last executing test programs: 11m16.590525753s ago: executing program 0 (id=1461): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES64], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000004000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x300088c2}, 0x90) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r0}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}, 0x0, 0x2d}) 11m15.762273691s ago: executing program 0 (id=1464): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f0000002480), 0x0) 11m15.698605364s ago: executing program 0 (id=1465): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x500, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in6=@mcast2, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 11m15.698359312s ago: executing program 0 (id=1466): socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setrlimit(0x7, &(0x7f0000004b00)={0x6, 0xffff}) fcntl$dupfd(r1, 0x0, r2) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0xd79b9f048f7f088a}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x1, 0x4, 0x100000000, 0x5, 0x0, 0xe}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x1, 0x1, 0x0, 0x6}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x7, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 11m14.706093334s ago: executing program 0 (id=1471): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) r4 = openat$dlm_control(0xffffff9c, &(0x7f0000000b40), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), r4) get_mempolicy(0x0, 0x0, 0x2, &(0x7f00005e7000/0x1000)=nil, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000002e00090027bd700097ff0000040000000a0016"], 0x2c}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x41) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) r8 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r8, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') writev(r10, &(0x7f0000000340)=[{&(0x7f0000000140)="a1", 0x1}, {0x0, 0x2}], 0x2) syz_ublk_setup_queues(r9, r7, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2, 0x0, r10}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r6, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r11 = syz_clone(0x280000, &(0x7f00000001c0)="b721876555334036fe8ab0473a0ce9d2de45f72f639935d0b11e73e4d7c649283284f3d252d889d4423f4d925c865c613eeb647751808707ddff55df0ae0408c1443ce1c9b618074ed94d08328bbe831414c448cb5e7facac246143914399ba6287da0e6c10930c7c82323a7a7b714b08f73cddf1b33192d4d2b2be69cab6b98e8f46d513491a7bf23a6aba977100307a0d351f6a7a9cce942", 0x99, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="deccf21fb1f42185483d1127c2bfe6698e7189534f558dae3855d77da0b68bd0e55f20d4d48c574138bc516db68bb8826985baca7702b4dde8e10f1567f1900ca6bb85826ea14222d0dd9fe209a6476ee3ac0fd3f5f50bb849495477fb6ae632a2747971f2459cca39") syz_open_procfs(r11, &(0x7f0000000580)='net/packet\x00') r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_clone(0x400, &(0x7f00000003c0)="82a83bf39df7d996531e14690c20ce8b6b25d7d77f8f8dc9d92b8d7ace1fb1ce00cfb617106e73a331670db2e7", 0x2d, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9b705b9dd0fcd360e6c21715be6ddebef9b4b808e3812b56f8bb1ec08f7cf74cd4f1ac0bb0e80016bf37cd5c09df8d05a178725d975655e46a658a4d1d776d4e50690c4507c862f245067ecccb3868eb81c358592663689adb90a1092b45efcb642ea58ea9ac4421fb0ac9774637c1af6ca88c5ff13d177cba8cd57305ec1d6b219f000c6f9d400566b7289ecb4ccc0a5ae86ef363e192683") ppoll(&(0x7f0000000080)=[{r0, 0x10}, {r12, 0x2b5}], 0x2, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000300)={[0x7, 0x5]}, 0x8) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 11m14.627839017s ago: executing program 0 (id=1472): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) r4 = openat$dlm_control(0xffffff9c, &(0x7f0000000b40), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), r4) get_mempolicy(0x0, 0x0, 0x2, &(0x7f00005e7000/0x1000)=nil, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000002e00090027bd700097ff0000040000000a0016"], 0x2c}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x41) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) r8 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r8, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') writev(r10, &(0x7f0000000340)=[{&(0x7f0000000140)="a1", 0x1}, {0x0, 0x2}], 0x2) syz_ublk_setup_queues(r9, r7, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2, 0x0, r10}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r6, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r11 = syz_clone(0x280000, &(0x7f00000001c0)="b721876555334036fe8ab0473a0ce9d2de45f72f639935d0b11e73e4d7c649283284f3d252d889d4423f4d925c865c613eeb647751808707ddff55df0ae0408c1443ce1c9b618074ed94d08328bbe831414c448cb5e7facac246143914399ba6287da0e6c10930c7c82323a7a7b714b08f73cddf1b33192d4d2b2be69cab6b98e8f46d513491a7bf23a6aba977100307a0d351f6a7a9cce942", 0x99, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="deccf21fb1f42185483d1127c2bfe6698e7189534f558dae3855d77da0b68bd0e55f20d4d48c574138bc516db68bb8826985baca7702b4dde8e10f1567f1900ca6bb85826ea14222d0dd9fe209a6476ee3ac0fd3f5f50bb849495477fb6ae632a2747971f2459cca39") syz_open_procfs(r11, &(0x7f0000000580)='net/packet\x00') r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_clone(0x400, &(0x7f00000003c0)="82a83bf39df7d996531e14690c20ce8b6b25d7d77f8f8dc9d92b8d7ace1fb1ce00cfb617106e73a331670db2e7", 0x2d, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9b705b9dd0fcd360e6c21715be6ddebef9b4b808e3812b56f8bb1ec08f7cf74cd4f1ac0bb0e80016bf37cd5c09df8d05a178725d975655e46a658a4d1d776d4e50690c4507c862f245067ecccb3868eb81c358592663689adb90a1092b45efcb642ea58ea9ac4421fb0ac9774637c1af6ca88c5ff13d177cba8cd57305ec1d6b219f000c6f9d400566b7289ecb4ccc0a5ae86ef363e192683") ppoll(&(0x7f0000000080)=[{r0, 0x10}, {r12, 0x2b5}], 0x2, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000300)={[0x7, 0x5]}, 0x8) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 11m14.586586418s ago: executing program 32 (id=1472): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) r4 = openat$dlm_control(0xffffff9c, &(0x7f0000000b40), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), r4) get_mempolicy(0x0, 0x0, 0x2, &(0x7f00005e7000/0x1000)=nil, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000002e00090027bd700097ff0000040000000a0016"], 0x2c}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x41) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) r8 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r8, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') writev(r10, &(0x7f0000000340)=[{&(0x7f0000000140)="a1", 0x1}, {0x0, 0x2}], 0x2) syz_ublk_setup_queues(r9, r7, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2, 0x0, r10}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r6, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r11 = syz_clone(0x280000, &(0x7f00000001c0)="b721876555334036fe8ab0473a0ce9d2de45f72f639935d0b11e73e4d7c649283284f3d252d889d4423f4d925c865c613eeb647751808707ddff55df0ae0408c1443ce1c9b618074ed94d08328bbe831414c448cb5e7facac246143914399ba6287da0e6c10930c7c82323a7a7b714b08f73cddf1b33192d4d2b2be69cab6b98e8f46d513491a7bf23a6aba977100307a0d351f6a7a9cce942", 0x99, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="deccf21fb1f42185483d1127c2bfe6698e7189534f558dae3855d77da0b68bd0e55f20d4d48c574138bc516db68bb8826985baca7702b4dde8e10f1567f1900ca6bb85826ea14222d0dd9fe209a6476ee3ac0fd3f5f50bb849495477fb6ae632a2747971f2459cca39") syz_open_procfs(r11, &(0x7f0000000580)='net/packet\x00') r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_clone(0x400, &(0x7f00000003c0)="82a83bf39df7d996531e14690c20ce8b6b25d7d77f8f8dc9d92b8d7ace1fb1ce00cfb617106e73a331670db2e7", 0x2d, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9b705b9dd0fcd360e6c21715be6ddebef9b4b808e3812b56f8bb1ec08f7cf74cd4f1ac0bb0e80016bf37cd5c09df8d05a178725d975655e46a658a4d1d776d4e50690c4507c862f245067ecccb3868eb81c358592663689adb90a1092b45efcb642ea58ea9ac4421fb0ac9774637c1af6ca88c5ff13d177cba8cd57305ec1d6b219f000c6f9d400566b7289ecb4ccc0a5ae86ef363e192683") ppoll(&(0x7f0000000080)=[{r0, 0x10}, {r12, 0x2b5}], 0x2, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000300)={[0x7, 0x5]}, 0x8) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 11m7.299344129s ago: executing program 1 (id=1526): r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @local}, 0x14) (async) openat(r3, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x118) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0xa) (async) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0xc00, &(0x7f0000000240)=ANY=[]) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000030301010000000000000000000000000c00020000000003000000ffdfb2a6cfb3da5d10b80eab0dbed6e2485c6601fad7a2fb48c72071ddb5fac5d18b8c7c3c9afc0f223683b54408bd7127b85a15b0328cb65773e2a8b0609c436d022a1a3d9ae71d0c76655c5cd2ad661c427d69ad8bef7b24"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) (async) keyctl$clear(0x7, r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xe, &(0x7f0000000140)=ANY=[@ANYRES64=r5], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000000)={0x80000002}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xe}, 0x10, 0x0, r3}, 0x94) 11m7.298962703s ago: executing program 1 (id=1527): io_setup(0x3ff, &(0x7f0000000500)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xd9, 0x5, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000003240)={0x50, 0x0, r2, {0x7, 0x2d, 0x7, 0x800000, 0x4, 0x4, 0x3b92, 0x3, 0x0, 0x0, 0x20, 0x925}}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff808500000004"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x40901, 0x0) write$cgroup_int(r5, &(0x7f0000000740)=0xfffffffffffffffc, 0x12) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1}, &(0x7f0000000240), &(0x7f0000000340)=r4}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x6, 0x0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1}, &(0x7f0000000700), &(0x7f0000000740)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x1b, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, @exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10001}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0x81}, @generic={0x5, 0x9, 0x9, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0xb, 0x1c7c, 0x6}, 0x10, r7, r3, 0x0, &(0x7f0000000800)=[0xffffffffffffffff], &(0x7f0000000840)}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) ustat(0x801, &(0x7f00000011c0)) io_getevents(r0, 0x4, 0x26, &(0x7f00000019c0), 0x0) io_destroy(r0) 11m6.846630782s ago: executing program 1 (id=1533): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5"], 0x7c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r1, @ANYRES32], 0x1c}}, 0x4) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRES64=r0, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) keyctl$join(0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xfaa0, 0xc000, 0x0, 0x20002f7}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() getpriority(0x0, r4) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x0, 0x10000010, 0x7ffd, 0x0, 0xc, 0x2, 0xfffffe0000000000, 0x4, 0x6}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r5) sendmsg$NFC_CMD_FW_DOWNLOAD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan,\xba'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004010}, 0x8000) 11m6.358484569s ago: executing program 1 (id=1534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="140002", @ANYRES16=r1, @ANYBLOB="000129bd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004812}, 0x10040801) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0xa, 0x44) sendmmsg$inet6(r2, &(0x7f0000000e00), 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0x6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82187202, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000240)) r6 = openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x280100, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/snmp\x00') preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000500)=""/189, 0xbd}], 0x1, 0x300100, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c000180080006", @ANYBLOB="080002800400338008000900", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000300)={0x0, "e246d0189323423330359497e19d637f4f444dca8708777ab57e7085e47fc7cec10be06d902fcb518f3dc4d55b56f6ce55f69e2400436359a225b6c13b125c04", 0x3e}, 0x48, 0xfffffffffffffff9) 11m6.166842523s ago: executing program 1 (id=1539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="140002", @ANYRES16=r1, @ANYBLOB="000129bd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004812}, 0x10040801) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0xa, 0x44) sendmmsg$inet6(r2, &(0x7f0000000e00), 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0x6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82187202, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000240)) r6 = openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x280100, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/snmp\x00') preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000500)=""/189, 0xbd}], 0x1, 0x300100, 0x0) (fail_nth: 2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c000180080006", @ANYBLOB="080002800400338008000900", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000300)={0x0, "e246d0189323423330359497e19d637f4f444dca8708777ab57e7085e47fc7cec10be06d902fcb518f3dc4d55b56f6ce55f69e2400436359a225b6c13b125c04", 0x3e}, 0x48, 0xfffffffffffffff9) 11m6.03939246s ago: executing program 1 (id=1540): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x29, 0xa, 0xb3, 0x6, 0x0, @loopback, @mcast2, 0x8000, 0x20, 0x8000, 0xa70000}}) (async) r5 = openat$ipvs(0xffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) (async) r6 = openat$full(0xffffff9c, &(0x7f0000000600), 0x400e00, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x7, 0x25a, 0x830a, 0x18000, r3, 0x6, '\x00', r4, 0xffffffffffffffff, 0x4, 0x5, 0x2, 0xd, @value=r5, @void, @value=r6}, 0x50) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r7 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x0, 0x8, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000340)=0xffffffffffffffff) connect$can_bcm(r5, &(0x7f0000000640)={0x1d, r4}, 0x10) ioctl$MEDIA_REQUEST_IOC_REINIT(r8, 0x7c81, 0x0) r9 = io_uring_setup(0x20f4, &(0x7f0000000200)={0x0, 0x6, 0x400, 0x3, 0x1e7}) syz_io_uring_setup(0x2cb5, &(0x7f0000000280)={0x0, 0xfeb7, 0x4, 0x0, 0x11a, 0x0, r9}, 0x0, &(0x7f0000000380), &(0x7f0000000000)) (async) io_setup(0x6, &(0x7f00000000c0)=0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x20001, 0x0) io_submit(r10, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r11, &(0x7f0000000100)}]) (async, rerun: 64) sendto$inet(r11, &(0x7f00000003c0)="b8859fa55edc2d7b0aeeb57bfba0444fbcd46ccd28b528e8e8682bb6a2fd0b0ccef7dd55390a86999fb2bd7ec7bbd13a1883eb8c81502bb69131796833f2bcd333451dbc617a1be0e53d8e5593374ed83e5baf48891ca6674c12fa3197", 0x5d, 0x5, 0x0, 0x0) (async, rerun: 64) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065fffffc7f000008ff"], 0x41) 10m50.819411318s ago: executing program 33 (id=1540): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x29, 0xa, 0xb3, 0x6, 0x0, @loopback, @mcast2, 0x8000, 0x20, 0x8000, 0xa70000}}) (async) r5 = openat$ipvs(0xffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) (async) r6 = openat$full(0xffffff9c, &(0x7f0000000600), 0x400e00, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x7, 0x25a, 0x830a, 0x18000, r3, 0x6, '\x00', r4, 0xffffffffffffffff, 0x4, 0x5, 0x2, 0xd, @value=r5, @void, @value=r6}, 0x50) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r7 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x0, 0x8, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000340)=0xffffffffffffffff) connect$can_bcm(r5, &(0x7f0000000640)={0x1d, r4}, 0x10) ioctl$MEDIA_REQUEST_IOC_REINIT(r8, 0x7c81, 0x0) r9 = io_uring_setup(0x20f4, &(0x7f0000000200)={0x0, 0x6, 0x400, 0x3, 0x1e7}) syz_io_uring_setup(0x2cb5, &(0x7f0000000280)={0x0, 0xfeb7, 0x4, 0x0, 0x11a, 0x0, r9}, 0x0, &(0x7f0000000380), &(0x7f0000000000)) (async) io_setup(0x6, &(0x7f00000000c0)=0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x20001, 0x0) io_submit(r10, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r11, &(0x7f0000000100)}]) (async, rerun: 64) sendto$inet(r11, &(0x7f00000003c0)="b8859fa55edc2d7b0aeeb57bfba0444fbcd46ccd28b528e8e8682bb6a2fd0b0ccef7dd55390a86999fb2bd7ec7bbd13a1883eb8c81502bb69131796833f2bcd333451dbc617a1be0e53d8e5593374ed83e5baf48891ca6674c12fa3197", 0x5d, 0x5, 0x0, 0x0) (async, rerun: 64) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065fffffc7f000008ff"], 0x41) 7m15.004848181s ago: executing program 3 (id=3180): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000304000000000000000000000003", @ANYRES32=r1, @ANYBLOB="56060800000000002400128009000100626f6e640000000014000280050022"], 0x44}}, 0x40) 7m14.794578452s ago: executing program 3 (id=3182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) mmap(&(0x7f00009b4000/0x2000)=nil, 0x2000, 0x2000005, 0x204031, 0xffffffffffffffff, 0x436a6000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r5, 0x0, 0x40044) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x8, @rand_addr=0x64010100, 0x4e24, 0x6, 'lc\x00', 0x8, 0x323b, 0x53}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) openat$dsp(0xffffff9c, &(0x7f0000000140), 0x40000, 0x0) 7m14.32488936s ago: executing program 3 (id=3186): io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x9, 0xffffffffffffffff, 0x22, {0x2}, 0x7}, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x146d, 0x6, 0x1b, 0xe5}, {0x401, 0x4, 0x5, 0x2}, {0x800, 0x73, 0x3, 0x7}, {0x8, 0x4, 0x0, 0x5}, {0x8000, 0x65, 0x6, 0xc}, {0x1, 0x90, 0x80, 0x1}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_ublk_setup_io_uring(0x1ba1, &(0x7f0000000140)={0x0, 0xc238, 0x8000, 0x1, 0x2bb}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_io_uring_setup(0x535d, &(0x7f0000000280)={0x0, 0x91c5, 0x400, 0x3, 0x1e9, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f00000003c0)={'wlan1\x00', @ifru_addrs=@phonet={0x23, 0x8, 0x1, 0x3}}) r3 = openat$kvm(0xffffff9c, &(0x7f0000000400), 0x420000, 0x0) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000440)={0x5, 0x0, [{0x2f9, 0x0, 0x6}, {0x913, 0x0, 0xf6b}, {0xbba, 0x0, 0x5}, {0x33b, 0x0, 0x5}, {0x8ac, 0x0, 0x1}]}) ioctl$XFS_IOC_ERROR_CLEARALL(r3, 0x40085875) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r4 = openat$dlm_monitor(0xffffff9c, &(0x7f00000004c0), 0x200200, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000500)='dctcp', 0x5) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r1, 0x8000000) munmap$IORING_OFF_CQ_RING(r5, 0x9) r6 = io_uring_setup(0x4ed6, &(0x7f0000000540)={0x0, 0xd0d1, 0x20, 0x2, 0x39f, 0x0, r4}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x13, r6, 0x10000000) r7 = openat$autofs(0xffffff9c, &(0x7f00000005c0), 0x80100, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000a80)={0x5, 0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/21, 0x15}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000000700)=""/219, 0xdb}, {&(0x7f0000000800)=""/223, 0xdf}, {&(0x7f0000000900)=""/216, 0xd8}], &(0x7f0000000a40)=[0x0, 0x2c80000000000000, 0x55c, 0x9]}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000b00)={0x6, &(0x7f0000000ac0)=[{0x5, 0x9, 0x72, 0xfffffff9}, {0x3, 0x6, 0x76, 0x98}, {0x38, 0x7, 0x7}, {0x9, 0x4, 0x6, 0x2}, {0x0, 0x0, 0x72, 0xfffffc01}, {0x6, 0x8, 0x0, 0x7fffffff}]}) getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x8, 0x5}, &(0x7f0000000b80)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000bc0)={0xf, 0x2, 0x5, 0xffffffff, r9}, 0x10) r10 = openat2(0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x181140, 0x115, 0x2}, 0x18) r11 = socket$inet6(0xa, 0x4, 0x10001) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r11, {0x2}}, './file1\x00'}) openat$ptmx(0xffffff9c, &(0x7f0000000cc0), 0x14040, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r10, 0x800455d1, &(0x7f0000000d00)) r12 = openat$cachefiles(0xffffff9c, &(0x7f0000000d40), 0x240040, 0x0) getsockname$packet(r12, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000dc0)=0x14) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000e00)={@local, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff, 0x80, 0x4, 0x400, 0x4, 0x80020002, r13}) 7m14.26519527s ago: executing program 3 (id=3187): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) write$FUSE_GETXATTR(r3, &(0x7f0000002400)={0x18, 0x0, 0x0, {0xffff}}, 0x18) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) r7 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x40, 0x0) ioctl$COMEDI_BUFCONFIG(r9, 0x8020640d, &(0x7f0000000040)={0x1, 0x6, 0x7, 0x9}) setpgid(r8, r8) setpgid(r8, r8) ioprio_get$pid(0x2, r8) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000001740)={0xf, 0x8, 0xfa00, {r6, 0x13}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 7m14.173537781s ago: executing program 3 (id=3190): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000304000000000000000000000006", @ANYRES32=r1, @ANYBLOB="56060800000000002400128009000100626f6e640000000014000280050022"], 0x44}}, 0x40) 7m14.015699723s ago: executing program 3 (id=3194): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) (async) listen(0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async, rerun: 32) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) (async, rerun: 64) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async, rerun: 64) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000200)) (async) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1000}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x60048000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async, rerun: 32) io_uring_setup(0x549c, &(0x7f00000002c0)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) (async, rerun: 32) unshare(0x6a040000) (async) mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 32) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffe, 0x2}, 0xe) (async, rerun: 64) connect$packet(r4, &(0x7f00000001c0)={0x1f, 0x8, 0x0, 0x1, 0x2, 0x6, @remote}, 0x14) (async, rerun: 64) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006a9dbe455d318cfc8fd6a2895d0a245012b84ea03977f48fc2e55b522cc430e5c4ddfb571e229468c23564753f52ed390ad1b2f904c97d54be4156287cb4f03660c88b539b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x92}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 7m13.96987966s ago: executing program 34 (id=3194): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) (async) listen(0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async, rerun: 32) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) (async, rerun: 64) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async, rerun: 64) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000200)) (async) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1000}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x60048000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async, rerun: 32) io_uring_setup(0x549c, &(0x7f00000002c0)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) (async, rerun: 32) unshare(0x6a040000) (async) mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 32) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffe, 0x2}, 0xe) (async, rerun: 64) connect$packet(r4, &(0x7f00000001c0)={0x1f, 0x8, 0x0, 0x1, 0x2, 0x6, @remote}, 0x14) (async, rerun: 64) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006a9dbe455d318cfc8fd6a2895d0a245012b84ea03977f48fc2e55b522cc430e5c4ddfb571e229468c23564753f52ed390ad1b2f904c97d54be4156287cb4f03660c88b539b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x92}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 7m9.226421202s ago: executing program 6 (id=3218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x2, 0x7, 0x0, 0x7, 0xc, 0x3, 0xb, 0x3, 0x9, 0xc, 0x8, 0xf, 0xb, 0x5, 0x3, 0x4], 0x0, [0x1, 0x3, 0xb883, 0xc5, 0x5, 0x6, 0x20, 0x7c, 0x0, 0xfff9, 0x411e, 0x6, 0x6, 0x0, 0xb, 0x3], [0xd, 0x8, 0x5, 0x2, 0x8000, 0x4, 0x0, 0x4, 0x5, 0x2, 0x2, 0x6, 0x7, 0x5, 0x5, 0xc40]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d00000000000100000000eaff0001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 7m8.028031381s ago: executing program 6 (id=3224): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030400000000000000000000001f", @ANYRES32=r1, @ANYBLOB="56060800000000002400128009000100626f6e640000000014000280050022"], 0x44}}, 0x40) 7m7.409873635s ago: executing program 6 (id=3225): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0xfffffffa, 0x584e4f53, 0x6, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r0, 0x80000) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$char_usb(r4, &(0x7f00000005c0)=""/146, 0x92) lseek(r2, 0x851, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24008004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014"], 0xcc}, 0x1, 0xffffffff, 0x0, 0x880}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 7m5.902132738s ago: executing program 6 (id=3235): madvise(&(0x7f0000bde000/0x4000)=nil, 0x4000, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_io_uring_setup(0x28a0, &(0x7f0000000800)={0x0, 0xcf6d, 0x80, 0x0, 0x3c7}, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000a80)={0x1, 0xf, 0x7}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x150, 0x0, 0x3, [{{0x4, 0x800003, 0x28000, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0xb, 0x6, 0x0, 0x2, 0x1, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x400000000000001, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x5, 0x5, 0x2, 0x2, 0x6, 0x7, 0x6000, 0x0, r3, r4, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r5, &(0x7f0000000100)=""/134, 0x86) syz_clone3(&(0x7f0000000200)={0x40020100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7m5.635194509s ago: executing program 6 (id=3240): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000400)={0x4, 0x4, 0x1, 'queue0\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) unlink(&(0x7f0000000000)='./bus/\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r8 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r8, 0x40045613, &(0x7f0000000200)=0x1) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x2020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x13}}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) fsopen(&(0x7f0000000280)='erofs\x00', 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r0, 0x303, 0xfffffffa, 0x0, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 7m5.407758536s ago: executing program 6 (id=3243): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30"], 0xfc}}, 0x20000000) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, &(0x7f0000000240)}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x59c, 0x214, 0x0, 0x13c, 0x324, 0x13c, 0x4d4, 0x4d4, 0x4d4, 0x4d4, 0x4d4, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3b}, @private1, [0xff, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4}, 0x0, 0xf4, 0x13c, 0x0, {0x7a00000010000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x0, 0xfffe, 0x0, 0x0, 0x4e21], [], 0xfd}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'bond_slave_1\x00', {0x1}}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0xfc}, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{}, {0x0, 0xff}, {}, 0x300}}}, {{@uncond, 0x0, 0xa4, 0x110, 0x48000000}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9ccf9eb8fc186f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x1c}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5f8) (async) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000400), 0x12) (async) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) close(r9) (async) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket(0x29, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, 0x0, 0x0) (async) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) 7m5.36232868s ago: executing program 35 (id=3243): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30"], 0xfc}}, 0x20000000) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, &(0x7f0000000240)}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x59c, 0x214, 0x0, 0x13c, 0x324, 0x13c, 0x4d4, 0x4d4, 0x4d4, 0x4d4, 0x4d4, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3b}, @private1, [0xff, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4}, 0x0, 0xf4, 0x13c, 0x0, {0x7a00000010000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x0, 0xfffe, 0x0, 0x0, 0x4e21], [], 0xfd}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'bond_slave_1\x00', {0x1}}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0xfc}, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{}, {0x0, 0xff}, {}, 0x300}}}, {{@uncond, 0x0, 0xa4, 0x110, 0x48000000}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9ccf9eb8fc186f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x1c}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5f8) (async) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000400), 0x12) (async) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) close(r9) (async) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket(0x29, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, 0x0, 0x0) (async) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) 1m31.659611616s ago: executing program 5 (id=5145): socket(0x2000000000000021, 0x2, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'virt_wifi0\x00', @random="01000000b7d0"}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00') memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000400)=ANY=[@ANYBLOB="3bbbbbbbbbbb0180c200000088a80e0081002300000480fe5a9a5e659152e287caf6e2469c932bfcb607985d882e0a01b733bcd385c64285d8043c1238ae6c125dee4f1730e2c92adc5cd3ef7b472f885cae"], &(0x7f00000014c0)={0x1, 0x2, [0x969, 0xad9, 0x495, 0xa2a]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000680)) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={'md5\x00'}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40044) recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x14, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8a306000000000000000000b70400000000000085000000c3000000", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6a040000) syz_io_uring_setup(0xb32, 0x0, 0x0, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000001500)={0x9, 0x7, 0x1}, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x10}) 1m30.617287124s ago: executing program 5 (id=5149): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x400800, 0x0) (async) r2 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x400800, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000280), 0x8, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000a80)='./file0\x00') r5 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f00000009c0)=[{&(0x7f0000000140)="81fc73d2761d3aadce8adcb0aabefcfee91fd7900cc9a29861a1000c707b7c9be3ad65e0b561a0713aef13f1f777caa0afc53705771a3c49bb4034bb4840abe393b63ff54f0c46ae0d7b3e3c5a2d05bce0e918611a44415cf04563c157ef1d07bb0af58cc1cfeb04651e497c86", 0x6d}, {&(0x7f0000000340)="229b48198fef10dabfea64b20b217b86134b024e67eba52dc0e759ad5916fddd1161c05fe6731316baa440ac51b26d2dc5a8f71128da8c96678e6c8ddda5be48f526f5c7ce5e4f521ef9382ecb3629b4f3a17fe37b77db965844be8a4019423eb11e3ce6e9131715f0eece14aa2fadac5b9d00a5fd89cbb984496e27c3075e27b9d383bce875d7a44c48ddeea4847d8d", 0x90}, {&(0x7f0000000400)="7cc5820d01dc562e886532980e4840775705a1a8e70ab11974c00934156fe0b38c1d624f844bc3b356267a003ef1bb8f4f95e592abd40d62db9e651c758ca7e75f0f4dc7aa63b45a971c6a161aa52cb6c06b90517bb7664d41d0b2f73e7c699275623d48ffd406d3b0", 0x69}, {&(0x7f0000000480)="7294bf7f5472e4f4c46725313f3361febd3e01d20123a67475caeda0723ce67135cccb0aa27f4ab9efabb362225a8944125047309f4c4b77fab7e337ac2783825f74dd173b408decd72fe24947cfe1d700508bc464256b46f437bdcbce919c31bcdc5d5947b3f214d448061995fdc1b6841a3783b1f6bf9a655cdf867dd88506e7503c5b829d012cf57db3c5410ae4e2d774e54e9a", 0x95}, {&(0x7f00000006c0)="1b1488e6c82eb54df6062a186116ea68bc33127029da48258f03a9c056e3828b21e5fab130a477e57671b8e9825454c94f12cc7425b06ff0e36a5cf599f96c2a98dc732fdfb8ae3a442f2d3ce5b8de797b5f00740a6e22d8971718fe2ddda53e20059317f700cdb1e15d54f99f3f04d6a9a1d413432c36687820f99f35b513552eb47a1629b6fe01ae827607491c60f030b6fea8e8b2e8ca04ec0bc05aafc6f8c66be9efbd4f604525fc69a84be38ea868401aa48e9c458a3d696a69d90a2b9152f5785ed050af72f99b98a55353354606df9c6fd6f00d234407dfabc0325920d5bba1b4", 0xe4}, {&(0x7f00000007c0)="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", 0xfa}, {&(0x7f00000008c0)="abbd6143f00f12822a0bec49cb88", 0xe}, {&(0x7f0000000900)="fcf00def0f1779e3b69c058c3740", 0xe}, {&(0x7f0000000940)="b2a527aaa7838e114900c777cd311184bec97d63c2ced2893f116fbfdf1b484e3114479df1ccc186edc6c9c71b879a72f9a0a00e31f286690360f45c9531e8e16639757c70f3fae839148b015ec2ff1c0fe60b8f0589e6c3f3ec25", 0x5b}], 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0180000010020104000000000007e8ff00200004", @ANYRES32=r0, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x40) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0180000010020104000000000007e8ff00200004", @ANYRES32=r0, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x40) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000000a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0x58, 0x1404, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40801) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000000a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0x58, 0x1404, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40801) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@newlink={0x5c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0xffffff81}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1m30.485478083s ago: executing program 5 (id=5150): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c09425, &(0x7f0000000440)={"50ada76bcf4b32ee238fefb292520329", 0x0, 0x0, {0x1, 0x2}, {0x6, 0xfffffbff}, 0x797, [0x1, 0x4, 0xffffffffffff557a, 0x38, 0x9400000000000000, 0xfff, 0x3, 0x5023, 0xda, 0x2, 0x81, 0x3, 0x1ff, 0x6fd, 0x0, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", r2, 0x0, {0x7, 0x100}, {0x0, 0x2}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000540)="05000000018000b362c7a4f513c2cbe2c2e58c236389b2ec27c2898c15cb0a013d71f8c76015b79625ccbe6c8891e78aacfea1a4863a7bd261841ad37eac90bfd6d1cc8483e9d96eb25cc7051aa8838462d285c67952ae85fc834b90b6e8d17fda4639ffea121ce2e1286e94d6499e8740290c1d702df349ed4e97b10d0895b02a14a0e70115410b72465e3437bfc116b63481fd1b303f8eab92824c3c8f14ea288fea8e2fc55deae3a12b0748e4407a128633ed8f51eb6ae3bf0299220988b602", 0xc1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = openat$ttynull(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, &(0x7f0000000000)={[{@stats}]}) umount2(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000040)=0xce, 0x4) 1m29.281751813s ago: executing program 5 (id=5153): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x4}) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) write$FUSE_GETXATTR(r5, &(0x7f0000002400)={0x18, 0x0, 0x0, {0xffff}}, 0x18) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r9) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000280)={0x100080, 0x100001, 0x120000, {r5}}, 0x20) setpgid(r9, r9) ioprio_get$pid(0x2, r9) write$RDMA_USER_CM_CMD_NOTIFY(r7, &(0x7f0000001740)={0xf, 0x8, 0xfa00, {r8, 0x13}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r6, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1m29.112077036s ago: executing program 5 (id=5154): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1}]}, {0x0, [0x5f]}}, 0x0, 0x2b}, 0x28) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) syz_fuse_handle_req(r0, &(0x7f00000005c0)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a30bf328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d12e7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13776204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edcd3f35cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x28, 0x9, 0x8110, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(0x0, 0x1, 0x2603) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r2, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x3, 0xfd}, {0xa}, @raw32={[0x5, 0x5, 0x9]}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x4}, {}, {0x5}, @quote={{0x6, 0x73}, 0x401}}, {0x4, 0x0, 0xfe, 0x0, @tick=0x100, {}, {}, @connect={{0x5, 0x5f}, {0x2, 0xf}}}, {0x1, 0x0, 0x1, 0x0, @time={0x6, 0x5}, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) ioctl$I2C_RDWR(r1, 0x707, 0x0) fsync(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x64, 0x10, 0x1, 0x70bd2c, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @link_local}}]}]}]}, 0x64}}, 0x20008044) 1m28.93905967s ago: executing program 5 (id=5157): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0xc0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0xf, {0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x1c, 0x19, 0x1, "64b29451f199056e87704e83349e22f355a8f466c91b2598d095dab21eebbc0a5c75f0f472ae9adbd1b44a5a5f47f26639c896ceaecb907065f7c9b310ad29f3", "1de1067991624a484169557557b5988b1d02b7cfbbd86662ff807481e0c8c60ca76db43facc5a3b5a8547dc978062014734811a90bd4ed8eccefcde073dec675", "8fd247add054c3dd18df7b8f17c0dc1cd6bc2570146b913a3bde885bf1fbcdf6", [0xfffffffffffff2bf, 0x4000]}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00'}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x881) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000280)=0x2, 0x4) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x5000009) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x60000726) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x2000}) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="000010006d6178"]) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x60, r10, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0xffffffffffffff32}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}}, 0x200400c4) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000ffdbfa250100000000000000014100000018001700000000000000006574683a7465616d3000"], 0x34}}, 0x0) 1m28.938835969s ago: executing program 36 (id=5157): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0xc0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0xf, {0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x1c, 0x19, 0x1, "64b29451f199056e87704e83349e22f355a8f466c91b2598d095dab21eebbc0a5c75f0f472ae9adbd1b44a5a5f47f26639c896ceaecb907065f7c9b310ad29f3", "1de1067991624a484169557557b5988b1d02b7cfbbd86662ff807481e0c8c60ca76db43facc5a3b5a8547dc978062014734811a90bd4ed8eccefcde073dec675", "8fd247add054c3dd18df7b8f17c0dc1cd6bc2570146b913a3bde885bf1fbcdf6", [0xfffffffffffff2bf, 0x4000]}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00'}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x881) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000280)=0x2, 0x4) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x5000009) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x60000726) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x2000}) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="000010006d6178"]) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x60, r10, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0xffffffffffffff32}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}}, 0x200400c4) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000ffdbfa250100000000000000014100000018001700000000000000006574683a7465616d3000"], 0x34}}, 0x0) 14.060136487s ago: executing program 4 (id=5484): r0 = syz_io_uring_setup(0x141f, &(0x7f0000000080)={0x0, 0x8000711c, 0x491, 0x4, 0x6}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) writev(r4, &(0x7f0000001680)=[{&(0x7f0000000400)="e970d6ea0600000000284b6819cd4222f0cc540000007a12e5cdb79f49f1aed79adc3252825a86a526a3501fb1dd8dff3e90d6f5", 0x34}, {&(0x7f0000000080)="1616b8114d17a6edb958c44bfcc750df66a17409dc53e9354910372dd7c5426f75ac569b", 0x24}], 0x2) syz_io_uring_modify_offsets$generic(r1, r2, 0x28, 0x100) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000001480)=@ublk_io_need_get_data_sqe={0x2e, 0x23, 0x0, 0xffffffffffffffff, 0xc0107522, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x383, 0x2, 0x0}}) r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x58, 0x80000) read$eventfd(r5, &(0x7f0000000240), 0x8) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 14.059881383s ago: executing program 4 (id=5485): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c0003c3bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000006c040000000000006d400500000000003400000001ed00007b030000000000001d440000000000007a0a00fe00ffffffc303000041000000b7000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd5ef5681b36a30c6471a4bc4d82e4fee5bef7af9aa0d7f300c095199fe3ff31e9883a2a98e64e39732c9cc00eec363e4a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe3326a404000000000000006d31cb467600ade7ee63e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62f84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f48a7382f13d000000225d85ae49e7e383dc5049036b98fb685123b2731514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59601894183a0f95b72df859d5cf25a02a9f6ebb047b96d338666590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c0200a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d14017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744dccc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19fa367256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08c63b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a9245f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31cb6b9ce97f03ca91a01ba2c60ca99e8ebc15ece1ff1675767999d146aef7799738b292fd64bbca48568304b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c655a22d490300800a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d99000518a130f9d01c4b45294fbba468df3e1b393cb4e62e7545010000000000000094bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58588cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d9953243e2bb42b197cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1021829f1a57d3f18f4edaeb5d37918e6fddc785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db6019037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2b8100000000000000f5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f3366bca2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6e0e0d383ffce01881a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c71411c928d8b894d9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f24b72edcff33a40c1b791830ac2478734c8dc0c40ad4072c08dbcfbbb8dc071897d76a410dab1dc7d2aa509b9ef21ac2b2389c2aac7048addbac53cedba2c20fbe18acd5b546102e3e3af296681b0db7ce9b878024bcd504480de0a65df48ae310633c9f7accfa2a5527af3df8cdbc2817cae9b6ff827ea5f850a23fc0f46650d99eaad66119015ef840893fc3348d4fbce1b6b6906bcddff1e825d923b64fd383b1e776a566f2b702f2f4a464ecf3408ed97ffe8b1c813713f1712c48be3ebe6ad7c24c7467c7474c589a08f883a5e7bda74fc0c741eb2bc408a4a9b0b66bec9bee32d7f620942258a7f5cafa2e3bd7b2197c3c77df319e494ef46dfc4eae680d219536f0aa8b1ba291eb2abb0adf8154e00000000000000000000000000000000000046cb14b77f134ec5857b2e683fe6d5cccbf99508e8c8404863528c24da235923f18de34b48e89125a20a216836f6bcd1efc1dd74ac924d8ecfa6fe5f40d4ee50"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x12000000}, 0xfffffffffffffd00}, 0x48) 14.028370711s ago: executing program 4 (id=5486): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f0000007b40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f2a422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21a0000000000000000c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e2ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b670000000007faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999f0dde3, 0xdcf, 0x4004, 0xa, 0x800, 0x0, 0x0, 0x10, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xc, {0x8, 0xfffefffc, 0x0, {0x5, 0x0, 0x5, 0x80000001, 0x0, 0xffffffffffff38aa, 0x2, 0x4e, 0xb877, 0x8000, 0x9, 0xee00, 0xee01, 0x3c, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) getdents(r1, &(0x7f0000000400)=""/198, 0xc6) 13.702174195s ago: executing program 4 (id=5490): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd25, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc0c0}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ptrace$peek(0x1, 0x0, &(0x7f0000000640)) r3 = gettid() migrate_pages(r3, 0x0, &(0x7f0000000280)=0x5, &(0x7f0000000300)=0x80) r4 = socket(0x9, 0x80002, 0xcb) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) recvmmsg$unix(r4, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/196}]}}, {{&(0x7f0000000540)=@abs, 0x0, &(0x7f0000001940)=[{&(0x7f0000000680)=""/180}, {&(0x7f0000000740)=""/4096, 0xfffffffffffffcb1}, {&(0x7f0000001740)=""/214}, {&(0x7f0000001840)=""/30}, {&(0x7f0000001880)=""/132}], 0x0, &(0x7f0000001980)=[@cred]}}, {{&(0x7f00000019c0)=@abs, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001a40)=""/13}], 0x0, &(0x7f00000053c0)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}]}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/104}, {&(0x7f0000001c40)}, {&(0x7f0000001c80)=""/4}], 0x0, &(0x7f0000001d00)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}]}}, {{&(0x7f0000001d80)=@abs, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001e00)=""/155}], 0x0, &(0x7f0000001f00)=[@cred]}}, {{&(0x7f0000001f40)=@abs, 0x0, &(0x7f0000002340)=[{&(0x7f0000001fc0)=""/32}, {&(0x7f0000002000)=""/233}, {&(0x7f0000002100)=""/197}, {&(0x7f0000002200)=""/9}, {&(0x7f0000002240)=""/209}], 0x0, &(0x7f0000002380)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}]}}, {{&(0x7f0000002400), 0x0, &(0x7f00000027c0)=[{&(0x7f0000002480)=""/125}, {0xffffffffffffffff}, {&(0x7f0000002500)=""/41}, {&(0x7f0000002540)=""/188}, {&(0x7f0000002600)=""/115}, {&(0x7f0000002680)=""/166}, {&(0x7f0000002740)=""/128}], 0x0, &(0x7f0000002800)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred, @cred, @cred, @cred]}}, {{&(0x7f00000028c0)=@abs, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002940)=""/109}, {&(0x7f0000003f80)=""/4096}], 0x0, &(0x7f0000003a00)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xffffffffffffff3d}}, {{&(0x7f0000003a40), 0x0, &(0x7f0000003e00)=[{&(0x7f0000003ac0)=""/244}, {&(0x7f0000003bc0)=""/225}, {&(0x7f0000003cc0)=""/10}, {&(0x7f0000003d00)=""/208}], 0x0, &(0x7f0000003e40)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}]}}, {{&(0x7f0000003f00), 0x0, &(0x7f0000005240)}}], 0x3f, 0x0, 0x0) r5 = syz_clone(0x60002000, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(r5) r6 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r6, 0x11, 0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0xffff1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 12.585586426s ago: executing program 4 (id=5493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r3 = openat2$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x110300, 0x10, 0x8}, 0x18) openat(r3, &(0x7f0000000280)='./file0\x00', 0x10400, 