last executing test programs: 14m11.69514145s ago: executing program 2 (id=1407): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000059c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000005940)=[@rights={{0x14, 0x1, 0x1, [r1, r1]}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0, 0xee00}}}], 0x44, 0x4000010}, 0x4840) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/filehandle\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='* ./export_dir 32\n', 0x12) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r5, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x43, 0x0) chdir(&(0x7f0000000100)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x20846, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 14m9.855749065s ago: executing program 2 (id=1414): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001380)=@deltfilter={0xcd0, 0x2d, 0x4, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xd, 0x1}, {0x10, 0xe}, {0xfff3, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x3}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @filter_kind_options=@f_fw={{0x7}, {0xc8c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x855ca77781d43189, 0x4}}, @TCA_FW_POLICE={0xc80, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x68bc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x20000000, 0x8fe1, 0x0, 0x0, {0x0, 0x1, 0x35, 0xa, 0xe6, 0x3ff}, {0x4, 0x0, 0x0, 0x1, 0x6, 0x10000}, 0xa985, 0x80000004, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x5, 0x800, 0x7fffffff, 0x0, 0x0, 0x7, 0x1, 0x2, 0x7, 0x3, 0x147, 0x8, 0x1, 0x65b2, 0xffffffff, 0xbba2, 0x9, 0x5, 0x1000, 0x4, 0x8, 0xfffffff7, 0x3, 0x80, 0x7, 0x1, 0x7, 0x8001, 0x84, 0x46, 0x400, 0x8001, 0x6, 0x8, 0x9, 0x800, 0x6, 0xffffffff, 0xa, 0x1, 0x80000000, 0xd, 0x0, 0x1, 0x800, 0x4, 0x3, 0x8001, 0x0, 0x5, 0xab, 0x2, 0x23db, 0x91, 0x99a2, 0x101, 0x1, 0x8e83, 0x7, 0x1, 0x0, 0xc, 0x8, 0xfffffffc, 0x7, 0x3, 0x3524, 0x3ad47bde, 0x8000, 0x5, 0x9, 0x6b67, 0x6, 0x0, 0x3, 0x5, 0x4, 0xc, 0xb, 0x3, 0x7, 0x361d, 0xf360, 0x8, 0x40, 0x9, 0x1, 0xffffffff, 0x4, 0x80, 0x4, 0x2, 0x1, 0x8, 0x9, 0x4, 0x4, 0x4, 0xffffffff, 0x9, 0x9, 0x73, 0x8000, 0x9, 0x8, 0x9, 0x0, 0xa42, 0xffff0001, 0xd, 0x7fff, 0x101, 0x2, 0x3, 0x4, 0x10000, 0x7ff, 0x80, 0x9, 0x0, 0x10001, 0x9, 0x5efbfc89, 0x1, 0x5, 0x2, 0x0, 0x0, 0xf21e0000, 0x8, 0x8000, 0x2c15, 0x8, 0x1, 0xfffff73a, 0x9, 0xc0000000, 0xffffffff, 0x7, 0x5fb9, 0x7, 0x1, 0xd, 0x1000, 0xe, 0x50, 0x5daa, 0x7ff, 0x4, 0x1, 0x5, 0xe9, 0xf, 0x5, 0x1, 0xb3c, 0x9, 0x9, 0xe8d5, 0x81, 0x6, 0x1000, 0xc, 0x3ff, 0x7, 0x40, 0x3, 0x0, 0x8, 0x9, 0xaf, 0xe0a, 0x691, 0x8, 0x80, 0x3, 0x3, 0x37, 0x7f, 0xf, 0x3, 0x0, 0x80000001, 0x4, 0x3, 0x0, 0x9, 0xfffffffb, 0x101, 0x8, 0x80, 0xa, 0x1, 0xbb0, 0x3ff, 0x7592a95, 0x7, 0x182, 0x4, 0x6, 0x7ff, 0xfffffffd, 0x4, 0x9, 0x1, 0x3, 0x1, 0x7, 0x0, 0x1, 0x8, 0xb, 0xb, 0x16, 0x8, 0xd2, 0x9, 0x5, 0x6, 0xffffff65, 0x0, 0x6e0, 0x7fffffff, 0x0, 0xcd48, 0x7, 0x9, 0x4, 0x7, 0x9, 0x5, 0xe1e, 0xae, 0x8, 0x0, 0x25, 0x6, 0x3, 0x1ff, 0x101, 0x3, 0x6, 0xf8, 0x9, 0x1, 0x7fff, 0x13, 0x6b47, 0x2, 0x10, 0x1, 0x7, 0x6a92, 0x1, 0xe19]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x66db800, 0xffffffff, 0x60000000, 0x3ff, 0x30, 0x5, 0x2, 0xfffff888, 0x8, 0xc, 0x7, 0x2, 0x7, 0x5, 0x4, 0x9, 0x1, 0x6, 0x6, 0x3ff, 0x7, 0x9, 0x4, 0x1, 0xfff, 0x4, 0x45, 0x10000, 0x100, 0x7f, 0x5, 0x81, 0x3, 0x3, 0x1000, 