 0x2}}}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x8}, {{0x0, 0x1, 0x1, 0x1}, {0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x80, 0x3, 0x0, 0x0, {{0x7, 0x0, 0x4}, "ae133b06e4fa811eb8149a01bcde7bc77c4533c04c566351a81a88f6efda13a10741fe3c23cc614b0f84d76ca833767971527383ba11d337d1c0b5b2519574891201bc164bad8a540a550d934f01263f79ea52c6b4d81d0e2b8c12484dd526ae1d36dd8ab98b039c4243358276db9a19fac153a4"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1, 0x8, 0xff}, {0x1, 0x5, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x8}, {{0x3, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x1ff, 0x2, 0x9}, {0x7, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xff, 0x8, 0x5}, {0xffffffffffffffff, 0x2, 0x5}}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x997f}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}, @filter_kind_options=@f_fw={{0x7}, {0xc74, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'tunl0\x00'}, @TCA_FW_POLICE={0xc5c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0x8, 0x4, 0x44ce, {0x3, 0x2, 0x8000, 0xf9d, 0x8, 0x2}, {0x4, 0x1, 0xd, 0xfff, 0xe, 0xe}, 0x6, 0x9, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x3, 0x6, 0x400, 0x3, 0x9, 0x3, 0x5, 0x10000000, 0x3, 0x7000, 0x4, 0x4, 0x3, 0x5, 0x80000001, 0x26f, 0x4, 0xe9, 0xa, 0x80000000, 0x9, 0x3, 0x6, 0x5, 0x9, 0x7, 0xd18c, 0x5, 0x6, 0x5, 0x3, 0x1, 0x32b, 0x5, 0x6, 0x6, 0x10, 0x8, 0x2c, 0xc, 0x9, 0x2, 0x9, 0x10, 0x100, 0x92, 0x9, 0xc5, 0x4, 0x2, 0xe, 0x8, 0x8000, 0xc, 0x80000000, 0x9, 0x9, 0x80000000, 0x1, 0x70000000, 0x2, 0x8, 0x6, 0x50000000, 0xe3, 0xc65, 0x40, 0x3, 0x7fff, 0x7a, 0x0, 0xffffffff, 0x2, 0x9, 0xd, 0x755, 0x80000000, 0x9, 0x42, 0x4, 0x8, 0x9, 0xff, 0x3cfa, 0x4, 0x7, 0x5, 0x2, 0x4, 0x5c, 0x9, 0x0, 0x7, 0xc2b, 0x70, 0x7, 0x0, 0x2, 0x3, 0x1, 0x4, 0x8001, 0x7, 0x80000001, 0x1, 0x8, 0x2, 0xb, 0x1, 0x3, 0x5, 0x7, 0x3ff, 0xb13, 0x7, 0x8, 0x9, 0x2, 0xa, 0xa13, 0x2, 0x4, 0x8001, 0x0, 0x636, 0x2, 0x1, 0x7, 0x9, 0x8, 0x10001, 0x800, 0x6, 0x4, 0x0, 0x3, 0x5, 0x3, 0x5, 0x4, 0xfffffff8, 0x0, 0x10, 0x100, 0x40, 0x78, 0x8a94, 0x100, 0x3, 0x7, 0x6, 0xfffffffb, 0x1, 0x4000001, 0x8, 0x7, 0x200, 0xe3, 0x6, 0x1, 0x2, 0x0, 0x6, 0x1, 0x1, 0x7fffffff, 0x2, 0x7, 0x0, 0x0, 0x6, 0x9, 0x4cb, 0x80000000, 0x4, 0xfffffff8, 0x8, 0x3, 0x800, 0xfffffff9, 0xfbb6, 0x2, 0x58c, 0xa144, 0x1, 0x9, 0xc, 0x4, 0xffff, 0x5, 0xdd0, 0x8, 0xa, 0x6, 0x10, 0x0, 0xb, 0x9, 0x47a, 0xc, 0x6, 0x4, 0x6d, 0x401, 0x5, 0x9, 0x7, 0x4, 0x1, 0x800, 0xff, 0x0, 0x7fffffff, 0x7fff, 0x2, 0x7, 0x10001, 0x73, 0x10, 0x7dd, 0x6, 0xf8, 0x400, 0x3fcfcbb9, 0x6, 0xfffffff7, 0x3, 0x1, 0x0, 0x3c0000, 0x3, 0x8000, 0x6, 0x7, 0xfffffffd, 0x9e0f, 0x4, 0x6, 0x2, 0x80000001, 0x6, 0x5, 0x8, 0x10001, 0x0, 0xc, 0x8001, 0xfffffffd, 0x6, 0x9, 0xa5, 0x3, 0x0, 0xffffffff, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x309, 0xd81d, 0x9, 0x40, 0x7fff, 0x5, 0x5, 0x6, 0x5a8, 0x8, 0x9, 0x3ff, 0x0, 0x154ffbbe, 0x9, 0x200, 0x6, 0x4, 0xa, 0x5, 0xfffffff7, 0x9, 0x10000, 0x5, 0x2, 0x1, 0x10, 0x3, 0x5, 0x4, 0x9, 0x6, 0x9d1b, 0x418, 0x6, 0x13, 0x7ca31606, 0x7, 0x7, 0x9, 0x3, 0x0, 0x16cd5ca9, 0x3, 0xe, 0x2, 0x2, 0x1, 0x6, 0xfffffff9, 0x5, 0x8000, 0x8, 0xd8, 0x9, 0x1, 0x3, 0x0, 0x6, 0x5, 0x101, 0x7fffffff, 0x5, 0x8, 0x0, 0x80000000, 0x1d, 0x7, 0x10, 0x9, 0x0, 0x10000, 0xff9c, 0x6, 0x9, 0x2, 0x0, 0x8, 0x5, 0x93, 0x7, 0x30, 0x6, 0x5a38, 0x10100000, 0xd, 0xa3f, 0xffffca25, 0x8, 0x7, 0x7, 0x800, 0x9, 0x9, 0x5, 0x400, 0x9, 0x4, 0x9, 0x4, 0x3, 0x2, 0x8, 0x6, 0x20, 0x1, 0x41, 0x200, 0x9, 0x101, 0xce, 0x8, 0x0, 0x6, 0xc, 0x17, 0x1000, 0x40, 0x8000, 0x8001, 0x6, 0x7ff, 0xfffffff3, 0x4e, 0x4d, 0xfffffffe, 0x71c, 0x10001, 0x3, 0x6, 0x5c36, 0x3, 0x7ff, 0x1, 0xfffffffd, 0x10001, 0xeb08, 0x30, 0xfffffffb, 0x80, 0x449f, 0x40, 0xffffffff, 0x4, 0x0, 0x6, 0xfffffffb, 0x7fff, 0x81, 0x8, 0x7, 0x4ab, 0x5, 0x5, 0x7, 0x389, 0xd64, 0x7, 0x8ac3, 0x800, 0xff, 0x1, 0x10001, 0x9, 0x3, 0x1, 0xb8e, 0x47a, 0x600, 0x11, 0x2, 0x9, 0x6, 0x1, 0x7, 0x3, 0x8, 0x2, 0x7, 0x2, 0x401, 0x100, 0xffff, 0x4, 0x98, 0x7, 0x8, 0x2, 0x1, 0x40, 0x2cb, 0x9, 0x2, 0x4, 0xcdaf, 0x1, 0x6, 0x8, 0x3, 0x200, 0x8, 0xa, 0xbe, 0x69b, 0x8, 0x86, 0x9, 0x9, 0x0, 0x8, 0xf, 0x3, 0x80000000, 0x5, 0xdc8, 0xd578, 0x4, 0x57ed, 0xfffffffd, 0x6, 0x10001, 0x8001, 0x101, 0x7, 0x2, 0x7, 0x8e3, 0xfffffff9, 0x6, 0x19e, 0x101, 0x401, 0x1fd2cdad, 0x6136, 0x80, 0x9, 0x5, 0x5, 0xa, 0x3ff, 0x8, 0x7ff, 0x7, 0x5, 0x4b2, 0x9, 0x0, 0x7, 0x5, 0xf, 0x2, 0x1, 0x8, 0x8, 0x0, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x5, 0x6, 0x10000, 0x2, 0x5, 0x4, 0x800, 0x40, 0xa00000, 0x2, 0x9, 0x6, 0x4, 0x6, 0x5, 0x10, 0x5, 0x2e, 0x9, 0xfffffffe, 0xc7, 0x9, 0x2, 0x35, 0x101, 0x3, 0x10000, 0xab5, 0x10, 0x7ff, 0xa52, 0x1, 0x89, 0x4, 0xfffffffa, 0xe49, 0xbe0, 0x8, 0xcd, 0xf6f, 0x1800000, 0x8, 0x8, 0x80000000, 0x101, 0x4, 0x4, 0x4b, 0x0, 0x80000000, 0x7, 0x800, 0x8, 0x8001, 0x83, 0x9, 0x3f000000, 0x10001, 0x8, 0xffff, 0x80000000, 0x47, 0x7, 0xf6d05040, 0x3, 0x40, 0x8, 0xff8b, 0x4, 0x5b3, 0x8, 0x101, 0x4, 0x2000000, 0x8, 0x3, 0x6, 0xfff, 0x0, 0xddfc, 0x4, 0x1596, 0xffffffff, 0x3, 0x820, 0x5, 0x3, 0xfffffff9, 0x5, 0x10001, 0x61e01203, 0x8, 0x6, 0x4, 0xf640, 0x93c, 0xf9, 0xfffffc01, 0x1ff, 0xfe, 0xd4, 0x7, 0x0, 0x9, 0x8, 0xff, 0xc54d, 0xa5, 0x4, 0x4, 0x2, 0x6, 0x10001, 0x80000000, 0xd, 0x3, 0x10000, 0x0, 0xd, 0x1c000, 0x0, 0xffffffff, 0xc9bf, 0x2, 0x9, 0x1ff, 0x10001, 0xffffdeff, 0x1, 0xf, 0xfffffffe, 0x3, 0x9, 0x0, 0x2, 0x2b8, 0xfffffffb, 0xffff, 0xa, 0x3, 0xfffffffb, 0xe0, 0x0, 0x8001, 0x401, 0x8, 0x2, 0x21, 0x0, 0x2, 0x0, 0x6, 0x87f2, 0x0, 0x8001, 0x7, 0x3, 0x200, 0x1, 0x7, 0xf60b, 0x0, 0xffffffff, 0x2, 0x5, 0x5, 0xf, 0xfffffff8, 0x2, 0x8000, 0x7, 0x1, 0x7f, 0xb7a, 0x4, 0x7ff, 0x5, 0x0, 0x0, 0x7, 0x401, 0x19f, 0x34d5, 0x3, 0x5, 0x8b4, 0x8, 0xab, 0xb85, 0x8, 0x3, 0x7ff, 0x6, 0xaa34, 0x9, 0x0, 0x8139, 0x8, 0x3, 0x7, 0x93a00000, 0x7, 0xb68, 0x8000, 0xa, 0x4, 0x7ff, 0x80000000, 0xb147, 0x3, 0x7, 0x1, 0x0, 0xf40, 0x7f, 0xc, 0x8, 0x80000001, 0xc, 0x7d0, 0x7f, 0x3, 0x3ff, 0x9, 0x9, 0x9a2, 0x1, 0x5, 0x2, 0x6, 0x204, 0xa0, 0x2, 0x4, 0x9, 0xffff3ccb, 0xfffffffc, 0x1, 0x4, 0x6, 0x5b7, 0xee, 0x0, 0x9ad, 0x80, 0x10000, 0x48000000, 0x5443, 0x3, 0x7, 0x400, 0x9f67, 0xa0f, 0x3bf, 0x5]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x144c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000880)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x0, &(0x7f0000000980)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000009c0)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x4007, @fd=r6, 0x2, 0x0, 0x0, 0xa, 0x1, {0x1, 0x0, 0x0, '\x00', &(0x7f0000000a40)={0x0, 0x0, 0x10, &(0x7f0000000000)="fe6bee3acf779bd883d86cf6258b2a21"}}}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/46, 0x2e}], 0x1) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000b40)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000bc0)=@any_dev={0x4, 0xd72, 0x0, 0x0, 0x1000, 0x68ba, 0xffffffffffffffff}}}, &(0x7f0000000c00)) 15m47.044648516s ago: executing program 3 (id=443): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000900)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000940)="060000000300010000", 0x9) r4 = socket(0x26, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r6) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010001fff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r8, @ANYBLOB="e15af69b130ea1be73b879bbe0fe385436a16d84d8e654b76997c43af6807d7a8df3323e9bb8f76a4190d465b6b682fc226a6095275ee17937d27e887fa04044e1a674cf08206caba7d5020433da1af3e0b6e6b1e72ac5f7f019b3a494420005a860"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$vcsu(&(0x7f00000008c0), 0x8000, 0x101000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000001001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8543}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x8005) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000400000000000000000000007fffffffad0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 15m47.005966642s ago: executing program 3 (id=444): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0xd2, 0xb0, &(0x7f00000004c0)="018a8e8afda017b29fce8f221815b1695525d3dbae904e675d4fb259fe646c51193a927c41bdc25dc384e13c84694b8a86b1f6b797311160a84e6707831a5f5efd8222f6ffd52c2a212209ab9b109a1261720b15bd0c4fc1712e09e1619157b40c54a88baa1d2288ce999b592f2645268cc3219b6f4fd6b10ac30898fdea5e3c37e7667d135c7e5b0cc6ecd062a1aef26ff5aeebf47e41259cf8e0fbe48fbebc447c40cf30651cc51e0c807a8949c29db0bede8f0ff57ddfa71de941a543f40d26574a2eff4ccf3318b4b9d4ec3d64091642", &(0x7f00000005c0)=""/176, 0x8000, 0x0, 0x82, 0x36, &(0x7f0000000680)="11e74ea7a7cf0dc9e0a19350274e73b56202b701ff99f6834d129dd00c474d1d616bd62f1b845585815d411da5a24bb1edefb200334c0c5219c1d14fb6749abe6e04caae63116c04edd8001eed0569d710e3a6c258efbcd73986721999038e73d94ca6665b8b9b082e737dddb7ce0a54e4641edba6744f1bc60c5097ec44f8f1da0e", &(0x7f0000000740)="1148d788f2e955587a866035669842edfcc508aefa7c34ee5e05d8deee489c10a96d1e74401b158498b1a987a8b2b68f388e2cbad35b", 0x7, 0x0, 0x5}, 0x4c) write(r0, &(0x7f0000000200)="3300000008000102030405060101", 0xe) write(r0, &(0x7f00000002c0)='4\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x4c) write(r1, &(0x7f0000000180)='\'7', 0x2) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}}, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x58, 0xc9, 0x6, 0xd5c2}}}, 0x9) modify_ldt$write2(0x11, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6d, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000440)={0xffffffffffffffff, 0x8, 0x81, 0x1, @vifc_lcl_ifindex=r6, @private=0xa010100}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setreuid(0x0, 0xee00) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) bind(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) 15m31.838060797s ago: executing program 33 (id=415): mkdirat(0xffffffffffffff9c, &(0x7f00000056c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000005700)='./dev\x00', &(0x7f0000005740)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005780)='./mnt\x00', 0x1ff) mount(&(0x7f00000057c0)=@filename='./dev/sda1\x00', &(0x7f0000005800)='./mnt\x00', &(0x7f0000005840)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000005880)='./mnt\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x1, 0x400000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x5961, 0x10000, 0x1, 0x4e}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r4, 0x2000, 0xfffffffa, 0x9, 0x0, 0x0) ppoll(&(0x7f00000002c0)=[{r1, 0x800c}, {r1, 0x20}, {r2, 0x400}, {r3, 0x100}, {r1, 0x4}, {r4, 0x40d}], 0x6, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)={[0x401, 0xc]}, 0x8) read$usbfs(r0, &(0x7f0000000040)=""/235, 0xeb) r5 = openat(0xffffffffffffff9c, &(0x7f00000058c0)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000005900)=@v1={0x0, @aes256, 0x10, @desc3}) 15m31.796998542s ago: executing program 34 (id=412): mkdirat(0xffffffffffffff9c, &(0x7f00000056c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000005700)='./dev\x00', &(0x7f0000005740)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005780)='./mnt\x00', 0x1ff) mount(&(0x7f00000057c0)=@filename='./dev/sda1\x00', &(0x7f0000005800)='./mnt\x00', &(0x7f0000005840)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000005880)='./mnt\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000058c0)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000005900)=@v1={0x0, @aes256, 0x10, @desc3}) (fail_nth: 2) 15m31.796454158s ago: executing program 35 (id=450): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x1800, &(0x7f0000000140)="37894a9f6f09e8fc7d1b98276c4915b61e59707c08e86a31bf8d3adc92b4fd8db1a8deb3fbaa0e37c8426858fa798b1a1615d881b66535534350135087029feb329164ff4b4a74eb24896929b4b1949cb9e3e5b4226d6d0dcffdd6bb1a2a933bc316b860811d1ddb8e945421d9e5a08ca4c5e4e94aa7afdab28e1224a4e452e05cebc9d0b3e1d8a2993c6caf3736a9bbad55ccc5063e46ae0f44ea17b8159b15f277", 0xa2, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0)="f56312f3c90f87e651008df61be16d56a7647a03dfa922820c4b6abdd1137d1bca1513649e3db955ca36ead8f13dc737badc2a77747e28ec49313d7001cd85d480b638c35a0e095d450463c7e40ad2c9f2957461d7accadd2aee34d24b2128c75993a9ac51dcaba0700cb36325ac399bb0b95066208a031b6310d20d516374922ca462b9a208df7cb93f99118399dc23059815803fbb45dc760be1de2221119e9232a083c94d18e2332f18") syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x2001) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x81, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x2}) r3 = add_key$fscrypt_v1(&(0x7f0000000a80), &(0x7f0000000c40)={'fscrypt:', @desc2}, &(0x7f0000000c80)={0x0, "3e82554dc8ccfbc2e85ec82d4edf60f6ae16b1a5f2c848722be4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2209a6b0aa0000000000f76662c8000e00", 0x19}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) keyctl$update(0x2, r3, &(0x7f0000000d40)='<', 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e40)=@delchain={0x144c, 0x65, 0x700, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {0xc, 0x7}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x788, 0x2, [@TCA_BASIC_POLICE={0x450, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x2, 0x0, 0x8, 0x8, {0x1, 0x0, 0x5, 0x8, 0x2, 0x1}, {0x8, 0x0, 0x6, 0x8a1c, 0xfffe, 0x5}, 0x6, 0xfffff917, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0x5, 0x6, 0xfff, 0x0, 0x1b27, 0x5, 0x1, 0x8, 0x7, 0x2, 0x2, 0x6, 0x63, 0xa413, 0x10, 0x34447983, 0x4, 0xf, 0x9, 0x18, 0x200, 0x9, 0x3, 0x3, 0xd, 0x2, 0x3, 0x800, 0x8000, 0x3, 0x4, 0x781, 0x0, 0xffffff77, 0x100, 0xfa7c, 0x2, 0x9, 0x10, 0xfffffffe, 0x4e, 0x6, 0x8, 0x7, 0xffffffff, 0x8, 0xfffffff7, 0x2c6, 0x3, 0x1ff, 0xc, 0x0, 0x8001, 0x94b, 0x5975d03d, 0x7fff, 0xfffffffb, 0x3, 0x8, 0xffffffdd, 0x0, 0x7fff, 0x400, 0x1ff, 0x2, 0x1000, 0xd813, 0x8, 0x40, 0x7fffffff, 0x7, 0x400, 0x200, 0x834a, 0x6, 0x1, 0x6, 0x0, 0x10000, 0x7, 0xc64, 0x8, 0x5, 0xc2f, 0xc7, 0xe, 0x6, 0xfffffff7, 0x49c, 0x7, 0x7fffffff, 0x4, 0x401, 0x1000, 0x3, 0x1, 0x8, 0x7, 0x333b, 0x10001, 0x100, 0x584, 0xfffffffb, 0xdfc, 0x1a62, 0x10001, 0x1, 0xfffffffa, 0xff, 0x634, 0x8, 0x3c38e0d4, 0x6, 0x9, 0x3, 0x2, 0x7, 0x65a4, 0x7, 0x4, 0x3, 0x4, 0x9c1c, 0x2, 0x4909, 0x3, 0x5b9, 0x5, 0x6, 0x3, 0x8, 0x684, 0x3, 0xc7, 0x2, 0x69e, 0x4, 0x2, 0x7e2630a, 0x7f, 0x10000, 0x3, 0x4, 0x6, 0x7, 0xb, 0x1, 0x0, 0xa, 0x2, 0x2, 0x6, 0x9, 0x8c4, 0x745, 0x200, 0x0, 0x6, 0x4, 0x7, 0xfffffffe, 0x7, 0xfffffffc, 0xa, 0x28a, 0x3, 0x9, 0x10000, 0x1, 0x1, 0x8, 0x4, 0x7, 0x2, 0x100, 0x7, 0x8001, 0x1ff, 0x2, 0xba, 0x0, 0x9, 0x1, 0xe, 0x5, 0x6, 0x6, 0x7, 0x1ff, 0x5, 0x2, 0x400, 0x1, 0x7ff, 0x7, 0x9, 0x8, 0x4, 0x0, 0x30000000, 0x1, 0x2d, 0x6, 0x3, 0x66b, 0xa92b5529, 0xfff, 0xc, 0x1, 0x7f, 0x4, 0x8, 0x9, 0x4, 0x81, 0x7, 0x10000, 0x1, 0x5e, 0xfffffff7, 0x0, 0x7f, 0x9, 0xfffffffa, 0x3, 0xffff670d, 0x7, 0x1, 0x4, 0x7, 0x4, 0x8, 0x7, 0x1, 0xdb, 0x5, 0xdcb, 0x10, 0x3, 0x9bbf, 0x2, 0x7, 0x6cb, 0x6, 0x4, 0x7fffffff, 0xa7fa, 0x8001, 0xadf, 0xa181, 0x6, 0x4, 0x9, 0x5, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]}, @TCA_BASIC_EMATCHES={0x334, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}, @TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xd4, 0x3, 0x0, 0x0, {{0x934, 0x0, 0xc}, "ae22d5913efda3450a5eddae580bf0a29535dd61711225c1d88cb5f50502adbc393776ce38d848df4320c013d661a3f8246da0c608de058bf3a419e665011cb852746517f4e4c83cfb6987ec657f2bfbfea1adbf14dd1d89bbd98459d0ef9b4462f3aa49d1b510fc2a98a49ca8558f1556918f92e2073319e5440b1f42b9d6ec9ad091b4bfd957cced37aff292c20b73d35dbd71c786ba48447b7b4f7101fc07c594b45701eac702fdac44d7a2e417a91a81eddf99e603f2d18b472b99452c33fa577021c00d"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x1fa}, {0x4, 0x2, 0x3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6}, {{0x0, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6, 0x8, 0x9}, {0xffffffffffffffff, 0x1, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xc000, 0x1, 0x7f}, {0xae3, 0x0, 0x9, 0x1, 0x4, 0x1, 0x2}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xfff1, 0x1, 0xde3}, {0xffffffff, 0x7, 0x5, 0x3, 0x8, 0x1, 0x3}}}, @TCF_EM_CONTAINER={0x98, 0x2, 0x0, 0x0, {{0x3752, 0x0, 0xfe01}, "ebceaff62c9ebdefa5eec34a4d8de19c65700916a30133a5593991ccd64a66fa9c6b360520b540d273c600c7feb32da9c92686b8861388f02ffb56525d21b3b4cf16b1f657a4e5150310d2020d810e0469b61c03d4f6fa4db3ba0988e50d72b2acb27f1153674eb0b76daed5929ed23627dde51fbc04fd27b8b677426b9ba8ff366230b4bb3e13c0134b2a8f"}}]}, @TCA_EMATCH_TREE_LIST={0x148, 0x2, 0x0, 0x1, [@TCF_EM_META={0x6c, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="6a54b09bb454", @TCF_META_TYPE_VAR="a0d675446b"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x3a}, {0x0, 0xc}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x0, 0x1}, {0x101, 0xf9, 0x2}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="3d15f34f", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="868db0f41341", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="b91cf498"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x400, 0x9, 0xb6d3c0747194abee}, {0x9, 0x9, 0x2}}}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x8}, {{0x0, 0x1, 0x1, 0x1}, {0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x80, 0x3, 0x0, 0x0, {{0x7, 0x0, 0x4}, "ae133b06e4fa811eb8149a01bcde7bc77c4533c04c566351a81a88f6efda13a10741fe3c23cc614b0f84d76ca833767971527383ba11d337d1c0b5b2519574891201bc164bad8a540a550d934f01263f79ea52c6b4d81d0e2b8c12484dd526ae1d36dd8ab98b039c4243358276db9a19fac153a4"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1, 0x8, 0xff}, {0x1, 0x5, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x8}, {{0x3, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x1ff, 0x2, 0x9}, {0x7, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xff, 0x8, 0x5}, {0xffffffffffffffff, 0x2, 0x5}}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x997f}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}, @filter_kind_options=@f_fw={{0x7}, {0xc74, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'tunl0\x00'}, @TCA_FW_POLICE={0xc5c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0x8, 0x4, 0x44ce, {0x3, 0x2, 0x8000, 0xf9d, 0x8, 0x2}, {0x4, 0x1, 0xd, 0xfff, 0xe, 0xe}, 0x6, 0x9, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x3, 0x6, 0x400, 0x3, 0x9, 0x3, 0x5, 0x10000000, 0x3, 0x7000, 0x4, 0x4, 0x3, 0x5, 0x80000001, 0x26f, 0x4, 0xe9, 0xa, 0x80000000, 0x9, 0x3, 0x6, 0x5, 0x9, 0x7, 0xd18c, 0x5, 0x6, 0x5, 0x3, 0x1, 0x32b, 0x5, 0x6, 0x6, 0x10, 0x8, 0x2c, 0xc, 0x9, 0x2, 0x9, 0x10, 0x100, 0x92, 0x9, 0xc5, 0x4, 0x2, 0xe, 0x8, 0x8000, 0xc, 0x80000000, 0x9, 0x9, 0x80000000, 0x1, 0x70000000, 0x2, 0x8, 0x6, 0x50000000, 0xe3, 0xc65, 0x40, 0x3, 0x7fff, 0x7a, 0x0, 0xffffffff, 0x2, 0x9, 0xd, 0x755, 0x80000000, 0x9, 0x42, 0x4, 0x8, 0x9, 0xff, 0x3cfa, 0x4, 0x7, 0x5, 0x2, 0x4, 0x5c, 0x9, 0x0, 0x7, 0xc2b, 0x70, 0x7, 0x0, 0x2, 0x3, 0x1, 0x4, 0x8001, 0x7, 0x80000001, 0x1, 0x8, 0x2, 0xb, 0x1, 0x3, 0x5, 0x7, 0x3ff, 0xb13, 0x7, 0x8, 0x9, 0x2, 0xa, 0xa13, 0x2, 0x4, 0x8001, 0x0, 0x636, 0x2, 0x1, 0x7, 0x9, 0x8, 0x10001, 0x800, 0x6, 0x4, 0x0, 0x3, 0x5, 0x3, 0x5, 0x4, 0xfffffff8, 0x0, 0x10, 0x100, 0x40, 0x78, 0x8a94, 0x100, 0x3, 0x7, 0x6, 0xfffffffb, 0x1, 0x4000001, 0x8, 0x7, 0x200, 0xe3, 0x6, 0x1, 0x2, 0x0, 0x6, 0x1, 0x1, 0x7fffffff, 0x2, 0x7, 0x0, 0x0, 0x6, 0x9, 0x4cb, 0x80000000, 0x4, 0xfffffff8, 0x8, 0x3, 0x800, 0xfffffff9, 0xfbb6, 0x2, 0x58c, 0xa144, 0x1, 0x9, 0xc, 0x4, 0xffff, 0x5, 0xdd0, 0x8, 0xa, 0x6, 0x10, 0x0, 0xb, 0x9, 0x47a, 0xc, 0x6, 0x4, 0x6d, 0x401, 0x5, 0x9, 0x7, 0x4, 0x1, 0x800, 0xff, 0x0, 0x7fffffff, 0x7fff, 0x2, 0x7, 0x10001, 0x73, 0x10, 0x7dd, 0x6, 0xf8, 0x400, 0x3fcfcbb9, 0x6, 0xfffffff7, 0x3, 0x1, 0x0, 0x3c0000, 0x3, 0x8000, 0x6, 0x7, 0xfffffffd, 0x9e0f, 0x4, 0x6, 0x2, 0x80000001, 0x6, 0x5, 0x8, 0x10001, 0x0, 0xc, 0x8001, 0xfffffffd, 0x6, 0x9, 0xa5, 0x3, 0x0, 0xffffffff, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x309, 0xd81d, 0x9, 0x40, 0x7fff, 0x5, 0x5, 0x6, 0x5a8, 0x8, 0x9, 0x3ff, 0x0, 0x154ffbbe, 0x9, 0x200, 0x6, 0x4, 0xa, 0x5, 0xfffffff7, 0x9, 0x10000, 0x5, 0x2, 0x1, 0x10, 0x3, 0x5, 0x4, 0x9, 0x6, 0x9d1b, 0x418, 0x6, 0x13, 0x7ca31606, 0x7, 0x7, 0x9, 0x3, 0x0, 0x16cd5ca9, 0x3, 0xe, 0x2, 0x2, 0x1, 0x6, 0xfffffff9, 0x5, 0x8000, 0x8, 0xd8, 0x9, 0x1, 0x3, 0x0, 0x6, 0x5, 0x101, 0x7fffffff, 0x5, 0x8, 0x0, 0x80000000, 0x1d, 0x7, 0x10, 0x9, 0x0, 0x10000, 0xff9c, 0x6, 0x9, 0x2, 0x0, 0x8, 0x5, 0x93, 0x7, 0x30, 0x6, 0x5a38, 0x10100000, 0xd, 0xa3f, 0xffffca25, 0x8, 0x7, 0x7, 0x800, 0x9, 0x9, 0x5, 0x400, 0x9, 0x4, 0x9, 0x4, 0x3, 0x2, 0x8, 0x6, 0x20, 0x1, 0x41, 0x200, 0x9, 0x101, 0xce, 0x8, 0x0, 0x6, 0xc, 0x17, 0x1000, 0x40, 0x8000, 0x8001, 0x6, 0x7ff, 0xfffffff3, 0x4e, 0x4d, 0xfffffffe, 0x71c, 0x10001, 0x3, 0x6, 0x5c36, 0x3, 0x7ff, 0x1, 0xfffffffd, 0x10001, 0xeb08, 0x30, 0xfffffffb, 0x80, 0x449f, 0x40, 0xffffffff, 0x4, 0x0, 0x6, 0xfffffffb, 0x7fff, 0x81, 0x8, 0x7, 0x4ab, 0x5, 0x5, 0x7, 0x389, 0xd64, 0x7, 0x8ac3, 0x800, 0xff, 0x1, 0x10001, 0x9, 0x3, 0x1, 0xb8e, 0x47a, 0x600, 0x11, 0x2, 0x9, 0x6, 0x1, 0x7, 0x3, 0x8, 0x2, 0x7, 0x2, 0x401, 0x100, 0xffff, 0x4, 0x98, 0x7, 0x8, 0x2, 0x1, 0x40, 0x2cb, 0x9, 0x2, 0x4, 0xcdaf, 0x1, 0x6, 0x8, 0x3, 0x200, 0x8, 0xa, 0xbe, 0x69b, 0x8, 0x86, 0x9, 0x9, 0x0, 0x8, 0xf, 0x3, 0x80000000, 0x5, 0xdc8, 0xd578, 0x4, 0x57ed, 0xfffffffd, 0x6, 0x10001, 0x8001, 0x101, 0x7, 0x2, 0x7, 0x8e3, 0xfffffff9, 0x6, 0x19e, 0x101, 0x401, 0x1fd2cdad, 0x6136, 0x80, 0x9, 0x5, 0x5, 0xa, 0x3ff, 0x8, 0x7ff, 0x7, 0x5, 0x4b2, 0x9, 0x0, 0x7, 0x5, 0xf, 0x2, 0x1, 0x8, 0x8, 0x0, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x5, 0x6, 0x10000, 0x2, 0x5, 0x4, 0x800, 0x40, 0xa00000, 0x2, 0x9, 0x6, 0x4, 0x6, 0x5, 0x10, 0x5, 0x2e, 0x9, 0xfffffffe, 0xc7, 0x9, 0x2, 0x35, 0x101, 0x3, 0x10000, 0xab5, 0x10, 0x7ff, 0xa52, 0x1, 0x89, 0x4, 0xfffffffa, 0xe49, 0xbe0, 0x8, 0xcd, 0xf6f, 0x1800000, 0x8, 0x8, 0x80000000, 0x101, 0x4, 0x4, 0x4b, 0x0, 0x80000000, 0x7, 0x800, 0x8, 0x8001, 0x83, 0x9, 0x3f000000, 0x10001, 0x8, 0xffff, 0x80000000, 0x47, 0x7, 0xf6d05040, 0x3, 0x40, 0x8, 0xff8b, 0x4, 0x5b3, 0x8, 0x101, 0x4, 0x2000000, 0x8, 0x3, 0x6, 0xfff, 0x0, 0xddfc, 0x4, 0x1596, 0xffffffff, 0x3, 0x820, 0x5, 0x3, 0xfffffff9, 0x5, 0x10001, 0x61e01203, 0x8, 0x6, 0x4, 0xf640, 0x93c, 0xf9, 0xfffffc01, 0x1ff, 0xfe, 0xd4, 0x7, 0x0, 0x9, 0x8, 0xff, 0xc54d, 0xa5, 0x4, 0x4, 0x2, 0x6, 0x10001, 0x80000000, 0xd, 0x3, 0x10000, 0x0, 0xd, 0x1c000, 0x0, 0xffffffff, 0xc9bf, 0x2, 0x9, 0x1ff, 0x10001, 0xffffdeff, 0x1, 0xf, 0xfffffffe, 0x3, 0x9, 0x0, 0x2, 0x2b8, 0xfffffffb, 0xffff, 0xa, 0x3, 0xfffffffb, 0xe0, 0x0, 0x8001, 0x401, 0x8, 0x2, 0x21, 0x0, 0x2, 0x0, 0x6, 0x87f2, 0x0, 0x8001, 0x7, 0x3, 0x200, 0x1, 0x7, 0xf60b, 0x0, 0xffffffff, 0x2, 0x5, 0x5, 0xf, 0xfffffff8, 0x2, 