0x103) (async, rerun: 64) read$FUSE(r2, 0x0, 0x0) (rerun: 64) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) r4 = socket(0x3, 0x2, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000340)={0x0, 0x4, 0x1}) (async, rerun: 32) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x53, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) (async) r8 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r8, 0x40044103, &(0x7f0000000080)) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4880) (async, rerun: 64) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (rerun: 64) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4607100707040000000000000003003e0007000000620200000000000040000000020000004f030000000000000800000073473800010074200700040100000060680a0000020000e0fffffffffeffffffffffffff0100000005000000faffffffffffffff0a00000000000000ffffffffffffffff"], 0x78) (async) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) (async) close(r9) (async) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca249435, &(0x7f00000007c0)={0x1, 0xfffffffffffffff8, @start={r7, 0x0, "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", "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"}, [0x5, 0x100000001, 0x5, 0x9, 0x1fc5, 0x0, 0xee, 0x2, 0x1ff, 0x40, 0x2, 0x7f, 0xfffffffffffffff7, 0x2, 0x80000000, 0x10001, 0x486f, 0x9, 0x6, 0x9, 0x1, 0x101, 0x9, 0x4, 0x7ff, 0x3a, 0x657, 0x7, 0xffffffffffffffff, 0x8000000000000001, 0x2, 0x2, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6, 0x1ff, 0x9, 0x9, 0x5, 0xa, 0x1, 0x0, 0x2, 0x72c4, 0x7, 0x6, 0xb3, 0x0, 0xe76, 0xfffffffeffffffff, 0x6, 0x5, 0x5, 0x6, 0x7fff, 0x0, 0x5, 0x10, 0x3, 0xfffffffffffff591, 0x2]}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="54010000100001000000000000000000ff010000000000000000000000000001000000000000002410000a0000008400da43c38b13bd8cb5419579a22712bf00"/79, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000ffffffff32000000fe8000000000000000000000000000aa00000000000000000000000000000000ffffffffffffffff03000000000000000000000000000000000000000000000000000000000000000000000000000010000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000af0000004800020063626328646573335f65646529000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700000000002abd7000"/264], 0x154}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x54, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x5, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xd4ec, 0x8, 0x1b62}, {0x0, 0x6, 0x4}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 12.393117017s ago: executing program 4 (id=5496): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000006c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r3, 0x0, 0x2000, 0x2000}) 8.400736437s ago: executing program 2 (id=5520): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503"], 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503"], 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sndseq(0xffffff9c, 0x0, 0x20002) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x36, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 6.327581868s ago: executing program 8 (id=5527): r0 = syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = epoll_create1(0x80000) socket$kcm(0x10, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000040)="94", 0x1}, {0x0}, {&(0x7f00000000c0)="9e84e6adffceba3ff4207eea94994ad224d8835b5e77a5f146f18c9ec7b54d4eeaab1ca4e1fdff684499dc160d15bbb9f699d19b4f7910b361353d0cc2e94a28fa4a6670448805f13371cae3a8847a7e25addfea2a30a24df270fcdd0ead8cd69822cfab6017d33b253ff1d0fe8b7bf6e5d772aed1754ac7e5b8a5ea6521b56f8da9234ac9c2ad55a9dfa153881e8ab60d22e75acf5ff61cb2fbff0774", 0x9d}, {&(0x7f00000003c0)="6d04979fa693d29e043f840e748529fe771d8180865f59e2277ddf1731f366a8ce0604c1743347373e00000000f9ffffff00000000000020039ee38e1e86f95ee63ed7fdb3c5acdbfebbe0cfeb29966fafe9", 0x52}], 0x4) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) close(r1) 5.364995822s ago: executing program 8 (id=5528): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r1, &(0x7f00000000c0)='./mnt\x00', r1, &(0x7f0000000100)='./mnt\x00', 0x271) syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080), 0x0) io_uring_setup(0x30aa, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, 0x0, 0x0, 0x208000, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r3 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x4084) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) write$UHID_INPUT(r0, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x60000, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000200)={0x63, 0x0, [{0x40000083, 0x0, 0x9}]}) 5.227119059s ago: executing program 7 (id=5530): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000400)={0x4, 0x4, 0x1, 'queue0\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) unlink(&(0x7f0000000000)='./bus/\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000e7000000000000000900000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000065090100000000006600000020207025180100002020702500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b7030000ffffffff56000000060000002c93000000000000b5030000000000008500000076000000b700000000000000950000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r9 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r9, 0x40045613, &(0x7f0000000200)=0x1) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x2020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x13}}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) fsopen(&(0x7f0000000280)='erofs\x00', 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r0, 0x303, 0xfffffffa, 0x0, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 4.576387996s ago: executing program 2 (id=5531): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, r1) socket$inet6(0xa, 0x80002, 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x34, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [], "fafb17c1"}}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="8b2298140000001000010000000000000000000000000a58000000090a010400000000000000000100000008000a40000000000900020073797a32000000"], 0x80}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000400f3ff6d6246c801005311000080000080c96c2239efd3af267fad237c", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3ff}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000600)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x4}) socket$inet_smc(0x2b, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a11820fffff5bab4e210fff000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000002100001000a0c10000000e6ff224e00", 0x57}], 0x1) 3.62075937s ago: executing program 7 (id=5532): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) r4 = openat$dlm_control(0xffffff9c, &(0x7f0000000b40), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), r4) get_mempolicy(0x0, 0x0, 0x2, &(0x7f00005e7000/0x1000)=nil, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000002e00090027bd700097ff0000040000000a0016"], 0x2c}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x41) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) r8 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r8, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b1574826727f5f62", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3", 0x7}, {0x0}, {&(0x7f0000000000)="b52d437902c540dffc528243165e0c7a87e126a21564c4c9bad2c5", 0x1b}], 0x6, 0x0, 0x0, 0x900}}], 0x1, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') writev(r10, &(0x7f0000000340)=[{&(0x7f0000000140)="a1", 0x1}, {0x0, 0x2}], 0x2) syz_ublk_setup_queues(r9, r7, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2, 0x0, r10}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r6, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r11 = syz_clone(0x280000, &(0x7f00000001c0)="b721876555334036fe8ab0473a0ce9d2de45f72f639935d0b11e73e4d7c649283284f3d252d889d4423f4d925c865c613eeb647751808707ddff55df0ae0408c1443ce1c9b618074ed94d08328bbe831414c448cb5e7facac246143914399ba6287da0e6c10930c7c82323a7a7b714b08f73cddf1b33192d4d2b2be69cab6b98e8f46d513491", 0x86, &(0x7f0000000280), &(0x7f00000002c0), 0x0) syz_open_procfs(r11, &(0x7f0000000580)='net/packet\x00') r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_clone(0x400, &(0x7f00000003c0)="82a83bf39df7d996531e14690c20ce8b6b25d7d77f8f8dc9d92b8d7ace1fb1ce00cfb617106e73a331670db2e7", 0x2d, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="3d183e767f11214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9b705b9dd0fcd360e6c21715be6ddebef9b4b808e3812b56f8bb1ec08f7cf74cd4f1ac0bb0e80016bf37cd5c09df8d05a178725d975655e46a658a4d1d776d4e50690c4507c862f245067ecccb3868eb81c358592663689adb90a1092b45efcb642ea58ea9ac4421fb0ac9774637c1af6ca88c5ff13d177cba8cd57305ec1d6b219f000c6f9d400566b7289ecb4ccc0a5ae86ef363e192683") ppoll(&(0x7f0000000080)=[{r0, 0x10}, {r12, 0x2b5}], 0x2, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000300)={[0x7, 0x5]}, 0x8) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.514837816s ago: executing program 2 (id=5533): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0, 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x4c, 0x30, 0x10, 0x80, 0x0, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x8c0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000280)={0x1f, @none, 0x9}, 0xa) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f00000006c0), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)={0x0, 0x0}) syz_open_procfs$pagemap(r5, &(0x7f0000000500)) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) ioctl$PTP_EXTTS_REQUEST2(r6, 0xc4c03d12, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) setreuid(0xee00, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000200)=[@timestamp, @timestamp], 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8000, r7}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x197, 0x197, 0x8, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x4}, {0xc, 0x5}, {0xa, 0x1}, {0x5, 0x3}, {0x5, 0x1}, {0x10, 0x5}, {0x7}]}, @enum64={0x5, 0x8, 0x0, 0x13, 0x1, 0xa, [{0x6, 0x3, 0x7}, {0xa, 0x4, 0xb5d}, {0x4, 0x7fff, 0x56}, {0x2, 0x80, 0x6}, {0xc, 0x0, 0xcf7}, {0x8, 0x9, 0x630c9f2e}, {0xa, 0x4}, {0x10, 0x51, 0xe}]}, @datasec={0x6, 0x2, 0x0, 0xf, 0x3, [{0x4, 0xf, 0x8}, {0x1, 0x8, 0x7ff}], "5cda4d"}, @struct={0x3, 0x6, 0x0, 0x4, 0x0, 0x6, [{0x0, 0x2, 0x9}, {0x9, 0x5, 0x1}, {0x9, 0x0, 0x3}, {0xd, 0x5, 0x6afab1eb}, {0x5, 0x5, 0xfff}, {0x7, 0x3, 0x501}]}, @enum={0x4, 0x7, 0x0, 0x6, 0x4, [{0x4, 0x1ff}, {0xa, 0x3}, {0x1, 0x7}, {0x0, 0x95bd}, {0x6, 0x27000000}, {0x5}, {0xe, 0x8}]}, @volatile={0x2}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x2, 0xa}, @ptr={0x1, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x30, 0x2e, 0x30, 0x3e, 0x5f, 0x30]}}, &(0x7f0000000c00)=""/96, 0x1b8, 0x60, 0x0, 0x1}, 0x28) 3.488936115s ago: executing program 8 (id=5534): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x160, 0x3e, 0x107, 0x3, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x11b, 0x142, 0x0, 0x1, [@generic="9f05e66b24ff6af47a82a7f72f9be79513ba2715efb6f4a4e30809a007446bedd61e5617cee4681975a964041b5efe4a3c88c82edf44f7358ed8f1d6d7dac87e416e70d1a0c440dfc4736075b2ef73f506d0aba481", @generic="f38354401c084ff07bed3aa9061db8b30fec79fdce81cee06c0839dd7632ec38f72fa13f0234ea8d6b26ec4f57a0f181173bd9aa16e330be4ac16742961d9a9c39635f99f0e7d102212ff3738b1c7eb307d5230905fdfa87927189ef1a07b24295137656422aba670b8f7f21e6e11cce1b28a91ef10a274c860cb628dc426a2f3a854ce27c9d50cd1555b113339173d6bef75fcd20b3096c888a924adaedada72bdecbc01dea55bef733176f0befd2d18a1175bf119dd12de64d6882a31f", @nested={0x4, 0x114}]}, @typed={0xa, 0x1, 0x0, 0x0, @str='l2\b\x12\x00\x00'}, @generic="993080057edba468b298f52f3532bb33b226ae5a73055db6bd6d0bc214084e07ad"]}, 0x160}, 0x1, 0x0, 0x0, 0x4000811}, 0x400c000) 3.405510205s ago: executing program 8 (id=5535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40014) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r8) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r14, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x100}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.275571084s ago: executing program 8 (id=5536): unshare(0x64000600) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000011000000180100002020702500000000002020207b1af8ff00000000bfa1feff0000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0}, 0x94) 3.222350627s ago: executing program 8 (id=5537): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000140)={&(0x7f0000002880)=[{0x6, 0x8401, 0xf2, &(0x7f0000000880)="d243d59586d1553cf26090f37bab5e1eb07d53afafdaf9e50b351fdbefea8c7a8a6b1f4111185b0f8f986d74ee6a8967747b61de5bb05445e32359c9bec9baa9e7f64c4afae46879fea4d3f270515d3d16df5d5f9f80e27821586ad9d1e5ce6edc5416e31799028379093a6687090cf640f54269a99b5c4e5eb96a0252c0739257cf7dbc61b50e647cfa5754f267ab662774ac7b9fef2439456da3ab642ee97ac04bfef737c88d86ef537ebd8bf2c30da33aa32d395594566b147d6d92587e7078f41aeb00166818fb19785a7c7f280ff5c164c821a18c5caaeabb488dab08b92a572e97b173f00b0cb639a6f609d0b6377a"}], 0x1}) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000053c0)) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2.333366054s ago: executing program 7 (id=5538): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x8042) write$binfmt_aout(r1, 0x0, 0x1420) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000010, 0x0, 0x2e3}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0000000000000200ff2d0e55e4802800018007000100637400001c00028008000140000000020800024000000011080004400000000f0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a000000"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f00000000c0)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r7, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000002600090026bd70ecfcdb75edbb5b09547b00"/46], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000100)={r10, 0x7, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000500)={r10, @in={{0x2, 0x4e20, @broadcast}}}, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r7, &(0x7f00000004c0)="b0", 0x1, 0x4000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) 2.223011788s ago: executing program 2 (id=5539): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2, 0x400) ioctl$BLKREPORTZONE(r0, 0xc0101282, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x72, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000027, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') accept4$inet6(r5, 0x0, 0x0, 0x100000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r8 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14}) io_uring_enter(r8, 0x1, 0x1, 0x1, 0x0, 0x0) 1.348265667s ago: executing program 7 (id=5540): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000100)=0x5, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000100)=0x5, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x2710, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x2710, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x0) 1.205266927s ago: executing program 2 (id=5541): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) r4 = openat$dlm_control(0xffffff9c, &(0x7f0000000b40), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), r4) get_mempolicy(0x0, 0x0, 0x2, &(0x7f00005e7000/0x1000)=nil, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000002e00090027bd700097ff0000040000000a0016"], 0x2c}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x41) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) r8 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r8, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3", 0x7}, {0x0}, {&(0x7f0000000000)="b52d437902c540dffc528243165e0c7a87e126a21564c4c9bad2c5", 0x1b}], 0x6, 0x0, 0x0, 0x900}}], 0x1, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') writev(r10, &(0x7f0000000340)=[{&(0x7f0000000140)="a1", 0x1}, {0x0, 0x2}], 0x2) syz_ublk_setup_queues(r9, r7, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2, 0x0, r10}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r6, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r11 = syz_clone(0x280000, &(0x7f00000001c0)="b721876555334036fe8ab0473a0ce9d2de45f72f639935d0b11e73e4d7c649283284f3d252d889d4423f4d925c865c613eeb647751808707ddff55df0ae0408c1443ce1c9b618074ed94d08328bbe831414c448cb5e7facac246143914399ba6287da0e6c10930c7c82323a7a7b714b08f73cddf1b33192d4d2b2be69cab6b98e8f46d513491", 0x86, &(0x7f0000000280), &(0x7f00000002c0), 0x0) syz_open_procfs(r11, &(0x7f0000000580)='net/packet\x00') r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_clone(0x400, &(0x7f00000003c0)="82a83bf39df7d996531e14690c20ce8b6b25d7d77f8f8dc9d92b8d7ace1fb1cefbcfb617106e73a331670db2e7", 0x2d, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9b705b9dd0fcd360e6c21715be6ddebef9b4b808e3812b56f8bb1ec08f7cf74cd4f1ac0bb0e80016bf37cd5c09df8d05a178725d975655e46a658a4d1d776d4e50690c4507c862f245067ecccb3868eb81c358592663689adb90a1092b45efcb642ea58ea9ac4421fb0ac9774637c1af6ca88c5ff13d177cba8cd57305ec1d6b219f000c6f9d400566b7289ecb4ccc0a5ae86ef363e192683") ppoll(&(0x7f0000000080)=[{r0, 0x10}, {r12, 0x2b5}], 0x2, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000300)={[0x7, 0x5]}, 0x8) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.053470827s ago: executing program 7 (id=5542): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, r1) socket$inet6(0xa, 0x80002, 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x34, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [], "fafb17c1"}}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="8b2298140000001000010000000000000000000000000a58000000090a010400000000000000000100000008000a40000000000900020073797a32000000"], 0x80}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000400f3ff6d6246c801005311000080000080c96c2239efd3af267fad237c", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3ff}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000600)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x4}) socket$inet_smc(0x2b, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a11820fffff5bab4e210fff000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000002100001000a0c10000000e6ff224e0000", 0x58}], 0x1) (fail_nth: 1) 589.194µs ago: executing program 2 (id=5543): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000400)={0x4, 0x4, 0x1, 'queue0\x00', 0x2}) unlink(&(0x7f0000000000)='./bus/\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) r7 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f0000000200)=0x1) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x2020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x13}}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r0, 0x303, 0xfffffffa, 0x0, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 0s ago: executing program 7 (id=5544): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = syz_open_dev$video(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = getpid() r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000019080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040021}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003", 0x4f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r7 = syz_io_uring_setup(0x5dec, &(0x7f0000000340)={0x0, 0xfffffffd, 0x1, 0x0, 0x371}, &(0x7f0000000440), &(0x7f0000000300), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @local}]}, &(0x7f0000000440)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000100)={r8, 0xd}, 0x8) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000080)={0xa, 0x103, 0x3, {0xfffffff8, 0xfffffff8, 0x3}}) kernel console output (not intermixed with test programs): vsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.686514][T10081] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.693745][T10081] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.819268][T10235] tipc: Resetting bearer [ 784.830931][T10235] tipc: Disabling bearer [ 785.111419][T10266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4996'. [ 785.782901][T10273] lo speed is unknown, defaulting to 1000 [ 787.320858][T10324] gre0: entered promiscuous mode [ 787.323015][T10324] gre0: entered allmulticast mode [ 787.729637][T10328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5003'. [ 788.528828][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 788.533443][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 788.589711][T10341] ceph: No mds server is up or the cluster is laggy [ 788.849493][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5005'. [ 790.004789][T10360] syzkaller0: entered promiscuous mode [ 790.006982][T10360] syzkaller0: entered allmulticast mode [ 790.059304][ T42] kauditd_printk_skb: 253 callbacks suppressed [ 790.059321][ T42] audit: type=1326 audit(2000000509.916:58263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10359 comm="syz.5.5008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 790.093303][ T42] audit: type=1326 audit(2000000509.916:58264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10359 comm="syz.5.5008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 790.108607][ T42] audit: type=1326 audit(2000000509.916:58265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10359 comm="syz.5.5008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 790.139381][ T42] audit: type=1326 audit(2000000509.916:58266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10359 comm="syz.5.5008" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf709efec code=0x7ffc0000 [ 790.192061][ T42] audit: type=1326 audit(2000000509.916:58267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10359 comm="syz.5.5008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 790.301795][ T42] audit: type=1326 audit(2000000509.916:58268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10359 comm="syz.5.5008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 790.862881][ T7226] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 791.123299][ T42] audit: type=1326 audit(2000000509.916:58269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10359 comm="syz.5.5008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 791.130137][ T42] audit: type=1326 audit(2000000509.916:58270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10359 comm="syz.5.5008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 791.136965][ T42] audit: type=1326 audit(2000000509.916:58271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10359 comm="syz.5.5008" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709efec code=0x7ffc0000 [ 791.143630][ T42] audit: type=1326 audit(2000000509.916:58272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10359 comm="syz.5.5008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 791.296432][ T7226] usb 12-1: Using ep0 maxpacket: 16 [ 791.303173][ T5742] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 791.303191][ T5742] Bluetooth: hci0: Malformed LE Event: 0x0d [ 791.310831][T10372] binder: 10369:10372 ioctl c0306201 80004a40 returned -22 [ 791.343069][T10392] netlink: 'syz.5.5012': attribute type 1 has an invalid length. [ 791.345544][T10392] netlink: 'syz.5.5012': attribute type 1 has an invalid length. [ 791.477611][T10406] binder: 10399:10406 ioctl c05c5340 80000000 returned -22 [ 792.267752][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5017'. [ 792.556529][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5018'. [ 792.616557][T10434] gre0: left promiscuous mode [ 792.618145][T10434] gre0: left allmulticast mode [ 792.650641][T10434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.658017][T10434] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.663963][T10434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.671967][T10430] ceph: No mds server is up or the cluster is laggy [ 792.687696][ T5816] libceph: connect (1)[c::]:6789 error -99 [ 792.691899][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 792.713942][T10434] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 792.717338][T10434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 792.722729][T10434] veth1_vlan: left promiscuous mode [ 792.724962][T10434] veth0_vlan: left promiscuous mode [ 792.727241][T10434] veth0_vlan: entered promiscuous mode [ 792.730567][T10434] veth1_vlan: entered promiscuous mode [ 792.734278][T10434] veth1_macvtap: left promiscuous mode [ 792.736669][T10434] veth0_macvtap: left promiscuous mode [ 792.740085][T10434] veth0_macvtap: entered promiscuous mode [ 792.743445][T10434] veth1_macvtap: entered promiscuous mode [ 792.750140][T10434] batman_adv: batadv0: Interface activated: gretap1 [ 792.753556][T10434] 8021q: adding VLAN 0 to HW filter on device bond1 [ 792.762172][T10434] 8021q: adding VLAN 0 to HW filter on device eth0 [ 792.766779][T10434] 8021q: adding VLAN 0 to HW filter on device eth1 [ 792.771315][T10434] 8021q: adding VLAN 0 to HW filter on device eth2 [ 792.775669][T10434] 8021q: adding VLAN 0 to HW filter on device eth3 [ 792.856443][ T13] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.859872][ T13] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.863178][ T13] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.866414][ T13] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.751160][ T7226] usb 12-1: unable to get BOS descriptor or descriptor too short [ 793.762367][ T7226] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 793.768189][ T7226] usb 12-1: can't read configurations, error -71 [ 794.162470][T10480] binder: 10476:10480 ioctl c05c5340 80000000 returned -22 [ 794.440019][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5031'. [ 794.468581][T10488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5030'. [ 795.114041][T10505] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5035'. [ 795.450405][T10528] bridge_slave_0: left allmulticast mode [ 795.452243][T10528] bridge_slave_0: left promiscuous mode [ 795.454533][T10528] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.462817][T10528] bridge_slave_1: left allmulticast mode [ 795.464761][T10528] bridge_slave_1: left promiscuous mode [ 795.466728][T10528] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.479228][T10528] .