0x9c2, 0x9730, 0x3, 0xc, 0x80, 0x3, 0x610, 0x10001, 0x8, 0x7, 0x6, 0x272, 0x7f, 0x2, 0x4, 0x5, 0xe4, 0x5, 0x5, 0x7, 0x1, 0x9719, 0x0, 0x0, 0x1ff, 0x8, 0xa7b, 0x3, 0x4, 0xfff, 0x0, 0x8, 0x7, 0x7, 0x100, 0x4f, 0x400, 0x9, 0x1, 0xfff, 0x2874, 0x3, 0x2, 0x1ff, 0x7, 0x7f, 0x3, 0x1, 0x8, 0x9000, 0x7, 0x5a, 0x9, 0x3, 0x0, 0x6, 0x6, 0x6d, 0x5, 0x7, 0x8, 0x3, 0x3ff, 0x3, 0x5, 0x4, 0x3, 0x6, 0x0, 0x1, 0x9, 0x800, 0x3, 0x6, 0x8, 0x9225, 0xf2, 0x1, 0xe, 0x6, 0x6, 0x200, 0x3, 0xb, 0x7, 0xfffffff8, 0x10000, 0x7fffffff, 0xffff691a, 0x101, 0x400, 0x3, 0x7e, 0xffffffa0, 0x3, 0x5, 0x967, 0x0, 0xffffb7f7, 0x7ff, 0x5fa612a1, 0xd2a3, 0x4, 0x2, 0xfffffff8, 0x0, 0xf5c6, 0xb, 0x3, 0x4, 0x6b, 0x8000, 0xb, 0xfffffff8, 0x4, 0x40, 0x5, 0xa, 0xd5, 0xe1b, 0xffff, 0x2, 0x3, 0xfffffffc, 0xffff, 0x8001, 0x1, 0x9, 0x2, 0x7, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xffffc36a, 0x2, 0x8, 0x8, 0x80, 0x2, 0x8, 0x8, 0xfffffff7, 0x2, 0x101, 0x6d, 0x3ff, 0xdfd, 0xfffff800, 0x2d4, 0x0, 0x0, 0x1000, 0x3, 0x3, 0x8, 0x400, 0x401, 0xfffffffd, 0x2, 0xfffffffc, 0x4, 0x7d, 0x180, 0x7fffffff, 0xb8a5, 0xfffffffb, 0x4, 0xfffffffb, 0x5, 0x8001, 0x5, 0x0, 0x2, 0x8, 0x4, 0x0, 0x40000, 0x8, 0xd, 0x7, 0xffffffff, 0xffffffff, 0x0, 0x3, 0x3, 0x200, 0x8, 0x9, 0x3, 0x3ff, 0x6, 0xd, 0x469, 0x4, 0x7, 0x8, 0x6, 0xffffffff, 0x9, 0x9, 0x9, 0x3e, 0xe614e1bf, 0x2, 0x3c, 0x8, 0x9, 0xd, 0x0, 0x2, 0x94f7, 0x400, 0x3, 0x101, 0x8, 0x0, 0x6a, 0xfff, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x10, 0x1, 0x3, 0x40, 0xb, 0xe, 0xd2, 0x80000000, 0x6, 0x28000, 0x9, 0x80000000, 0x5, 0x2, 0xfff, 0x10001, 0x2, 0x10, 0x1, 0x2, 0x8, 0x7fff, 0x5, 0x7fff, 0x1, 0x8, 0x2, 0x3, 0x2, 0x9, 0xfffff72b, 0x5688, 0x6, 0x2aed6a9d, 0x0, 0x1, 0x6, 0x9, 0x7, 0xb94, 0x4, 0x7, 0x3, 0x0, 0x0, 0x2, 0x7be6482f, 0x3, 0xf, 0x3, 0xfffffffa, 0x2, 0x9, 0x80000000, 0x6, 0x1800000, 0x401, 0x5, 0x9, 0x101, 0x4, 0x8000, 0x5, 0xc000, 0x8004, 0xffffff31, 0x3, 0x10, 0x401, 0x84eb, 0x80000000, 0x5, 0x2, 0x8, 0x4, 0x9, 0x7ae, 0xf2, 0x6, 0xe, 0x9, 0x0, 0x5d, 0x4, 0x4, 0x4, 0xe, 0x2, 0x1, 0x2, 0x40, 0x1, 0x2, 0xfffffff1, 0x9, 0x41, 0x3, 0x0, 0x6, 0xfffffff9, 0x10, 0x3962, 0x4df1e3a9, 0xff, 0x4, 0x5, 0x3, 0x10001, 0x10, 0x9, 0x2, 0x10, 0x40, 0x8, 0x10, 0x6, 0x3, 0x9, 0x800000, 0x3, 0x3, 0x2, 0x6, 0x6, 0x800, 0x8, 0xfffffff8, 0xdb6, 0xf, 0x2, 0x80000000, 0x0, 0x5, 0x7, 0x5, 0x40, 0x4, 0x6, 0x5, 0x10001, 0x10, 0x10000, 0x4, 0x2f, 0x6, 0x4, 0x63, 0xb, 0x2, 0x4, 0x2, 0x2, 0xe5400000, 0xaea, 0x1, 0x1, 0x7, 0x3, 0x4, 0x7ff, 0x7, 0x8, 0x7, 0x4, 0x42, 0x8001, 0x101, 0x2, 0x40, 0x9, 0x6, 0xa, 0x3ff, 0x2, 0x610, 0x5c, 0x1ff, 0x7, 0xfffffffd, 0x1, 0xb5, 0x9, 0xe000, 0x5, 0x4f6, 0x4, 0xffffffff, 0x1708, 0x800, 0x6, 0xa1, 0x3ff, 0x2, 0x7fff, 0x21, 0x8, 0x7, 0x8, 0x6, 0x9, 0x5, 0x1, 0x6, 0x9, 0x2, 0xabf, 0x6, 0x8001, 0xb63, 0x7, 0x2, 0x9, 0x2, 0x100, 0x3ff, 0x2, 0x7f, 0x80000001, 0x2, 0x3, 0x5, 0x40, 0x4f, 0xcdc, 0x8000, 0x9c1c, 0x4, 0x10a, 0x3, 0x3, 0x8, 0x1, 0x2, 0x401, 0x7, 0xb, 0x1, 0x11e, 0x6, 0x7, 0x80000000, 0x4, 0x3, 0x7fffffff, 0x7, 0x40, 0x800, 0x6, 0xd, 0x4, 0x7, 0x7, 0x6, 0x5, 0xfff]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0xcd0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = timerfd_create(0x0, 0x80800) io_setup(0x3ff, &(0x7f0000000500)=0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x15) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) io_submit(r5, 