0x8000, 0x7, 0x1, 0x7f, 0xb7a, 0x4, 0x7ff, 0x5, 0x0, 0x0, 0x7, 0x401, 0x19f, 0x34d5, 0x3, 0x5, 0x8b4, 0x8, 0xab, 0xb85, 0x8, 0x3, 0x7ff, 0x6, 0xaa34, 0x9, 0x0, 0x8139, 0x8, 0x3, 0x7, 0x93a00000, 0x7, 0xb68, 0x8000, 0xa, 0x4, 0x7ff, 0x80000000, 0xb147, 0x3, 0x7, 0x1, 0x0, 0xf40, 0x7f, 0xc, 0x8, 0x80000001, 0xc, 0x7d0, 0x7f, 0x3, 0x3ff, 0x9, 0x9, 0x9a2, 0x1, 0x5, 0x2, 0x6, 0x204, 0xa0, 0x2, 0x4, 0x9, 0xffff3ccb, 0xfffffffc, 0x1, 0x4, 0x6, 0x5b7, 0xee, 0x0, 0x9ad, 0x80, 0x10000, 0x48000000, 0x5443, 0x3, 0x7, 0x400, 0x9f67, 0xa0f, 0x3bf, 0x5]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x144c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000880)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x0, &(0x7f0000000980)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000009c0)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x4007, @fd=r6, 0x2, 0x0, 0x0, 0xa, 0x1, {0x1, 0x0, 0x0, '\x00', &(0x7f0000000a40)={0x0, 0x0, 0x10, &(0x7f0000000000)="fe6bee3acf779bd883d86cf6258b2a21"}}}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/46, 0x2e}], 0x1) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000b40)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000bc0)=@any_dev={0x4, 0xd72, 0x0, 0x0, 0x1000, 0x68ba, 0xffffffffffffffff}}}, &(0x7f0000000c00)) 15m31.743700423s ago: executing program 36 (id=444): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0xd2, 0xb0, &(0x7f00000004c0)="018a8e8afda017b29fce8f221815b1695525d3dbae904e675d4fb259fe646c51193a927c41bdc25dc384e13c84694b8a86b1f6b797311160a84e6707831a5f5efd8222f6ffd52c2a212209ab9b109a1261720b15bd0c4fc1712e09e1619157b40c54a88baa1d2288ce999b592f2645268cc3219b6f4fd6b10ac30898fdea5e3c37e7667d135c7e5b0cc6ecd062a1aef26ff5aeebf47e41259cf8e0fbe48fbebc447c40cf30651cc51e0c807a8949c29db0bede8f0ff57ddfa71de941a543f40d26574a2eff4ccf3318b4b9d4ec3d64091642", &(0x7f00000005c0)=""/176, 0x8000, 0x0, 0x82, 0x36, &(0x7f0000000680)="11e74ea7a7cf0dc9e0a19350274e73b56202b701ff99f6834d129dd00c474d1d616bd62f1b845585815d411da5a24bb1edefb200334c0c5219c1d14fb6749abe6e04caae63116c04edd8001eed0569d710e3a6c258efbcd73986721999038e73d94ca6665b8b9b082e737dddb7ce0a54e4641edba6744f1bc60c5097ec44f8f1da0e", &(0x7f0000000740)="1148d788f2e955587a866035669842edfcc508aefa7c34ee5e05d8deee489c10a96d1e74401b158498b1a987a8b2b68f388e2cbad35b", 0x7, 0x0, 0x5}, 0x4c) write(r0, &(0x7f0000000200)="3300000008000102030405060101", 0xe) write(r0, &(0x7f00000002c0)='4\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x4c) write(r1, &(0x7f0000000180)='\'7', 0x2) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}}, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x58, 0xc9, 0x6, 0xd5c2}}}, 0x9) modify_ldt$write2(0x11, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6d, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000440)={0xffffffffffffffff, 0x8, 0x81, 0x1, @vifc_lcl_ifindex=r6, @private=0xa010100}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setreuid(0x0, 0xee00) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) bind(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) 8.57991281s ago: executing program 8 (id=3578): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) unshare(0x24020400) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r2, 0x409, 0x7) fcntl$addseals(r2, 0x409, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000440)='asymmetric\x00', &(0x7f00000004c0)=@keyring) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) io_setup(0x400, &(0x7f0000000080)=0x0) io_submit(r5, 0x2, &(0x7f0000000740)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x8, r0, 0x0, 0x0, 0x2}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="449414ee", @ANYRES16=r8, @ANYBLOB="00082bbd7000fbdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x6000c044}, 0x10) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000140)=""/33, 0x21}], 0x1) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x640, 0x40, 0xbbb9, 0x0, 0xf, 0x0, {0x3}, {0x7, 0xfffffffd, 0x1}, {0x6, 0xffff0004, 0xfffffffc}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd619, 0x0, 0x1002, 0x4000001, 0x6, 0x4c11b0c5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6}) 7.573217805s ago: executing program 5 (id=3581): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000740)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x8, 0x1, 0x68, 0x7c, 0x80, 0x2f, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@ssrr={0x89, 0x23, 0x64, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, @local, @multicast1, @multicast2, @local, @multicast1, @multicast2]}, @lsrr={0x83, 0x7, 0xfd, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x1c, [@multicast2, @empty, @local, @broadcast]}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 6.896036623s ago: executing program 8 (id=3584): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='10', 0x2) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000001c0)={r2, r3, 0x1, 0x0, 0x400000d4}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000200)={0x3, r2, 0x1, 0x9, 0xfffffffc, 0x4, 0x5, 0x8001, 0xd}) mkdir(&(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='/dev/ram0,65536\n\x00', 0x11) close(r4) r5 = syz_open_dev$mtd(&(0x7f0000000380), 0x1, 0x2) ioctl$MEMERASE(r5, 0x40084d02, &(0x7f00000003c0)={0x0, 0x400000}) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000480)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x16}]}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000300000000000000faffffff189e000006824cd7a0f9c22408164edd0095e6c01e1e76de40ce6d170044f7a5987a83e7cb89558d8ecef19c568739e503dda0a90d6de31ab8d0d78d17105f17b942ba56002cb68263ee9fb38dc6def54a0d1919d5e5fb8a3a53cf83409e490a20e6abc66d4e30510f644030d146665978671f7fd58be14379e77529af13c6547408a10d79493d6cb9", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) ioctl(0xffffffffffffffff, 0x8914, 0x0) close(0x3) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl(r9, 0x40186f40, &(0x7f0000000880)="000000000100"/24) nanosleep(&(0x7f00000008c0)={0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/ubi/ubi0/dev\x00', 0x0, 0x0) 6.886476289s ago: executing program 7 (id=3585): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000900)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000940)="060000000300010000", 0x9) r4 = socket(0x26, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r6) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r7, @ANYBLOB="e15af69b130ea1be73b879bbe0fe385436a16d84d8e654b76997c43af6807d7a8df3323e9bb8f76a4190d465b6b682fc226a6095275ee17937d27e887fa04044e1a674cf08206caba7d5020433da1af3e0b6e6b1e72ac5f7f019b3a494420005a860"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$vcsu(&(0x7f00000008c0), 0x8000, 0x101000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="a4280400000001001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8543}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x8005) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000400000000000000000000007fffffffad0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 6.760587474s ago: executing program 6 (id=3586): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000d40)='./file0\x00') openat$autofs(0xffffff9c, 0x0, 0x8000, 0x0) lstat(&(0x7f0000000040)='./sec\x00', 0x0) r2 = open(&(0x7f0000000dc0)='.\x00', 0x8000, 0x112) getdents(r2, &(0x7f0000000e00)=""/177, 0xb1) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000940)={0x10, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd2c, 0x25dfd9fc}, 0x10}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002600090122bd7008faffffff0200000008003f80040000000800030046"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x22008870) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1d, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000800000000000000ffff0000050000000000d417924900000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x48) r5 = syz_open_dev$video(&(0x7f0000000ec0), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000f00)={0x9, @pix_mp={0xe9, 0x82, 0x32315659, 0x7, 0x0, [{}, {}, {0x0, 0x9}, {0x0, 0x320}, {0x0, 0x4}, {0x2, 0xfffffff9}, {0x0, 0x8}, {0x5b1, 0x3}], 0x0, 0x5, 0x8, 0x0, 0x6}}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000680)={0x13, 0x10, 0xfa00, {&(0x7f0000000b00), r8}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) io_setup(0x8, &(0x7f00000004c0)=0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') io_submit(r10, 0x1, &(0x7f0000000540)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x0, r11, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r9, @ANYRES8=r7, @ANYRESDEC=r10, @ANYRESDEC=r3, @ANYRES8, @ANYBLOB="b28cfe5fc19915b0205f025498d06835ecfa396a701fe1f30d4b85434c1dda0a9820eb7d053571cb04353279", @ANYRES8=r6, @ANYRES16=r3, @ANYBLOB="b7df8af6d255e745cfa8f47742658ca2111cd4214708784ddcd21dd7a1147eca26ee0842d4b9946c28e70e54c5ae459d0ad5550804a5ab708ada2cfe5bca44926b39615dbc94d20e947189e4d9fc291d92342f1ce4067eb24b8f6fb7e568bcfe8eb6d9d18ce3ff81523b2fa599e59812c7182e5d198389137d5d08034be6a50c6c4258ee11c11eb9aed53f244e9e59dac486b0c114d57f7fd1bc7ae6529acd22efe9d281ec49b4d208b4f9588256582b0e66a31f152c444424", @ANYRESOCT=r4], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x3, 0xc, &(0x7f00000010c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000013000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001140)={r12, 0x0, 0xe, 0x0, &(0x7f00000011c0)="196a348fbba6e75ce3e37fd3d3fc", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = syz_open_procfs(0x0, &(0x7f0000001200)='smaps\x00') read$FUSE(r13, &(0x7f0000001240)={0x2020}, 0x2020) 6.663138013s ago: executing program 7 (id=3587): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) unshare(0x24020400) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r2, 0x409, 0x7) fcntl$addseals(r2, 0x409, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000440)='asymmetric\x00', &(0x7f00000004c0)=@keyring) io_setup(0x400, &(0x7f0000000080)=0x0) io_submit(r5, 0x2, &(0x7f0000000740)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x8, r0, 0x0, 0x0, 0x2}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000140)=""/33, 0x21}], 0x1) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x640, 0x40, 0xbbb9, 0x0, 0xf, 0x0, {0x3}, {0x7, 0xfffffffd, 0x1}, {0x6, 0xffff0004, 0xfffffffc}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd619, 0x0, 0x1002, 0x4000001, 0x6, 0x4c11b0c5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6}) 6.626659439s ago: executing program 6 (id=3588): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000100)={0x1, @pix_mp={0x10, 0x0, 0x39555659, 0x1, 0x9, [{0x3, 0x8001}, {0x4, 0x8}, {0x5, 0x1}, {0x4, 0xff}, {0x9, 0x80000000}, {0x80000001, 0x80000000}, {0x4, 0x8000}, {0x80000001}], 0xff, 0xff, 0x8, 0x2}}) socket$inet_sctp(0x2, 0x1, 0x84) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2500, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f80)=@generic={&(0x7f0000000f40)='./file0\x00', 0x0, 0x18}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x17, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000005000000000000001000e4d50000"], &(0x7f0000000500)='GPL\x00', 0xf872, 0x2f, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x3, 0x5, 0x7fff, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2, r2], &(0x7f0000001000)=[{0x5, 0x1, 0x8, 0xa}, {0x0, 0x3, 0xe, 0x8}, {0x0, 0x1, 0x5, 0xc}], 0x10, 0x9}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x36b8, &(0x7f00000006c0)={0x0, 0x6862, 0x80, 0x2, 0x115, 0x0, r3}, &(0x7f0000000440), &(0x7f0000000280), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000100001070000000000"], 0x1c}}, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/comedi3\x00', 0x400, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000340)=0x60, 0x2) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000005c0)={'comedi_parport\x00', [0x4f24, 0x14, 0x10000, 0xff, 0x5, 0xcc8, 0x6, 0x7, 0x9, 0x100, 0x3, 0xffffffff, 0x1, 0x9, 0x3, 0x2, 0x0, 0x7, 0x3, 0x40000003, 0x3, 0x6, 0x4, 0x20001e58, 0x3, 0x1, 0x7c, 0x207, 0x6, 0x0, 0xb]}) 6.615974238s ago: executing program 5 (id=3589): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='100', 0x3) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000001c0)={r2, r3, 0x1, 0x0, 0x400000d4}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000200)={0x3, r2, 0x1, 0x9, 0xfffffffc, 0x4, 0x5, 0x8001, 0xd}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='/dev/ram0,65536\n\x00', 0x11) close(r5) r6 = syz_open_dev$mtd(&(0x7f0000000380), 0x1, 0x2) ioctl$MEMERASE(r6, 0x40084d02, &(0x7f00000003c0)={0x0, 0x400000}) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000480)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x16}]}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000300000000000000faffffff189e000006824cd7a0f9c22408164edd0095e6c01e1e76de40ce6d170044f7a5987a83e7cb89558d8ecef19c568739e503dda0a90d6de31ab8d0d78d17105f17b942ba56002cb68263ee9fb38dc6def54a0d1919d5e5fb8a3a53cf83409e490a20e6abc66d4e30510f644030d146665978671f7fd58be14379e77529af13c6547408a10d79493d6cb9", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000002f00090028bd700000000000040000000400"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) ioctl(0xffffffffffffffff, 0x8914, 0x0) close(0x3) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl(r10, 0x40186f40, &(0x7f0000000880)="000000000100"/24) nanosleep(&(0x7f00000008c0)={0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/ubi/ubi0/dev\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000100000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a3000000000090002"], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) 6.090581106s ago: executing program 8 (id=3590): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e22, 0x2401, 'sh\x00', 0x1, 0x5, 0x23}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r5, 0x0, 0x0) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_emit_ethernet(0x256, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x220, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}]}}}}}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000061c0)="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", 0x2000, &(0x7f00000081c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008240)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40a, 0x6, 0x20000, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r8, r9, 0x3d5, 0x20000005}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000008300)={0x50, 0x0, r7, {0x7, 0x26, 0x5, 0xffffffff80210000, 0x0, 0xfffc, 0x5, 0x7, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="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", 0x2000, &(0x7f000000a380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a400)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r8, 0x0, 0x1, 0x8}}, {0x0, 0x6}}}, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f000000a4c0)={0x0, 0x0, 0x0}, &(0x7f000000a500)=0xc) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000000a540)={r6, r8, r10}, 0xc) 5.748207321s ago: executing program 5 (id=3591): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) unshare(0x24020400) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r2, 0x409, 0x7) fcntl$addseals(r2, 0x409, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000440)='asymmetric\x00', &(0x7f00000004c0)=@keyring) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) io_setup(0x400, &(0x7f0000000080)=0x0) io_submit(r5, 0x2, &(0x7f0000000740)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x8, r0, 0x0, 0x0, 0x2}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="449414ee", @ANYRES16=r8, @ANYBLOB="00082bbd7000fbdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x6000c044}, 0x10) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000140)=""/33, 0x21}], 0x1) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x640, 0x40, 0xbbb9, 0x0, 0xf, 0x0, {0x3}, {0x7, 0xfffffffd, 0x1}, {0x6, 0xffff0004, 0xfffffffc}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd619, 0x0, 0x1002, 0x4000001, 0x6, 0x4c11b0c5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6}) 5.744486904s ago: executing program 6 (id=3599): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='100', 0x3) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000001c0)={r2, r3, 0x1, 0x0, 0x400000d4}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000200)={0x3, r2, 0x1, 0x9, 0xfffffffc, 0x4, 0x5, 0x8001, 0xd}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='/dev/ram0,65536\n\x00', 0x11) close(r5) r6 = syz_open_dev$mtd(&(0x7f0000000380), 0x1, 0x2) ioctl$MEMERASE(r6, 0x40084d02, &(0x7f00000003c0)={0x0, 0x400000}) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000480)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x16}]}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000300000000000000faffffff189e000006824cd7a0f9c22408164edd0095e6c01e1e76de40ce6d170044f7a5987a83e7cb89558d8ecef19c568739e503dda0a90d6de31ab8d0d78d17105f17b942ba56002cb68263ee9fb38dc6def54a0d1919d5e5fb8a3a53cf83409e490a20e6abc66d4e30510f644030d146665978671f7fd58be14379e77529af13c6547408a10d79493d6cb9", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) ioctl(0xffffffffffffffff, 0x8914, 0x0) close(0x3) r10 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r10, 0x40186f40, &(0x7f0000000880)="000000000100"/24) nanosleep(&(0x7f00000008c0)={0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/ubi/ubi0/dev\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000100000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a3000000000090002"], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) 5.695074752s ago: executing program 7 (id=3592): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, 0x0, &(0x7f0000001280)='syzkaller\x00'}, 0x94) openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000740)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x8, 0x1, 0x68, 0x7c, 0x80, 0x2f, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@ssrr={0x89, 0x23, 0x64, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, @local, @multicast1, @multicast2, @local, @multicast1, @multicast2]}, @lsrr={0x83, 0x7, 0xfd, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x1c, [@multicast2, @empty, @local, @broadcast]}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.869734639s ago: executing program 6 (id=3593): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) unshare(0x24020400) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r2, 0x409, 0x7) fcntl$addseals(r2, 0x409, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) io_setup(0x400, &(0x7f0000000080)=0x0) io_submit(r4, 0x2, &(0x7f0000000740)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x8, r0, 0x0, 0x0, 0x2}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) readv(r5, &(0x7f0000000200)=[{&(0x7f0000000140)=""/33, 0x21}], 0x1) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x640, 0x40, 0xbbb9, 0x0, 0xf, 0x0, {0x3}, {0x7, 0xfffffffd, 0x1}, {0x6, 0xffff0004, 0xfffffffc}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd619, 0x0, 0x1002, 0x4000001, 0x6, 0x4c11b0c5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6}) 4.848348633s ago: executing program 5 (id=3594): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) unshare(0x24020400) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r2, 0x409, 0x7) fcntl$addseals(r2, 0x409, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000440)='asymmetric\x00', &(0x7f00000004c0)=@keyring) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) io_setup(0x400, &(0x7f0000000080)=0x0) io_submit(r5, 0x1, &(0x7f0000000740)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000140)=""/33, 0x21}], 0x1) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x640, 0x40, 0xbbb9, 0x0, 0xf, 0x0, {0x3}, {0x7, 0xfffffffd, 0x1}, {0x6, 0xffff0004, 0xfffffffc}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd619, 0x0, 0x1002, 0x4000001, 0x6, 0x4c11b0c5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6}) 3.39019461s ago: executing program 5 (id=3595): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000900)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000940)="060000000300010000", 0x9) r4 = socket(0x26, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r8, @ANYBLOB="e15af69b130ea1be73b879bbe0fe385436a16d84d8e654b76997c43af6807d7a8df3323e9bb8f76a4190d465b6b682fc226a6095275ee17937d27e887fa04044e1a674cf08206caba7d5020433da1af3e0b6e6b1e72ac5f7f019b3a494420005a860"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$vcsu(&(0x7f00000008c0), 0x8000, 0x101000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="a4280400000001001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8543}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x8005) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000400000000000000000000007fffffffad0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 3.389925576s ago: executing program 7 (id=3596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000d40)='./file0\x00') openat$autofs(0xffffff9c, 0x0, 0x8000, 0x0) lstat(&(0x7f0000000040)='./sec\x00', 0x0) r2 = open(&(0x7f0000000dc0)='.