`: (slave bond_slave_0): Releasing backup interface [ 795.489969][T10528] .`: (slave bond_slave_1): Releasing backup interface [ 795.505151][T10528] team0: Port device team_slave_1 removed [ 795.518796][T10528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.525536][T10528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 795.532501][T10528] batman_adv: batadv0: Removing interface: gretap1 [ 795.543345][T10528] batman_adv: batadv0: Removing interface: vlan2 [ 795.551731][T10528] bond2: left allmulticast mode [ 795.554038][T10528] bond2: left promiscuous mode [ 795.558241][T10528] bridge0: port 3(bond2) entered disabled state [ 795.797787][T10532] syzkaller0: entered promiscuous mode [ 795.802013][T10532] syzkaller0: entered allmulticast mode [ 795.868472][T10532] tipc: Enabled bearer , priority 0 [ 795.986186][T10532] tipc: Resetting bearer [ 796.004328][T10532] tipc: Disabling bearer [ 796.535662][T10555] binder: 10549:10555 ioctl c05c5340 80000000 returned -22 [ 796.566051][ T1198] Bluetooth: hci4: Frame reassembly failed (-84) [ 796.661709][T10545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5044'. [ 797.458065][T10572] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 797.461262][T10572] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 797.466177][T10572] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 797.469825][T10572] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 797.473066][T10572] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 797.563419][T10081] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.649040][T10081] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.714096][T10081] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.760558][T10081] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.111888][T10081] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 798.307978][T10081] bond6 (unregistering): (slave vti0): Releasing backup interface [ 798.314657][T10081] vti0 (unregistering): left promiscuous mode [ 798.348456][T10081] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 798.357435][T10081] bond5 (unregistering): (slave gretap3): Releasing active interface [ 798.376659][T10081] bond0 (unregistering): Released all slaves [ 798.382119][T10081] bond1 (unregistering): (slave bond2): Releasing backup interface [ 798.393475][T10081] bond1 (unregistering): Released all slaves [ 798.403463][T10081] bond2 (unregistering): Released all slaves [ 798.411036][T10081] team0: Port device macvlan2 removed [ 798.414540][T10081] bond3 (unregistering): Released all slaves [ 798.420920][T10081] bond4 (unregistering): Released all slaves [ 798.424805][T10081] bond5 (unregistering): Released all slaves [ 798.428838][T10081] bond6 (unregistering): Released all slaves [ 798.557407][T10571] lo speed is unknown, defaulting to 1000 [ 798.564737][T10610] befs: (loop5): No write support. Marking filesystem read-only [ 798.570518][T10610] befs: (loop5): unable to read superblock [ 798.581838][T10081] tipc: Left network mode [ 798.709403][ T5447] 8021q: adding VLAN 0 to HW filter on device eth10 [ 798.746756][ T5742] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 799.238514][ T5447] 8021q: adding VLAN 0 to HW filter on device eth12 [ 799.252032][T10729] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 799.252641][T10571] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.255238][T10729] block device autoloading is deprecated and will be removed. [ 799.257407][T10571] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.261948][T10571] bridge_slave_0: entered allmulticast mode [ 799.264883][T10571] bridge_slave_0: entered promiscuous mode [ 799.266226][T10681] md: md2 stopped. [ 799.271752][T10571] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.274116][T10571] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.276489][T10571] bridge_slave_1: entered allmulticast mode [ 799.278729][T10571] bridge_slave_1: entered promiscuous mode [ 799.326692][T10571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.331947][T10571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.357420][T10571] team0: Port device team_slave_0 added [ 799.362595][T10571] team0: Port device team_slave_1 added [ 799.374943][T10571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.377007][T10571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.389418][T10571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.402698][T10571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.405423][T10571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.414643][T10571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.434769][T10768] syzkaller0: entered promiscuous mode [ 799.437289][T10768] syzkaller0: entered allmulticast mode [ 799.450169][T10081] hsr_slave_0: left promiscuous mode [ 799.455653][T10081] veth1_macvtap: left promiscuous mode [ 799.462783][T10081] veth0_macvtap: left promiscuous mode [ 799.465724][T10081] veth1_vlan: left promiscuous mode [ 799.468203][T10081] veth0_vlan: left promiscuous mode [ 799.704992][T10823] tipc: Enabled bearer , priority 0 [ 799.713971][ T5447] 8021q: adding VLAN 0 to HW filter on device eth11 [ 799.730642][T10761] tipc: Resetting bearer [ 799.735713][T10761] tipc: Disabling bearer [ 799.753240][T10571] hsr_slave_0: entered promiscuous mode [ 799.756531][T10571] hsr_slave_1: entered promiscuous mode [ 799.782310][ T5742] Bluetooth: hci6: command tx timeout [ 800.011454][T10081] IPVS: stop unused estimator thread 0... [ 800.314529][T10964] xt_policy: output policy not valid in PREROUTING and INPUT [ 800.357767][T10571] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 800.361375][T10571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 800.363823][T10571] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 800.367007][T10571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 800.369980][T10571] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 800.374867][T10571] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 800.377677][T10571] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 800.383435][T10571] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 800.416585][T10571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.424238][T10571] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.429661][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.431818][ T5936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.442774][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.444920][ T5936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.754859][T10571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.774046][T10571] veth0_vlan: entered promiscuous mode [ 800.778045][T10571] veth1_vlan: entered promiscuous mode [ 800.788484][T10571] veth0_macvtap: entered promiscuous mode [ 800.792081][T10571] veth1_macvtap: entered promiscuous mode [ 800.800001][T10571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.803644][T10571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.808877][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.813124][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.816992][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.819905][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.839929][ T6046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.842332][ T6046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.852636][ T5962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.855080][ T5962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.229786][T11029] gre0: entered promiscuous mode [ 801.231947][T11029] gre0: entered allmulticast mode [ 801.620886][ T42] kauditd_printk_skb: 99 callbacks suppressed [ 801.620903][ T42] audit: type=1326 audit(2000000520.647:58372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.2.5062" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fec code=0x0 [ 802.036689][ T5742] Bluetooth: hci6: command tx timeout [ 802.615947][T11059] 9pnet_virtio: no channels available for device syz [ 802.631451][T11059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5065'. [ 802.635633][T11059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5065'. [ 802.878097][T11067] batman_adv: batadv0: Adding interface: gretap1 [ 802.880112][T11067] batman_adv: batadv0: Interface activated: gretap1 [ 803.237952][T11073] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5067'. [ 803.758868][T11086] siw: device registration error -23 [ 804.290852][ T5742] Bluetooth: hci6: command tx timeout [ 804.903462][T11096] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 804.905557][T11096] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 804.912498][T11096] vhci_hcd vhci_hcd.0: Device attached [ 805.094395][T11096] 8021q: adding VLAN 0 to HW filter on device .` [ 805.098295][T11096] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.104228][T11096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.209141][T11096] veth1_vlan: left promiscuous mode [ 805.212323][T11096] veth0_vlan: left promiscuous mode [ 805.215053][T11096] veth0_vlan: entered promiscuous mode [ 805.219023][T11096] veth1_vlan: entered promiscuous mode [ 805.222986][ T5830] usb 46-1: SetAddress Request (18) to port 0 [ 805.227633][ T5830] usb 46-1: new SuperSpeed USB device number 18 using vhci_hcd [ 805.231435][T11096] veth1_macvtap: left promiscuous mode [ 805.234952][T11096] veth0_macvtap: left promiscuous mode [ 805.237965][T11096] veth0_macvtap: entered promiscuous mode [ 805.241069][T11096] veth1_macvtap: entered promiscuous mode [ 805.248321][T11096] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 805.251463][T11096] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 805.254348][T11096] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 805.258021][T11096] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 805.262364][T11096] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 805.291441][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.296849][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.305602][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.311432][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.387945][T11101] vhci_hcd: connection reset by peer [ 805.390199][ T13] vhci_hcd vhci_hcd.4: stop threads [ 805.392269][ T13] vhci_hcd vhci_hcd.4: release socket [ 805.395056][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 805.929098][T11120] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 805.931838][T11120] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 805.935306][T11120] vhci_hcd vhci_hcd.0: Device attached [ 805.967533][T11121] vhci_hcd: connection closed [ 805.967758][ T12] vhci_hcd vhci_hcd.5: stop threads [ 805.971743][ T12] vhci_hcd vhci_hcd.5: release socket [ 805.973405][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 806.077704][T11185] sctp: [Deprecated]: syz.4.5077 (pid 11185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 806.077704][T11185] Use struct sctp_sack_info instead [ 806.545138][ T5742] Bluetooth: hci6: command tx timeout [ 806.651629][T11199] xt_TPROXY: Can be used only with -p tcp or -p udp [ 806.657630][T11199] openvswitch: netlink: Flow key attr not present in new flow. [ 807.049581][T11209] bond3: option resend_igmp: invalid value (2622) [ 807.057445][T11209] bond3: option resend_igmp: allowed values 0 - 255 [ 807.076161][ T42] audit: type=1326 audit(2000000525.556:58373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.5.5080" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 807.091650][T11209] bond3 (unregistering): Released all slaves [ 807.108668][ T42] audit: type=1326 audit(2000000525.556:58374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.5.5080" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 807.128012][ T42] audit: type=1326 audit(2000000525.556:58375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.5.5080" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709efec code=0x7ffc0000 [ 807.179866][ T42] audit: type=1326 audit(2000000525.556:58376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.5.5080" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 807.215188][ T42] audit: type=1326 audit(2000000525.556:58377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.5.5080" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 807.245691][ T42] audit: type=1326 audit(2000000525.565:58378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.5.5080" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709efec code=0x7ffc0000 [ 807.262304][ T42] audit: type=1326 audit(2000000525.565:58379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.5.5080" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 807.297318][ T42] audit: type=1326 audit(2000000525.565:58380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.5.5080" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 807.311806][ T42] audit: type=1326 audit(2000000525.565:58381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.5.5080" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709efec code=0x7ffc0000 [ 807.327480][ T42] audit: type=1326 audit(2000000525.565:58382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.5.5080" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 808.605887][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5090'. [ 808.616272][T11342] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 808.620254][T11342] bond1 (unregistering): Released all slaves [ 808.817025][T11412] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.821451][T11412] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.935251][T11412] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.939362][T11412] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.034845][T11412] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.038369][T11412] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.401780][T11412] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.404921][T11412] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.761164][ T5815] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.765046][ T5815] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.772448][ T5815] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.776285][ T5815] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.782338][ T5815] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.787753][ T5815] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.819034][ T5815] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.827192][ T5815] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.899305][T11433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5093'. [ 810.706871][ T5830] usb 46-1: device descriptor read/8, error -110 [ 810.765511][T11456] syzkaller0: entered promiscuous mode [ 810.767612][T11456] syzkaller0: entered allmulticast mode [ 811.954020][ T5830] usb usb46-port1: attempt power cycle [ 812.227593][T11487] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.299414][T11494] lo speed is unknown, defaulting to 1000 [ 812.382422][ T6166] Process accounting resumed [ 812.407898][T11523] syzkaller0: entered promiscuous mode [ 812.413243][T11523] syzkaller0: entered allmulticast mode [ 812.441939][T11523] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5101'. [ 812.562530][ T42] kauditd_printk_skb: 91 callbacks suppressed [ 812.562546][ T42] audit: type=1326 audit(2000000530.742:58474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11527 comm="syz.7.5104" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x0 [ 812.574988][ T5830] usb usb46-port1: unable to enumerate USB device [ 812.602265][T11487] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.768942][T11487] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.848614][T11493] Process accounting resumed [ 812.906263][T11487] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.166303][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.176311][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.188230][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.199728][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.808786][ T42] audit: type=1804 audit(2000000531.895:58475): pid=11559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.5108" name="/newroot/250/bus/bus" dev="overlay" ino=1353 res=1 errno=0 [ 813.827576][ T42] audit: type=1804 audit(2000000531.904:58476): pid=11559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5108" name="/newroot/250/bus/bus" dev="overlay" ino=1353 res=1 errno=0 [ 814.079832][T11572] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 814.180770][T11574] syzkaller0: entered promiscuous mode [ 814.182744][T11574] syzkaller0: entered allmulticast mode [ 815.867988][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5118'. [ 817.057319][T11632] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 817.231399][T11642] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5127'. [ 817.240184][T11647] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5128'. [ 817.278087][T11652] tipc: New replicast peer: 255.255.255.255 [ 817.281250][T11652] tipc: Enabled bearer , priority 10 [ 817.331694][T11658] lo speed is unknown, defaulting to 1000 [ 817.407716][T11667] overlay: ./file0/file0 is not a directory [ 817.560035][T11697] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.804150][T11697] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.911682][T11697] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.066282][T11697] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.136879][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5132'. [ 818.412409][ T24] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 818.495841][T11701] lo speed is unknown, defaulting to 1000 [ 818.517122][ T845] tipc: Node number set to 1295476813 [ 818.575424][ T24] usb 12-1: Using ep0 maxpacket: 8 [ 818.578799][ T24] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 818.581681][ T24] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 818.584776][ T24] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 818.588081][ T24] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 818.591671][ T24] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 818.595937][ T24] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 818.599177][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.774947][T11742] usb 1-1: USB disconnect, device number 2 [ 818.820806][ T24] usb 12-1: usb_control_msg returned -32 [ 818.822907][ T24] usbtmc 12-1:16.0: can't read capabilities [ 818.839067][T11747] : entered promiscuous mode [ 818.956417][T30372] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.965449][ T5815] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.980245][ T5815] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.986527][ T5815] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.081254][T11776] netlink: 264 bytes leftover after parsing attributes in process `syz.5.5138'. [ 819.209411][ T5845] usb 12-1: USB disconnect, device number 20 [ 820.101919][T11798] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 820.237490][T11807] lo speed is unknown, defaulting to 1000 [ 820.490484][T11849] could not allocate digest TFM handle md5 [ 820.653676][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5144'. [ 820.780725][T11857] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 820.811624][T11857] bond3 (unregistering): Released all slaves [ 821.258428][T11854] lo speed is unknown, defaulting to 1000 [ 821.453045][T11965] bridge0: port 1(vlan2) entered blocking state [ 821.455746][T11965] bridge0: port 1(vlan2) entered disabled state [ 821.458565][T11965] vlan2: entered allmulticast mode [ 821.460669][T11965] vlan0: entered allmulticast mode [ 821.462520][T11965] veth0_vlan: entered allmulticast mode [ 821.464725][T11965] vlan2: entered promiscuous mode [ 821.466362][T11965] vlan0: entered promiscuous mode [ 821.633798][T11977] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.196183][T11986] pim6reg: entered allmulticast mode [ 822.272046][T11985] team0: entered allmulticast mode [ 822.274913][T11985] team0: left allmulticast mode [ 822.276631][T11985] pim6reg: left allmulticast mode [ 822.559820][T11986] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 822.659448][T11980] binder: 11974:11980 ioctl 400454d0 4 returned -22 [ 822.760927][T11977] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.805860][T11998] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5153'. [ 822.912205][T11977] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.047643][T11977] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.161950][ T5747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 823.165179][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 823.168011][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 823.170789][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 