0x2, &(0x7f0000000500)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x3, r3, &(0x7f0000000280)="483ce5155bac8f26c6a576f643a66d6df0b5caedf7643a14d61363f92bbf7a9569d6bf8a33aee36f883e22759f5e1b0e14de7d1a13dc811d46be5461f829ef39c0a28c9b88b78da982e7d6578a2537e85d432b40eab4a10b56486db1f9825b86e6dd0b44c8dcaf4ec792f5501d62d0c0eaac7be7ecf5d6d63ba725c7060f4c37aafacf283d01696000086c0767177766980c67f6eb17a8adad16c12ab1ceb816919f8b21bac785602ff744b7e2c515c2c34f7720e3750a995550f5fca3df7fa4ea23e9e03872d2", 0xc7, 0x7, 0x0, 0x2, r4}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x8, r3, &(0x7f00000003c0)="45447515c385b2b5fbc056d51642fc6d03f5ecb6e35761ded73d3be49bc04ddf69160fbfc0153df7836b3132625cd83d4309a4dc6b5048122fc401726130ab57f6e6d66895f48f1dcd6493b37c170cb93cc1fabf2c9b99e591164ea112058d39711efcc01d76f8cb5dc200000000e4ff", 0x51, 0x5, 0x0, 0x7}]) readv(r4, &(0x7f0000000980)=[{&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000000700)=""/199, 0xc7}, {&(0x7f0000000800)=""/175, 0xaf}], 0x4) timerfd_settime(r4, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x48000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f0000000200)=0xfb6c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000009c0)={'sit0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x700, 0x80, 0x2, 0xa, {{0x22, 0x4, 0x3, 0x8, 0x88, 0x64, 0x0, 0x4d, 0x29, 0x0, @empty, @broadcast, {[@cipso={0x86, 0x71, 0x3, [{0x1, 0x6, "c081ed6c"}, {0x3, 0xc, "a4d7917a718b4f5d608b"}, {0x6, 0xb, "ea2ea74a661ce9e601"}, {0x6, 0x5, "37e42d"}, {0x6, 0x10, "06be426f27b6ff00095eea5f3056"}, {0x2, 0xa, "d175ec846bae4042"}, {0x2, 0xd, "1675f91fbe06b4b29dbe71"}, {0x7, 0x12, "d0a380dc14676702bb2755e8c25820ae"}, {0x2, 0x10, "038e5e00d77ce54fea64aa2e3581"}]}]}}}}}) bind$xdp(r3, &(0x7f0000000a00)={0x2c, 0x2, r9, 0x40}, 0x10) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x1, &(0x7f0000000940)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000046000900000000000000000002000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044) ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f0000000100)=@arm64_fp_extra={0x20200000001000d5, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00005a7000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f000022c000/0x3000)=nil) 14m9.374767993s ago: executing program 2 (id=1415): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000059c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000005940)=[@rights={{0x14, 0x1, 0x1, [r1, r1]}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0, 0xee00}}}], 0x44, 0x4000010}, 0x4840) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/filehandle\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='* ./export_dir 32\n', 0x12) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r5, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x43, 0x0) chdir(&(0x7f0000000100)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x20846, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 14m8.243966847s ago: executing program 2 (id=1421): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='* ./export_dir 32\n', 0x12) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x43, 0x0) chdir(&(0x7f0000000100)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x20846, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 14m6.707852238s ago: executing program 2 (id=1427): r0 = socket$nl_crypto(0x10, 0x3, 0x15) write(r0, &(0x7f0000000440)="0ec06fad9ef20353b230c6ef7032f469b39b0c5114e35dace209a7916787d5404289b1ec8a4706e1168d8f44fc0192ea36436d885b5947a40971872a8e342a678eff2a1ade696ade419940d12c4e326b8a3b89e99782accce99ae84379b47f96636c06fcafbbc6653c98e1f5790a2b90386797560acea2118ff646f163451f2845e9c47538f85778fc0f6a00c67d30c0933c68fa9f3cf8", 0x97) (async) write(r0, &(0x7f0000000440)="0ec06fad9ef20353b230c6ef7032f469b39b0c5114e35dace209a7916787d5404289b1ec8a4706e1168d8f44fc0192ea36436d885b5947a40971872a8e342a678eff2a1ade696ade419940d12c4e326b8a3b89e99782accce99ae84379b47f96636c06fcafbbc6653c98e1f5790a2b90386797560acea2118ff646f163451f2845e9c47538f85778fc0f6a00c67d30c0933c68fa9f3cf8", 0x97) r1 = socket$nl_crypto(0x10, 0x3, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='kyber', 0x5) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd29, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}}, 0x1c}}, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r8, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x200000d0) write(r7, &(0x7f00000000c0)="828f54fd252f5ff2bf55e91a334a7df6649a82e7edfffdc40a9326ab454d201281497b0c27cba0806b28cec3560948040bc5550a6e00b8a4c86bc8fa616736cd", 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r11 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(r4, &(0x7f0000000c80)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1, r11}}, 0x3c) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="e80000050000000000000000fddbdf257874732874776f6669736829"], 0xe8}, 0x1, 0x0, 0x0, 0x268c0c78aa7deca}, 0x24004800) 14m6.395703477s ago: executing program 2 (id=1428): prctl$PR_SET_IO_FLUSHER(0x4a, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffefffe, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r1, 0xbb34a96d50fa80b5, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r3, 0xda90) accept4(r3, 0x0, 0x0, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) shutdown(0xffffffffffffffff, 0x1) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 13m51.216464289s ago: executing program 32 (id=1428): prctl$PR_SET_IO_FLUSHER(0x4a, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffefffe, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r1, 0xbb34a96d50fa80b5, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r3, 0xda90) accept4(r3, 0x0, 0x0, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) shutdown(0xffffffffffffffff, 0x1) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 13m12.225870195s ago: executing program 4 (id=1665): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) io_uring_setup(0xf08, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 13m11.017349851s ago: executing program 4 (id=1674): prctl$PR_SET_IO_FLUSHER(0x4a, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffefffe, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r1, 0xbb34a96d50fa80b5, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r3, 0xda90) accept4(r3, 0x0, 0x0, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) shutdown(0xffffffffffffffff, 0x1) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 13m10.10802754s ago: executing program 4 (id=1678): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1ff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) syz_usb_connect$midi(0x5, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000000)={'comedi_bond\x00', [0x2f, 