\x00', 0x8000, 0x112) getdents(r2, &(0x7f0000000e00)=""/177, 0xb1) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000940)={0x10, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd2c, 0x25dfd9fc}, 0x10}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002600090122bd7008faffffff0200000008003f80040000000800030046"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x22008870) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1d, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000800000000000000ffff0000050000000000d417924900000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x48) r5 = syz_open_dev$video(&(0x7f0000000ec0), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000f00)={0x9, @pix_mp={0xe9, 0x82, 0x32315659, 0x7, 0x0, [{}, {}, {0x0, 0x9}, {0x0, 0x320}, {0x0, 0x4}, {0x2, 0xfffffff9}, {0x0, 0x8}, {0x5b1, 0x3}], 0x0, 0x5, 0x8, 0x0, 0x6}}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000680)={0x13, 0x10, 0xfa00, {&(0x7f0000000b00), r8}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) io_setup(0x8, &(0x7f00000004c0)=0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') io_submit(r10, 0x1, &(0x7f0000000540)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x0, r11, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r9, @ANYRES8=r7, @ANYRESDEC=r10, @ANYRESDEC=r3, @ANYRES8, @ANYBLOB="b28cfe5fc19915b0205f025498d06835ecfa396a701fe1f30d4b85434c1dda0a9820eb7d053571cb04353279", @ANYRES8=r6, @ANYRES16=r3, @ANYBLOB="b7df8af6d255e745cfa8f47742658ca2111cd4214708784ddcd21dd7a1147eca26ee0842d4b9946c28e70e54c5ae459d0ad5550804a5ab708ada2cfe5bca44926b39615dbc94d20e947189e4d9fc291d92342f1ce4067eb24b8f6fb7e568bcfe8eb6d9d18ce3ff81523b2fa599e59812c7182e5d198389137d5d08034be6a50c6c4258ee11c11eb9aed53f244e9e59dac486b0c114d57f7fd1bc7ae6529acd22efe9d281ec49b4d208b4f9588256582b0e66a31f152c444424", @ANYRESOCT=r4], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x3, 0xc, &(0x7f00000010c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000013000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001140)={r12, 0x0, 0xe, 0x0, &(0x7f00000011c0)="196a348fbba6e75ce3e37fd3d3fc", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = syz_open_procfs(0x0, &(0x7f0000001200)='smaps\x00') read$FUSE(r13, &(0x7f0000001240)={0x2020}, 0x2020) 3.373478765s ago: executing program 6 (id=3597): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e22, 0x2401, 'sh\x00', 0x1, 0x5, 0x23}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='enable_event:sched:sched_process_fork', 0x25) read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020) 3.298564031s ago: executing program 7 (id=3598): socketpair(0x27, 0x3, 0x0, &(0x7f0000000680)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x12e) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000000c0)=ANY=[], &(0x7f0000000400)=0x24) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 3.22748677s ago: executing program 5 (id=3600): setns(0xc9, 0x0) socketpair(0x27, 0x3, 0x0, &(0x7f0000000680)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) write$tun(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="00000200bbbbbbbbbbbbaaaaaaaaaabb88a84b00810006000800458901140068000001119078ffffffffe00000018313b4ac1414bb7f0000017f000001e0000042444cfd31ac1414aa000003ffac1414aa000000040a0101000000000fe00000020000e369ac14142c00000007ac1414bb00000000e000000200000007e000000100000007e0000001fffffff94434d3530a01010000000004ffffffff00000008ac14142b00000009ffffffff00009c3bac1414bbffffff48ac14141200000800442845a000000003000000070000000600000001000001ce000001b70000d8b70000000600000002070f308558873f21060aed00ec511000831fb000000000ffffffffffffffff0a010101ffffffff640101007f000001071390ffffffffac1414aa00000000ac14140b000000"], 0x12e) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000000c0)=ANY=[], &(0x7f0000000400)=0x24) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2.749675831s ago: executing program 8 (id=3601): socketpair(0x27, 0x3, 0x0, &(0x7f0000000680)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="00000200bbbbbbbbbbbbaaaaaaaaaabb88a84b00810006000800458901140068000001119078ffffffffe00000018313b4ac1414bb7f0000017f000001e0000042444cfd31ac1414aa000003ffac1414aa000000040a0101000000000fe00000020000e369ac14142c00000007ac1414bb00000000e000000200000007e000000100000007e0000001fffffff94434d3530a01010000000004ffffffff00000008ac14142b00000009ffffffff00009c3bac1414bbffffff48ac14141200000800442845a000000003000000070000000600000001000001ce000001b70000d8b70000000600000002070f308558873f21060aed00ec511000831fb000000000ffffffffffffffff0a010101ffffffff640101007f000001071390ffffffffac1414aa00000000ac14140b000000"], 0x12e) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 219.602798ms ago: executing program 6 (id=3602): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) unshare(0x24020400) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r2, 0x409, 0x7) fcntl$addseals(r2, 0x409, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) io_setup(0x400, &(0x7f0000000080)=0x0) io_submit(r4, 0x2, &(0x7f0000000740)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x8, r0, 0x0, 0x0, 0x2}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) readv(r5, &(0x7f0000000200)=[{&(0x7f0000000140)=""/33, 0x21}], 0x1) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x640, 0x40, 0xbbb9, 0x0, 0xf, 0x0, {0x3}, {0x7, 0xfffffffd, 0x1}, {0x6, 0xffff0004, 0xfffffffc}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd619, 0x0, 0x1002, 0x4000001, 0x6, 0x4c11b0c5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6}) 161.318467ms ago: executing program 7 (id=3603): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='100', 0x3) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000001c0)={r2, r3, 0x1, 0x0, 0x400000d4}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000200)={0x3, r2, 0x1, 0x9, 0xfffffffc, 0x4, 0x5, 0x8001, 0xd}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='/dev/ram0,65536\n\x00', 0x11) close(r5) r6 = syz_open_dev$mtd(&(0x7f0000000380), 0x1, 0x2) ioctl$MEMERASE(r6, 0x40084d02, &(0x7f00000003c0)={0x0, 0x400000}) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000480)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x16}]}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000300000000000000faffffff189e000006824cd7a0f9c22408164edd0095e6c01e1e76de40ce6d170044f7a5987a83e7cb89558d8ecef19c568739e503dda0a90d6de31ab8d0d78d17105f17b942ba56002cb68263ee9fb38dc6def54a0d1919d5e5fb8a3a53cf83409e490a20e6abc66d4e30510f644030d146665978671f7fd58be14379e77529af13c6547408a10d79493d6cb9", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) ioctl(0xffffffffffffffff, 0x8914, 0x0) close(0x3) r10 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r10, 0x40186f40, &(0x7f0000000880)="000000000100"/24) nanosleep(&(0x7f00000008c0)={0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/ubi/ubi0/dev\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000100000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a3000000000090002"], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) 58.147491ms ago: executing program 8 (id=3604): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) close(r0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f80)=@generic={&(0x7f0000000f40)='./file0\x00', 0x0, 0x18}, 0x14) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00000006000100"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) 0s ago: executing program 8 (id=3605): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000740)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x8, 0x1, 0x68, 0x7c, 0x80, 0x2f, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@ssrr={0x89, 0x23, 0x64, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, @local, @multicast1, @multicast2, @local, @multicast1, @multicast2]}, @lsrr={0x83, 0x7, 0xfd, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x1c, [@multicast2, @empty, @local, @broadcast]}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): _coherent+0x2e0/0x570 [ 915.909572][T20435] dma_direct_alloc+0x3d1/0x8a0 [ 915.909598][T20435] dma_alloc_attrs+0x1b9/0x3e0 [ 915.909623][T20435] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 915.909645][T20435] ? __kmalloc_noprof+0x350/0x840 [ 915.909671][T20435] ? dma_direct_supported+0xca/0x220 [ 915.909702][T20435] comedi_isadma_alloc+0x331/0x620 [ 915.909723][T20435] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 915.909736][T20435] ? request_threaded_irq+0x27b/0x3e0 [ 915.909756][T20435] pcl816_attach+0x909/0xb30 [ 915.909778][T20435] comedi_device_attach+0x40e/0x6b0 [ 915.909797][T20435] do_devconfig_ioctl+0x1b3/0x6d0 [ 915.909813][T20435] ? comedi_unlocked_ioctl+0x180/0x3310 [ 915.909827][T20435] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 915.909852][T20435] ? tomoyo_path_number_perm+0x46d/0x580 [ 915.909868][T20435] ? kasan_save_stack+0x3f/0x50 [ 915.909882][T20435] ? kasan_save_stack+0x30/0x50 [ 915.909895][T20435] ? kasan_save_track+0x14/0x30 [ 915.909909][T20435] ? kasan_save_free_info+0x3b/0x70 [ 915.909923][T20435] comedi_unlocked_ioctl+0x860/0x3310 [ 915.909940][T20435] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 915.909964][T20435] ? kasan_quarantine_put+0x104/0x240 [ 915.909978][T20435] ? lockdep_hardirqs_on+0x7d/0x110 [ 915.909997][T20435] ? find_held_lock+0x2b/0x80 [ 915.910010][T20435] ? tomoyo_path_number_perm+0x28f/0x580 [ 915.910025][T20435] ? tomoyo_path_number_perm+0x28f/0x580 [ 915.910043][T20435] ? tomoyo_path_number_perm+0x188/0x580 [ 915.910062][T20435] comedi_compat_ioctl+0x438/0xe20 [ 915.910076][T20435] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 915.910094][T20435] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 915.910115][T20435] ? do_vfs_ioctl+0x226/0x13e0 [ 915.910138][T20435] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 915.910167][T20435] ? __fget_files+0x34/0x3d0 [ 915.910194][T20435] ? find_held_lock+0x2b/0x80 [ 915.910217][T20435] ? __fget_files+0x215/0x3d0 [ 915.910241][T20435] ? hook_file_ioctl_common+0x140/0x440 [ 915.910272][T20435] ? __fget_files+0x21f/0x3d0 [ 915.910291][T20435] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 915.910304][T20435] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 915.910320][T20435] __do_fast_syscall_32+0x14b/0x8c0 [ 915.910331][T20435] ? lockdep_hardirqs_on+0x7d/0x110 [ 915.910349][T20435] do_fast_syscall_32+0x32/0x70 [ 915.910362][T20435] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 915.910376][T20435] RIP: 0023:0xf740efbc [ 915.910387][T20435] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 915.910397][T20435] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 915.910409][T20435] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000040946400 [ 915.910416][T20435] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 915.910423][T20435] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 915.910429][T20435] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 915.910435][T20435] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 915.910450][T20435] [ 915.910568][T20435] Mem-Info: [ 915.910676][T20435] active_anon:3308 inactive_anon:299 isolated_anon:0 [ 915.910676][T20435] active_file:4207 inactive_file:18078 isolated_file:0 [ 915.910676][T20435] unevictable:1000 dirty:343 writeback:0 [ 915.910676][T20435] slab_reclaimable:7195 slab_unreclaimable:67199 [ 915.910676][T20435] mapped:24841 shmem:1016 pagetables:1647 [ 915.910676][T20435] sec_pagetables:318 bounce:0 [ 915.910676][T20435] kernel_misc_reclaimable:0 [ 915.910676][T20435] free:38911 free_pcp:73 free_cma:0 [ 915.910827][T20435] Node 0 active_anon:0kB inactive_anon:24kB active_file:468kB inactive_file:2400kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7264kB pagetables:1116kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 915.910971][T20435] Node 0 DMA free:2800kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:292kB local_pcp:32kB free_cma:0kB [ 915.911084][T20435] lowmem_reserve[]: 0 256 256 256 256 [ 915.911170][T20435] Node 0 DMA: 130*4kB (U) 57*8kB (U) 0*16kB 39*32kB (U) 5*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2800kB [ 915.911509][T20435] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 915.911519][T20435] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 915.911528][T20435] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 915.911618][T20435] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 915.911628][T20435] 23671 total pagecache pages [ 915.911631][T20435] 374 pages in swap cache [ 915.911635][T20435] Free swap = 105784kB [ 915.911639][T20435] Total swap = 124996kB [ 915.911695][T20435] 524155 pages RAM [ 915.911701][T20435] 0 pages HighMem/MovableOnly [ 915.911705][T20435] 217486 pages reserved [ 915.911708][T20435] 0 pages cma reserved [ 917.793868][T20469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3136'. [ 917.881584][T20472] profile_transition: 4 callbacks suppressed [ 917.881596][T20472] profile_transition: unconfined exec no attachment [ 917.903073][T20473] profile_transition: unconfined exec no attachment [ 917.941036][T20476] profile_transition: unconfined exec no attachment [ 917.962785][T20478] profile_transition: unconfined exec no attachment [ 917.988882][T20479] profile_transition: unconfined exec no attachment [ 918.015771][T20481] profile_transition: unconfined exec no attachment [ 919.086925][T20490] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3139'. [ 919.160870][T20496] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3139'. [ 919.167165][T20495] profile_transition: unconfined exec no attachment [ 919.229984][T20498] profile_transition: unconfined exec no attachment [ 919.348984][T20500] profile_transition: unconfined exec no attachment [ 919.352008][T20501] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 919.650955][T20507] profile_transition: unconfined exec no attachment [ 921.349166][T20523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3145'. [ 921.938102][T20548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3148'. [ 922.017371][T20553] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3148'. [ 922.854136][ T6336] usb 11-1: new high-speed USB device number 79 using dummy_hcd [ 923.028164][ T6336] usb 11-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 923.033054][ T6336] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 923.033436][ T6336] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.179795][T20571] profile_transition: 14 callbacks suppressed [ 923.179903][T20571] profile_transition: unconfined exec no attachment [ 923.209305][ T6336] keyspan 11-1:1.0: Keyspan 2 port adapter converter detected [ 923.209981][ T6336] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 81 [ 923.210212][ T6336] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 1 [ 923.226970][ T6336] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 84 [ 923.227291][ T6336] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 2 [ 923.255529][ T6336] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 923.272135][ T6336] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 88 [ 923.272190][ T6336] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6 [ 923.274101][ T6336] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 923.534270][T20575] IPv6: addrconf: prefix option has invalid lifetime [ 923.612335][T20579] profile_transition: unconfined exec no attachment [ 923.778474][T20582] profile_transition: unconfined exec no attachment [ 923.877829][T20583] profile_transition: unconfined exec no attachment [ 923.988604][T20584] profile_transition: unconfined exec no attachment [ 924.068963][T20586] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3154'. [ 924.138073][T20589] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3154'. [ 924.276302][T20592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3156'. [ 924.357880][T20595] profile_transition: unconfined exec no attachment [ 924.374024][T20596] profile_transition: unconfined exec no attachment [ 924.386480][T20599] profile_transition: unconfined exec no attachment [ 924.466264][T20601] profile_transition: unconfined exec no attachment [ 924.493597][ T42] audit: type=1804 audit(1792978458.715:1952): pid=20605 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=measuring_policy cause=store_entry comm="syz.7.3159" name="ima_policy_written" res=0 errno=-17 [ 924.493616][T20605] ima: rule for LSM 'u' is undefined [ 924.493669][ T42] audit: type=1807 audit(1792978458.715:1953): action=measure func=FILE_CHECK obj_type=u res=0 [ 924.493782][ T42] audit: type=1802 audit(1792978458.715:1954): pid=20605 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=update_policy cause=invalid-policy comm="syz.7.3159" res=0 errno=-22 [ 924.516686][T20607] profile_transition: unconfined exec no attachment [ 924.517364][T20605] ima: policy update failed [ 924.517448][ T42] audit: type=1802 audit(1792978458.745:1955): pid=20605 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=policy_update cause=failed comm="syz.7.3159" res=0 errno=-22 [ 925.605251][ T7789] usb 11-1: USB disconnect, device number 79 [ 925.616524][ T7789] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 925.619555][ T7789] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 925.619822][ T7789] keyspan 11-1:1.0: device disconnected [ 925.848485][T20642] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3165'. [ 928.404010][ T2323] usb 12-1: new high-speed USB device number 91 using dummy_hcd [ 928.584936][ T2323] usb 12-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 928.585812][ T2323] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.585835][ T2323] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.593373][ T2323] keyspan 12-1:1.0: Keyspan 2 port adapter converter detected [ 928.593464][ T2323] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 81 [ 928.593491][ T2323] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 1 [ 928.594092][ T2323] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 84 [ 928.594125][ T2323] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 2 [ 928.596757][ T2323] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 928.598203][ T2323] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 88 [ 928.598236][ T2323] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 6 [ 928.601247][ T2323] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 928.747495][T20699] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3176'. [ 928.813961][ T65] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 928.905983][T20706] fuse: Bad value for 'fd' [ 928.955389][T20702] IPv6: addrconf: prefix option has invalid lifetime [ 928.964640][ T65] usb 10-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 928.965450][ T65] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.965474][ T65] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.971949][ T65] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 928.972040][ T65] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 928.972067][ T65] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 928.972584][ T65] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 928.972616][ T65] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 928.981849][ T65] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 928.982533][ T65] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 928.982566][ T65] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 928.985313][ T65] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 929.038930][T20708] profile_transition: 24 callbacks suppressed [ 929.038943][T20708] profile_transition: unconfined exec no attachment [ 929.055028][T20709] profile_transition: unconfined exec no attachment [ 929.415676][T20712] profile_transition: unconfined exec no attachment [ 931.088683][T20716] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3187'. [ 931.105467][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.105496][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.156531][T20718] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3187'. [ 931.208635][ T5873] usb 12-1: USB disconnect, device number 91 [ 931.225941][ T5873] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 931.240667][ T5873] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 931.242079][ T5873] keyspan 12-1:1.0: device disconnected [ 931.622584][ T7789] usb 10-1: USB disconnect, device number 82 [ 931.639162][ T7789] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 931.647519][ T7789] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 931.648742][ T7789] keyspan 10-1:1.0: device disconnected [ 931.890029][T20731] warn_alloc: 1 callbacks suppressed [ 931.890043][T20731] syz.5.3182: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 931.890078][T20731] CPU: 2 UID: 0 PID: 20731 Comm: syz.5.3182 Not tainted syzkaller #0 PREEMPT(full) [ 931.890091][T20731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 931.890097][T20731] Call Trace: [ 931.890102][T20731] [ 931.890107][T20731] dump_stack_lvl+0x100/0x190 [ 931.890127][T20731] warn_alloc.cold+0x9e/0xb2 [ 931.890140][T20731] ? __pfx_warn_alloc+0x10/0x10 [ 931.890157][T20731] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 931.890171][T20731] ? __pfx_get_page_from_freelist+0x10/0x10 [ 931.890188][T20731] __alloc_frozen_pages_noprof+0x17ab/0x3190 [ 931.890210][T20731] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 931.890224][T20731] ? sched_clock+0x3a/0x60 [ 931.890242][T20731] ? lock_acquire+0x1d1/0x380 [ 931.890260][T20731] ? __schedule+0x4d92/0x6990 [ 931.890276][T20731] ? find_held_lock+0x2b/0x80 [ 931.890290][T20731] ? __schedule+0x4d92/0x6990 [ 931.890307][T20731] ? find_held_lock+0x2b/0x80 [ 931.890339][T20731] ? rcu_is_watching+0x13/0xc0 [ 931.890354][T20731] ? trace_sched_exit_tp+0x120/0x160 [ 931.890374][T20731] alloc_pages_node_noprof+0x93/0x200 [ 931.890387][T20731] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 931.890402][T20731] ? __pfx___schedule+0x10/0x10 [ 931.890420][T20731] alloc_pages_exact_nid_noprof+0x32/0xe0 [ 931.890434][T20731] __dma_direct_alloc_pages.isra.0+0x34e/0x510 [ 931.890450][T20731] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 931.890470][T20731] dma_direct_alloc+0x3d1/0x8a0 [ 931.890488][T20731] dma_alloc_attrs+0x1b9/0x3e0 [ 931.890517][T20731] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 931.890533][T20731] ? dma_direct_supported+0xca/0x220 [ 931.890553][T20731] comedi_isadma_alloc+0x331/0x620 [ 931.890567][T20731] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 931.890579][T20731] ? request_threaded_irq+0x27b/0x3e0 [ 931.890599][T20731] pcl816_attach+0x909/0xb30 [ 931.890616][T20731] comedi_device_attach+0x40e/0x6b0 [ 931.890635][T20731] do_devconfig_ioctl+0x1b3/0x6d0 [ 931.890652][T20731] ? comedi_unlocked_ioctl+0x180/0x3310 [ 931.890666][T20731] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 931.890694][T20731] ? tomoyo_path_number_perm+0x46d/0x580 [ 931.890711][T20731] ? kasan_save_stack+0x3f/0x50 [ 931.890725][T20731] ? kasan_save_stack+0x30/0x50 [ 931.890739][T20731] ? kasan_save_track+0x14/0x30 [ 931.890753][T20731] ? kasan_save_free_info+0x3b/0x70 [ 931.890767][T20731] comedi_unlocked_ioctl+0x860/0x3310 [ 931.890784][T20731] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 931.890808][T20731] ? kasan_quarantine_put+0x104/0x240 [ 931.890822][T20731] ? lockdep_hardirqs_on+0x7d/0x110 [ 931.890840][T20731] ? find_held_lock+0x2b/0x80 [ 931.890853][T20731] ? tomoyo_path_number_perm+0x28f/0x580 [ 931.890868][T20731] ? tomoyo_path_number_perm+0x28f/0x580 [ 931.890887][T20731] ? tomoyo_path_number_perm+0x188/0x580 [ 931.890906][T20731] comedi_compat_ioctl+0x438/0xe20 [ 931.890919][T20731] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 