823.211022][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 823.370361][T12017] lo speed is unknown, defaulting to 1000 [ 823.491796][T12017] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.494207][T12017] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.501710][T12017] bridge_slave_0: entered allmulticast mode [ 823.504263][T12017] bridge_slave_0: entered promiscuous mode [ 823.508658][T12017] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.511171][T12017] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.513993][T12017] bridge_slave_1: entered allmulticast mode [ 823.517474][T12017] bridge_slave_1: entered promiscuous mode [ 823.529490][T12017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.535044][T12017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.550929][T12017] team0: Port device team_slave_0 added [ 823.554740][T12017] team0: Port device team_slave_1 added [ 823.567163][T12017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.569783][T12017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.579234][T12017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.584834][T12017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.587735][T12017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.598430][T12017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.627300][T12017] hsr_slave_0: entered promiscuous mode [ 823.630212][T12017] hsr_slave_1: entered promiscuous mode [ 823.632495][T12017] debugfs: 'hsr0' already exists in 'hsr' [ 823.634867][T12017] Cannot create hsr debugfs directory [ 823.804899][T12017] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 823.810581][T12017] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 823.816002][T12017] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 823.834522][T12017] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 823.840229][T12017] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 823.854559][T12017] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 823.857475][T12017] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 823.860765][T12017] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 823.941635][T12017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.948447][T12017] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.966969][T12017] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 823.971156][T12017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 823.998010][ T2757] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.000747][ T2757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.013804][ T2757] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.016179][ T2757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.941528][T12017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.025421][T12017] veth0_vlan: entered promiscuous mode [ 825.041092][T12017] veth1_vlan: entered promiscuous mode [ 825.055015][T12017] veth0_macvtap: entered promiscuous mode [ 825.063605][T12017] veth1_macvtap: entered promiscuous mode [ 825.073693][T12017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.080119][T12017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.089070][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.094524][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.111201][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.118467][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.156869][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.159507][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.162270][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.165742][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.193145][ T2757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.195660][ T2757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.210973][ T2757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.213866][ T2757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.343803][T12344] syzkaller0: entered promiscuous mode [ 825.345583][T12344] syzkaller0: entered allmulticast mode [ 825.352796][T12344] tipc: Started in network mode [ 825.354401][T12344] tipc: Node identity c2206d60195, cluster identity 4711 [ 825.356709][T12344] tipc: Enabled bearer , priority 0 [ 825.358909][T12325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5160'. [ 825.361978][T12343] tipc: Resetting bearer [ 825.365448][T12343] tipc: Disabling bearer [ 825.489556][ T5742] Bluetooth: hci3: command tx timeout [ 825.569846][T12355] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.725905][T12355] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.853078][T12355] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.286489][T12355] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.460549][T12370] 9p: Bad value for 'rfdno' [ 826.501805][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 826.508923][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 826.656499][T12370] ceph: No mds server is up or the cluster is laggy [ 827.430142][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5168'. [ 827.524398][T12392] siw: device registration error -23 [ 827.532288][T12392] kAFS: No cell specified [ 827.700357][ T5742] Bluetooth: hci3: command tx timeout [ 828.015401][T12401] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5170'. [ 829.325500][T12418] sock: sock_timestamping_bind_phc: sock not bind to device [ 829.987179][ T5742] Bluetooth: hci3: command tx timeout [ 830.248634][T12432] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 830.251865][T12432] overlayfs: overlapping lowerdir path [ 830.375977][T30372] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.378972][T30372] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.381990][T30372] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.384824][T30372] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.007446][T12454] syzkaller0: entered promiscuous mode [ 831.009214][T12454] syzkaller0: entered allmulticast mode [ 831.014540][T12454] tipc: Enabled bearer , priority 0 [ 831.017590][T12453] tipc: Resetting bearer [ 831.021026][T12453] tipc: Disabling bearer [ 831.099642][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5173'. [ 832.208896][ T5742] Bluetooth: hci3: command tx timeout [ 832.431719][T12475] lo speed is unknown, defaulting to 1000 [ 832.572426][ T7226] libceph: connect (1)[c::]:6789 error -101 [ 832.584587][ T7226] libceph: mon0 (1)[c::]:6789 connect error [ 832.739983][ T845] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 832.873446][ T7226] libceph: connect (1)[c::]:6789 error -101 [ 832.876266][ T7226] libceph: mon0 (1)[c::]:6789 connect error [ 832.915020][ T845] usb 9-1: config 128 has an invalid interface number: 148 but max is 0 [ 832.920448][ T845] usb 9-1: config 128 has no interface number 0 [ 832.929826][ T845] usb 9-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 832.936868][ T845] usb 9-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 833.005914][T12522] Invalid ELF header type: 3 != 1 [ 833.032536][ T845] usb 9-1: config 128 interface 148 has no altsetting 0 [ 833.349189][ T845] usb 9-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 833.353383][ T845] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.357094][ T845] usb 9-1: Product: syz [ 833.358974][ T845] usb 9-1: Manufacturer: syz [ 833.361023][ T845] usb 9-1: SerialNumber: syz [ 833.434785][ T7226] libceph: connect (1)[c::]:6789 error -101 [ 833.437572][ T7226] libceph: mon0 (1)[c::]:6789 connect error [ 833.510480][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 833.646326][ T845] usb 9-1: USB disconnect, device number 36 [ 833.750086][T12509] ceph: No mds server is up or the cluster is laggy [ 834.029345][T12561] lo speed is unknown, defaulting to 1000 [ 834.138093][ T845] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 834.300620][ T845] usb 9-1: Using ep0 maxpacket: 8 [ 834.306342][ T845] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 834.313001][ T845] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 834.322742][ T845] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 834.328478][ T845] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 834.339720][ T845] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 834.350008][ T845] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 834.358496][ T845] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.593382][ T845] usb 9-1: usb_control_msg returned -32 [ 834.596037][ T845] usbtmc 9-1:16.0: can't read capabilities [ 834.966525][T12604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5195'. [ 835.394743][ T5742] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 835.397992][ T5742] CPU: 1 UID: 0 PID: 5742 Comm: kworker/u34:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.398013][ T5742] Tainted: [L]=SOFTLOCKUP [ 835.398018][ T5742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 835.398026][ T5742] Workqueue: hci2 hci_rx_work [ 835.398045][ T5742] Call Trace: [ 835.398049][ T5742] [ 835.398053][ T5742] dump_stack_lvl+0x100/0x190 [ 835.398075][ T5742] sysfs_warn_dup.cold+0x1c/0x28 [ 835.398090][ T5742] sysfs_create_dir_ns+0x24b/0x2b0 [ 835.398108][ T5742] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 835.398124][ T5742] ? kobject_add_internal+0x25f/0x930 [ 835.398142][ T5742] ? lock_release+0x24d/0x310 [ 835.398156][ T5742] ? do_raw_spin_unlock+0x145/0x1e0 [ 835.398174][ T5742] kobject_add_internal+0x2c8/0x930 [ 835.398199][ T5742] kobject_add+0x16a/0x1e0 [ 835.398209][ T5742] ? __pfx_kobject_add+0x10/0x10 [ 835.398223][ T5742] device_add+0x294/0x1970 [ 835.398240][ T5742] ? __pfx_dev_set_name+0x10/0x10 [ 835.398256][ T5742] ? __pfx_device_add+0x10/0x10 [ 835.398269][ T5742] ? mgmt_send_event_skb+0x2fb/0x460 [ 835.398286][ T5742] hci_conn_add_sysfs+0x1a3/0x260 [ 835.398302][ T5742] le_conn_complete_evt+0x11eb/0x1f60 [ 835.398317][ T5742] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 835.398330][ T5742] ? rcu_is_watching+0x12/0xc0 [ 835.398340][ T5742] ? hci_event_packet+0x186/0xcd0 [ 835.398352][ T5742] ? lock_release+0x24d/0x310 [ 835.398367][ T5742] hci_le_conn_complete_evt+0x23c/0x3a0 [ 835.398381][ T5742] ? skb_pull_data+0x15f/0x1e0 [ 835.398395][ T5742] hci_le_meta_evt+0x34a/0x5f0 [ 835.398410][ T5742] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 835.398425][ T5742] hci_event_packet+0x51c/0xcd0 [ 835.398438][ T5742] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 835.398453][ T5742] ? __pfx_hci_event_packet+0x10/0x10 [ 835.398465][ T5742] ? rcu_is_cpu_rrupt_from_idle+0x210/0x270 [ 835.398477][ T5742] ? trace_irq_enable.constprop.0+0x122/0x160 [ 835.398495][ T5742] hci_rx_work+0x451/0xfc0 [ 835.398509][ T5742] process_one_work+0xa23/0x1940 [ 835.398525][ T5742] ? __pfx_process_one_work+0x10/0x10 [ 835.398540][ T5742] ? __pfx_hci_rx_work+0x10/0x10 [ 835.398553][ T5742] worker_thread+0x5ef/0xe50 [ 835.398568][ T5742] ? kthread+0x13a/0x450 [ 835.398579][ T5742] ? __pfx_worker_thread+0x10/0x10 [ 835.398591][ T5742] kthread+0x370/0x450 [ 835.398602][ T5742] ? __pfx_kthread+0x10/0x10 [ 835.398614][ T5742] ret_from_fork+0x72b/0xd50 [ 835.398624][ T5742] ? __pfx_ret_from_fork+0x10/0x10 [ 835.398635][ T5742] ? __switch_to+0x800/0x10f0 [ 835.398649][ T5742] ? __pfx_kthread+0x10/0x10 [ 835.398661][ T5742] ret_from_fork_asm+0x1a/0x30 [ 835.398677][ T5742] [ 835.398687][ T5742] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 835.483579][ T5742] Bluetooth: hci2: failed to register connection device [ 835.518538][T12613] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 835.560887][T12611] syz.8.5196 (12611): drop_caches: 2 [ 836.182241][T12618] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5198'. [ 836.861456][T12648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 836.887004][ T7226] usb 9-1: USB disconnect, device number 37 [ 837.950291][T12677] can0: slcan on ttyS3. [ 838.427221][T12690] netlink: 108 bytes leftover after parsing attributes in process `syz.8.5210'. [ 838.620232][T12695] syz.2.5211: page allocation failure: order:7, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 838.626241][T12695] CPU: 0 UID: 0 PID: 12695 Comm: syz.2.5211 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.626271][T12695] Tainted: [L]=SOFTLOCKUP [ 838.626278][T12695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 838.626289][T12695] Call Trace: [ 838.626296][T12695] [ 838.626303][T12695] dump_stack_lvl+0x100/0x190 [ 838.626333][T12695] warn_alloc.cold+0x95/0x1c1 [ 838.626351][T12695] ? __pfx_warn_alloc+0x10/0x10 [ 838.626393][T12695] ? get_page_from_freelist+0xbf0/0x3d20 [ 838.626420][T12695] ? rcu_is_watching+0x12/0xc0 [ 838.626438][T12695] ? __pfx___might_resched+0x10/0x10 [ 838.626461][T12695] __alloc_frozen_pages_noprof+0xf25/0x2b60 [ 838.626489][T12695] ? stack_trace_save+0x8e/0xc0 [ 838.626510][T12695] ? stack_depot_save_flags+0x27/0x9d0 [ 838.626533][T12695] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 838.626558][T12695] ? qp_host_alloc_queue+0x4e/0x210 [ 838.626582][T12695] ? kasan_save_stack+0x30/0x50 [ 838.626602][T12695] ? kasan_save_track+0x14/0x30 [ 838.626625][T12695] ? __kasan_kmalloc+0xaa/0xb0 [ 838.626649][T12695] ? qp_host_alloc_queue+0x4e/0x210 [ 838.626672][T12695] ? qp_broker_alloc+0xebd/0x1bc0 [ 838.626697][T12695] ? vmci_qp_broker_alloc+0x93/0xc0 [ 838.626739][T12695] ? do_fast_syscall_32+0x32/0x70 [ 838.626762][T12695] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 838.626787][T12695] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 838.626810][T12695] ? policy_nodemask+0xed/0x4f0 [ 838.626839][T12695] alloc_pages_mpol+0x1fb/0x540 [ 838.626865][T12695] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 838.626892][T12695] ? qp_host_alloc_queue+0x4e/0x210 [ 838.626915][T12695] ___kmalloc_large_node+0xe5/0x120 [ 838.626934][T12695] __kmalloc_large_node_noprof+0x1c/0x70 [ 838.626951][T12695] ? __kasan_kmalloc+0xaa/0xb0 [ 838.626975][T12695] __kmalloc_noprof+0x5b4/0x840 [ 838.626997][T12695] qp_host_alloc_queue+0x4e/0x210 [ 838.627019][T12695] qp_broker_alloc+0xefa/0x1bc0 [ 838.627048][T12695] ? __pfx_qp_broker_alloc+0x10/0x10 [ 838.627074][T12695] ? rcu_is_watching+0x12/0xc0 [ 838.627093][T12695] vmci_qp_broker_alloc+0x93/0xc0 [ 838.627122][T12695] vmci_host_do_alloc_queuepair.constprop.0+0x1ad/0x3f0 [ 838.627146][T12695] ? __pfx_vmci_host_do_alloc_queuepair.constprop.0+0x10/0x10 [ 838.627175][T12695] ? rcu_is_watching+0x12/0xc0 [ 838.627191][T12695] ? trace_irq_enable.constprop.0+0x122/0x160 [ 838.627220][T12695] ? tomoyo_path_number_perm+0x188/0x580 [ 838.627241][T12695] vmci_host_unlocked_ioctl+0x697/0x2070 [ 838.627266][T12695] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 838.627289][T12695] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 838.627310][T12695] ? do_vfs_ioctl+0x226/0x13e0 [ 838.627333][T12695] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 838.627358][T12695] ? rcu_is_watching+0x12/0xc0 [ 838.627375][T12695] ? __fget_files+0x215/0x3d0 [ 838.627401][T12695] ? hook_file_ioctl_common+0x149/0x410 [ 838.627420][T12695] ? __fget_files+0x21f/0x3d0 [ 838.627446][T12695] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 838.627471][T12695] compat_ptr_ioctl+0x6e/0xa0 [ 838.627493][T12695] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 838.627514][T12695] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 838.627539][T12695] __do_fast_syscall_32+0xe7/0x970 [ 838.627559][T12695] ? trace_hardirqs_on_prepare+0x1d/0x30 [ 838.627584][T12695] do_fast_syscall_32+0x32/0x70 [ 838.627608][T12695] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 838.627630][T12695] RIP: 0023:0xf7fd5fec [ 838.627650][T12695] Code: Unable to access opcode bytes at 0xf7fd5fc2. [ 838.627659][T12695] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 838.627675][T12695] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000000007a8 [ 838.627685][T12695] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 838.627696][T12695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 838.627712][T12695] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 838.627723][T12695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 838.627740][T12695] [ 838.627801][T12695] Mem-Info: [ 838.712788][T12696] lo speed is unknown, defaulting to 1000 [ 838.716943][T12695] active_anon:3604 inactive_anon:3579 isolated_anon:0 [ 838.716943][T12695] active_file:645 inactive_file:7262 isolated_file:0 [ 838.716943][T12695] unevictable:1777 dirty:0 writeback:0 [ 838.716943][T12695] slab_reclaimable:7621 slab_unreclaimable:75682 [ 838.716943][T12695] mapped:32875 shmem:7525 pagetables:1518 [ 838.716943][T12695] sec_pagetables:395 bounce:0 [ 838.716943][T12695] kernel_misc_reclaimable:0 [ 838.716943][T12695] free:29593 free_pcp:846 free_cma:0 [ 838.840743][T12695] Node 0 active_anon:0kB inactive_anon:4108kB active_file:164kB inactive_file:68kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:176kB dirty:4kB writeback:0kB shmem:7540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8416kB pagetables:1060kB sec_pagetables:1172kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 838.854735][T12695] Node 1 active_anon:16404kB inactive_anon:4296kB active_file:8940kB inactive_file:25480kB unevictable:3572kB isolated(anon):0kB isolated(file):0kB mapped:123872kB dirty:0kB writeback:0kB shmem:18860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9816kB pagetables:5012kB sec_pagetables:408kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 838.868464][T12695] Node 0 DMA free:2540kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:32kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 838.884588][T12695] lowmem_reserve[]: 0 284 284 284 284 [ 838.888186][T12695] Node 0 DMA32 free:19512kB boost:29416kB min:42492kB low:45760kB high:49028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:2664kB active_file:164kB inactive_file:68kB unevictable:3536kB writepending:4kB zspages:1732kB present:1032196kB managed:291764kB mlocked:0kB bounce:0kB free_pcp:1632kB local_pcp:16kB free_cma:0kB [ 838.902445][T12695] lowmem_reserve[]: 0 0 0 0 0 [ 838.904531][T12695] Node 1 DMA32 free:90904kB boost:6144kB min:53288kB low:65072kB high:76856kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16480kB inactive_anon:1056kB active_file:8956kB inactive_file:25568kB unevictable:3572kB writepending:0kB zspages:4948kB present:1048432kB managed:948212kB mlocked:36kB bounce:0kB free_pcp:12528kB local_pcp:3624kB free_cma:0kB [ 838.918282][T12695] lowmem_reserve[]: 0 0 0 0 0 [ 838.920508][T12695] Node 0 DMA: 127*4kB (UM) 44*8kB (UM) 7*16kB (UM) 11*32kB (UM) 7*64kB (UM) 2*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2540kB [ 838.926554][T12695] Node 0 DMA32: 224*4kB (UME) 192*8kB (UME) 32*16kB (UM) 130*32kB (UME) 69*64kB (UME) 33*128kB (UME) 6*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 21376kB [ 838.934695][T12676] can0 (unregistered): slcan off ttyS3. [ 838.937865][T12695] Node 1 DMA32: 1720*4kB (U) 1949*8kB (UE) 4328*16kB (UE) 70*32kB (U) 22*64kB (U) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 95752kB [ 838.944898][T12695] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 838.949191][T12695] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 838.953335][T12695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 838.957371][T12695] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 838.961263][T12695] 17045 total pagecache pages [ 838.963243][T12695] 997 pages in swap cache [ 838.965032][T12695] Free swap = 85140kB [ 838.966740][T12695] Total swap = 124996kB [ 838.968470][T12695] 524155 pages RAM [ 838.970034][T12695] 0 pages HighMem/MovableOnly [ 838.972199][T12695] 210321 pages reserved [ 838.973988][T12695] 0 pages cma reserved [ 839.186084][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5213'. [ 842.828361][T12779] qnx6: unable to read the first superblock [ 842.830548][T12779] qnx6: unable to read the first superblock [ 842.832396][T12779] qnx6: unable to read the first superblock [ 843.011142][ T42] audit: type=1326 audit(2000000558.829:58477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12781 comm="syz.2.5221" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fec code=0x0 [ 843.595885][T12792] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.603969][T12792] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.888882][T12807] lo speed is unknown, defaulting to 1000 [ 843.895202][T12811] netlink: 'syz.4.5225': attribute type 61 has an invalid length. [ 843.941506][ T42] audit: type=1326 audit(2000000559.696:58478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12799 comm="syz.4.5225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 843.949168][ T42] audit: type=1326 audit(2000000559.696:58479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12799 comm="syz.4.5225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 843.957555][ T42] audit: type=1326 audit(2000000559.696:58480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12799 comm="syz.4.5225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 843.965671][ T42] audit: type=1326 audit(2000000559.696:58481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12799 comm="syz.4.5225" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70befec code=0x7ffc0000 [ 843.973779][ T42] audit: type=1326 audit(2000000559.696:58482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12799 comm="syz.4.5225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 843.981838][ T42] audit: type=1326 audit(2000000559.696:58483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12799 comm="syz.4.5225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 843.989899][ T42] audit: type=1326 audit(2000000559.696:58484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12799 comm="syz.4.5225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 843.997873][ T42] audit: type=1326 audit(2000000559.705:58485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12799 comm="syz.4.5225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 844.006944][ T42] audit: type=1326 audit(2000000559.705:58486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12799 comm="syz.4.5225" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70befec code=0x7ffc0000 [ 844.017679][T12839] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5223'. [ 844.877930][T12861] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5231'. [ 845.768526][T12877] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5233'. [ 846.934158][T12884] tun0: tun_chr_ioctl cmd 1074025676 [ 846.939549][T12884] tun0: owner set to 0 [ 848.082688][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5234'. [ 848.097975][T12896] syzkaller0: entered promiscuous mode [ 848.099807][T12896] syzkaller0: entered allmulticast mode [ 848.105041][T12896] tipc: Enabled bearer , priority 0 [ 848.113482][T12894] tipc: Resetting bearer [ 848.120309][T12894] tipc: Disabling bearer [ 848.146555][T12903] syzkaller0: entered promiscuous mode [ 848.148347][T12903] syzkaller0: entered allmulticast mode [ 848.209778][T12916] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 848.212109][T12916] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 848.215016][T12916] vhci_hcd vhci_hcd.0: Device attached [ 848.221814][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5242'. [ 848.221893][T12917] vhci_hcd: unknown pdu 1 [ 848.231265][ T12] vhci_hcd vhci_hcd.2: stop threads [ 848.233995][ T12] vhci_hcd vhci_hcd.2: release socket [ 848.241282][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 