931.890933][T20731] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 931.890946][T20731] ? do_vfs_ioctl+0x226/0x13e0 [ 931.890960][T20731] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 931.890976][T20731] ? __fget_files+0x34/0x3d0 [ 931.890992][T20731] ? find_held_lock+0x2b/0x80 [ 931.891005][T20731] ? __fget_files+0x215/0x3d0 [ 931.891020][T20731] ? hook_file_ioctl_common+0x140/0x440 [ 931.891039][T20731] ? __fget_files+0x21f/0x3d0 [ 931.891057][T20731] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 931.891070][T20731] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 931.891086][T20731] __do_fast_syscall_32+0x14b/0x8c0 [ 931.891099][T20731] do_fast_syscall_32+0x32/0x70 [ 931.891111][T20731] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 931.891126][T20731] RIP: 0023:0xf7fa8fbc [ 931.891136][T20731] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 931.891146][T20731] RSP: 002b:00000000f541450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 931.891157][T20731] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 931.891164][T20731] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 931.891170][T20731] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 931.891177][T20731] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 931.891183][T20731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 931.891198][T20731] [ 931.891315][T20731] Mem-Info: [ 931.891352][T20731] active_anon:3315 inactive_anon:298 isolated_anon:0 [ 931.891352][T20731] active_file:4195 inactive_file:18079 isolated_file:0 [ 931.891352][T20731] unevictable:1000 dirty:401 writeback:0 [ 931.891352][T20731] slab_reclaimable:7198 slab_unreclaimable:67040 [ 931.891352][T20731] mapped:24794 shmem:1040 pagetables:1631 [ 931.891352][T20731] sec_pagetables:318 bounce:0 [ 931.891352][T20731] kernel_misc_reclaimable:0 [ 931.891352][T20731] free:42392 free_pcp:81 free_cma:0 [ 931.891380][T20731] Node 0 active_anon:4kB inactive_anon:20kB active_file:420kB inactive_file:2448kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7264kB pagetables:1116kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 931.891407][T20731] Node 0 DMA free:2768kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:324kB local_pcp:96kB free_cma:0kB [ 931.891436][T20731] lowmem_reserve[]: 0 256 256 256 256 [ 931.891456][T20731] Node 0 DMA: 130*4kB (U) 57*8kB (U) 0*16kB 38*32kB (U) 5*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2768kB [ 931.891523][T20731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 931.891532][T20731] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 931.891540][T20731] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 931.891548][T20731] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 931.891556][T20731] 23701 total pagecache pages [ 931.891560][T20731] 374 pages in swap cache [ 931.891564][T20731] Free swap = 105784kB [ 931.891568][T20731] Total swap = 124996kB [ 931.891572][T20731] 524155 pages RAM [ 931.891576][T20731] 0 pages HighMem/MovableOnly [ 931.891580][T20731] 217486 pages reserved [ 931.891583][T20731] 0 pages cma reserved [ 932.570555][T20739] profile_transition: unconfined exec no attachment [ 932.918636][T20743] ubi: mtd1 is already attached to ubi0 [ 932.949338][T20748] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3186'. [ 933.874118][ T10] usb 13-1: new high-speed USB device number 70 using dummy_hcd [ 934.225705][ T10] usb 13-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 934.232328][ T10] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 934.242587][ T10] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.257764][ T10] keyspan 13-1:1.0: Keyspan 2 port adapter converter detected [ 934.257876][ T10] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 81 [ 934.257903][ T10] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 1 [ 934.258410][ T10] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 84 [ 934.258442][ T10] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 2 [ 934.261960][ T10] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 934.262585][ T10] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 88 [ 934.262617][ T10] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 6 [ 934.263661][ T10] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 934.642473][T20768] profile_transition: unconfined exec no attachment [ 934.685864][T20769] profile_transition: unconfined exec no attachment [ 934.718866][T20771] profile_transition: unconfined exec no attachment [ 934.742236][T20772] profile_transition: unconfined exec no attachment [ 934.749544][T20774] profile_transition: unconfined exec no attachment [ 934.767680][T20775] profile_transition: unconfined exec no attachment [ 934.794984][T20776] profile_transition: unconfined exec no attachment [ 934.828640][T20778] profile_transition: unconfined exec no attachment [ 934.853869][T20779] profile_transition: unconfined exec no attachment [ 934.878394][T20780] profile_transition: unconfined exec no attachment [ 935.941661][T20794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3196'. [ 936.681119][T13935] usb 13-1: USB disconnect, device number 70 [ 936.686785][T13935] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 936.692250][T13935] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 936.692534][T13935] keyspan 13-1:1.0: device disconnected [ 936.730379][ T42] audit: type=1804 audit(1792978470.955:1956): pid=20805 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=measuring_policy cause=store_entry comm="syz.8.3199" name="ima_policy_written" res=0 errno=-17 [ 936.730460][T20805] ima: rule for LSM 'u' is undefined [ 936.730560][ T42] audit: type=1807 audit(1792978470.955:1957): action=measure func=FILE_CHECK obj_type=u res=0 [ 936.730578][ T42] audit: type=1802 audit(1792978470.955:1958): pid=20805 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=update_policy cause=invalid-policy comm="syz.8.3199" res=0 errno=-22 [ 936.904933][T20805] ima: policy update failed [ 936.905346][ T42] audit: type=1802 audit(1792978471.135:1959): pid=20805 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=policy_update cause=failed comm="syz.8.3199" res=0 errno=-22 [ 936.969346][T20807] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 936.982127][T20807] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3207'. [ 938.109978][T20825] block2mtd: error: cannot open device /dev/ram0 [ 938.141773][T20825] ubi: mtd1 is already attached to ubi0 [ 938.386224][T20829] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3205'. [ 939.024629][T20842] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 939.048917][T20842] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3210'. [ 940.786183][T20853] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 940.993797][T20859] fuse: Bad value for 'fd' [ 941.099244][T20862] profile_transition: 2 callbacks suppressed [ 941.099259][T20862] profile_transition: unconfined exec no attachment [ 941.115245][T20863] profile_transition: unconfined exec no attachment [ 941.245756][T20867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3216'. [ 941.418672][T20869] fuse: Unknown parameter '0x0000000000000003' [ 941.664064][T20872] profile_transition: unconfined exec no attachment [ 942.150633][T20877] profile_transition: unconfined exec no attachment [ 942.215575][T20881] profile_transition: unconfined exec no attachment [ 942.216003][T20880] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3221'. [ 942.260108][T20882] profile_transition: unconfined exec no attachment [ 942.287395][T20885] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3221'. [ 942.300973][T20886] profile_transition: unconfined exec no attachment [ 942.335648][T20887] profile_transition: unconfined exec no attachment [ 942.449465][T20888] profile_transition: unconfined exec no attachment [ 942.497829][T20890] profile_transition: unconfined exec no attachment [ 942.519207][ T5882] usb 12-1: new high-speed USB device number 92 using dummy_hcd [ 942.676029][ T5882] usb 12-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 942.679745][ T5882] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 942.679832][ T5882] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.707077][ T5882] keyspan 12-1:1.0: Keyspan 2 port adapter converter detected [ 942.717652][ T5882] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 81 [ 942.717890][ T5882] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 1 [ 942.731395][ T5882] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 84 [ 942.731650][ T5882] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 2 [ 942.744470][ T5882] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 942.755254][ T5882] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 88 [ 942.755629][ T5882] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 6 [ 942.758929][T20898] ubi: mtd1 is already attached to ubi0 [ 942.772288][ T5882] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 943.508967][T20910] fuse: Unknown parameter '0x0000000000000003' [ 943.557863][T20912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3225'. [ 945.069981][T20933] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3230'. [ 945.315219][ T3304] usb 12-1: USB disconnect, device number 92 [ 945.318321][ T3304] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 945.320217][ T3304] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 945.320479][ T3304] keyspan 12-1:1.0: device disconnected [ 946.029059][T20948] fuse: Unknown parameter '0x0000000000000003' [ 946.358371][T20954] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3236'. [ 946.384498][T20949] profile_transition: 10 callbacks suppressed [ 946.384513][T20949] profile_transition: unconfined exec no attachment [ 946.465566][T20955] profile_transition: unconfined exec no attachment [ 946.503686][T20957] profile_transition: unconfined exec no attachment [ 946.532030][T20958] profile_transition: unconfined exec no attachment [ 946.558472][T20959] profile_transition: unconfined exec no attachment [ 946.585982][T20960] profile_transition: unconfined exec no attachment [ 946.672700][T20963] profile_transition: unconfined exec no attachment [ 947.313112][T20969] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3246'. [ 947.891344][T20976] profile_transition: unconfined exec no attachment [ 947.896455][T20977] profile_transition: unconfined exec no attachment [ 947.925774][T20979] profile_transition: unconfined exec no attachment [ 948.056199][T20985] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3239'. [ 948.534110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 949.069335][T21008] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 949.127826][T21010] block2mtd: error: cannot open device /dev/ram0 [ 949.155679][T21010] ubi: mtd1 is already attached to ubi0 [ 949.212326][T21012] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3253'. [ 949.546818][T21017] fuse: Unknown parameter '0x0000000000000003' [ 950.192037][T21027] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3250'. [ 950.290880][T21032] fuse: Bad value for 'fd' [ 950.503991][ T3304] usb 11-1: new high-speed USB device number 80 using dummy_hcd [ 950.674445][ T3304] usb 11-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 950.678275][ T3304] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 950.678301][ T3304] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.223619][ T3304] keyspan 11-1:1.0: Keyspan 2 port adapter converter detected [ 951.223730][ T3304] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 81 [ 951.225084][ T3304] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 1 [ 951.363565][ T3304] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 84 [ 951.363604][ T3304] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 2 [ 951.366790][ T3304] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 951.367471][ T3304] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 88 [ 951.367504][ T3304] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6 [ 951.371513][ T3304] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 951.910786][T21054] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3256'. [ 952.193454][T21056] fuse: Unknown parameter '0x0000000000000003' [ 952.211268][T21057] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3256'. [ 952.271961][T21059] block2mtd: error: cannot open device /dev/ram0 [ 952.328891][T21059] ubi: mtd1 is already attached to ubi0 [ 952.584054][ T6336] usb 12-1: new high-speed USB device number 93 using dummy_hcd [ 952.734612][ T6336] usb 12-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 952.735396][ T6336] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 952.735419][ T6336] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.740509][ T6336] keyspan 12-1:1.0: Keyspan 2 port adapter converter detected [ 952.740600][ T6336] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 81 [ 952.740632][ T6336] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 1 [ 952.741215][ T6336] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 84 [ 952.741246][ T6336] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 2 [ 952.742117][ T6336] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 952.742900][ T6336] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 88 [ 952.742933][ T6336] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 6 [ 952.743754][ T6336] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 952.903956][ T10] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 953.054402][ T10] usb 10-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 953.055249][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 953.055286][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.058721][ T10] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 953.058877][ T10] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 953.058914][ T10] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 953.059427][ T10] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 953.059505][ T10] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 953.060417][ T10] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB4 [ 953.062546][ T10] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 953.062580][ T10] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 953.063699][ T10] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB5 [ 953.608915][T21072] IPv6: addrconf: prefix option has invalid lifetime [ 953.989205][ T3304] usb 11-1: USB disconnect, device number 80 [ 953.994225][ T3304] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 953.999079][ T3304] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 954.004748][ T3304] keyspan 11-1:1.0: device disconnected [ 954.095577][T21074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3262'. [ 955.201904][T21084] fuse: Unknown parameter '0x0000000000000003' [ 955.845244][T21087] warn_alloc: 2 callbacks suppressed [ 955.845303][T21087] syz.6.3265: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 955.845518][T21087] CPU: 1 UID: 0 PID: 21087 Comm: syz.6.3265 Not tainted syzkaller #0 PREEMPT(full) [ 955.845539][T21087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 955.845546][T21087] Call Trace: [ 955.845550][T21087] [ 955.845556][T21087] dump_stack_lvl+0x100/0x190 [ 955.845576][T21087] warn_alloc.cold+0x9e/0xb2 [ 955.845589][T21087] ? __pfx_warn_alloc+0x10/0x10 [ 955.845605][T21087] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 955.845619][T21087] ? __pfx_get_page_from_freelist+0x10/0x10 [ 955.845648][T21087] __alloc_frozen_pages_noprof+0x17ab/0x3190 [ 955.845673][T21087] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 955.845686][T21087] ? find_held_lock+0x2b/0x80 [ 955.845703][T21087] ? rcu_is_watching+0x13/0xc0 [ 955.845720][T21087] ? do_raw_write_lock+0x11e/0x260 [ 955.845741][T21087] ? __pfx___schedule+0x10/0x10 [ 955.845760][T21087] alloc_pages_node_noprof+0x93/0x200 [ 955.845773][T21087] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 955.845785][T21087] ? irqentry_exit+0x202/0xab0 [ 955.845795][T21087] ? lockdep_hardirqs_on+0x7d/0x110 [ 955.845813][T21087] ? irqentry_exit+0x202/0xab0 [ 955.845825][T21087] alloc_pages_exact_nid_noprof+0x32/0xe0 [ 955.845840][T21087] __dma_direct_alloc_pages.isra.0+0x34e/0x510 [ 955.845856][T21087] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 955.845876][T21087] dma_direct_alloc+0x3d1/0x8a0 [ 955.845893][T21087] dma_alloc_attrs+0x1b9/0x3e0 [ 955.845909][T21087] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 955.845923][T21087] ? __kmalloc_noprof+0x350/0x840 [ 955.845937][T21087] ? dma_direct_supported+0xca/0x220 [ 955.845956][T21087] comedi_isadma_alloc+0x331/0x620 [ 955.845971][T21087] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 955.845983][T21087] ? request_threaded_irq+0x27b/0x3e0 [ 955.846003][T21087] pcl816_attach+0x909/0xb30 [ 955.846021][T21087] comedi_device_attach+0x40e/0x6b0 [ 955.846039][T21087] do_devconfig_ioctl+0x1b3/0x6d0 [ 955.846057][T21087] ? comedi_unlocked_ioctl+0x180/0x3310 [ 955.846070][T21087] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 955.846095][T21087] ? tomoyo_path_number_perm+0x46d/0x580 [ 955.846112][T21087] ? kasan_save_stack+0x3f/0x50 [ 955.846126][T21087] ? kasan_save_stack+0x30/0x50 [ 955.846139][T21087] ? kasan_save_track+0x14/0x30 [ 955.846153][T21087] ? kasan_save_free_info+0x3b/0x70 [ 955.846167][T21087] comedi_unlocked_ioctl+0x860/0x3310 [ 955.846184][T21087] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 955.846208][T21087] ? kasan_quarantine_put+0x104/0x240 [ 955.846222][T21087] ? lockdep_hardirqs_on+0x7d/0x110 [ 955.846240][T21087] ? find_held_lock+0x2b/0x80 [ 955.846253][T21087] ? tomoyo_path_number_perm+0x28f/0x580 [ 955.846272][T21087] ? tomoyo_path_number_perm+0x28f/0x580 [ 955.846290][T21087] ? tomoyo_path_number_perm+0x188/0x580 [ 955.846309][T21087] comedi_compat_ioctl+0x438/0xe20 [ 955.846322][T21087] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 955.846336][T21087] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 955.846349][T21087] ? do_vfs_ioctl+0x226/0x13e0 [ 955.846363][T21087] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 955.846379][T21087] ? __fget_files+0x34/0x3d0 [ 955.846394][T21087] ? find_held_lock+0x2b/0x80 [ 955.846408][T21087] ? __fget_files+0x215/0x3d0 [ 955.846422][T21087] ? hook_file_ioctl_common+0x140/0x440 [ 955.846442][T21087] ? __fget_files+0x21f/0x3d0 [ 955.846461][T21087] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 955.846474][T21087] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 955.846489][T21087] __do_fast_syscall_32+0x14b/0x8c0 [ 955.846511][T21087] ? lockdep_hardirqs_on+0x7d/0x110 [ 955.846529][T21087] do_fast_syscall_32+0x32/0x70 [ 955.846541][T21087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 955.846556][T21087] RIP: 0023:0xf740efbc [ 955.846565][T21087] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 955.846576][T21087] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 955.846587][T21087] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000040946400 [ 955.846594][T21087] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 955.846601][T21087] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 955.846607][T21087] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 955.846614][T21087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 955.846629][T21087] [ 955.846943][T21087] Mem-Info: [ 955.846949][T21087] active_anon:5534 inactive_anon:298 isolated_anon:0 [ 955.846949][T21087] active_file:4207 inactive_file:18077 isolated_file:0 [ 955.846949][T21087] unevictable:1000 dirty:265 writeback:0 [ 955.846949][T21087] slab_reclaimable:7213 slab_unreclaimable:67349 [ 955.846949][T21087] mapped:24321 shmem:3295 pagetables:1659 [ 955.846949][T21087] sec_pagetables:318 bounce:0 [ 955.846949][T21087] kernel_misc_reclaimable:0 [ 955.846949][T21087] free:33079 free_pcp:91 free_cma:0 [ 955.847062][T21087] Node 0 active_anon:4kB inactive_anon:20kB active_file:468kB inactive_file:2400kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7232kB pagetables:1116kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 955.847115][T21087] Node 0 DMA free:2736kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:364kB local_pcp:32kB free_cma:0kB [ 955.847171][T21087] lowmem_reserve[]: 0 256 256 256 256 [ 955.847350][T21087] Node 0 DMA: 130*4kB (U) 57*8kB (U) 0*16kB 37*32kB (U) 5*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2736kB [ 955.848375][T21087] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 955.848468][T21087] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 955.848531][T21087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 955.848593][T21087] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 955.848628][T21087] 25949 total pagecache pages [ 955.848633][T21087] 374 pages in swap cache [ 955.848690][T21087] Free swap = 105784kB [ 955.848696][T21087] Total swap = 124996kB [ 955.848813][T21087] 524155 pages RAM [ 955.848818][T21087] 0 pages HighMem/MovableOnly [ 955.848876][T21087] 217486 pages reserved [ 955.848881][T21087] 0 pages cma reserved [ 956.041623][ T3304] usb 12-1: USB disconnect, device number 93 [ 956.054287][ T3304] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 956.057344][ T5873] usb 10-1: USB disconnect, device number 83 [ 956.067486][ T3304] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 956.068975][ T3304] keyspan 12-1:1.0: device disconnected [ 956.091128][ T5873] keyspan_2 ttyUSB4: Keyspan 2 port adapter converter now disconnected from ttyUSB4 [ 956.092489][ T5873] keyspan_2 ttyUSB5: Keyspan 2 port adapter converter now disconnected from ttyUSB5 [ 956.092784][ T5873] keyspan 10-1:1.0: device disconnected [ 956.125646][T21096] block2mtd: error: cannot open device /dev/ram0 [ 956.131681][T21097] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3268'. [ 956.136599][T21096] ubi: mtd1 is already attached to ubi0 [ 956.142363][T21100] profile_transition: 14 callbacks suppressed [ 956.142374][T21100] profile_transition: unconfined exec no attachment [ 956.197100][T21099] ubi: mtd1 is already attached to ubi0 [ 956.197654][T21102] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3268'. [ 956.757860][T21113] block2mtd: error: cannot open device /dev/ram0 [ 956.822781][T21114] ubi: mtd1 is already attached to ubi0 [ 956.875543][T21115] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3273'. [ 956.982465][T21118] profile_transition: unconfined exec no attachment [ 956.998915][T21119] profile_transition: unconfined exec no attachment [ 957.008663][T21121] fuse: Unknown parameter '0x0000000000000003' [ 957.624397][T19511] usb 13-1: new high-speed USB device number 71 using dummy_hcd [ 957.800527][T19511] usb 13-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 957.816048][T19511] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 957.816204][T19511] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.861776][T19511] keyspan 13-1:1.0: Keyspan 2 port adapter converter detected [ 957.875706][T19511] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 81 [ 957.875739][T19511] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 1 [ 957.876350][T19511] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 84 [ 957.876383][T19511] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 2 [ 957.877623][T19511] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 957.878360][T19511] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 88 [ 957.878395][T19511] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 6 [ 957.881547][T19511] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 959.004438][T21146] fuse: Bad value for 'fd' [ 959.169301][T21149] profile_transition: unconfined exec no attachment [ 959.338623][T21150] profile_transition: unconfined exec no attachment [ 959.643812][T21153] block2mtd: error: cannot open device /dev/ram0 [ 959.691068][T21153] ubi: mtd1 is already attached to ubi0 [ 960.012358][T21158] fuse: Unknown parameter '0x0000000000000003' [ 960.063116][T21161] profile_transition: unconfined exec no attachment [ 960.130829][T21160] ubi: mtd1 is already attached to ubi0 [ 960.203961][ T5938] usb 11-1: new high-speed USB device number 81 using dummy_hcd [ 960.364440][ T5938] usb 11-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 960.365243][ T5938] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 960.365267][ T5938] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.367720][ T5938] keyspan 11-1:1.0: Keyspan 2 port adapter converter detected [ 960.368238][ T5938] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 81 [ 960.368269][ T5938] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 1 [ 960.368775][ T5938] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 84 [ 960.368806][ T5938] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 2 [ 960.370937][ T5938] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 960.371615][ T5938] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 88 [ 960.371648][ T5938] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6 [ 960.372758][ T5938] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 960.379979][ T7789] usb 13-1: USB disconnect, device number 71 [ 960.390843][ T7789] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 960.395692][ T7789] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 960.396379][ T7789] keyspan 13-1:1.0: device disconnected [ 960.416655][T21164] block2mtd: error: cannot open device /dev/ram0 [ 960.450125][T21164] ubi: mtd1 is already attached to ubi0 [ 960.632243][T21168] profile_transition: unconfined exec no attachment [ 960.650654][T21169] profile_transition: unconfined exec no attachment [ 960.660102][T21171] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3286'. [ 960.826255][T21172] IPv6: addrconf: prefix option has invalid lifetime [ 961.159893][T21174] fuse: Unknown parameter '0x0000000000000003' [ 962.636915][T21186] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3299'. [ 962.694804][T21190] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3299'. [ 963.039221][T21198] fuse: Unknown parameter '0x0000000000000003' [ 963.041953][ T7789] usb 11-1: USB disconnect, device number 81 [ 963.043405][ T7789] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 963.046357][ T7789] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 963.046646][ T7789] keyspan 11-1:1.0: device disconnected [ 963.718876][T21202] block2mtd: error: cannot open device /dev/ram0 [ 963.732091][T21202] ubi: mtd1 is already attached to ubi0 [ 963.732824][T21205] block2mtd: error: cannot open device /dev/ram0 [ 963.756862][T21205] ubi: mtd1 is already attached to ubi0 [ 963.857292][T21209] block2mtd: error: cannot open device /dev/ram0 [ 963.876880][T21209] ubi: mtd1 is already attached to ubi0 [ 963.929422][T21210] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3297'. [ 963.943960][ T34] usb 11-1: new high-speed USB device number 82 using dummy_hcd [ 964.094417][ T34] usb 11-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 964.095256][ T34] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.095281][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.099082][ T34] keyspan 11-1:1.0: Keyspan 2 port adapter converter detected [ 964.099178][ T34] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 81 [ 964.099206][ T34] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 1 [ 964.099803][ T34] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 84 [ 964.099835][ T34] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 2 [ 964.100651][ T34] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 964.101261][ T34] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 88 [ 964.101293][ T34] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6 [ 964.102375][ T34] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 965.901444][T21235] profile_transition: unconfined exec no attachment [ 966.089502][T21239] profile_transition: unconfined exec no attachment [ 966.441707][T21241] profile_transition: unconfined exec no attachment [ 966.677929][T21242] profile_transition: unconfined exec no attachment [ 966.752766][ T7789] usb 11-1: USB disconnect, device number 82 [ 966.781047][ T7789] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 966.840396][ T7789] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 966.860336][ T7789] keyspan 11-1:1.0: device disconnected [ 967.144535][T21243] profile_transition: unconfined exec no attachment [ 967.405964][T21244] profile_transition: unconfined exec no attachment [ 967.486661][T21245] profile_transition: unconfined exec no attachment [ 967.551148][T21249] fuse: Unknown parameter '0x0000000000000003' [ 967.568893][T21251] profile_transition: unconfined exec no attachment [ 967.774879][T21258] profile_transition: unconfined exec no attachment [ 968.127940][T21259] profile_transition: unconfined exec no attachment [ 968.519670][T21265] block2mtd: error: cannot open device /dev/ram0 [ 968.530708][T21266] block2mtd: error: cannot open device /dev/ram0 [ 968.546306][T21265] ubi: mtd1 is already attached to ubi0 [ 968.557916][T21266] ubi: mtd1 is already attached to ubi0 [ 968.778302][T21272] block2mtd: error: cannot open device /dev/ram0 [ 968.814980][T21272] ubi: mtd1 is already attached to ubi0 [ 968.851716][T21274] fuse: Bad value for 'fd' [ 968.867477][T21275] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3309'. [ 969.014095][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 970.340337][T21294] ubi: mtd1 is already attached to ubi0 [ 971.266586][T21301] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3315'. [ 971.401092][T21302] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3315'. [ 971.448151][T21304] fuse: Unknown parameter '0x0000000000000003' [ 972.537636][T21318] fuse: Bad value for 'fd' [ 972.682312][T21321] profile_transition: 8 callbacks suppressed [ 972.682353][T21321] profile_transition: unconfined exec no attachment [ 972.994557][T21322] profile_transition: unconfined exec no attachment [ 973.170414][T21326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3321'. [ 973.235289][T21327] block2mtd: error: cannot open device /dev/ram0 [ 973.279860][T21327] ubi: mtd1 is already attached to ubi0 [ 973.579405][T21341] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3326'. [ 973.644563][T21342] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3326'. [ 974.751420][T21354] fuse: Unknown parameter '0x0000000000000003' [ 975.666768][T21358] ubi: mtd1 is already attached to ubi0 [ 975.983774][T21367] fuse: Bad value for 'fd' [ 976.422201][T21371] profile_transition: unconfined exec no attachment [ 976.981668][T21373] profile_transition: unconfined exec no attachment [ 977.084435][T21376] profile_transition: unconfined exec no attachment [ 977.135104][T21380] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3335'. [ 977.832924][T21393] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3337'. [ 978.087147][T21396] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3339'. [ 978.596957][T21404] fuse: Unknown parameter '0x0000000000000003' [ 979.265527][ T5799] Bluetooth: hci2: command 0x0406 tx timeout [ 979.387622][T21409] fuse: Bad value for 'fd' [ 979.433709][T21413] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3344'. [ 979.493021][T21414] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3344'. [ 979.584021][ T5875] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 979.737175][ T5875] usb 10-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 979.738880][ T5875] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 979.738904][ T5875] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.745961][ T5875] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 979.746050][ T5875] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 979.746077][ T5875] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 979.746585][ T5875] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 979.746616][ T5875] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 979.748803][ T5875] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 979.750171][ T5875] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 979.750206][ T5875] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 979.754100][ T5875] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 980.143611][T21424] IPv6: addrconf: prefix option has invalid lifetime [ 980.324490][T21426] profile_transition: unconfined exec no attachment [ 980.378315][T21428] profile_transition: unconfined exec no attachment [ 980.417434][T21429] profile_transition: unconfined exec no attachment [ 980.458826][T21430] profile_transition: unconfined exec no attachment [ 980.815696][T21431] profile_transition: unconfined exec no attachment [ 980.833699][T21432] profile_transition: unconfined exec no attachment [ 980.959522][T21434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3347'. [ 980.974914][T21437] profile_transition: unconfined exec no attachment [ 980.995726][T21438] profile_transition: unconfined exec no attachment [ 981.283455][T21445] profile_transition: unconfined exec no attachment [ 981.310129][T21446] profile_transition: unconfined exec no attachment [ 981.399531][T21448] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3349'. [ 981.439793][T21448] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3349'. [ 981.498878][T21452] fuse: Unknown parameter '0x0000000000000003' [ 982.432466][ T5873] usb 10-1: USB disconnect, device number 84 [ 982.454417][ T5873] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 982.483485][ T5873] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 982.513266][ T5873] keyspan 10-1:1.0: device disconnected [ 983.316731][ T2323] usb 12-1: new high-speed USB device number 94 using dummy_hcd [ 983.746734][ T2323] usb 12-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 983.777789][ T2323] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 983.777819][ T2323] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.159621][ T2323] keyspan 12-1:1.0: Keyspan 2 port adapter converter detected [ 984.218717][ T2323] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 81 [ 984.218764][ T2323] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 1 [ 984.219515][ T2323] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 84 [ 984.219549][ T2323] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 2 [ 984.236269][ T2323] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 984.237763][ T2323] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 88 [ 984.237825][ T2323] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 6 [ 984.262623][ T2323] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 984.992721][T21490] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3358'. [ 985.046985][T21491] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3358'. [ 985.460135][T21486] IPv6: addrconf: prefix option has invalid lifetime [ 985.491923][ T42] audit: type=1804 audit(1792978519.715:1960): pid=21495 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=measuring_policy cause=store_entry comm="syz.5.3359" name="ima_policy_written" res=0 errno=-17 [ 985.491951][T21495] ima: rule for LSM 'u' is undefined [ 985.492002][ T42] audit: type=1807 audit(1792978519.715:1961): action=measure func=FILE_CHECK obj_type=u res=0 [ 985.492067][ T42] audit: type=1802 audit(1792978519.715:1962): pid=21495 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=update_policy cause=invalid-policy comm="syz.5.3359" res=0 errno=-22 [ 985.494539][T21495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3359'. [ 985.502552][T21497] block2mtd: error: cannot open device /dev/ram0 [ 985.517855][T21495] ima: policy update failed [ 985.517934][ T42] audit: type=1802 audit(1792978519.755:1963): pid=21495 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=policy_update cause=failed comm="syz.5.3359" res=0 errno=-22 [ 985.555332][T21497] ubi: mtd1 is already attached to ubi0 [ 985.608080][T21500] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3360'. [ 985.681053][T21503] fuse: Unknown parameter '0x0000000000000003' [ 985.816301][ T65] usb 11-1: new high-speed USB device number 83 using dummy_hcd [ 985.974447][ T65] usb 11-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 985.975245][ T65] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 985.975268][ T65] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.980873][ T65] keyspan 11-1:1.0: Keyspan 2 port adapter converter detected [ 985.980968][ T65] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 81 [ 985.981002][ T65] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 1 [ 985.986485][ T65] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 84 [ 985.986520][ T65] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 2 [ 985.993848][ T65] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 985.999785][ T65] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 88 [ 985.999821][ T65] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6 [ 986.007313][ T65] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 986.379624][T21507] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3364'. [ 986.445994][T21508] IPv6: addrconf: prefix option has invalid lifetime [ 986.837060][ T5873] usb 12-1: USB disconnect, device number 94 [ 986.838737][ T5873] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 986.843090][ T5873] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 986.843347][ T5873] keyspan 12-1:1.0: device disconnected [ 987.072094][T21516] profile_transition: 2 callbacks suppressed [ 987.072132][T21516] profile_transition: unconfined exec no attachment [ 987.263533][T21517] profile_transition: unconfined exec no attachment [ 988.129939][T21521] warn_alloc: 1 callbacks suppressed [ 988.129955][T21521] syz.7.3366: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 988.129989][T21521] CPU: 2 UID: 0 PID: 21521 Comm: syz.7.3366 Not tainted syzkaller #0 PREEMPT(full) [ 988.130002][T21521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 988.130009][T21521] Call Trace: [ 988.130013][T21521] [ 988.130019][T21521] dump_stack_lvl+0x100/0x190 [ 988.130038][T21521] warn_alloc.cold+0x9e/0xb2 [ 988.130052][T21521] ? __pfx_warn_alloc+0x10/0x10 [ 988.130069][T21521] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 988.130083][T21521] ? __pfx_get_page_from_freelist+0x10/0x10 [ 988.130100][T21521] __alloc_frozen_pages_noprof+0x17ab/0x3190 [ 988.130119][T21521] ? kernel_text_address+0x90/0x100 [ 988.130142][T21521] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 988.130159][T21521] ? stack_trace_save+0x8e/0xc0 [ 988.130180][T21521] ? do_raw_write_lock+0x11e/0x260 [ 988.130196][T21521] ? kasan_save_track+0x14/0x30 [ 988.130211][T21521] ? __kasan_kmalloc+0xaa/0xb0 [ 988.130225][T21521] ? __kmalloc_noprof+0x32f/0x840 [ 988.130238][T21521] ? comedi_isadma_alloc+0xc6/0x620 [ 988.130250][T21521] ? pcl816_attach+0x909/0xb30 [ 988.130272][T21521] alloc_pages_node_noprof+0x93/0x200 [ 988.130286][T21521] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 988.130303][T21521] alloc_pages_exact_nid_noprof+0x32/0xe0 [ 988.130317][T21521] __dma_direct_alloc_pages.isra.0+0x34e/0x510 [ 988.130334][T21521] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 988.130368][T21521] dma_direct_alloc+0x3d1/0x8a0 [ 988.130386][T21521] dma_alloc_attrs+0x1b9/0x3e0 [ 988.130401][T21521] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 988.130415][T21521] ? __kmalloc_noprof+0x350/0x840 [ 988.130429][T21521] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 988.130445][T21521] ? dma_direct_supported+0xca/0x220 [ 988.130464][T21521] comedi_isadma_alloc+0x331/0x620 [ 988.130477][T21521] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 988.130490][T21521] ? request_threaded_irq+0x27b/0x3e0 [ 988.130510][T21521] pcl816_attach+0x909/0xb30 [ 988.130527][T21521] comedi_device_attach+0x40e/0x6b0 [ 988.130546][T21521] do_devconfig_ioctl+0x1b3/0x6d0 [ 988.130563][T21521] ? comedi_unlocked_ioctl+0x180/0x3310 [ 988.130577][T21521] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 988.130602][T21521] ? tomoyo_path_number_perm+0x46d/0x580 [ 988.130619][T21521] ? kasan_save_stack+0x3f/0x50 [ 988.130633][T21521] ? kasan_save_stack+0x30/0x50 [ 988.130646][T21521] ? kasan_save_track+0x14/0x30 [ 988.130674][T21521] ? kasan_save_free_info+0x3b/0x70 [ 988.130688][T21521] comedi_unlocked_ioctl+0x860/0x3310 [ 988.130706][T21521] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 988.130730][T21521] ? kasan_quarantine_put+0x104/0x240 [ 988.130744][T21521] ? lockdep_hardirqs_on+0x7d/0x110 [ 988.130762][T21521] ? find_held_lock+0x2b/0x80 [ 988.130776][T21521] ? tomoyo_path_number_perm+0x28f/0x580 [ 988.130791][T21521] ? tomoyo_path_number_perm+0x28f/0x580 [ 988.130809][T21521] ? tomoyo_path_number_perm+0x188/0x580 [ 988.130829][T21521] comedi_compat_ioctl+0x438/0xe20 [ 988.130843][T21521] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 988.130856][T21521] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 988.130870][T21521] ? do_vfs_ioctl+0x226/0x13e0 [ 988.130884][T21521] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 988.130900][T21521] ? __fget_files+0x34/0x3d0 [ 988.130917][T21521] ? find_held_lock+0x2b/0x80 [ 988.130930][T21521] ? __fget_files+0x215/0x3d0 [ 988.130945][T21521] ? hook_file_ioctl_common+0x140/0x440 [ 988.130966][T21521] ? __fget_files+0x21f/0x3d0 [ 988.130984][T21521] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 988.130997][T21521] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 988.131013][T21521] __do_fast_syscall_32+0x14b/0x8c0 [ 988.131024][T21521] ? lockdep_hardirqs_on+0x7d/0x110 [ 988.131043][T21521] do_fast_syscall_32+0x32/0x70 [ 988.131055][T21521] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 988.131070][T21521] RIP: 0023:0xf744efbc [ 988.131080][T21521] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 988.131090][T21521] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 988.131101][T21521] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 988.131108][T21521] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 988.131115][T21521] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 988.131121][T21521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 988.131128][T21521] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 988.131146][T21521] [ 988.131222][T21521] Mem-Info: [ 988.131228][T21521] active_anon:8907 inactive_anon:298 isolated_anon:0 [ 988.131228][T21521] active_file:4206 inactive_file:18092 isolated_file:0 [ 988.131228][T21521] unevictable:1000 dirty:314 writeback:0 [ 988.131228][T21521] slab_reclaimable:7197 slab_unreclaimable:67600 [ 988.131228][T21521] mapped:31773 shmem:6735 pagetables:1618 [ 988.131228][T21521] sec_pagetables:319 bounce:0 [ 988.131228][T21521] kernel_misc_reclaimable:0 [ 988.131228][T21521] free:32828 free_pcp:91 free_cma:0 [ 988.131291][T21521] Node 0 active_anon:4kB inactive_anon:20kB active_file:464kB inactive_file:2404kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7232kB pagetables:1116kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 988.131320][T21521] Node 0 DMA free:2736kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:364kB local_pcp:96kB free_cma:0kB [ 988.131441][T21521] lowmem_reserve[]: 0 256 256 256 256 [ 988.131462][T21521] Node 0 DMA: 130*4kB (U) 57*8kB (U) 0*16kB 37*32kB (U) 5*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2736kB [ 988.131641][T21521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 988.131686][T21521] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 988.131696][T21521] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 988.131704][T21521] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 988.131748][T21521] 29404 total pagecache pages [ 988.131754][T21521] 375 pages in swap cache [ 988.131758][T21521] Free swap = 105808kB [ 988.131762][T21521] Total swap = 124996kB [ 988.131766][T21521] 524155 pages RAM [ 988.131770][T21521] 0 pages HighMem/MovableOnly [ 988.131774][T21521] 217486 pages reserved [ 988.131818][T21521] 0 pages cma reserved [ 988.276436][T21528] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3369'. [ 988.328137][T21529] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3369'. [ 988.415241][ T5875] usb 13-1: new high-speed USB device number 72 using dummy_hcd [ 988.574941][ T5875] usb 13-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 988.612076][T13935] usb 11-1: USB disconnect, device number 83 [ 988.613709][T13935] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 988.615816][T13935] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 988.626066][T13935] keyspan 11-1:1.0: device disconnected [ 988.829756][T21540] block2mtd: error: cannot open