848.255623][T12937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.261022][T12920] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 848.266733][T12937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.271448][T12920] bond3 (unregistering): Released all slaves [ 848.313966][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5239'. [ 848.713884][ T42] kauditd_printk_skb: 428 callbacks suppressed [ 848.713899][ T42] audit: type=1326 audit(2000000564.097:58915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13025 comm="syz.4.5248" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x0 [ 848.847469][T13033] syzkaller0: entered promiscuous mode [ 848.849296][T13033] syzkaller0: entered allmulticast mode [ 848.856681][T13033] tipc: Enabled bearer , priority 0 [ 848.859926][T13032] tipc: Resetting bearer [ 848.864661][T13032] tipc: Disabling bearer [ 849.011865][T13045] binder: 13044:13045 ioctl 80085504 80000240 returned -22 [ 849.119453][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5253'. [ 849.128790][T13054] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 849.133305][T13054] bond1 (unregistering): Released all slaves [ 849.306379][T13124] could not allocate digest TFM handle md5 [ 849.324366][T13124] lo speed is unknown, defaulting to 1000 [ 849.452832][T13161] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 849.454864][T13161] [U] J"—e:ÀÆ" [ 849.529517][T13178] syzkaller0: entered promiscuous mode [ 849.531891][T13178] syzkaller0: entered allmulticast mode [ 849.541410][T13178] tipc: Started in network mode [ 849.543523][T13178] tipc: Node identity 8699e2f577d5, cluster identity 4711 [ 849.546443][T13178] tipc: Enabled bearer , priority 0 [ 849.553244][T13176] tipc: Resetting bearer [ 849.558138][T13176] tipc: Disabling bearer [ 849.667768][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5263'. [ 849.698343][T13195] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 849.722671][T13195] bond3 (unregistering): Released all slaves [ 849.870930][T13281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5266'. [ 850.589338][ T42] audit: type=1326 audit(2000000565.823:58916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.2.5271" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fec code=0x0 [ 850.877788][T13310] binder: BINDER_SET_CONTEXT_MGR already set [ 850.880369][T13310] binder: 13309:13310 ioctl 4018620d 80000240 returned -16 [ 851.521903][T13316] syzkaller0: entered promiscuous mode [ 851.524294][T13316] syzkaller0: entered allmulticast mode [ 851.531472][T13316] tipc: Enabled bearer , priority 0 [ 851.534955][T13315] tipc: Resetting bearer [ 851.538601][T13315] tipc: Disabling bearer [ 851.545981][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5275'. [ 851.571087][T13322] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 851.576152][T13322] bond3 (unregistering): Released all slaves [ 851.746531][T13392] lo speed is unknown, defaulting to 1000 [ 851.830876][T13421] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5279'. [ 851.839182][T13421] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5279'. [ 851.847299][T13421] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5279'. [ 851.918775][T13400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5276'. [ 852.376927][T13432] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5282'. [ 852.766251][T13437] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.826729][T13437] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.850144][T13449] syzkaller0: entered promiscuous mode [ 852.851927][T13449] syzkaller0: entered allmulticast mode [ 852.857010][T13449] tipc: Enabled bearer , priority 0 [ 852.860672][T13448] tipc: Resetting bearer [ 852.866488][T13448] tipc: Disabling bearer [ 852.965741][T13466] netlink: 'syz.8.5287': attribute type 6 has an invalid length. [ 852.969020][T13466] netlink: 232 bytes leftover after parsing attributes in process `syz.8.5287'. [ 853.027950][T13437] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.067207][T13473] lo speed is unknown, defaulting to 1000 [ 853.190249][T13437] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.209953][T13486] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.214281][T13486] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.407298][T13466] netlink: 5252 bytes leftover after parsing attributes in process `syz.8.5287'. [ 853.506412][T13503] bond3: entered allmulticast mode [ 853.515184][T13486] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.518265][T13486] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.531371][T13503] netlink: 'syz.4.5289': attribute type 10 has an invalid length. [ 853.561127][T19721] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.574959][T19721] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.588817][T19721] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.607784][T19721] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.640147][T13486] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.643258][T13486] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.682500][T13507] lo speed is unknown, defaulting to 1000 [ 853.717074][T13486] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.720431][T13486] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.115213][ T5815] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.119726][ T5815] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.128044][ T5815] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.131533][ T5815] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.144328][ T5815] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.150225][ T5815] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.158851][ T5815] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.163118][ T5815] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.231538][T13592] program syz.8.5290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 854.488788][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 854.491291][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 854.681421][T13649] veth5: entered allmulticast mode [ 854.701535][T13633] ceph: No mds server is up or the cluster is laggy [ 854.738115][T13649] bond4: (slave veth5): Enslaving as an active interface with an up link [ 854.842076][T13650] bond4 (unregistering): (slave veth5): Releasing backup interface [ 854.846642][T13650] bond4 (unregistering): Released all slaves [ 854.870323][T14250] netlink: 'syz.8.5296': attribute type 22 has an invalid length. [ 854.876247][T14250] netlink: 'syz.8.5296': attribute type 1 has an invalid length. [ 855.546273][T14289] __nla_validate_parse: 4 callbacks suppressed [ 855.546286][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5298'. [ 855.564978][T14289] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 855.571053][T14289] bond2 (unregistering): Released all slaves [ 855.952310][T14426] lo speed is unknown, defaulting to 1000 [ 856.121530][T14468] input: syz0 as /devices/virtual/input/input45 [ 856.129710][T14474] syzkaller0: entered promiscuous mode [ 856.131821][T14474] syzkaller0: entered allmulticast mode [ 856.454683][T14548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 856.538891][ T5742] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 856.543496][ T5742] CPU: 3 UID: 0 PID: 5742 Comm: kworker/u34:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 856.543517][ T5742] Tainted: [L]=SOFTLOCKUP [ 856.543521][ T5742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 856.543529][ T5742] Workqueue: hci3 hci_rx_work [ 856.543547][ T5742] Call Trace: [ 856.543551][ T5742] [ 856.543556][ T5742] dump_stack_lvl+0x100/0x190 [ 856.543575][ T5742] sysfs_warn_dup.cold+0x1c/0x28 [ 856.543592][ T5742] sysfs_create_dir_ns+0x24b/0x2b0 [ 856.543610][ T5742] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 856.543626][ T5742] ? kobject_add_internal+0x25f/0x930 [ 856.543644][ T5742] ? lock_release+0x24d/0x310 [ 856.543658][ T5742] ? do_raw_spin_unlock+0x145/0x1e0 [ 856.543674][ T5742] kobject_add_internal+0x2c8/0x930 [ 856.543693][ T5742] kobject_add+0x16a/0x1e0 [ 856.543704][ T5742] ? __pfx_kobject_add+0x10/0x10 [ 856.543715][ T5742] ? kobject_put+0xb9/0x640 [ 856.543729][ T5742] ? _raw_spin_unlock+0x28/0x50 [ 856.543742][ T5742] device_add+0x294/0x1970 [ 856.543756][ T5742] ? __pfx_dev_set_name+0x10/0x10 [ 856.543770][ T5742] ? __pfx_device_add+0x10/0x10 [ 856.543782][ T5742] ? mgmt_send_event_skb+0x2fb/0x460 [ 856.543798][ T5742] hci_conn_add_sysfs+0x1a3/0x260 [ 856.543814][ T5742] le_conn_complete_evt+0x11eb/0x1f60 [ 856.543830][ T5742] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 856.543843][ T5742] ? rcu_is_watching+0x12/0xc0 [ 856.543852][ T5742] ? hci_event_packet+0x186/0xcd0 [ 856.543865][ T5742] ? lock_release+0x24d/0x310 [ 856.543880][ T5742] hci_le_conn_complete_evt+0x23c/0x3a0 [ 856.543894][ T5742] ? skb_pull_data+0x15f/0x1e0 [ 856.543907][ T5742] hci_le_meta_evt+0x34a/0x5f0 [ 856.543922][ T5742] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 856.543937][ T5742] hci_event_packet+0x51c/0xcd0 [ 856.543950][ T5742] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 856.543965][ T5742] ? __pfx_hci_event_packet+0x10/0x10 [ 856.543977][ T5742] ? rcu_is_cpu_rrupt_from_idle+0x210/0x270 [ 856.543990][ T5742] ? trace_irq_enable.constprop.0+0x122/0x160 [ 856.544007][ T5742] hci_rx_work+0x451/0xfc0 [ 856.544022][ T5742] process_one_work+0xa23/0x1940 [ 856.544038][ T5742] ? __pfx_process_one_work+0x10/0x10 [ 856.544052][ T5742] ? __pfx_hci_rx_work+0x10/0x10 [ 856.544066][ T5742] worker_thread+0x5ef/0xe50 [ 856.544081][ T5742] ? kthread+0x13a/0x450 [ 856.544091][ T5742] ? __pfx_worker_thread+0x10/0x10 [ 856.544103][ T5742] kthread+0x370/0x450 [ 856.544114][ T5742] ? __pfx_kthread+0x10/0x10 [ 856.544126][ T5742] ret_from_fork+0x72b/0xd50 [ 856.544137][ T5742] ? __pfx_ret_from_fork+0x10/0x10 [ 856.544147][ T5742] ? __switch_to+0x800/0x10f0 [ 856.544162][ T5742] ? __pfx_kthread+0x10/0x10 [ 856.544173][ T5742] ret_from_fork_asm+0x1a/0x30 [ 856.544190][ T5742] [ 856.544200][ T5742] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 856.635369][ T5742] Bluetooth: hci3: failed to register connection device [ 856.732161][T14556] vxcan0: tx address claim with dest, not broadcast [ 856.751192][T14556] overlay: Bad value for 'uuid' [ 857.060812][T14559] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5307'. [ 857.164682][T14560] lo speed is unknown, defaulting to 1000 [ 858.024415][T14587] syzkaller0: entered promiscuous mode [ 858.026297][T14587] syzkaller0: entered allmulticast mode [ 858.031061][T14587] tipc: Enabled bearer , priority 0 [ 858.035688][T14586] tipc: Resetting bearer [ 858.040122][T14586] tipc: Disabling bearer [ 858.259065][T14597] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5311'. [ 858.324928][T14601] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 858.338748][T14601] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 858.346483][T14601] overlayfs: missing 'lowerdir' [ 858.560955][T14594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5309'. [ 858.754597][T14599] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5310'. [ 858.764159][T14600] FAULT_INJECTION: forcing a failure. [ 858.764159][T14600] name failslab, interval 1, probability 0, space 0, times 0 [ 858.783036][T14600] CPU: 2 UID: 0 PID: 14600 Comm: syz.4.5309 Tainted: G L syzkaller #0 PREEMPT(full) [ 858.783066][T14600] Tainted: [L]=SOFTLOCKUP [ 858.783073][T14600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 858.783084][T14600] Call Trace: [ 858.783090][T14600] [ 858.783097][T14600] dump_stack_lvl+0x100/0x190 [ 858.783130][T14600] should_fail_ex.cold+0x5/0xa [ 858.783149][T14600] ? __kmalloc_cache_node_noprof+0x57/0x760 [ 858.783178][T14600] should_failslab+0xc2/0x120 [ 858.783205][T14600] __kmalloc_cache_node_noprof+0x7d/0x760 [ 858.783229][T14600] ? __get_vm_area_node+0x101/0x330 [ 858.783248][T14600] __get_vm_area_node+0x101/0x330 [ 858.783264][T14600] ? __css_rstat_updated+0x1ce/0x5a0 [ 858.783288][T14600] __vmalloc_node_range_noprof+0x228/0x1630 [ 858.783307][T14600] ? kernel_clone+0x176/0x9d0 [ 858.783328][T14600] ? kernel_clone+0x176/0x9d0 [ 858.783345][T14600] ? rcu_is_watching+0x12/0xc0 [ 858.783361][T14600] ? rcu_read_unlock+0x17/0x60 [ 858.783393][T14600] ? lock_release+0x24d/0x310 [ 858.783417][T14600] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 858.783439][T14600] ? rcu_is_watching+0x12/0xc0 [ 858.783456][T14600] ? trace_kmem_cache_alloc+0xdd/0x100 [ 858.783473][T14600] ? kernel_clone+0x176/0x9d0 [ 858.783488][T14600] __vmalloc_node_noprof+0xad/0xf0 [ 858.783506][T14600] ? kernel_clone+0x176/0x9d0 [ 858.783523][T14600] copy_process+0x7fb/0x7ff0 [ 858.783540][T14600] ? kstrtouint+0xdf/0x130 [ 858.783566][T14600] ? __pfx_kstrtouint+0x10/0x10 [ 858.783592][T14600] ? __pfx_copy_process+0x10/0x10 [ 858.783609][T14600] ? rcu_is_watching+0x12/0xc0 [ 858.783625][T14600] ? get_pid_task+0xfc/0x250 [ 858.783643][T14600] ? rcu_is_watching+0x12/0xc0 [ 858.783658][T14600] ? get_pid_task+0xfc/0x250 [ 858.783674][T14600] ? lock_release+0x24d/0x310 [ 858.783698][T14600] kernel_clone+0x176/0x9d0 [ 858.783713][T14600] ? proc_fail_nth_write+0x9f/0x220 [ 858.783739][T14600] ? __pfx_kernel_clone+0x10/0x10 [ 858.783754][T14600] ? rcu_is_watching+0x12/0xc0 [ 858.783773][T14600] ? ksys_write+0x190/0x250 [ 858.783798][T14600] ? rcu_is_watching+0x12/0xc0 [ 858.783813][T14600] ? ksys_write+0x190/0x250 [ 858.783837][T14600] ? lock_release+0x24d/0x310 [ 858.783861][T14600] __do_compat_sys_ia32_clone+0xd4/0x120 [ 858.783888][T14600] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 858.783924][T14600] ? fput+0x79/0x100 [ 858.783942][T14600] ? ksys_write+0x1ac/0x250 [ 858.783965][T14600] ? __pfx_ksys_write+0x10/0x10 [ 858.783990][T14600] ? rcu_is_watching+0x12/0xc0 [ 858.784007][T14600] __do_fast_syscall_32+0xe7/0x970 [ 858.784034][T14600] do_fast_syscall_32+0x32/0x70 [ 858.784056][T14600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 858.784079][T14600] RIP: 0023:0xf70befec [ 858.784097][T14600] Code: Unable to access opcode bytes at 0xf70befc2. [ 858.784106][T14600] RSP: 002b:00000000f548c4bc EFLAGS: 00000202 ORIG_RAX: 0000000000000078 [ 858.784123][T14600] RAX: ffffffffffffffda RBX: 0000000000000400 RCX: 00000000800003e0 [ 858.784136][T14600] RDX: 00000000800005c0 RSI: 0000000080000600 RDI: 0000000080000640 [ 858.784147][T14600] RBP: 00000000f74b5018 R08: 0000000000000000 R09: 0000000000000000 [ 858.784157][T14600] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 858.784169][T14600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 858.784185][T14600] [ 858.784209][T14600] syz.4.5309: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 858.966212][T14600] CPU: 3 UID: 0 PID: 14600 Comm: syz.4.5309 Tainted: G L syzkaller #0 PREEMPT(full) [ 858.966243][T14600] Tainted: [L]=SOFTLOCKUP [ 858.966248][T14600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 858.966258][T14600] Call Trace: [ 858.966264][T14600] [ 858.966271][T14600] dump_stack_lvl+0x100/0x190 [ 858.966300][T14600] warn_alloc.cold+0x95/0x1c1 [ 858.966317][T14600] ? __pfx_warn_alloc+0x10/0x10 [ 858.966337][T14600] ? trace_kmalloc+0xeb/0x110 [ 858.966352][T14600] ? __kmalloc_cache_node_noprof+0x2d9/0x760 [ 858.966378][T14600] ? __kasan_kmalloc+0x8a/0xb0 [ 858.966402][T14600] ? __get_vm_area_node+0x208/0x330 [ 858.966420][T14600] __vmalloc_node_range_noprof+0xccd/0x1630 [ 858.966443][T14600] ? kernel_clone+0x176/0x9d0 [ 858.966459][T14600] ? rcu_is_watching+0x12/0xc0 [ 858.966474][T14600] ? rcu_read_unlock+0x17/0x60 [ 858.966490][T14600] ? lock_release+0x24d/0x310 [ 858.966511][T14600] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 858.966530][T14600] ? rcu_is_watching+0x12/0xc0 [ 858.966545][T14600] ? trace_kmem_cache_alloc+0xdd/0x100 [ 858.966567][T14600] ? kernel_clone+0x176/0x9d0 [ 858.966598][T14600] __vmalloc_node_noprof+0xad/0xf0 [ 858.966616][T14600] ? kernel_clone+0x176/0x9d0 [ 858.966631][T14600] copy_process+0x7fb/0x7ff0 [ 858.966647][T14600] ? kstrtouint+0xdf/0x130 [ 858.966670][T14600] ? __pfx_kstrtouint+0x10/0x10 [ 858.966696][T14600] ? __pfx_copy_process+0x10/0x10 [ 858.966712][T14600] ? rcu_is_watching+0x12/0xc0 [ 858.966728][T14600] ? get_pid_task+0xfc/0x250 [ 858.966746][T14600] ? rcu_is_watching+0x12/0xc0 [ 858.966761][T14600] ? get_pid_task+0xfc/0x250 [ 858.966776][T14600] ? lock_release+0x24d/0x310 [ 858.966800][T14600] kernel_clone+0x176/0x9d0 [ 858.966817][T14600] ? proc_fail_nth_write+0x9f/0x220 [ 858.966841][T14600] ? __pfx_kernel_clone+0x10/0x10 [ 858.966856][T14600] ? rcu_is_watching+0x12/0xc0 [ 858.966873][T14600] ? ksys_write+0x190/0x250 [ 858.966911][T14600] ? rcu_is_watching+0x12/0xc0 [ 858.966923][T14600] ? ksys_write+0x190/0x250 [ 858.966942][T14600] ? lock_release+0x24d/0x310 [ 858.966959][T14600] __do_compat_sys_ia32_clone+0xd4/0x120 [ 858.966981][T14600] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 858.967005][T14600] ? fput+0x79/0x100 [ 858.967018][T14600] ? ksys_write+0x1ac/0x250 [ 858.967037][T14600] ? __pfx_ksys_write+0x10/0x10 [ 858.967061][T14600] ? rcu_is_watching+0x12/0xc0 [ 858.967079][T14600] __do_fast_syscall_32+0xe7/0x970 [ 858.967099][T14600] do_fast_syscall_32+0x32/0x70 [ 858.967117][T14600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 858.967135][T14600] RIP: 0023:0xf70befec [ 858.967151][T14600] Code: Unable to access opcode bytes at 0xf70befc2. [ 858.967157][T14600] RSP: 002b:00000000f548c4bc EFLAGS: 00000202 ORIG_RAX: 0000000000000078 [ 858.967171][T14600] RAX: ffffffffffffffda RBX: 0000000000000400 RCX: 00000000800003e0 [ 858.967183][T14600] RDX: 00000000800005c0 RSI: 0000000080000600 RDI: 0000000080000640 [ 858.967194][T14600] RBP: 00000000f74b5018 R08: 0000000000000000 R09: 0000000000000000 [ 858.967203][T14600] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 858.967215][T14600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 858.967232][T14600] [ 859.121093][T14600] Mem-Info: [ 859.122273][T14600] active_anon:953 inactive_anon:4080 isolated_anon:0 [ 859.122273][T14600] active_file:597 inactive_file:3125 isolated_file:0 [ 859.122273][T14600] unevictable:1777 dirty:74 writeback:75 [ 859.122273][T14600] slab_reclaimable:7581 slab_unreclaimable:76984 [ 859.122273][T14600] mapped:30281 shmem:5392 pagetables:1554 [ 859.122273][T14600] sec_pagetables:399 bounce:0 [ 859.122273][T14600] kernel_misc_reclaimable:0 [ 859.122273][T14600] free:33751 free_pcp:149 free_cma:0 [ 859.149827][T14600] Node 0 active_anon:36kB inactive_anon:28kB active_file:56kB inactive_file:216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:140kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8268kB pagetables:1052kB sec_pagetables:1196kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 859.173533][T14600] Node 1 active_anon:3976kB inactive_anon:14192kB active_file:3632kB inactive_file:11084kB unevictable:3572kB isolated(anon):0kB isolated(file):0kB mapped:118384kB dirty:0kB writeback:100kB shmem:15932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10076kB pagetables:5164kB sec_pagetables:400kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 859.195163][T14600] Node 0 DMA free:2544kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:32kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 859.215766][T14600] lowmem_reserve[]: 0 284 284 284 284 [ 859.218838][T14600] Node 0 DMA32 free:19008kB boost:29416kB min:42492kB low:45760kB high:49028kB reserved_highatomic:2048KB free_highatomic:48KB active_anon:36kB inactive_anon:28kB active_file:56kB inactive_file:216kB unevictable:3536kB writepending:0kB zspages:2484kB present:1032196kB managed:291764kB mlocked:0kB bounce:0kB free_pcp:1912kB local_pcp:0kB free_cma:0kB [ 859.238176][T14600] lowmem_reserve[]: 0 0 0 0 0 [ 859.239699][T14600] Node 1 DMA32 free:116248kB boost:40960kB min:88104kB low:99888kB high:111672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4844kB inactive_anon:9884kB active_file:4108kB inactive_file:10436kB unevictable:3572kB writepending:96kB zspages:5076kB present:1048432kB managed:948212kB mlocked:36kB bounce:0kB free_pcp:1052kB local_pcp:212kB free_cma:0kB [ 859.271105][T14600] lowmem_reserve[]: 0 0 0 0 0 [ 859.272633][T14600] Node 0 DMA: 126*4kB (UM) 47*8kB (UM) 8*16kB (UM) 10*32kB (UM) 7*64kB (UM) 2*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2544kB [ 859.277262][T14600] Node 0 DMA32: 104*4kB (UMEH) 174*8kB (UME) 77*16kB (UM) 103*32kB (UMEH) 48*64kB (ME) 21*128kB (UME) 4*256kB (UM) 5*512kB (UM) 1*1024kB (M) 0*2048kB 1*4096kB (U) = 20800kB [ 859.288225][T14600] Node 1 DMA32: 2384*4kB (UE) 3043*8kB (UME) 4343*16kB (UM) 135*32kB (UM) 15*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 108648kB [ 859.293376][T14600] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 859.296610][T14600] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 859.299779][T14600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 859.303052][T14600] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 859.306295][T14600] 10518 total pagecache pages [ 859.307843][T14600] 906 pages in swap cache [ 859.309248][T14600] Free swap = 52896kB [ 859.310582][T14600] Total swap = 124996kB [ 859.312031][T14600] 524155 pages RAM [ 859.313226][T14600] 0 pages HighMem/MovableOnly [ 859.315234][T14600] 210321 pages reserved [ 859.316670][T14600] 0 pages cma reserved [ 859.658858][T14612] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.897459][T14612] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.977545][T14612] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.038330][T14612] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.128641][ T5815] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.139384][ T5815] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.152012][ T5815] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.175640][ T5815] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.639003][T14632] syzkaller0: entered promiscuous mode [ 860.641127][T14632] syzkaller0: entered allmulticast mode [ 861.027946][T14643] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 861.633974][T14665] syzkaller0: entered promiscuous mode [ 861.639364][T14665] syzkaller0: entered allmulticast mode [ 861.682851][T14665] tipc: Enabled bearer , priority 0 [ 861.695737][T14664] tipc: Resetting bearer [ 861.713641][T14664] tipc: Disabling bearer [ 862.197787][T14653] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5316'. [ 863.161557][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout [ 863.248432][ T5742] Bluetooth: hci3: command 0x0406 tx timeout [ 863.372906][T14690] syzkaller0: entered promiscuous mode [ 863.376455][T14690] syzkaller0: entered allmulticast mode [ 863.943048][T14707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5327'. [ 863.989214][T14702] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5325'. [ 864.198488][T14727] syzkaller0: entered promiscuous mode [ 864.200233][T14727] syzkaller0: entered allmulticast mode [ 864.204731][T14727] tipc: Enabled bearer , priority 0 [ 864.207467][T14726] tipc: Resetting bearer [ 864.210417][T14726] tipc: Disabling bearer [ 864.318580][T14733] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5330'. [ 864.328115][T14738] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 865.184411][T14756] syzkaller0: entered promiscuous mode [ 865.186232][T14756] syzkaller0: entered allmulticast mode [ 866.553173][T14781] netlink: 'syz.4.5338': attribute