device /dev/ram0 [ 988.864516][ T5875] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 988.864544][ T5875] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.879516][T21540] ubi: mtd1 is already attached to ubi0 [ 988.931363][T21541] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3372'. [ 988.966071][ T5875] keyspan 13-1:1.0: Keyspan 2 port adapter converter detected [ 988.966167][ T5875] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 81 [ 988.966195][ T5875] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 1 [ 988.966697][ T5875] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 84 [ 988.966729][ T5875] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 2 [ 988.967556][ T5875] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 988.968237][ T5875] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 88 [ 988.968269][ T5875] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 6 [ 988.968863][ T5875] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 989.584342][T21543] IPv6: addrconf: prefix option has invalid lifetime [ 989.734559][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3373'. [ 991.409584][T13935] usb 13-1: USB disconnect, device number 72 [ 991.416829][T13935] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 991.420998][T13935] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 991.421270][T13935] keyspan 13-1:1.0: device disconnected [ 992.535453][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.535489][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.112100][T21573] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3379'. [ 993.164006][T21576] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3379'. [ 993.254594][T21578] block2mtd: error: cannot open device /dev/ram0 [ 993.280810][T21578] ubi: mtd1 is already attached to ubi0 [ 993.337241][T21585] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3381'. [ 993.907187][T21598] profile_transition: unconfined exec no attachment [ 994.289409][T21601] profile_transition: unconfined exec no attachment [ 994.382271][T21604] profile_transition: unconfined exec no attachment [ 994.409851][T21605] profile_transition: unconfined exec no attachment [ 994.727975][T21611] profile_transition: unconfined exec no attachment [ 994.733075][T21610] block2mtd: error: cannot open device /dev/ram0 [ 994.911161][T21612] profile_transition: unconfined exec no attachment [ 995.053719][T21610] ubi: mtd1 is already attached to ubi0 [ 995.338357][T21617] profile_transition: unconfined exec no attachment [ 995.381165][T21619] profile_transition: unconfined exec no attachment [ 995.574044][ T10] usb 11-1: new high-speed USB device number 84 using dummy_hcd [ 995.600052][T21626] profile_transition: unconfined exec no attachment [ 995.724006][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 995.791923][ T10] usb 11-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 995.849273][ T10] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 995.849292][ T10] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 995.849311][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.893339][T21628] profile_transition: unconfined exec no attachment [ 995.967806][ T10] usb 11-1: config 0 descriptor?? [ 996.114372][T21631] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3392'. [ 996.502748][ T10] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 996.713169][ T10] usb 11-1: USB disconnect, device number 84 [ 997.163989][ T2323] usb 12-1: new high-speed USB device number 95 using dummy_hcd [ 997.273077][T21635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3394'. [ 997.289187][T21638] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3395'. [ 997.314725][ T2323] usb 12-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 997.315754][ T2323] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.315791][ T2323] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.319333][ T2323] keyspan 12-1:1.0: Keyspan 2 port adapter converter detected [ 997.319453][ T2323] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 81 [ 997.319481][ T2323] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 1 [ 997.320301][ T2323] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 84 [ 997.320334][ T2323] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 2 [ 997.321192][ T2323] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 997.322044][ T2323] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 88 [ 997.322077][ T2323] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 6 [ 997.322836][ T2323] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 997.341911][T21639] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3395'. [ 997.396974][T21642] block2mtd: error: cannot open device /dev/ram0 [ 997.426448][T21642] ubi: mtd1 is already attached to ubi0 [ 997.480913][T21645] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3396'. [ 998.350177][T21651] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 998.358491][T21651] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3398'. [ 998.452452][T21655] block2mtd: error: cannot open device /dev/ram0 [ 998.479756][T21655] ubi: mtd1 is already attached to ubi0 [ 999.430807][T21668] profile_transition: 2 callbacks suppressed [ 999.430820][T21668] profile_transition: unconfined exec no attachment [ 999.472135][T21670] profile_transition: unconfined exec no attachment [ 999.587059][T21674] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3404'. [ 999.983086][T13935] usb 12-1: USB disconnect, device number 95 [ 999.994002][T13935] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1000.004363][T13935] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1000.006457][T13935] keyspan 12-1:1.0: device disconnected [ 1000.330584][T21683] profile_transition: unconfined exec no attachment [ 1000.350623][T21684] profile_transition: unconfined exec no attachment [ 1000.494983][ T42] audit: type=1804 audit(1792978534.725:1964): pid=21686 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=measuring_policy cause=store_entry comm="syz.7.3406" name="ima_policy_written" res=0 errno=-17 [ 1000.495064][T21686] ima: rule for LSM 'u' is undefined [ 1000.495123][ T42] audit: type=1807 audit(1792978534.725:1965): action=measure func=FILE_CHECK obj_type=u res=0 [ 1000.495246][ T42] audit: type=1802 audit(1792978534.725:1966): pid=21686 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=update_policy cause=invalid-policy comm="syz.7.3406" res=0 errno=-22 [ 1000.500486][T21688] block2mtd: error: cannot open device /dev/ram0 [ 1000.514091][ T65] usb 11-1: new high-speed USB device number 85 using dummy_hcd [ 1000.519931][T21688] ubi: mtd1 is already attached to ubi0 [ 1000.533708][T21686] ima: policy update failed [ 1000.533826][ T42] audit: type=1802 audit(1792978534.755:1967): pid=21686 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=policy_update cause=failed comm="syz.7.3406" res=0 errno=-22 [ 1000.573584][T21689] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3407'. [ 1000.665047][ T65] usb 11-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1000.666062][ T65] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.666099][ T65] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.677178][ T65] keyspan 11-1:1.0: Keyspan 2 port adapter converter detected [ 1000.677312][ T65] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 81 [ 1000.677354][ T65] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 1 [ 1000.679720][ T65] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 84 [ 1000.679754][ T65] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 2 [ 1000.683305][ T65] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1000.686812][ T65] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 88 [ 1000.686846][ T65] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6 [ 1000.688887][ T65] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1000.821365][T21695] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1000.874399][T21695] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3409'. [ 1000.913337][T21698] block2mtd: error: cannot open device /dev/ram0 [ 1000.936230][T21698] ubi: mtd1 is already attached to ubi0 [ 1001.792296][T21705] fuse: Unknown parameter '0x0000000000000003' [ 1002.214048][ T2323] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 1002.438059][ T2323] usb 10-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1002.563051][ T2323] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.563082][ T2323] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.837249][ T2323] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 1002.837492][ T2323] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 1002.837960][ T2323] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 1002.841698][ T2323] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 1002.841762][ T2323] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 1002.843507][ T2323] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 1002.844925][ T2323] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 1002.844988][ T2323] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 1002.847683][ T2323] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 1003.071744][T21718] fuse: Unknown parameter '0x0000000000000003' [ 1003.577813][ T5873] usb 11-1: USB disconnect, device number 85 [ 1003.585209][ T5873] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1003.588775][ T5873] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1003.589220][ T5873] keyspan 11-1:1.0: device disconnected [ 1003.650340][T21722] profile_transition: unconfined exec no attachment [ 1003.669289][T21723] profile_transition: unconfined exec no attachment [ 1003.761933][T21727] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3417'. [ 1004.014922][T21733] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1004.042221][T21733] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3419'. [ 1004.050413][T21731] warn_alloc: 1 callbacks suppressed [ 1004.050424][T21731] syz.8.3418: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1004.051274][T21731] CPU: 0 UID: 0 PID: 21731 Comm: syz.8.3418 Not tainted syzkaller #0 PREEMPT(full) [ 1004.051288][T21731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1004.051295][T21731] Call Trace: [ 1004.051300][T21731] [ 1004.051305][T21731] dump_stack_lvl+0x100/0x190 [ 1004.051338][T21731] warn_alloc.cold+0x9e/0xb2 [ 1004.051367][T21731] ? __pfx_warn_alloc+0x10/0x10 [ 1004.051385][T21731] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1004.051398][T21731] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1004.051415][T21731] __alloc_frozen_pages_noprof+0x17ab/0x3190 [ 1004.051434][T21731] ? kernel_text_address+0x90/0x100 [ 1004.051453][T21731] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1004.051470][T21731] ? stack_trace_save+0x8e/0xc0 [ 1004.051497][T21731] ? do_raw_write_lock+0x11e/0x260 [ 1004.051512][T21731] ? kasan_save_track+0x14/0x30 [ 1004.051527][T21731] ? __kasan_kmalloc+0xaa/0xb0 [ 1004.051540][T21731] ? __kmalloc_noprof+0x32f/0x840 [ 1004.051553][T21731] ? comedi_isadma_alloc+0xc6/0x620 [ 1004.051564][T21731] ? pcl816_attach+0x909/0xb30 [ 1004.051587][T21731] alloc_pages_node_noprof+0x93/0x200 [ 1004.051600][T21731] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 1004.051618][T21731] alloc_pages_exact_nid_noprof+0x32/0xe0 [ 1004.051632][T21731] __dma_direct_alloc_pages.isra.0+0x34e/0x510 [ 1004.051648][T21731] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 1004.051669][T21731] dma_direct_alloc+0x3d1/0x8a0 [ 1004.051686][T21731] dma_alloc_attrs+0x1b9/0x3e0 [ 1004.051702][T21731] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 1004.051716][T21731] ? __kmalloc_noprof+0x350/0x840 [ 1004.051730][T21731] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1004.051746][T21731] ? dma_direct_supported+0xca/0x220 [ 1004.051765][T21731] comedi_isadma_alloc+0x331/0x620 [ 1004.051778][T21731] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 1004.051791][T21731] ? request_threaded_irq+0x27b/0x3e0 [ 1004.051831][T21731] pcl816_attach+0x909/0xb30 [ 1004.051849][T21731] comedi_device_attach+0x40e/0x6b0 [ 1004.051868][T21731] do_devconfig_ioctl+0x1b3/0x6d0 [ 1004.051885][T21731] ? comedi_unlocked_ioctl+0x180/0x3310 [ 1004.051899][T21731] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1004.051924][T21731] ? tomoyo_path_number_perm+0x46d/0x580 [ 1004.051941][T21731] ? kasan_save_stack+0x3f/0x50 [ 1004.051955][T21731] ? kasan_save_stack+0x30/0x50 [ 1004.051968][T21731] ? kasan_save_track+0x14/0x30 [ 1004.051982][T21731] ? kasan_save_free_info+0x3b/0x70 [ 1004.052009][T21731] comedi_unlocked_ioctl+0x860/0x3310 [ 1004.052027][T21731] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1004.052052][T21731] ? kasan_quarantine_put+0x104/0x240 [ 1004.052066][T21731] ? lockdep_hardirqs_on+0x7d/0x110 [ 1004.052084][T21731] ? find_held_lock+0x2b/0x80 [ 1004.052098][T21731] ? tomoyo_path_number_perm+0x28f/0x580 [ 1004.052114][T21731] ? tomoyo_path_number_perm+0x28f/0x580 [ 1004.052132][T21731] ? tomoyo_path_number_perm+0x188/0x580 [ 1004.052151][T21731] comedi_compat_ioctl+0x438/0xe20 [ 1004.052165][T21731] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 1004.052178][T21731] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1004.052192][T21731] ? do_vfs_ioctl+0x226/0x13e0 [ 1004.052205][T21731] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1004.052222][T21731] ? __fget_files+0x34/0x3d0 [ 1004.052237][T21731] ? find_held_lock+0x2b/0x80 [ 1004.052251][T21731] ? __fget_files+0x215/0x3d0 [ 1004.052266][T21731] ? hook_file_ioctl_common+0x140/0x440 [ 1004.052285][T21731] ? __fget_files+0x21f/0x3d0 [ 1004.052304][T21731] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 1004.052317][T21731] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1004.052333][T21731] __do_fast_syscall_32+0x14b/0x8c0 [ 1004.052344][T21731] ? lockdep_hardirqs_on+0x7d/0x110 [ 1004.052363][T21731] do_fast_syscall_32+0x32/0x70 [ 1004.052375][T21731] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1004.052389][T21731] RIP: 0023:0xf7ff7fbc [ 1004.052400][T21731] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1004.052411][T21731] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1004.052422][T21731] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 1004.052429][T21731] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 1004.052436][T21731] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1004.052442][T21731] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1004.052449][T21731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1004.052464][T21731] [ 1004.052569][T21731] Mem-Info: [ 1004.052576][T21731] active_anon:6048 inactive_anon:299 isolated_anon:1 [ 1004.052576][T21731] active_file:4207 inactive_file:18097 isolated_file:0 [ 1004.052576][T21731] unevictable:1000 dirty:272 writeback:0 [ 1004.052576][T21731] slab_reclaimable:7206 slab_unreclaimable:67096 [ 1004.052576][T21731] mapped:27060 shmem:3894 pagetables:1606 [ 1004.052576][T21731] sec_pagetables:319 bounce:0 [ 1004.052576][T21731] kernel_misc_reclaimable:0 [ 1004.052576][T21731] free:39775 free_pcp:107 free_cma:0 [ 1004.052603][T21731] Node 0 active_anon:0kB inactive_anon:24kB active_file:468kB inactive_file:2400kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7232kB pagetables:1116kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1004.052707][T21731] Node 0 DMA free:2672kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:428kB local_pcp:128kB free_cma:0kB [ 1004.052766][T21731] lowmem_reserve[]: 0 256 256 256 256 [ 1004.052787][T21731] Node 0 DMA: 130*4kB (U) 57*8kB (U) 0*16kB 35*32kB (U) 5*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2672kB [ 1004.053333][T21731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1004.053343][T21731] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1004.053351][T21731] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1004.053359][T21731] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1004.053367][T21731] 26569 total pagecache pages [ 1004.053371][T21731] 375 pages in swap cache [ 1004.053375][T21731] Free swap = 105808kB [ 1004.053379][T21731] Total swap = 124996kB [ 1004.053383][T21731] 524155 pages RAM [ 1004.053387][T21731] 0 pages HighMem/MovableOnly [ 1004.053391][T21731] 217486 pages reserved [ 1004.053395][T21731] 0 pages cma reserved [ 1004.446197][T21739] block2mtd: error: cannot open device /dev/ram0 [ 1004.446766][T21740] block2mtd: error: cannot open device /dev/ram0 [ 1004.481818][T21739] ubi: mtd1 is already attached to ubi0 [ 1004.493777][T21740] ubi: mtd1 is already attached to ubi0 [ 1004.539627][T21744] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3420'. [ 1004.787537][ T5873] usb 10-1: USB disconnect, device number 85 [ 1004.816352][ T5873] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 1004.843688][ T5873] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 1004.903497][ T5873] keyspan 10-1:1.0: device disconnected [ 1005.581402][T21757] fuse: Unknown parameter '0x0000000000000003' [ 1005.594021][ T65] usb 11-1: new high-speed USB device number 86 using dummy_hcd [ 1005.698382][T21761] profile_transition: unconfined exec no attachment [ 1005.716440][T21762] profile_transition: unconfined exec no attachment [ 1005.754232][ T5873] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 1005.759262][ T65] usb 11-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1005.776548][ T65] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.776805][ T65] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.813665][ T65] keyspan 11-1:1.0: Keyspan 2 port adapter converter detected [ 1005.819690][ T65] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 81 [ 1005.820011][ T65] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 1 [ 1005.829790][ T65] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 84 [ 1005.830042][ T65] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 2 [ 1005.860881][ T65] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1005.903378][ T65] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 88 [ 1005.903759][ T65] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6 [ 1005.922454][ T65] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1005.945228][ T5873] usb 10-1: Using ep0 maxpacket: 8 [ 1005.953168][ T5873] usb 10-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1005.970263][ T5873] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1005.970290][ T5873] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1005.970482][ T5873] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.012996][ T5873] usb 10-1: config 0 descriptor?? [ 1006.306865][ T5873] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1006.482813][ T65] usb 10-1: USB disconnect, device number 86 [ 1006.973393][T21769] fuse: Unknown parameter '0x0000000000000003' [ 1007.574088][T21772] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1007.593404][T21772] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3431'. [ 1007.856976][T21779] profile_transition: unconfined exec no attachment [ 1007.884076][T13935] usb 13-1: new high-speed USB device number 73 using dummy_hcd [ 1007.917965][T21781] block2mtd: error: cannot open device /dev/ram0 [ 1007.924440][T21782] profile_transition: unconfined exec no attachment [ 1007.948932][T21781] ubi: mtd1 is already attached to ubi0 [ 1007.989753][T21784] profile_transition: unconfined exec no attachment [ 1008.005112][T21785] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3433'. [ 1008.016905][T21786] profile_transition: unconfined exec no attachment [ 1008.042750][T21787] profile_transition: unconfined exec no attachment [ 1008.044586][T13935] usb 13-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1008.045511][T13935] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.045940][T13935] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.063254][T13935] keyspan 13-1:1.0: Keyspan 2 port adapter converter detected [ 1008.063347][T13935] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 81 [ 1008.063375][T13935] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 1 [ 1008.067413][T13935] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 84 [ 1008.067449][T13935] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 2 [ 1008.070687][T13935] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 1008.073197][T13935] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 88 [ 1008.073255][T13935] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 6 [ 1008.076910][T13935] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 1008.092700][T21788] profile_transition: unconfined exec no attachment [ 1008.440728][T13935] usb 11-1: USB disconnect, device number 86 [ 1008.452232][T13935] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1008.468275][T13935] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1008.471013][T13935] keyspan 11-1:1.0: device disconnected [ 1008.652416][T21791] profile_transition: unconfined exec no attachment [ 1008.772249][T21793] profile_transition: unconfined exec no attachment [ 1008.793848][T21795] block2mtd: error: cannot open device /dev/ram0 [ 1008.827533][T21795] ubi: mtd1 is already attached to ubi0 [ 1008.881752][T21802] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3442'. [ 1008.908180][T21804] block2mtd: error: cannot open device /dev/ram0 [ 1008.934540][T21804] ubi: mtd1 is already attached to ubi0 [ 1010.303948][ T5875] usb 12-1: new high-speed USB device number 96 using dummy_hcd [ 1010.475534][ T5875] usb 12-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1010.476337][ T5875] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.476350][ T5875] usb 12-1: config 0 has no interfaces? [ 1010.476365][ T5875] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.477872][ T5875] usb 12-1: config 0 descriptor?? [ 1010.784753][ T5873] usb 13-1: USB disconnect, device number 73 [ 1010.799560][ T5873] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 1010.821523][ T5873] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 1010.824412][ T5873] keyspan 13-1:1.0: device disconnected [ 1010.835853][T21826] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1010.903270][T21826] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3440'. [ 1011.744063][ T2323] usb 10-1: new high-speed USB device number 87 using dummy_hcd [ 1011.894666][ T2323] usb 10-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1011.895456][ T2323] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.895479][ T2323] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.898294][ T2323] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 1011.898395][ T2323] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 1011.898422][ T2323] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 1011.898922][ T2323] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 1011.898954][ T2323] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 1011.900379][ T2323] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1011.902002][ T2323] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 1011.902059][ T2323] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 1011.903145][ T2323] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1012.083040][T21841] block2mtd: error: cannot open device /dev/ram0 [ 1012.121294][T21841] ubi: mtd1 is already attached to ubi0 [ 1012.173697][T21842] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3445'. [ 1012.313980][T21844] IPv6: addrconf: prefix option has invalid lifetime [ 1012.783534][T21846] block2mtd: error: cannot open device /dev/ram0 [ 1012.814740][T21846] ubi: mtd1 is already attached to ubi0 [ 1012.942890][T21849] block2mtd: error: cannot open device /dev/ram0 [ 1012.974803][T21849] ubi: mtd1 is already attached to ubi0 [ 1013.095373][ T5873] usb 12-1: USB disconnect, device number 96 [ 1013.774800][ T5938] usb 12-1: new high-speed USB device number 97 using dummy_hcd [ 1013.942867][ T5938] usb 12-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1013.956885][ T5938] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.956911][ T5938] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.018451][ T5938] keyspan 12-1:1.0: Keyspan 2 port adapter converter detected [ 1014.022913][ T5938] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 81 [ 1014.030609][ T5938] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 1 [ 1014.037291][ T5938] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 84 [ 1014.037398][ T5938] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 2 [ 1014.043831][ T5938] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 1014.069147][ T5938] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 88 [ 1014.069211][ T5938] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 6 [ 1014.083363][ T5938] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 1014.866877][ T5873] usb 10-1: USB disconnect, device number 87 [ 1014.886877][ T5873] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1014.908547][ T5873] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1014.934822][ T5873] keyspan 10-1:1.0: device disconnected [ 1015.300555][T21876] profile_transition: 7 callbacks suppressed [ 1015.300574][T21876] profile_transition: unconfined exec no attachment [ 1015.329000][T21877] profile_transition: unconfined exec no attachment [ 1016.327725][T21890] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3456'. [ 1016.585427][ T5873] usb 12-1: USB disconnect, device number 97 [ 1016.619138][ T5873] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 1016.626437][T21897] block2mtd: error: cannot open device /dev/ram0 [ 1016.631353][ T5873] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 1016.637598][ T5873] keyspan 12-1:1.0: device disconnected [ 1016.654831][T21897] ubi: mtd1 is already attached to ubi0 [ 1016.726917][T21902] profile_transition: unconfined exec no attachment [ 1016.748727][T21903] profile_transition: unconfined exec no attachment [ 1016.834025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1017.213997][T19511] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 1017.310546][T21909] block2mtd: error: cannot open device /dev/ram0 [ 1017.348551][T21909] ubi: mtd1 is already attached to ubi0 [ 1017.364441][T19511] usb 10-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1017.365244][T19511] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.365267][T19511] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.367956][T19511] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 1017.368046][T19511] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 1017.368074][T19511] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 1017.368585][T19511] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 1017.368616][T19511] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 1017.371710][T19511] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1017.372533][T19511] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 1017.372566][T19511] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 1017.374046][T19511] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1017.404237][T21912] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3461'. [ 1017.411715][T21913] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3462'. [ 1017.480436][T21915] fuse: Bad value for 'fd' [ 1017.526216][T21917] fuse: Unknown parameter '0x0000000000000003' [ 1017.759142][T21923] profile_transition: unconfined exec no attachment [ 1017.886117][T21925] IPv6: addrconf: prefix option has invalid lifetime [ 1018.393540][T21927] profile_transition: unconfined exec no attachment [ 1018.803952][ T5873] usb 13-1: new high-speed USB device number 74 using dummy_hcd [ 1018.967826][ T5873] usb 13-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1018.969786][ T5873] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.969827][ T5873] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.001892][ T5873] keyspan 13-1:1.0: Keyspan 2 port adapter converter detected [ 1019.002057][ T5873] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 81 [ 1019.002104][ T5873] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 1 [ 1019.006289][ T5873] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 84 [ 1019.006325][ T5873] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 2 [ 1019.009064][ T5873] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 1019.012606][ T5873] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 88 [ 1019.012669][ T5873] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 6 [ 1019.021534][ T5873] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 1020.065633][ T10] usb 10-1: USB disconnect, device number 88 [ 1020.109218][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1020.112664][T21953] profile_transition: unconfined exec no attachment [ 1020.279381][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1020.279654][ T10] keyspan 10-1:1.0: device disconnected [ 1020.287883][T21957] profile_transition: unconfined exec no attachment [ 1020.430231][T21963] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3470'. [ 1020.818432][T21968] block2mtd: error: cannot open device /dev/ram0 [ 1020.830631][T21966] block2mtd: error: cannot open device /dev/ram0 [ 1020.844303][T21966] ubi: mtd1 is already attached to ubi0 [ 1021.229687][T21968] ubi: mtd1 is already attached to ubi0 [ 1021.609854][ T5873] usb 13-1: USB disconnect, device number 74 [ 1021.622293][ T5873] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 1021.635636][ T5873] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 1021.638643][ T5873] keyspan 13-1:1.0: device disconnected [ 1022.488761][ T5873] usb 12-1: new high-speed USB device number 98 using dummy_hcd [ 1022.566230][T21988] profile_transition: unconfined exec no attachment [ 1022.583238][T21991] profile_transition: unconfined exec no attachment [ 1022.635729][T21992] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3477'. [ 1022.684669][ T5873] usb 12-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1022.685547][ T5873] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.685591][ T5873] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.690764][ T5873] keyspan 12-1:1.0: Keyspan 2 port adapter converter detected [ 1022.690862][ T5873] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 81 [ 1022.690891][ T5873] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 1 [ 1022.691404][ T5873] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 84 [ 1022.691435][ T5873] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 2 [ 1022.695086][ T5873] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1022.696155][ T5873] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 88 [ 1022.696187][ T5873] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 6 [ 1022.699166][ T5873] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1023.146422][T22001] IPv6: addrconf: prefix option has invalid lifetime [ 1023.176894][T22002] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3480'. [ 1023.519940][T22012] profile_transition: unconfined exec no attachment [ 1023.537100][T22013] profile_transition: unconfined exec no attachment [ 1023.714005][ T2323] usb 13-1: new high-speed USB device number 75 using dummy_hcd [ 1023.864423][ T2323] usb 13-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1023.865225][ T2323] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.865248][ T2323] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.870293][ T2323] keyspan 13-1:1.0: Keyspan 2 port adapter converter detected [ 1023.870392][ T2323] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 81 [ 1023.870420][ T2323] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 1 [ 1023.870935][ T2323] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 84 [ 1023.870967][ T2323] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 2 [ 1023.874733][ T2323] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 1023.875910][ T2323] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 88 [ 1023.875969][ T2323] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 6 [ 1023.880516][ T2323] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 1024.295121][T22017] block2mtd: error: cannot open device /dev/ram0 [ 1024.322243][T22017] ubi: mtd1 is already attached to ubi0 [ 1024.570359][T22020] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3484'. [ 1024.621367][T22022] fuse: Unknown parameter '0x0000000000000003' [ 1024.996309][ T5873] usb 12-1: USB disconnect, device number 98 [ 1025.056490][ T5873] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1025.112904][ T5873] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1025.146819][ T5873] keyspan 12-1:1.0: device disconnected [ 1025.243596][T22028] profile_transition: unconfined exec no attachment [ 1025.253523][T22026] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1025.263000][T22026] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3486'. [ 1025.271406][T22029] profile_transition: unconfined exec no attachment [ 1026.674197][T13935] usb 13-1: USB disconnect, device number 75 [ 1026.675122][T22045] profile_transition: unconfined exec no attachment [ 1026.688950][T13935] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 1026.691121][T13935] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 1026.691414][T13935] keyspan 13-1:1.0: device disconnected [ 1026.817974][T22050] block2mtd: error: cannot open device /dev/ram0 [ 1026.980708][T22057] profile_transition: unconfined exec no attachment [ 1027.182044][T22061] profile_transition: unconfined exec no attachment [ 1027.829994][T22050] ubi: mtd1 is already attached to ubi0 [ 1027.883531][T22067] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3491'. [ 1028.021738][T22070] block2mtd: error: cannot open device /dev/ram0 [ 1028.056206][T22070] ubi: mtd1 is already attached to ubi0 [ 1028.064049][ T5875] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 1028.145361][T22073] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1028.152511][T22073] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3496'. [ 1028.196311][T22075] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3497'. [ 1028.246715][ T5875] usb 10-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1028.249323][ T5875] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.249470][ T5875] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.253622][ T5875] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 1028.253791][ T5875] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 1028.253820][ T5875] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 1028.260726][ T5875] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 1028.260760][ T5875] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 1028.277406][ T5875] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1028.278613][ T5875] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 1028.278647][ T5875] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 1028.282256][ T5875] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1028.522640][T22078] profile_transition: unconfined exec no attachment [ 1028.554772][T22081] profile_transition: unconfined exec no attachment [ 1028.716571][T22085] IPv6: addrconf: prefix option has invalid lifetime [ 1028.750377][T22084] profile_transition: unconfined exec no attachment [ 1028.932230][T22088] profile_transition: unconfined exec no attachment [ 1028.981250][T22093] profile_transition: unconfined exec no attachment [ 1029.006077][T22094] profile_transition: unconfined exec no attachment [ 1029.037945][T22096] profile_transition: unconfined exec no attachment [ 1029.456413][T22101] profile_transition: unconfined exec no attachment [ 1029.495795][T22103] profile_transition: unconfined exec no attachment [ 1029.527917][T22104] profile_transition: unconfined exec no attachment [ 1029.876632][T22115] block2mtd: error: cannot open device /dev/ram0 [ 1029.922866][T22115] ubi: mtd1 is already attached to ubi0 [ 1030.214010][ T5875] usb 13-1: new high-speed USB device number 76 using dummy_hcd [ 1030.364698][ T5875] usb 13-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1030.365787][ T5875] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.365832][ T5875] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.374408][ T5875] keyspan 13-1:1.0: Keyspan 2 port adapter converter detected [ 1030.374573][ T5875] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 81 [ 1030.374627][ T5875] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 1 [ 1030.376878][ T5875] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 84 [ 1030.376942][ T5875] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 2 [ 1030.379622][ T5875] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 1030.382364][ T5875] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 88 [ 1030.382426][ T5875] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 6 [ 1030.383848][ T5875] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 1030.821782][T22124] IPv6: addrconf: prefix option has invalid lifetime [ 1030.868500][ T5638] usb 10-1: USB disconnect, device number 89 [ 1030.875255][ T5638] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1030.877428][T22127] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3513'. [ 1030.880718][ T5638] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1030.883131][ T5638] keyspan 10-1:1.0: device disconnected [ 1030.959520][T22130] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1030.968755][T22130] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3506'. [ 1031.032250][T22134] block2mtd: error: cannot open device /dev/ram0 [ 1031.100190][T22136] ubi: mtd1 is already attached to ubi0 [ 1033.538184][T22161] profile_transition: 12 callbacks suppressed [ 1033.538198][T22161] profile_transition: unconfined exec no attachment [ 1033.586391][T22163] profile_transition: unconfined exec no attachment [ 1033.609794][T22164] profile_transition: unconfined exec no attachment [ 1033.633463][T22165] profile_transition: unconfined exec no attachment [ 1033.675177][T22167] profile_transition: unconfined exec no attachment [ 1033.717793][T22169] profile_transition: unconfined exec no attachment [ 1033.732185][T22172] profile_transition: unconfined exec no attachment [ 1033.744941][T22173] profile_transition: unconfined exec no attachment [ 1033.877989][T22175] profile_transition: unconfined exec no attachment [ 1034.113154][T13935] usb 13-1: USB disconnect, device number 76 [ 1034.127932][T13935] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 1034.129607][T13935] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 1034.129881][T13935] keyspan 13-1:1.0: device disconnected [ 1034.130087][T22180] block2mtd: error: cannot open device /dev/ram0 [ 1034.192150][T22180] ubi: mtd1 is already attached to ubi0 [ 1034.194347][T22182] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1034.202330][T22182] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3517'. [ 1034.240669][T22184] block2mtd: error: cannot open device /dev/ram0 [ 1034.269525][T22184] ubi: mtd1 is already attached to ubi0 [ 1034.284176][ T5875] usb 12-1: new high-speed USB device number 99 using dummy_hcd [ 1034.461054][ T5875] usb 12-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1034.466368][ T5875] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.467015][ T5875] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.570907][ T5875] keyspan 12-1:1.0: Keyspan 2 port adapter converter detected [ 1034.580795][ T5875] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 81 [ 1034.584219][ T5875] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 1 [ 1034.597837][ T5875] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 84 [ 1034.598141][ T5875] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 2 [ 1034.639803][ T5875] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1034.640505][ T5875] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 88 [ 1034.640538][ T5875] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 6 [ 1034.643388][ T5875] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1035.004860][T22194] fuse: Bad value for 'fd' [ 1035.055146][T22195] IPv6: addrconf: prefix option has invalid lifetime [ 1035.321369][T22196] profile_transition: unconfined exec no attachment [ 1037.019205][T13935] usb 12-1: USB disconnect, device number 99 [ 1037.034490][T13935] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1037.111770][T13935] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1037.134396][T13935] keyspan 12-1:1.0: device disconnected [ 1037.426346][T22218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3523'. [ 1038.273102][T22233] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1038.341340][T22233] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3526'. [ 1038.458474][T22248] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3527'. [ 1038.598312][T22253] fuse: Unknown parameter '0x0000000000000003' [ 1038.619055][T22254] profile_transition: 11 callbacks suppressed [ 1038.619201][T22254] profile_transition: unconfined exec no attachment [ 1038.797809][T22256] profile_transition: unconfined exec no attachment [ 1039.312116][T22259] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3531'. [ 1039.869751][T22267] ubi: mtd1 is already attached to ubi0 [ 1039.919113][T22271] fuse: Unknown parameter '0x0000000000000003' [ 1040.640338][T22276] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1040.653060][T22276] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3537'. [ 1041.889136][T22295] fuse: Bad value for 'fd' [ 1042.835455][T22302] profile_transition: unconfined exec no attachment [ 1042.891522][T22304] profile_transition: unconfined exec no attachment [ 1043.107912][T22308] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3542'. [ 1043.433977][ T6336] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 1043.616291][ T6336] usb 10-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1043.629564][ T6336] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.629590][ T6336] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.632148][ T6336] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 1043.632239][ T6336] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 1043.632266][ T6336] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 1043.632959][ T6336] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 1043.632991][ T6336] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 1043.661568][ T6336] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1043.665728][ T6336] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 1043.665763][ T6336] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 1043.669850][ T6336] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1043.693624][T22314] fuse: Unknown parameter '0x0000000000000003' [ 1043.980051][T22323] profile_transition: unconfined exec no attachment [ 1043.999734][T22324] profile_transition: unconfined exec no attachment [ 1044.077665][T22325] IPv6: addrconf: prefix option has invalid lifetime [ 1044.907901][T22330] fuse: Unknown parameter '0x0000000000000003' [ 1044.915684][T22332] fuse: Bad value for 'fd' [ 1045.057424][T22338] profile_transition: unconfined exec no attachment [ 1045.468299][T22339] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1045.509768][T22341] profile_transition: unconfined exec no attachment [ 1045.568665][T22339] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3547'. [ 1046.609935][ T5638] usb 10-1: USB disconnect, device number 90 [ 1046.629927][ T5638] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1046.802367][ T5638] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1046.817517][ T5638] keyspan 10-1:1.0: device disconnected [ 1047.324157][T22363] block2mtd: error: cannot open device /dev/ram0 [ 1047.411459][T22363] ubi: mtd1 is already attached to ubi0 [ 1047.463968][ T7789] usb 13-1: new high-speed USB device number 77 using dummy_hcd [ 1047.524219][T22366] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3554'. [ 1047.721672][ T7789] usb 13-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1047.727636][ T7789] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.727771][ T7789] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.246291][T22371] fuse: Unknown parameter '0x0000000000000003' [ 1048.355122][ T7789] keyspan 13-1:1.0: Keyspan 2 port adapter converter detected [ 1048.355227][ T7789] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 81 [ 1048.355254][ T7789] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 1 [ 1048.355794][ T7789] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 84 [ 1048.355826][ T7789] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 2 [ 1048.356539][ T7789] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1048.357173][ T7789] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 88 [ 1048.357205][ T7789] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 6 [ 1048.357867][ T7789] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1048.764178][T22378] IPv6: addrconf: prefix option has invalid lifetime [ 1049.104759][T22380] fuse: Bad value for 'fd' [ 1049.449127][T22383] fuse: Unknown parameter '0x0000000000000003' [ 1049.707102][T22387] profile_transition: unconfined exec no attachment [ 1049.932441][T22388] profile_transition: unconfined exec no attachment [ 1050.251200][ T7789] usb 13-1: USB disconnect, device number 77 [ 1050.308029][ T7789] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1050.322096][ T7789] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1050.323644][ T7789] keyspan 13-1:1.0: device disconnected [ 1050.544178][ T5638] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 1050.705810][ T5638] usb 10-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1050.708922][ T5638] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.708947][ T5638] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.822645][ T5638] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 1050.852247][ T5638] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 1050.852324][ T5638] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 1050.866088][ T5638] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 1050.866356][ T5638] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 1050.909062][ T5638] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1050.977739][ T5638] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 1050.979012][ T5638] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 1051.109788][ T5638] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1052.174206][T22411] IPv6: addrconf: prefix option has invalid lifetime [ 1052.243606][T22414] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1052.256067][T22414] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3567'. [ 1052.608875][T22418] fuse: Bad value for 'fd' [ 1052.827131][T22425] profile_transition: unconfined exec no attachment [ 1052.849007][T22426] profile_transition: unconfined exec no attachment [ 1053.470826][ T5873] usb 10-1: USB disconnect, device number 91 [ 1053.475586][ T5873] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1053.480807][ T5873] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1053.481683][ T5873] keyspan 10-1:1.0: device disconnected [ 1053.969647][T22432] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3570'. [ 1053.979702][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.979730][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.013782][T22436] fuse: Unknown parameter '0x0000000000000003' [ 1054.022059][T22437] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3570'. [ 1054.290192][T22441] ubi: mtd1 is already attached to ubi0 [ 1054.313942][ T5873] usb 10-1: new high-speed USB device number 92 using dummy_hcd [ 1054.428108][T22443] fuse: Bad value for 'fd' [ 1054.504655][ T5873] usb 10-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1054.505461][ T5873] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.505485][ T5873] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.510839][ T5873] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 1054.510929][ T5873] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 1054.510956][ T5873] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 1054.511481][ T5873] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 1054.511513][ T5873] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 1054.514212][ T5873] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1054.515520][ T5873] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 1054.515580][ T5873] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 1054.518823][ T5873] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1054.692287][T22447] profile_transition: unconfined exec no attachment [ 1054.708216][T22448] profile_transition: unconfined exec no attachment [ 1054.918675][T22451] IPv6: addrconf: prefix option has invalid lifetime [ 1055.186863][T22453] block2mtd: error: cannot open device /dev/ram0 [ 1055.246778][T22453] ubi: mtd1 is already attached to ubi0 [ 1055.300502][T22454] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3575'. [ 1055.378112][T22456] fuse: Unknown parameter '0x0000000000000003' [ 1056.146273][T22468] block2mtd: error: cannot open device /dev/ram0 [ 1056.163007][T22468] ubi: mtd1 is already attached to ubi0 [ 1056.218468][T22469] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3577'. [ 1057.017274][ T5873] usb 10-1: USB disconnect, device number 92 [ 1057.106033][ T5873] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1057.536378][ T5873] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1057.538486][ T5873] keyspan 10-1:1.0: device disconnected [ 1057.583281][T22482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3580'. [ 1057.689613][T22482] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3580'. [ 1057.705021][T22487] block2mtd: error: cannot open device /dev/ram0 [ 1057.739191][T22487] ubi: mtd1 is already attached to ubi0 [ 1057.808315][T22490] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3585'. [ 1057.867689][T22493] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3585'. [ 1057.892490][T22495] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3586'. [ 1058.031983][T22501] block2mtd: error: cannot open device /dev/ram0 [ 1058.058313][T22501] ubi: mtd1 is already attached to ubi0 [ 1058.091190][T22503] fuse: Unknown parameter '0x0000000000000003' [ 1058.110363][T22505] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3589'. [ 1058.907331][T22510] block2mtd: error: cannot open device /dev/ram0 [ 1059.109010][T22517] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3599'. [ 1059.153988][ T2323] usb 13-1: new high-speed USB device number 78 using dummy_hcd [ 1059.846326][ T2323] usb 13-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1059.847659][ T2323] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.847682][ T2323] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.852681][ T2323] keyspan 13-1:1.0: Keyspan 2 port adapter converter detected [ 1059.852776][ T2323] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 81 [ 1059.852804][ T2323] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 1 [ 1059.853305][ T2323] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 84 [ 1059.853336][ T2323] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 2 [ 1059.895738][ T2323] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1059.897809][ T2323] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 88 [ 1059.897844][ T2323] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 6 [ 1059.907410][ T2323] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1060.263671][T22529] IPv6: addrconf: prefix option has invalid lifetime [ 1061.255881][T22531] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3596'. [ 1061.276162][T22535] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3595'. [ 1061.364917][T22535] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3595'. [ 1061.544302][ T65] usb 11-1: new high-speed USB device number 87 using dummy_hcd [ 1061.716951][ T65] usb 11-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1061.719200][ T65] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.719517][ T65] usb 11-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1061.719580][ T65] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.891993][ T5873] usb 13-1: USB disconnect, device number 78 [ 1061.944150][ T5873] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1062.104764][T22550] profile_transition: unconfined exec no attachment [ 1062.126824][ T5873] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1062.362094][ T5873] keyspan 13-1:1.0: device disconnected [ 1062.968020][T22555] profile_transition: unconfined exec no attachment [ 1064.340727][T22397] usb 11-1: USB disconnect, device number 87 [ 1064.516395][T22560] block2mtd: error: cannot open device /dev/ram0 [ 1064.579534][T22564] profile_transition: unconfined exec no attachment [ 1064.647767][T16809] ================================================================== [ 1064.647789][T16809] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 1064.647815][T16809] Read of size 1 at addr ffff88805c86d809 by task kworker/u33:7/16809 [ 1064.647825][T16809] [ 1064.647832][T16809] CPU: 1 UID: 0 PID: 16809 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 1064.647844][T16809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1064.647852][T16809] Workqueue: events_unbound commit_work [ 1064.647869][T16809] Call Trace: [ 1064.647873][T16809] [ 1064.647878][T16809] dump_stack_lvl+0x100/0x190 [ 1064.647895][T16809] print_report+0x13d/0x4b0 [ 1064.647912][T16809] ? __virt_addr_valid+0x239/0x430 [ 1064.647942][T16809] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 1064.647958][T16809] kasan_report+0xdf/0x1c0 [ 1064.647974][T16809] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 1064.647992][T16809] drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 1064.648009][T16809] ? preempt_schedule+0x57/0xd0 [ 1064.648027][T16809] ? preempt_schedule_thunk+0x16/0x40 [ 1064.648040][T16809] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 1064.648057][T16809] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1064.648073][T16809] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 1064.648091][T16809] drm_atomic_helper_commit_tail+0xff/0x130 [ 1064.648108][T16809] commit_tail.isra.0+0x33e/0x420 [ 1064.648126][T16809] process_one_work+0xac7/0x1b10 [ 1064.648143][T16809] ? __pfx_process_one_work+0x10/0x10 [ 1064.648159][T16809] ? lock_acquire+0x1d1/0x380 [ 1064.648177][T16809] ? __pfx_commit_work+0x10/0x10 [ 1064.648194][T16809] worker_thread+0x5ef/0xe50 [ 1064.648210][T16809] ? kthread+0x13a/0x450 [ 1064.648223][T16809] ? __pfx_worker_thread+0x10/0x10 [ 1064.648237][T16809] kthread+0x373/0x450 [ 1064.648249][T16809] ? __pfx_kthread+0x10/0x10 [ 1064.648267][T16809] ret_from_fork+0x730/0xd60 [ 1064.648278][T16809] ? __pfx_ret_from_fork+0x10/0x10 [ 1064.648289][T16809] ? native_load_gs_index+0x1e/0xc0 [ 1064.648303][T16809] ? __switch_to+0x800/0x10e0 [ 1064.648317][T16809] ? __pfx_kthread+0x10/0x10 [ 1064.648330][T16809] ret_from_fork_asm+0x1a/0x30 [ 1064.648344][T16809] [ 1064.648348][T16809] [ 1064.648351][T16809] Allocated by task 22560: [ 1064.648356][T16809] kasan_save_stack+0x30/0x50 [ 1064.648370][T16809] kasan_save_track+0x14/0x30 [ 1064.648383][T16809] __kasan_kmalloc+0xaa/0xb0 [ 1064.648396][T16809] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1064.648406][T16809] drm_atomic_helper_crtc_duplicate_state+0x72/0xd0 [ 1064.648424][T16809] drm_atomic_get_crtc_state+0x1de/0x690 [ 1064.648436][T16809] page_flip_common+0x59/0x320 [ 1064.648448][T16809] drm_atomic_helper_page_flip+0xb6/0x180 [ 1064.648464][T16809] drm_mode_page_flip_ioctl+0x1095/0x14a0 [ 1064.648479][T16809] drm_ioctl_kernel+0x1f3/0x3e0 [ 1064.648492][T16809] drm_ioctl+0x5e6/0xc60 [ 1064.648504][T16809] drm_compat_ioctl+0x386/0x4c0 [ 1064.648519][T16809] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1064.648532][T16809] __do_fast_syscall_32+0x14b/0x8c0 [ 1064.648542][T16809] do_fast_syscall_32+0x32/0x70 [ 1064.648552][T16809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1064.648565][T16809] [ 1064.648567][T16809] Freed by task 22560: [ 1064.648572][T16809] kasan_save_stack+0x30/0x50 [ 1064.648585][T16809] kasan_save_track+0x14/0x30 [ 1064.648598][T16809] kasan_save_free_info+0x3b/0x70 [ 1064.648608][T16809] __kasan_slab_free+0x5f/0x80 [ 1064.648622][T16809] kfree+0x22b/0x6d0 [ 1064.648631][T16809] drm_atomic_commit_default_clear+0x4aa/0x1140 [ 1064.648644][T16809] __drm_atomic_commit_free+0x185/0x2f0 [ 1064.648656][T16809] drm_client_modeset_commit_atomic+0x5f3/0x7e0 [ 1064.648672][T16809] drm_client_modeset_commit_locked+0x14d/0x580 [ 1064.648688][T16809] drm_client_modeset_commit+0x4f/0x80 [ 1064.648703][T16809] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 1064.648717][T16809] drm_fb_helper_restore_fbdev_mode_unlocked+0xc2/0x100 [ 1064.648730][T16809] drm_fbdev_client_restore+0x76/0xa0 [ 1064.648740][T16809] drm_client_dev_restore+0x205/0x2a0 [ 1064.648754][T16809] drm_release+0x2c6/0x360 [ 1064.648767][T16809] __fput+0x3fb/0xb50 [ 1064.648782][T16809] fput_close_sync+0x118/0x250 [ 1064.648791][T16809] filp_close_sync+0x75/0xa0 [ 1064.648801][T16809] __ia32_sys_close+0x81/0x110 [ 1064.648811][T16809] __do_fast_syscall_32+0x14b/0x8c0 [ 1064.648821][T16809] do_fast_syscall_32+0x32/0x70 [ 1064.648831][T16809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1064.648844][T16809] [ 1064.648846][T16809] The buggy address belongs to the object at ffff88805c86d800 [ 1064.648846][T16809] which belongs to the cache kmalloc-512 of size 512 [ 1064.648855][T16809] The buggy address is located 9 bytes inside of [ 1064.648855][T16809] freed 512-byte region [ffff88805c86d800, ffff88805c86da00) [ 1064.648865][T16809] [ 1064.648867][T16809] The buggy address belongs to the physical page: [ 1064.648872][T16809] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805c86c400 pfn:0x5c86c [ 1064.648883][T16809] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1064.648891][T16809] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 1064.648901][T16809] page_type: f5(slab) [ 1064.648910][T16809] raw: 04fff00000000240 ffff88801d442c80 ffffea00016d7910 ffffea00016d7810 [ 1064.648919][T16809] raw: ffff88805c86c400 000000000010000a 00000000f5000000 0000000000000000 [ 1064.648929][T16809] head: 04fff00000000240 ffff88801d442c80 ffffea00016d7910 ffffea00016d7810 [ 1064.648938][T16809] head: ffff88805c86c400 000000000010000a 00000000f5000000 0000000000000000 [ 1064.648947][T16809] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 1064.648956][T16809] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1064.648961][T16809] page dumped because: kasan: bad access detected [ 1064.648966][T16809] page_owner tracks the page as allocated [ 1064.648970][T16809] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7635, tgid 7635 (syz-executor), ts 134279898319 [ 1064.648987][T16809] post_alloc_hook+0xfd/0x120 [ 1064.648997][T16809] get_page_from_freelist+0x1113/0x35e0 [ 1064.649008][T16809] __alloc_frozen_pages_noprof+0x2f6/0x3190 [ 1064.649019][T16809] new_slab+0xb1/0x6d0 [ 1064.649028][T16809] refill_objects+0xe3/0x410 [ 1064.649038][T16809] __pcs_replace_empty_main+0x35e/0x650 [ 1064.649049][T16809] __kmalloc_cache_noprof+0x4ef/0x6d0 [ 1064.649058][T16809] __ipv6_dev_mc_inc+0x2f1/0xc80 [ 1064.649072][T16809] ipv6_add_dev+0xbfb/0x15c0 [ 1064.649085][T16809] addrconf_notify+0x5db/0x1ba0 [ 1064.649095][T16809] notifier_call_chain+0x99/0x3f0 [ 1064.649107][T16809] call_netdevice_notifiers_info+0xbe/0x110 [ 1064.649124][T16809] register_netdevice+0x16f5/0x26b0 [ 1064.649137][T16809] register_vlan_dev+0x36c/0x910 [ 1064.649154][T16809] vlan_newlink+0x48c/0x750 [ 1064.649165][T16809] rtnl_newlink+0x1697/0x2620 [ 1064.649178][T16809] page last free pid 6216 tgid 6216 ts 104219898104 stack trace: [ 1064.649186][T16809] free_unref_folios+0xa6a/0x17e0 [ 1064.649196][T16809] shrink_folio_list+0x45d1/0x59c0 [ 1064.649210][T16809] evict_folios+0x35c/0x1770 [ 1064.649223][T16809] try_to_shrink_lruvec+0x32e/0x7b0 [ 1064.649236][T16809] shrink_one+0x342/0x870 [ 1064.649249][T16809] shrink_node+0x2a5e/0x42e0 [ 1064.649266][T16809] do_try_to_free_pages+0x2da/0x1500 [ 1064.649282][T16809] try_to_free_pages+0x2a0/0x740 [ 1064.649297][T16809] __alloc_frozen_pages_noprof+0xcc4/0x3190 [ 1064.649308][T16809] alloc_pages_bulk_noprof+0x624/0x14a0 [ 1064.649320][T16809] __kasan_populate_vmalloc+0xf0/0x210 [ 1064.649332][T16809] alloc_vmap_area+0x963/0x2bc0 [ 1064.649345][T16809] __get_vm_area_node+0x1ed/0x350 [ 1064.649359][T16809] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 1064.649374][T16809] __vmalloc_node_noprof+0xad/0xf0 [ 1064.649389][T16809] xt_compat_init_offsets+0xe2/0x1f0 [ 1064.649407][T16809] [ 1064.649409][T16809] Memory state around the buggy address: [ 1064.649414][T16809] ffff88805c86d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1064.649422][T16809] ffff88805c86d780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1064.649429][T16809] >ffff88805c86d800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1064.649435][T16809] ^ [ 1064.649440][T16809] ffff88805c86d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1064.649447][T16809] ffff88805c86d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1064.649453][T16809] ================================================================== [ 1064.657274][T16809] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1064.912399][T16809] CPU: 1 UID: 0 PID: 16809 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 1064.915342][T16809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1064.918442][T16809] Workqueue: events_unbound commit_work [ 1064.920174][T16809] Call Trace: [ 1064.921229][T16809] [ 1064.922165][T16809] dump_stack_lvl+0x100/0x190 [ 1064.923612][T16809] vpanic+0x553/0x970 [ 1064.924826][T16809] ? __pfx_vpanic+0x10/0x10 [ 1064.926266][T16809] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 1064.928501][T16809] panic+0xd1/0xe0 [ 1064.929679][T16809] ? __pfx_panic+0x10/0x10 [ 1064.931077][T16809] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 1064.933317][T16809] ? preempt_schedule+0x57/0xd0 [ 1064.934846][T16809] check_panic_on_warn.cold+0x19/0x34 [ 1064.936535][T16809] end_report.part.0+0x3a/0x90 [ 1064.938037][T16809] kasan_report.cold+0xe/0x18 [ 1064.939532][T16809] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 1064.941763][T16809] drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 1064.943933][T16809] ? preempt_schedule+0x57/0xd0 [ 1064.945479][T16809] ? preempt_schedule_thunk+0x16/0x40 [ 1064.947162][T16809] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 1064.949508][T16809] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1064.951337][T16809] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 1064.953338][T16809] drm_atomic_helper_commit_tail+0xff/0x130 [ 1064.955176][T16809] commit_tail.isra.0+0x33e/0x420 [ 1064.956756][T16809] process_one_work+0xac7/0x1b10 [ 1064.958310][T16809] ? __pfx_process_one_work+0x10/0x10 [ 1064.959985][T16809] ? lock_acquire+0x1d1/0x380 [ 1064.961467][T16809] ? __pfx_commit_work+0x10/0x10 [ 1064.963009][T16809] worker_thread+0x5ef/0xe50 [ 1064.964471][T16809] ? kthread+0x13a/0x450 [ 1064.965813][T16809] ? __pfx_worker_thread+0x10/0x10 [ 1064.967410][T16809] kthread+0x373/0x450 [ 1064.968700][T16809] ? __pfx_kthread+0x10/0x10 [ 1064.970148][T16809] ret_from_fork+0x730/0xd60 [ 1064.971612][T16809] ? __pfx_ret_from_fork+0x10/0x10 [ 1064.973202][T16809] ? native_load_gs_index+0x1e/0xc0 [ 1064.974829][T16809] ? __switch_to+0x800/0x10e0 [ 1064.976344][T16809] ? __pfx_kthread+0x10/0x10 [ 1064.977797][T16809] ret_from_fork_asm+0x1a/0x30 [ 1064.979301][T16809] [ 1064.980979][T16809] Kernel Offset: disabled [ 1064.982336][T16809] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:36:39 Registers: info registers vcpu 0 CPU#0 RAX=00000000023b4d01 RBX=ffffffff8fc91580 RCX=ffffffff8be53325 RDX=0000000000000001 RSI=ffffffff8e619345 RDI=ffffffff8c832c80 RBP=fffffbfff1f922b0 RSP=ffffffff8fc07cf0 R8 =0000000000000001 R9 =ffffed10055c6825 R10=ffff88802ae3412b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1f80fa2 R15=dffffc0000000000 RIP=ffffffff8be517bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880952ae000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002e8f5ff8 CR3=0000000064ade000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85baf0a5 RDI=ffffffff9cf0a4e0 RBP=ffffffff9cf0a4a0 RSP=ffffc90002ee7220 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3638633530386552 R12=0000000000000000 R13=0000000000000038 R14=0000000000000007 R15=ffffc90002ee7538 RIP=ffffffff85baf0cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880953ae000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000a000 CR3=0000000064ade000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000008000008fd RBX=ffff88801d4f338c RCX=0000000000000830 RDX=0000000000000008 RSI=00000000000000fd RDI=0000000000000003 RBP=0000000000000000 RSP=ffffc9000e42f7d0 R8 =0000000000000000 R9 =fffffbfff24d2deb R10=ffffffff92696f5f R11=0000000000000000 R12=0000000000000004 R13=1ffff92001c85efd R14=0000000000000003 R15=ffffc9000e42f808 RIP=ffffffff81b96b3a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880954ae000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001000 CR3=00000000640c1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000016ee9bd RBX=ffff88801e702580 RCX=ffffffff8be53325 RDX=0000000000000001 RSI=ffffffff8e619345 RDI=ffffffff8c832c80 RBP=ffffed1003ce04b0 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed1005626825 R10=ffff88802b13412b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8be517bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880955ae000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000003351dff8 CR3=00000000152d8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=00000000000000c0 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9e030a9b 00007ffd9e030a9b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9e030fa0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9e030fa0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6961775f7265706c 65685f63696d6f74 615f6d7264206e69 20656572662d7265 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e6b636568632065 7361656c70202c6e 6f69746172756769 666e6f6320746e65 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 747369736e6f636e 69206e6120687469 77207466656c206e 6565622065766168 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2079616d20305f65 76616c735f727368 2065636166726574 6e49202e79646165 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 726c612064657474 696d6d6f63207365 676e61686320656d 6f73206874697720 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 727020426b303a73 65676170737a2042 6b303a676e69646e 6570657469727720 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000