type 1 has an invalid length. [ 866.564820][T14781] 8021q: adding VLAN 0 to HW filter on device bond4 [ 866.571680][T14781] macvlan3: entered promiscuous mode [ 866.573472][T14781] macvlan3: entered allmulticast mode [ 866.609906][T14824] program syz.8.5339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 866.640449][T14825] bond4: (slave ip6gretap1): making interface the new active one [ 866.645869][T14825] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 866.762693][T14836] can0: slcan on ttyS3. [ 867.599637][T14852] syzkaller0: entered promiscuous mode [ 867.602012][T14852] syzkaller0: entered allmulticast mode [ 867.920159][T14831] can0 (unregistered): slcan off ttyS3. [ 868.000156][T14876] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5346'. [ 868.199963][T14886] syzkaller0: entered promiscuous mode [ 868.202358][T14886] syzkaller0: entered allmulticast mode [ 868.208696][T14886] tipc: Enabled bearer , priority 0 [ 868.212432][T14885] tipc: Resetting bearer [ 868.217091][T14885] tipc: Disabling bearer [ 868.490228][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5348'. [ 868.500438][T14897] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 868.507944][T14897] bond1 (unregistering): Released all slaves [ 869.383938][T14988] syzkaller0: entered promiscuous mode [ 869.386292][T14988] syzkaller0: entered allmulticast mode [ 869.583950][T14999] syzkaller0: entered promiscuous mode [ 869.586898][T14999] syzkaller0: entered allmulticast mode [ 869.596961][T14999] tipc: Enabled bearer , priority 0 [ 869.599991][T14997] tipc: Resetting bearer [ 869.603246][T14997] tipc: Disabling bearer [ 869.706956][T14998] syzkaller0: entered promiscuous mode [ 869.708779][T14998] syzkaller0: entered allmulticast mode [ 869.892338][T15028] overlayfs: missing 'lowerdir' [ 870.098506][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5361'. [ 870.119828][ T2319] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 872.090319][T15048] syzkaller0: entered promiscuous mode [ 872.094173][T15048] syzkaller0: entered allmulticast mode [ 872.369319][T15030] x_tables: duplicate underflow at hook 1 [ 872.418838][T15064] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5366'. [ 872.543193][T15078] syzkaller0: entered promiscuous mode [ 872.545576][T15078] syzkaller0: entered allmulticast mode [ 872.551537][T15078] tipc: Enabled bearer , priority 0 [ 872.560734][T15077] tipc: Resetting bearer [ 872.568803][T15077] tipc: Disabling bearer [ 872.573965][T15055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5364'. [ 872.958858][ T5816] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 873.135492][ T5816] usb 12-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 873.141592][ T5816] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.145023][ T5816] usb 12-1: Product: syz [ 873.147751][ T5816] usb 12-1: Manufacturer: syz [ 873.149354][ T5816] usb 12-1: SerialNumber: syz [ 873.153492][ T5816] usb 12-1: config 0 descriptor?? [ 874.740693][T15121] syzkaller0: entered promiscuous mode [ 874.743108][T15121] syzkaller0: entered allmulticast mode [ 875.323090][T15140] binder: 15137:15140 ioctl c0306201 80000240 returned -22 [ 875.326009][T15139] binder: 15137:15139 ioctl c0306201 80000240 returned -22 [ 875.422154][T15142] batman_adv: batadv0: Adding interface: gretap1 [ 875.424338][T15142] batman_adv: batadv0: Interface activated: gretap1 [ 875.687551][ T29] usb 12-1: USB disconnect, device number 21 [ 877.027139][T15180] netlink: 'syz.8.5379': attribute type 2 has an invalid length. [ 877.034412][T15180] netlink: 'syz.8.5379': attribute type 1 has an invalid length. [ 877.091784][T15195] lo speed is unknown, defaulting to 1000 [ 877.092746][T15193] syzkaller0: entered promiscuous mode [ 877.096004][T15193] syzkaller0: entered allmulticast mode [ 877.106104][T15193] tipc: Enabled bearer , priority 0 [ 877.114066][T15191] tipc: Resetting bearer [ 877.117468][T15191] tipc: Disabling bearer [ 878.586298][T15239] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.675637][T15239] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.814044][T15239] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.996434][T15239] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.010376][T15259] tipc: Enabling of bearer rejected, failed to enable media [ 879.129588][T10081] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.136194][T10081] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.142800][T10081] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.146335][T15273] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5389'. [ 879.149362][T10081] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.224318][ T42] audit: type=1326 audit(2000000592.249:58917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15279 comm="syz.2.5390" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5fec code=0x0 [ 879.296206][ T42] audit: type=1326 audit(2000000592.314:58918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15279 comm="syz.2.5390" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5fec code=0x0 [ 879.702635][T15291] siw: device registration error -23 [ 880.006199][T15296] lo speed is unknown, defaulting to 1000 [ 880.093818][T15320] syzkaller0: entered promiscuous mode [ 880.095827][T15320] syzkaller0: entered allmulticast mode [ 880.112017][T15320] tipc: Enabled bearer , priority 0 [ 880.116574][T15319] tipc: Resetting bearer [ 880.125522][T15319] tipc: Disabling bearer [ 880.533712][T15334] use of bytesused == 0 is deprecated and will be removed in the future, [ 880.538149][T15334] use the actual size instead. [ 881.909325][T15349] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5399'. [ 882.821460][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5403'. [ 882.946722][T15364] tipc: Resetting bearer [ 882.950006][T15364] tipc: Resetting bearer [ 883.018645][T15364] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 883.080793][T15368] bond5: Unable to set down delay as MII monitoring is disabled [ 883.098965][T15368] bond5 (unregistering): Released all slaves [ 883.185126][T15369] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 883.191113][T15369] bond2 (unregistering): Released all slaves [ 883.223637][ T6029] tipc: Resetting bearer [ 883.281639][ T12] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 883.285897][ T12] bond1: (slave veth3): making interface the new active one [ 883.291059][ T12] bond1: active interface up! [ 883.403877][T15514] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5406'. [ 883.557317][T15518] /dev/nullb0: Can't open blockdev [ 883.649033][T15506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5404'. [ 884.056731][ T24] usb 12-1: new full-speed USB device number 22 using dummy_hcd [ 884.220779][ T24] usb 12-1: config 150 has an invalid interface number: 204 but max is 2 [ 884.226642][ T24] usb 12-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 884.233616][ T24] usb 12-1: config 150 has no interface number 0 [ 884.238700][ T24] usb 12-1: config 150 interface 204 has no altsetting 0 [ 884.245183][ T24] usb 12-1: config 150 interface 1 has no altsetting 0 [ 884.252664][ T24] usb 12-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 884.258184][ T24] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.264259][ T24] usb 12-1: Product: syz [ 884.266149][ T24] usb 12-1: Manufacturer: syz [ 884.269037][ T24] usb 12-1: SerialNumber: syz [ 884.293382][T15547] netlink: 5252 bytes leftover after parsing attributes in process `syz.2.5412'. [ 884.496382][ T24] xr_serial 12-1:150.204: skipping garbage [ 884.505004][ T24] xr_serial 12-1:150.204: xr_serial converter detected [ 884.783941][T15560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5413'. [ 884.809731][T15560] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 884.819163][T15560] bond1 (unregistering): Released all slaves [ 885.281503][ T2319] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 885.456035][ T2319] usb 13-1: Using ep0 maxpacket: 32 [ 885.459481][ T2319] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 885.462883][ T2319] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 885.466784][ T2319] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 885.470251][ T2319] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 885.475966][ T2319] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 885.479970][ T2319] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.482670][ T2319] usb 13-1: Product: syz [ 885.484052][ T2319] usb 13-1: Manufacturer: syz [ 885.485737][ T2319] usb 13-1: SerialNumber: syz [ 885.493310][ C2] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 885.497390][ T2319] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input47 [ 886.170056][ T2319] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 886.188659][ T2319] (id 0x00) [ 886.255430][T15654] syzkaller0: entered promiscuous mode [ 886.258118][T15654] syzkaller0: entered allmulticast mode [ 886.273147][T15654] tipc: Enabling of bearer rejected, failed to enable media [ 886.278506][ T2319] rc_core: IR keymap rc-imon-pad not found [ 886.280999][ T2319] Registered IR keymap rc-empty [ 886.283566][ T2319] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 886.288050][ T2319] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 886.399445][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5420'. [ 886.403682][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5420'. [ 886.409513][T15668] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 886.412267][T15668] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 886.416836][T15668] vhci_hcd vhci_hcd.0: Device attached [ 886.421265][T15669] vhci_hcd: connection closed [ 886.421459][T30372] vhci_hcd vhci_hcd.4: stop threads [ 886.424968][T30372] vhci_hcd vhci_hcd.4: release socket [ 886.426781][T30372] vhci_hcd vhci_hcd.4: disconnect device [ 886.946902][ T24] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 886.955727][ T24] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 886.971349][ T24] usb 12-1: USB disconnect, device number 22 [ 886.984582][ T24] xr_serial 12-1:150.204: device disconnected [ 888.014103][T15716] syzkaller0: entered promiscuous mode [ 888.023394][T15716] syzkaller0: entered allmulticast mode [ 888.041079][T15716] tipc: Enabled bearer , priority 0 [ 888.058965][T15714] tipc: Resetting bearer [ 888.071311][T15714] tipc: Disabling bearer [ 888.108291][T15715] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5426'. [ 888.654160][T15727] lo speed is unknown, defaulting to 1000 [ 888.999194][ T2319] imon:send_packet: packet tx failed (-71) [ 889.027830][ T2319] imon 13-1:155.0: remote input dev register failed [ 889.038050][ T2319] imon 13-1:155.0: imon_init_intf0: rc device setup failed [ 889.093096][ T2319] imon 13-1:155.0: unable to initialize intf0, err 0 [ 889.106322][ T2319] imon:imon_probe: failed to initialize context! [ 889.112614][ T2319] imon 13-1:155.0: unable to register, err -19 [ 889.131011][ T2319] usb 13-1: USB disconnect, device number 2 [ 890.365809][T15802] syzkaller0: entered promiscuous mode [ 890.368444][T15802] syzkaller0: entered allmulticast mode [ 890.385097][T15802] tipc: Enabled bearer , priority 0 [ 890.392285][T15801] tipc: Resetting bearer [ 890.400515][T15801] tipc: Disabling bearer [ 890.926154][T15835] syzkaller0: entered promiscuous mode [ 890.928530][T15835] syzkaller0: entered allmulticast mode [ 890.933873][T15835] tc action pedit offset 4096 out of bounds [ 891.003481][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5442'. [ 891.030919][T15837] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 891.040826][T15837] bond1 (unregistering): Released all slaves [ 891.191850][ T42] audit: type=1326 audit(2000000603.294:58919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15908 comm="syz.8.5443" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x0 [ 892.859082][T15934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5448'. [ 893.095907][T15943] overlayfs: failed to resolve './file1': -2 [ 893.157500][T15952] lo speed is unknown, defaulting to 1000 [ 894.068173][ T42] audit: type=1326 audit(2000000605.942:58920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15984 comm="syz.7.5456" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x0 [ 894.223355][T15991] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5457'. [ 895.590740][T16014] atomic_op ffff88804cdb0198 conn xmit_atomic 0000000000000000 [ 896.220793][T16049] syzkaller0: entered promiscuous mode [ 896.223416][T16049] syzkaller0: entered allmulticast mode [ 896.240725][T16049] tipc: Enabled bearer , priority 0 [ 896.246184][T16048] tipc: Resetting bearer [ 896.259892][T16048] tipc: Disabling bearer [ 896.440420][T16074] dlm: no locking on control device [ 896.585280][ T7226] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 896.769467][ T7226] usb 12-1: Using ep0 maxpacket: 32 [ 896.781555][ T7226] usb 12-1: unable to get BOS descriptor or descriptor too short [ 896.787911][ T7226] usb 12-1: config 8 has an invalid interface number: 188 but max is 0 [ 896.792029][ T7226] usb 12-1: config 8 has no interface number 0 [ 896.798682][ T7226] usb 12-1: config 8 interface 188 has no altsetting 0 [ 896.827442][ T7226] usb 12-1: string descriptor 0 read error: -22 [ 896.839069][ T7226] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 896.861278][ T7226] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.005438][ T7226] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 897.009777][ T7226] dw2102: su3000_power_ctrl: 1, initialized 0 [ 897.012535][ T7226] dvb-usb: bulk message failed: -22 (2/0) [ 897.053315][ T7226] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 897.071344][ T7226] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 897.075411][ T7226] usb 12-1: media controller created [ 897.079447][ T7226] dvb-usb: bulk message failed: -22 (6/0) [ 897.081914][ T7226] dw2102: i2c transfer failed. [ 897.084040][ T7226] dvb-usb: bulk message failed: -22 (6/0) [ 897.086558][ T7226] dw2102: i2c transfer failed. [ 897.088606][ T7226] dvb-usb: bulk message failed: -22 (6/0) [ 897.091042][ T7226] dw2102: i2c transfer failed. [ 897.093066][ T7226] dvb-usb: bulk message failed: -22 (6/0) [ 897.096021][ T7226] dw2102: i2c transfer failed. [ 897.098147][ T7226] dvb-usb: bulk message failed: -22 (6/0) [ 897.100773][ T7226] dw2102: i2c transfer failed. [ 897.103022][ T7226] dvb-usb: bulk message failed: -22 (6/0) [ 897.105873][ T7226] dw2102: i2c transfer failed. [ 897.108058][ T7226] dvb-usb: MAC address: 02:02:02:02:02:02 [ 897.143208][ T7226] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 897.167254][ T7226] dvb-usb: bulk message failed: -22 (3/0) [ 897.172153][ T7226] dw2102: command 0x0e transfer failed. [ 897.174091][ T7226] dvb-usb: bulk message failed: -22 (3/0) [ 897.176042][ T7226] dw2102: command 0x0e transfer failed. [ 897.506365][ T7226] dvb-usb: bulk message failed: -22 (3/0) [ 897.508549][ T7226] dw2102: command 0x0e transfer failed. [ 897.510528][ T7226] dvb-usb: bulk message failed: -22 (3/0) [ 897.512625][ T7226] dw2102: command 0x0e transfer failed. [ 897.514619][ T7226] dvb-usb: bulk message failed: -22 (1/0) [ 897.516540][ T7226] dw2102: command 0x51 transfer failed. [ 897.536985][ T7226] DVB: Unable to find symbol ds3000_attach() [ 897.539057][ T7226] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 897.593111][ T7226] rc_core: IR keymap rc-su3000 not found [ 897.595384][ T7226] Registered IR keymap rc-empty [ 897.598459][ T7226] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 897.606076][ T7226] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input49 [ 897.616589][ T7226] dvb-usb: schedule remote query interval to 150 msecs. [ 897.619838][ T7226] dw2102: su3000_power_ctrl: 0, initialized 1 [ 897.622628][ T7226] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 897.627799][ T7226] usb 12-1: USB disconnect, device number 23 [ 897.651219][ T7226] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 897.832746][T16138] syzkaller0: entered promiscuous mode [ 897.835085][T16138] syzkaller0: entered allmulticast mode [ 897.841680][T16138] tipc: Enabled bearer , priority 0 [ 897.846040][T16137] tipc: Resetting bearer [ 897.849674][T16137] tipc: Disabling bearer [ 897.932480][ C3] sr 2:0:0:0: [sr0] tag#18 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 897.936712][ C3] sr 2:0:0:0: [sr0] tag#18 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 897.989174][T16148] syz.4.5486: page allocation failure: order:6, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 897.994382][T16148] CPU: 0 UID: 0 PID: 16148 Comm: syz.4.5486 Tainted: G L syzkaller #0 PREEMPT(full) [ 897.994413][T16148] Tainted: [L]=SOFTLOCKUP [ 897.994422][T16148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 897.994433][T16148] Call Trace: [ 897.994439][T16148] [ 897.994447][T16148] dump_stack_lvl+0x100/0x190 [ 897.994482][T16148] warn_alloc.cold+0x95/0x1c1 [ 897.994501][T16148] ? __pfx_warn_alloc+0x10/0x10 [ 897.994527][T16148] ? get_page_from_freelist+0xbf0/0x3d20 [ 897.994554][T16148] ? rcu_is_watching+0x12/0xc0 [ 897.994573][T16148] ? __pfx___might_resched+0x10/0x10 [ 897.994600][T16148] __alloc_frozen_pages_noprof+0xf25/0x2b60 [ 897.994632][T16148] ? rcu_is_watching+0x12/0xc0 [ 897.994650][T16148] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 897.994675][T16148] ? finish_task_switch.isra.0+0x37e/0x1010 [ 897.994704][T16148] ? rcu_is_watching+0x12/0xc0 [ 897.994721][T16148] ? trace_sched_exit_tp+0x120/0x160 [ 897.994740][T16148] ? futex_hash+0x311/0x400 [ 897.994765][T16148] ? lock_release+0x24d/0x310 [ 897.994786][T16148] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 897.994809][T16148] ? policy_nodemask+0xed/0x4f0 [ 897.994836][T16148] alloc_pages_mpol+0x1fb/0x540 [ 897.994864][T16148] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 897.994892][T16148] ? lock_release+0x24d/0x310 [ 897.994918][T16148] ? v9fs_alloc_rdir_buf.isra.0+0x5d/0xb0 [ 897.994937][T16148] ___kmalloc_large_node+0xe5/0x120 [ 897.994967][T16148] ? __futex_wait+0x256/0x300 [ 897.994987][T16148] __kmalloc_large_node_noprof+0x1c/0x70 [ 897.995009][T16148] __kmalloc_noprof+0x5b4/0x840 [ 897.995033][T16148] v9fs_alloc_rdir_buf.isra.0+0x5d/0xb0 [ 897.995055][T16148] v9fs_dir_readdir+0x156/0x720 [ 897.995075][T16148] ? rcu_is_watching+0x12/0xc0 [ 897.995094][T16148] ? __pfx_v9fs_dir_readdir+0x10/0x10 [ 897.995113][T16148] ? rcu_is_watching+0x12/0xc0 [ 897.995129][T16148] ? lock_acquire+0x301/0x370 [ 897.995151][T16148] ? __pfx___might_resched+0x10/0x10 [ 897.995179][T16148] ? apparmor_file_permission+0x13f/0x1c0 [ 897.995203][T16148] iterate_dir+0x296/0xae0 [ 897.995231][T16148] __ia32_compat_sys_getdents+0x13a/0x2b0 [ 897.995258][T16148] ? __pfx___ia32_compat_sys_getdents+0x10/0x10 [ 897.995284][T16148] ? __pfx_compat_filldir+0x10/0x10 [ 897.995309][T16148] ? rcu_is_watching+0x12/0xc0 [ 897.995326][T16148] __do_fast_syscall_32+0xe7/0x970 [ 897.995354][T16148] do_fast_syscall_32+0x32/0x70 [ 897.995379][T16148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 897.995403][T16148] RIP: 0023:0xf70befec [ 897.995426][T16148] Code: Unable to access opcode bytes at 0xf70befc2. [ 897.995435][T16148] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 000000000000008d [ 897.995454][T16148] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000400 [ 897.995464][T16148] RDX: 00000000000000c6 RSI: 0000000000000000 RDI: 0000000000000000 [ 897.995471][T16148] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 897.995477][T16148] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 897.995484][T16148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 897.995494][T16148] [ 897.995498][T16148] Mem-Info: [ 898.110909][T16148] active_anon:4433 inactive_anon:38 isolated_anon:0 [ 898.110909][T16148] active_file:2062 inactive_file:11508 isolated_file:0 [ 898.110909][T16148] unevictable:1777 dirty:61 writeback:0 [ 898.110909][T16148] slab_reclaimable:7573 slab_unreclaimable:76722 [ 898.110909][T16148] mapped:30194 shmem:4662 pagetables:1611 [ 898.110909][T16148] sec_pagetables:405 bounce:0 [ 898.110909][T16148] kernel_misc_reclaimable:0 [ 898.110909][T16148] free:32748 free_pcp:1543 free_cma:0 [ 898.129338][T16148] Node 0 active_anon:12kB inactive_anon:84kB active_file:292kB inactive_file:616kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:492kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8376kB pagetables:1052kB sec_pagetables:1196kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 898.143135][T16148] Node 1 active_anon:17720kB inactive_anon:68kB active_file:7956kB inactive_file:45416kB unevictable:3572kB isolated(anon):0kB isolated(file):0kB mapped:120284kB dirty:244kB writeback:0kB shmem:15112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10076kB pagetables:5492kB sec_pagetables:424kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 898.157542][T16148] Node 0 DMA free:2580kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:32kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 898.170609][T16148] lowmem_reserve[]: 0 284 284 284 284 [ 898.173006][T16148] Node 0 DMA32 free:22620kB boost:29416kB min:42492kB low:45760kB high:49028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:84kB active_file:292kB inactive_file:616kB unevictable:3536kB writepending:0kB zspages:1808kB present:1032196kB managed:291764kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 898.186882][T16148] lowmem_reserve[]: 0 0 0 0 0 [ 898.188894][T16148] Node 1 DMA32 free:109724kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17688kB inactive_anon:232kB active_file:5788kB inactive_file:47368kB unevictable:3572kB writepending:244kB zspages:4960kB present:1048432kB managed:948212kB mlocked:36kB bounce:0kB free_pcp:2272kB local_pcp:0kB free_cma:0kB [ 898.202237][T16148] lowmem_reserve[]: 0 0 0 0 0 [ 898.204253][T16148] Node 0 DMA: 115*4kB (UM) 43*8kB (UM) 9*16kB (UM) 15*32kB (UM) 8*64kB (UM) 3*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2580kB [ 898.210287][T16148] Node 0 DMA32: 253*4kB (UME) 199*8kB (UME) 119*16kB (UME) 144*32kB (UME) 67*64kB (UME) 30*128kB (UME) 3*256kB (M) 5*512kB (M) 0*1024kB 1*2048kB (U) 0*4096kB = 22620kB [ 898.217279][T16148] Node 1 DMA32: 1990*4kB (UME) 3344*8kB (UME) 4668*16kB (UME) 93*32kB (UME) 14*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 113272kB [ 898.223396][T16148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 898.226369][T16148] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 898.229527][T16148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 898.232588][T16148] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 898.236130][T16148] 18446 total pagecache pages [ 898.237985][T16148] 1153 pages in swap cache [ 898.239348][T16148] Free swap = 83848kB [ 898.240664][T16148] Total swap = 124996kB [ 898.241972][T16148] 524155 pages RAM [ 898.243137][T16148] 0 pages HighMem/MovableOnly [ 898.244647][T16148] 210321 pages reserved [ 898.245963][T16148] 0 pages cma reserved [ 898.585493][T16165] lo speed is unknown, defaulting to 1000 [ 899.420722][T16194] syzkaller0: entered promiscuous mode [ 899.428058][T16194] syzkaller0: entered allmulticast mode [ 899.445557][T16194] tipc: Enabled bearer , priority 0 [ 899.452114][T16193] tipc: Resetting bearer [ 899.459546][T16193] tipc: Disabling bearer [ 899.511584][T16198] netlink: 'syz.4.5493': attribute type 10 has an invalid length. [ 899.515250][T16198] ipvlan0: entered allmulticast mode [ 899.517714][T16198] veth0_vlan: entered allmulticast mode [ 899.522706][T16198] team0: Device ipvlan0 failed to register rx_handler [ 899.780375][T16228] tipc: Enabled bearer , priority 0 [ 899.783374][T16228] syzkaller0: entered promiscuous mode [ 899.785588][T16228] syzkaller0: entered allmulticast mode [ 899.790876][T16228] tipc: Resetting bearer [ 899.910286][T16227] tipc: Resetting bearer [ 899.918837][T16227] tipc: Disabling bearer [ 900.097425][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 901.181891][T16275] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 901.186001][T16275] block device autoloading is deprecated and will be removed. [ 901.575411][T16283] fuseblk: Unknown parameter 'fdÊ‘g0x0000000000000004' [ 901.799962][T16286] binder: 16285:16286 ioctl c018620b 0 returned -14 [ 901.806150][T16288] binder: 16285:16288 ioctl c018620b 0 returned -14 [ 902.146375][T16299] syzkaller0: entered promiscuous mode [ 902.148241][T16299] syzkaller0: entered allmulticast mode [ 902.154600][T16299] tipc: Enabled bearer , priority 0 [ 902.157637][T16298] tipc: Resetting bearer [ 902.161765][T16298] tipc: Disabling bearer [ 902.402630][T16308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5511'. [ 902.815328][T16319] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 902.869759][T16319] xfrm0: entered allmulticast mode [ 902.872825][T16319] team0: Port device xfrm0 added [ 903.550062][T16357] syzkaller0: entered promiscuous mode [ 903.552462][T16357] syzkaller0: entered allmulticast mode [ 903.559325][T16357] tipc: Enabled bearer , priority 0 [ 903.562140][T16356] tipc: Resetting bearer [ 903.566962][T16356] tipc: Disabling bearer [ 904.003630][T16377] lo speed is unknown, defaulting to 1000 [ 904.107021][T16401] autofs4:pid:16401:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 904.298456][T16402] PKCS8: Unsupported PKCS#8 version [ 904.726127][T16406] binder: BINDER_SET_CONTEXT_MGR already set [ 904.728702][T16406] binder: 16405:16406 ioctl 4018620d 80000100 returned -16 [ 905.658538][T16412] autofs: Unknown parameter '' [ 906.639941][T16430] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5529'. [ 906.652325][T16430] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 906.659387][T16430] bond3 (unregistering): Released all slaves [ 907.899924][ T5747] Bluetooth: hci3: command 0x0406 tx timeout [ 908.549801][T16522] netlink: 328 bytes leftover after parsing attributes in process `syz.8.5534'. [ 908.589435][T16525] tipc: Enabled bearer , priority 0 [ 908.592884][T16525] syzkaller0: entered promiscuous mode [ 908.595707][T16525] syzkaller0: entered allmulticast mode [ 908.601145][T16525] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 908.608673][T16525] tipc: Resetting bearer [ 908.612385][T16524] tipc: Resetting bearer [ 908.618605][T16524] tipc: Disabling bearer [ 908.709687][T16533] lo speed is unknown, defaulting to 1000 [ 909.028279][ T24] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 909.135839][T16562] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5532'. [ 909.189469][ T24] usb 13-1: Using ep0 maxpacket: 16 [ 909.192754][ T24] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 909.198601][ T24] usb 13-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 909.202472][ T24] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.205072][ T24] usb 13-1: Product: syz [ 909.206638][ T24] usb 13-1: Manufacturer: syz [ 909.208488][ T24] usb 13-1: SerialNumber: syz [ 909.210948][ T24] usb 13-1: config 0 descriptor?? [ 909.215215][ T24] em28xx 13-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 909.218813][ T24] em28xx 13-1:0.0: DVB interface 0 found: bulk [ 909.985415][ T24] em28xx 13-1:0.0: unknown em28xx chip ID (0) [ 910.010328][T16577] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 910.053232][T16574] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5538'. [ 911.086671][T16597] FAULT_INJECTION: forcing a failure. [ 911.086671][T16597] name failslab, interval 1, probability 0, space 0, times 0 [ 911.091631][T16597] CPU: 2 UID: 0 PID: 16597 Comm: syz.7.5542 Tainted: G L syzkaller #0 PREEMPT(full) [ 911.091661][T16597] Tainted: [L]=SOFTLOCKUP [ 911.091665][T16597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 911.091672][T16597] Call Trace: [ 911.091677][T16597] [ 911.091682][T16597] dump_stack_lvl+0x100/0x190 [ 911.091702][T16597] should_fail_ex.cold+0x5/0xa [ 911.091713][T16597] ? kmem_cache_alloc_node_noprof+0x5b/0x6f0 [ 911.091729][T16597] should_failslab+0xc2/0x120 [ 911.091756][T16597] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 911.091773][T16597] ? __alloc_skb+0x140/0x710 [ 911.091789][T16597] ? __alloc_skb+0x5b7/0x710 [ 911.091805][T16597] __alloc_skb+0x140/0x710 [ 911.091820][T16597] ? __alloc_skb+0x5b7/0x710 [ 911.091835][T16597] ? __pfx___alloc_skb+0x10/0x10 [ 911.091854][T16597] ? netlink_autobind.isra.0+0x160/0x370 [ 911.091876][T16597] netlink_alloc_large_skb+0x69/0x150 [ 911.091897][T16597] netlink_sendmsg+0x680/0xda0 [ 911.091920][T16597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 911.091942][T16597] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 911.091964][T16597] sock_write_iter+0x505/0x580 [ 911.091978][T16597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 911.091990][T16597] ? __pfx_sock_write_iter+0x10/0x10 [ 911.092004][T16597] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 911.092017][T16597] ? debug_object_activate+0x331/0x490 [ 911.092035][T16597] do_iter_readv_writev+0x6f7/0x930 [ 911.092051][T16597] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 911.092066][T16597] ? bpf_lsm_file_permission+0x9/0x10 [ 911.092085][T16597] ? security_file_permission+0x76/0x210 [ 911.092098][T16597] ? rw_verify_area+0xce/0x6d0 [ 911.092113][T16597] vfs_writev+0x360/0xdd0 [ 911.092128][T16597] ? finish_task_switch.isra.0+0x2c0/0x1010 [ 911.092148][T16597] ? __pfx_vfs_writev+0x10/0x10 [ 911.092170][T16597] ? rcu_is_watching+0x12/0xc0 [ 911.092186][T16597] ? __fget_files+0x21f/0x3d0 [ 911.092209][T16597] ? do_writev+0x28a/0x340 [ 911.092226][T16597] do_writev+0x28a/0x340 [ 911.092243][T16597] ? __pfx_do_writev+0x10/0x10 [ 911.092258][T16597] ? rcu_is_watching+0x12/0xc0 [ 911.092268][T16597] ? rcu_is_watching+0x12/0xc0 [ 911.092277][T16597] __do_fast_syscall_32+0xe7/0x970 [ 911.092293][T16597] do_fast_syscall_32+0x32/0x70 [ 911.092308][T16597] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 911.092322][T16597] RIP: 0023:0xf7f67fec [ 911.092335][T16597] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 911.092340][T16597] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 911.092350][T16597] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000800005c0 [ 911.092357][T16597] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 911.092363][T16597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 911.092369][T16597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.092375][T16597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 911.092385][T16597] [ 911.109175][T16591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5541'. [ 911.555426][ T24] em28xx 13-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 911.561513][ T24] em28xx 13-1:0.0: board has no eeprom [ 911.638824][ T24] em28xx 13-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 911.647520][ T24] em28xx 13-1:0.0: dvb set to bulk mode. [ 911.688217][ T2319] em28xx 13-1:0.0: Binding DVB extension [ 911.771670][ T24] usb 13-1: USB disconnect, device number 3 [ 911.797593][ T24] em28xx 13-1:0.0: Disconnecting em28xx [ 911.801701][ T2319] kworker/2:2: page allocation failure: order:4, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 911.818446][ T2319] CPU: 2 UID: 0 PID: 2319 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 911.818477][ T2319] Tainted: [L]=SOFTLOCKUP [ 911.818481][ T2319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 911.818488][ T2319] Workqueue: events request_module_async [ 911.818509][ T2319] Call Trace: [ 911.818513][ T2319] [ 911.818517][ T2319] dump_stack_lvl+0x100/0x190 [ 911.818538][ T2319] warn_alloc.cold+0x95/0x1c1 [ 911.818549][ T2319] ? __pfx_warn_alloc+0x10/0x10 [ 911.818562][ T2319] ? get_page_from_freelist+0xbf0/0x3d20 [ 911.818578][ T2319] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 911.818593][ T2319] ? __pfx___might_resched+0x10/0x10 [ 911.818611][ T2319] __alloc_frozen_pages_noprof+0xf25/0x2b60 [ 911.818627][ T2319] ? rcu_is_watching+0x12/0xc0 [ 911.818638][ T2319] ? rcu_is_watching+0x12/0xc0 [ 911.818648][ T2319] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 911.818662][ T2319] ? usb_alloc_urb+0x66/0xa0 [ 911.818675][ T2319] ? kasan_save_stack+0x30/0x50 [ 911.818692][ T2319] ? __kasan_kmalloc+0xaa/0xb0 [ 911.818710][ T2319] ? usb_alloc_urb+0x66/0xa0 [ 911.818727][ T2319] ? em28xx_alloc_urbs+0x5fa/0xf60 [ 911.818742][ T2319] ? em28xx_dvb_init.cold+0x1f2/0x7391 [ 911.818759][ T2319] ? request_module_async+0x61/0x80 [ 911.818774][ T2319] ? process_one_work+0xa23/0x1940 [ 911.818800][ T2319] ? worker_thread+0x5ef/0xe50 [ 911.818815][ T2319] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 911.818828][ T2319] ? policy_nodemask+0xed/0x4f0 [ 911.818845][ T2319] alloc_pages_mpol+0x1fb/0x540 [ 911.818862][ T2319] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 911.818880][ T2319] ? em28xx_alloc_urbs+0x655/0xf60 [ 911.818895][ T2319] ___kmalloc_large_node+0xe5/0x120 [ 911.818906][ T2319] __kmalloc_large_node_noprof+0x1c/0x70 [ 911.818917][ T2319] __kmalloc_noprof+0x5b4/0x840 [ 911.818929][ T2319] ? __asan_memset+0x23/0x50 [ 911.818942][ T2319] em28xx_alloc_urbs+0x655/0xf60 [ 911.818959][ T2319] ? kasan_save_track+0x14/0x30 [ 911.818974][ T2319] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 911.818988][ T2319] em28xx_dvb_init.cold+0x1f2/0x7391 [ 911.819005][ T2319] ? rcu_is_watching+0x12/0xc0 [ 911.819015][ T2319] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 911.819029][ T2319] ? rcu_is_watching+0x12/0xc0 [ 911.819038][ T2319] ? trace_contention_end+0x126/0x160 [ 911.819053][ T2319] ? __mutex_lock+0x26d/0x1bd0 [ 911.819067][ T2319] ? em28xx_init_extension+0x2f/0x200 [ 911.819087][ T2319] ? do_raw_spin_lock+0x128/0x260 [ 911.819103][ T2319] ? em28xx_audio_init+0x132/0x1a0 [ 911.819115][ T2319] ? __pfx___mutex_lock+0x10/0x10 [ 911.819129][ T2319] ? rcu_is_watching+0x12/0xc0 [ 911.819138][ T2319] ? lock_release+0x24d/0x310 [ 911.819151][ T2319] ? em28xx_v4l2_init+0x89/0xb0 [ 911.819163][ T2319] ? do_raw_spin_unlock+0x145/0x1e0 [ 911.819179][ T2319] ? __pfx_em28xx_audio_init+0x10/0x10 [ 911.819192][ T2319] ? __pfx_debug_object_deactivate+0x10/0x10 [ 911.819210][ T2319] ? trace_irq_enable.constprop.0+0x122/0x160 [ 911.819226][ T2319] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 911.819239][ T2319] em28xx_init_extension+0x13a/0x200 [ 911.819255][ T2319] request_module_async+0x61/0x80 [ 911.819272][ T2319] process_one_work+0xa23/0x1940 [ 911.819287][ T2319] ? __pfx_process_one_work+0x10/0x10 [ 911.819301][ T2319] ? __pfx_request_module_async+0x10/0x10 [ 911.819318][ T2319] worker_thread+0x5ef/0xe50 [ 911.819333][ T2319] ? kthread+0x13a/0x450 [ 911.819343][ T2319] ? __pfx_worker_thread+0x10/0x10 [ 911.819355][ T2319] kthread+0x370/0x450 [ 911.819366][ T2319] ? __pfx_kthread+0x10/0x10 [ 911.819377][ T2319] ret_from_fork+0x72b/0xd50 [ 911.819388][ T2319] ? __pfx_ret_from_fork+0x10/0x10 [ 911.819398][ T2319] ? __switch_to+0x800/0x10f0 [ 911.819412][ T2319] ? __pfx_kthread+0x10/0x10 [ 911.819423][ T2319] ret_from_fork_asm+0x1a/0x30 [ 911.819439][ T2319] [ 911.821634][ T2319] Mem-Info: [ 911.970361][ T2319] active_anon:2053 inactive_anon:1342 isolated_anon:0 [ 911.970361][ T2319] active_file:2963 inactive_file:11754 isolated_file:0 [ 911.970361][ T2319] unevictable:1777 dirty:107 writeback:0 [ 911.970361][ T2319] slab_reclaimable:7619 slab_unreclaimable:77494 [ 911.970361][ T2319] mapped:33730 shmem:3576 pagetables:1575 [ 911.970361][ T2319] sec_pagetables:405 bounce:0 [ 911.970361][ T2319] kernel_misc_reclaimable:0 [ 911.970361][ T2319] free:29657 free_pcp:2341 free_cma:0 [ 911.996744][ T2319] Node 0 active_anon:40kB inactive_anon:24kB active_file:468kB inactive_file:312kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:676kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8284kB pagetables:1052kB sec_pagetables:1196kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 912.021279][ T2319] Node 1 active_anon:15572kB inactive_anon:5344kB active_file:15384kB inactive_file:45904kB unevictable:3572kB isolated(anon):0kB isolated(file):0kB mapped:141444kB dirty:428kB writeback:0kB shmem:18168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10004kB pagetables:5348kB sec_pagetables:424kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 912.033219][ T2319] Node 0 DMA free:2580kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:32kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 912.042811][ T2319] lowmem_reserve[]: 0 284 284 284 284 [ 912.044554][ T2319] Node 0 DMA32 free:21404kB boost:29416kB min:42492kB low:45760kB high:49028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:24kB active_file:468kB inactive_file:312kB unevictable:3536kB writepending:0kB zspages:1972kB present:1032196kB managed:291764kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 912.054906][ T2319] lowmem_reserve[]: 0 0 0 0 0 [ 912.056434][ T2319] Node 1 DMA32 free:61644kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23972kB inactive_anon:5344kB active_file:19884kB inactive_file:45904kB unevictable:3572kB writepending:428kB zspages:5244kB present:1048432kB managed:948212kB mlocked:36kB bounce:0kB free_pcp:19420kB local_pcp:8408kB free_cma:0kB [ 912.066713][ T2319] lowmem_reserve[]: 0 0 0 0 0 [ 912.068181][ T2319] Node 0 DMA: 123*4kB (UM) 43*8kB (UM) 9*16kB (UM) 14*32kB (UM) 8*64kB (UM) 3*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2580kB [ 912.072709][ T2319] Node 0 DMA32: 5*4kB (E) 147*8kB (UME) 117*16kB (ME) 117*32kB (ME) 58*64kB (ME) 28*128kB (UME) 3*256kB (M) 5*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 18460kB [ 912.077590][ T2319] Node 1 DMA32: 0*4kB 0*8kB 3527*16kB (U) 71*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 58704kB [ 912.081486][ T2319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 912.084764][ T2319] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 912.087751][ T2319] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 912.090576][ T2319] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 912.093455][ T2319] 26914 total pagecache pages [ 912.095008][ T2319] 1070 pages in swap cache [ 912.096384][ T2319] Free swap = 62208kB [ 912.097710][ T2319] Total swap = 124996kB [ 912.099088][ T2319] 524155 pages RAM [ 912.100239][ T2319] 0 pages HighMem/MovableOnly [ 912.101687][ T2319] 210321 pages reserved [ 912.102972][ T2319] 0 pages cma reserved [ 912.104359][ T2319] ------------[ cut here ]------------ [ 912.106154][ T2319] !PageLargeKmalloc(page) [ 912.106160][ T2319] WARNING: mm/slub.c:6535 at free_large_kmalloc+0xbf/0x100, CPU#2: kworker/2:2/2319 [ 912.110358][ T2319] Modules linked in: [ 912.111906][ T2319] CPU: 2 UID: 0 PID: 2319 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 912.115212][ T2319] Tainted: [L]=SOFTLOCKUP [ 912.116633][ T2319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 912.119733][ T2319] Workqueue: events request_module_async [ 912.121522][ T2319] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 912.123318][ T2319] Code: 28 90 0f 0b 90 80 3d 35 82 56 0e 00 0f 84 17 9e b8 fe 48 8b 74 24 28 48 89 ef e8 1c 03 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 f5 93 f1 8d 5b 5d 41 5c 41 [ 912.129320][ T2319] RSP: 0018:ffffc9000e2af818 EFLAGS: 00010293 [ 912.131193][ T2319] RAX: 00000000000000f0 RBX: ffffea0001c89800 RCX: 000000000000002e [ 912.133659][ T2319] RDX: 0000000000000000 RSI: ffff888072260000 RDI: ffffea0001c89800 [ 912.136079][ T2319] RBP: ffff888072260000 R08: 0000000000000005 R09: 0000000000000000 [ 912.138552][ T2319] R10: ffffffffffffffff R11: dffffc0000000000 R12: ffff888073ae9e98 [ 912.140972][ T2319] R13: ffff88805265ad00 R14: dffffc0000000000 R15: ffffed100e75d3d5 [ 912.143428][ T2319] FS: 0000000000000000(0000) GS:ffff88809733c000(0000) knlGS:0000000000000000 [ 912.146233][ T2319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 912.148410][ T2319] CR2: 00000000f51f571d CR3: 00000000537b9000 CR4: 0000000000352ef0 [ 912.150911][ T2319] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 912.153399][ T2319] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 912.155862][ T2319] Call Trace: [ 912.156948][ T2319] [ 912.157907][ T2319] usb_free_urb.part.0+0xf8/0x110 [ 912.159945][ T2319] usb_free_urb+0x1f/0x30 [ 912.161346][ T2319] em28xx_uninit_usb_xfer+0xf3/0x360 [ 912.163177][ T2319] em28xx_alloc_urbs+0xb43/0xf60 [ 912.164880][ T2319] ? kasan_save_track+0x14/0x30 [ 912.166381][ T2319] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 912.167997][ T2319] em28xx_dvb_init.cold+0x1f2/0x7391 [ 912.169637][ T2319] ? rcu_is_watching+0x12/0xc0 [ 912.173431][ T2319] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 912.175299][ T2319] ? rcu_is_watching+0x12/0xc0 [ 912.176827][ T2319] ? trace_contention_end+0x126/0x160 [ 912.178477][ T2319] ? __mutex_lock+0x26d/0x1bd0 [ 912.179963][ T2319] ? em28xx_init_extension+0x2f/0x200 [ 912.181925][ T2319] ? do_raw_spin_lock+0x128/0x260 [ 912.183551][ T2319] ? em28xx_audio_init+0x132/0x1a0 [ 912.185176][ T2319] ? __pfx___mutex_lock+0x10/0x10 [ 912.186719][ T2319] ? rcu_is_watching+0x12/0xc0 [ 912.188187][ T2319] ? lock_release+0x24d/0x310 [ 912.189649][ T2319] ? em28xx_v4l2_init+0x89/0xb0 [ 912.191148][ T2319] ? do_raw_spin_unlock+0x145/0x1e0 [ 912.192861][ T2319] ? __pfx_em28xx_audio_init+0x10/0x10 [ 912.194549][ T2319] ? __pfx_debug_object_deactivate+0x10/0x10 [ 912.196408][ T2319] ? trace_irq_enable.constprop.0+0x122/0x160 [ 912.198339][ T2319] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 912.199959][ T2319] em28xx_init_extension+0x13a/0x200 [ 912.201614][ T2319] request_module_async+0x61/0x80 [ 912.203214][ T2319] process_one_work+0xa23/0x1940 [ 912.204756][ T2319] ? __pfx_process_one_work+0x10/0x10 [ 912.206363][ T2319] ? __pfx_request_module_async+0x10/0x10 [ 912.207918][ T2319] worker_thread+0x5ef/0xe50 [ 912.209252][ T2319] ? kthread+0x13a/0x450 [ 912.210572][ T2319] ? __pfx_worker_thread+0x10/0x10 [ 912.212171][ T2319] kthread+0x370/0x450 [ 912.213467][ T2319] ? __pfx_kthread+0x10/0x10 [ 912.214848][ T2319] ret_from_fork+0x72b/0xd50 [ 912.216211][ T2319] ? __pfx_ret_from_fork+0x10/0x10 [ 912.217757][ T2319] ? __switch_to+0x800/0x10f0 [ 912.219211][ T2319] ? __pfx_kthread+0x10/0x10 [ 912.220597][ T2319] ret_from_fork_asm+0x1a/0x30 [ 912.222084][ T2319] [ 912.223045][ T2319] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 912.225247][ T2319] CPU: 2 UID: 0 PID: 2319 Comm: kworker/2:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 912.228477][ T2319] Tainted: [L]=SOFTLOCKUP [ 912.229776][ T2319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 912.232736][ T2319] Workqueue: events request_module_async [ 912.234455][ T2319] Call Trace: [ 912.235458][ T2319] [ 912.236354][ T2319] dump_stack_lvl+0x100/0x190 [ 912.237739][ T2319] vpanic+0x552/0x970 [ 912.238903][ T2319] ? __pfx_vpanic+0x10/0x10 [ 912.240245][ T2319] ? lock_release+0x24d/0x310 [ 912.241694][ T2319] panic+0xd1/0xe0 [ 912.242818][ T2319] ? __pfx_panic+0x10/0x10 [ 912.244115][ T2319] ? check_panic_on_warn+0x1f/0x90 [ 912.245631][ T2319] check_panic_on_warn.cold+0x19/0x34 [ 912.247296][ T2319] ? free_large_kmalloc+0xbf/0x100 [ 912.248825][ T2319] __warn.cold+0x191/0x318 [ 912.250374][ T2319] __report_bug+0x30f/0x440 [ 912.251750][ T2319] ? free_large_kmalloc+0xbf/0x100 [ 912.253297][ T2319] ? __pfx___report_bug+0x10/0x10 [ 912.254852][ T2319] ? rcu_is_watching+0x12/0xc0 [ 912.256275][ T2319] ? rcu_is_watching+0x12/0xc0 [ 912.257747][ T2319] ? __free_one_page+0x10d/0xba0 [ 912.259248][ T2319] ? rcu_is_watching+0x12/0xc0 [ 912.260711][ T2319] ? __free_one_page+0x10d/0xba0 [ 912.262490][ T2319] ? lock_release+0x24d/0x310 [ 912.264145][ T2319] ? __get_pfnblock_flags_mask+0x128/0x240 [ 912.265978][ T2319] ? free_large_kmalloc+0xbf/0x100 [ 912.267620][ T2319] report_bug+0xb2/0x220 [ 912.269239][ T2319] ? free_large_kmalloc+0xbf/0x100 [ 912.271042][ T2319] handle_bug+0x16a/0x2a0 [ 912.272611][ T2319] exc_invalid_op+0x17/0x50 [ 912.274000][ T2319] asm_exc_invalid_op+0x1a/0x20 [ 912.275443][ T2319] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 912.277160][ T2319] Code: 28 90 0f 0b 90 80 3d 35 82 56 0e 00 0f 84 17 9e b8 fe 48 8b 74 24 28 48 89 ef e8 1c 03 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 f5 93 f1 8d 5b 5d 41 5c 41 [ 912.282963][ T2319] RSP: 0018:ffffc9000e2af818 EFLAGS: 00010293 [ 912.284921][ T2319] RAX: 00000000000000f0 RBX: ffffea0001c89800 RCX: 000000000000002e [ 912.287243][ T2319] RDX: 0000000000000000 RSI: ffff888072260000 RDI: ffffea0001c89800 [ 912.289537][ T2319] RBP: ffff888072260000 R08: 0000000000000005 R09: 0000000000000000 [ 912.291912][ T2319] R10: ffffffffffffffff R11: dffffc0000000000 R12: ffff888073ae9e98 [ 912.294308][ T2319] R13: ffff88805265ad00 R14: dffffc0000000000 R15: ffffed100e75d3d5 [ 912.296640][ T2319] usb_free_urb.part.0+0xf8/0x110 [ 912.298182][ T2319] usb_free_urb+0x1f/0x30 [ 912.299504][ T2319] em28xx_uninit_usb_xfer+0xf3/0x360 [ 912.301111][ T2319] em28xx_alloc_urbs+0xb43/0xf60 [ 912.302639][ T2319] ? kasan_save_track+0x14/0x30 [ 912.304259][ T2319] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 912.306046][ T2319] em28xx_dvb_init.cold+0x1f2/0x7391 [ 912.307713][ T2319] ? rcu_is_watching+0x12/0xc0 [ 912.309163][ T2319] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 912.310768][ T2319] ? rcu_is_watching+0x12/0xc0 [ 912.312284][ T2319] ? trace_contention_end+0x126/0x160 [ 912.313966][ T2319] ? __mutex_lock+0x26d/0x1bd0 [ 912.315442][ T2319] ? em28xx_init_extension+0x2f/0x200 [ 912.317103][ T2319] ? do_raw_spin_lock+0x128/0x260 [ 912.318637][ T2319] ? em28xx_audio_init+0x132/0x1a0 [ 912.320181][ T2319] ? __pfx___mutex_lock+0x10/0x10 [ 912.321713][ T2319] ? rcu_is_watching+0x12/0xc0 [ 912.323163][ T2319] ? lock_release+0x24d/0x310 [ 912.324590][ T2319] ? em28xx_v4l2_init+0x89/0xb0 [ 912.326066][ T2319] ? do_raw_spin_unlock+0x145/0x1e0 [ 912.327656][ T2319] ? __pfx_em28xx_audio_init+0x10/0x10 [ 912.329322][ T2319] ? __pfx_debug_object_deactivate+0x10/0x10 [ 912.331151][ T2319] ? trace_irq_enable.constprop.0+0x122/0x160 [ 912.333030][ T2319] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 912.334657][ T2319] em28xx_init_extension+0x13a/0x200 [ 912.336283][ T2319] request_module_async+0x61/0x80 [ 912.337821][ T2319] process_one_work+0xa23/0x1940 [ 912.339353][ T2319] ? __pfx_process_one_work+0x10/0x10 [ 912.341004][ T2319] ? __pfx_request_module_async+0x10/0x10 [ 912.342754][ T2319] worker_thread+0x5ef/0xe50 [ 912.344201][ T2319] ? kthread+0x13a/0x450 [ 912.345526][ T2319] ? __pfx_worker_thread+0x10/0x10 [ 912.347090][ T2319] kthread+0x370/0x450 [ 912.348377][ T2319] ? __pfx_kthread+0x10/0x10 [ 912.349838][ T2319] ret_from_fork+0x72b/0xd50 [ 912.351282][ T2319] ? __pfx_ret_from_fork+0x10/0x10 [ 912.352887][ T2319] ? __switch_to+0x800/0x10f0 [ 912.354365][ T2319] ? __pfx_kthread+0x10/0x10 [ 912.355794][ T2319] ret_from_fork_asm+0x1a/0x30 [ 912.357278][ T2319] [ 912.358909][ T2319] Kernel Offset: disabled [ 912.360236][ T2319] Rebooting in 86400 seconds..