0x4, 0x2, 0x8, 0x90000, 0x9, 0xed, 0x890, 0x280ffa, 0xfffffffc, 0x3, 0x1, 0x1032, 0x1000008, 0x4c, 0x40000009, 0xfef7ffa6, 0x3ff, 0x912, 0x9ea, 0x3, 0x9, 0xc, 0x101, 0x1, 0x990e, 0x5, 0x18, 0x2, 0x2000006, 0x5]}) (fail_nth: 4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f60034ddd42fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f605d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795"], &(0x7f0000000180)='GPL\x00'}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="f0000000280013070000000000000000ffffffff000000000000000000000000ac14140000000000000000000000000000000000000000080000000000000015", @ANYRES32=0x0, @ANYBLOB="ac1414bb00000000000000000000000000000000320000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"], 0xf0}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0) mq_unlink(&(0x7f0000000380)='c\x80i\x1bo\xd7$iIfs\x02\x11\xa7\x95Z7\xf4\xdc*/\x17\xca\xa1\xeb\x8b\xb4~|S\x10\x00\x00\x00\x00\x10\x9d\xffEe\xfa\xc1\xb0\xa28\xc0\x1a\x94~w\xbd*\x04\x13\x007\x8b\xd2\x03b\xe0\x94\x85\f\x18_\'/\x1f\x17k\x80i/-P\xf6\xbc\xbdX\x1bo\xaf\x9a\xbc\xcd\xca\xc8\xb6\a:\xfa\xe6\xa6\x12\x16M!\xd6\xe3\x94z\x15ucg\x7f\xe1\"\xc5\x1c\xe9B\xe6\"\xdb\xa3\x99\xfd\xac\xba\xf9\x91W\x89<]\xeeG2\xcd\x8a.\xd2\xa2\x19\xf5\x8e\xe2\a)l\x81+6\xeb\xc2\xd3\xaa\x1a\x88\x88E:\xe4\x98\xef[K\xf7u\xb9\xc5\xb0\xa7xz\x1a;=\xed\xd0i/8\xc7A\xff\'\vOW!\x90\xb9~\x86\xc9C\xc1\x94-\xca\xe4\xfd*\xaf\xd7\x13\xf4\xfc\xa9&\xf5\\@\xab\xaa\v\xd0\xd7\xa5\x88\xc6c\xaaH\xe8YF?b3l\x046\xe6YV\x02P\'\xacNB\x8b\f-\x9c\x19\x13\xcc\x02\xd0\xb4\xb5\xdeh<\xf7c\xab:\x98T\x8f\xab*\xbb\xceA}\xc7\xd1I\xe5\xae\xd3\x8b\xd2\xa7\xaf\xa5A\xae6\xb0\x18\a\x13\x8c\x10\x9a\x84\x90\xd9\bo;\x82)\xb9\x1fn\xe1#A[\xe1V\xca\x9b\xbf\xd6*s\x9a\x14\xe6\xb3\xf8\xd4l\xb9\x00\xe7\x03]\xa5?t\xdf\x8d^\x91\xc3\x1c\xb2\xb0\x12\xa9W\xbfD\xdb\xcb\x85m\xc8I\xf3\x85JN\xbbeH\x82\x83\xd8\xc2\x8b\aDy\x97X\x87@l\x15\xc0\x80(\xb0\xba\xa6(K\xeb\'\xd6\xd1+<\xe6\x86\x839\xccTxJ|\x9f4\x06\x14~rI\xc0r\xc19i\x84\t\x05\xcb\xef\x88c\x8b\x00\xc5\xa8\x8aD\x86O\xc0\xe7\x98g\x0f\xd1\xbaiO_i\xaf\x85\x99g\f\x1e\xce\xect^\xb2\x01\xf2\xc7d\x93K\x89\xb9(F:\xaa\xd6\xdf\xe8n\x95\x1a\xe0?\xe0\xd0') mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={'veth1_to_bridge\x00', {0x2, 0x4e21, @loopback}}) write(0xffffffffffffffff, 0x0, 0x0) 13m9.312913711s ago: executing program 4 (id=1681): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000f00)={0xa, 0x4e21, 0x2000000, @mcast1={0xff, 0x5}}, 0x1c) fchdir(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="780100001a00330600000000fddbdf250a010101000000000000000000000000ffffffff000000000000000000000000000040004e248001000020000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x178}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x7800, 0x80, 0x8, 0x7fffffff, {{0xa, 0x4, 0x2, 0x4, 0x28, 0x66, 0x0, 0x0, 0x29, 0x0, @private=0xa010100, @multicast1, {[@timestamp_addr={0x44, 0x14, 0x47, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x29}, 0x5}, {@private=0xa010102, 0x3fc1}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@delchain={0x2c, 0x65, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xfff2}, {0x1, 0x6}, {0x8, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404}, 0x4008080) r5 = openat$binfmt(0xffffffffffffff9c, r3, 0x41, 0x1ff) fcntl$setlease(r5, 0x400, 0x1) r6 = openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x470000, 0x31, 0x31}, 0x18) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r6, 0xc1105518, &(0x7f00000001c0)={{0x2, 0x1, 0xfffffffb, 0x73, 'syz1\x00', 0xd}, 0x0, 0x10000000, 0x2, 0xffffffffffffffff, 0x5, 0xeff, 'syz0\x00', &(0x7f0000000180)=['syzkaller1\x00', '/dev/net/tun\x00', '%#,\x00', '\x00', '\x00s'], 0x1f}) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) creat(&(0x7f0000000480)='./file0\x00', 0x91) write$tun(r8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x7ff) syz_open_dev$sndmidi(&(0x7f0000000340), 0x9, 0x40801) 13m7.459546851s ago: executing program 4 (id=1689): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='1000000?', 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) recvmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000001840)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1, &(0x7f0000001880)=""/15, 0xf}, 0x40000020) io_setup(0x71, &(0x7f00000006c0)=0x0) io_destroy(r4) ptrace$pokeuser(0x6, r3, 0x118, 0x5fbffffd) getpgrp(r3) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000003000)=[{{&(0x7f0000000340)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/119, 0x77}, {&(0x7f0000000600)=""/176, 0xb0}, {&(0x7f0000002a40)=""/37, 0x25}, {&(0x7f0000002a80)=""/182, 0xb6}, {&(0x7f0000002b40)=""/9, 0x9}, {&(0x7f00000004c0)=""/243, 0xf3}], 0x7, &(0x7f0000002cc0)=""/247, 0xf7}, 0xc578}, {{&(0x7f0000002dc0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000002f00)=[{&(0x7f00000003c0)=""/9, 0x9}, {&(0x7f0000002e80)=""/38, 0x26}, {&(0x7f0000002ec0)=""/27, 0x1b}], 0x3, &(0x7f0000000400)=""/188, 0xbc}}], 0x2, 0x40, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x2, 0x8, 0x8, 0x8001, 0x0, 0xff}, {0x1, 0xed, 0x7, 0xfffffffffffffff9, 0x1, 0x9}], ['\x00', '\x00', '\x00', '\x00']}) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) pause() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0xa) fchdir(r6) r7 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r7, 0x2007ffb) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) fcntl$setsig(r8, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee3, 0x8031, r2, 0x0) 13m6.226564311s ago: executing program 4 (id=1706): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000480)={0x4, [0x3, 0x5, 0x0, 0x1, 0x2, 0x6, 0x7, 0x3, 0x10, 0x8, 0x6, 0x9edf, 0x228, 0x385, 0xef9a, 0xfff, 0x46, 0xb2, 0x2, 0xb, 0x5, 0x4, 0x1ff, 0x0, 0x192, 0x0, 0x2, 0x10, 0x6, 0xd, 0x8d7, 0x6, 0x5, 0x7, 0x6, 0x2, 0x229e, 0x1, 0x8002, 0x9, 0x0, 0x0, 0x423, 0xfff, 0x86, 0x400, 0x7, 0x7], 0xc}) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0xd, 0x0, 0x4, {0xad, 0x4, 0xfffffffd, 0xb8}}) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xfffffffffffffff7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000180)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000380)={{r3, 0x4, 0xc621, 0x6, 0x1000, 0xa, 0x7fffffffffffffff, 0x2005, 0x80000001, 0x80, 0x97e2, 0x7fffffffffffffff, 0x4, 0xfffffffffffff825, 0x7}}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x54, r7, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}}, 0x20000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000500)={r3}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r8, &(0x7f00000005c0)='+mM%', 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) 12m51.169631636s ago: executing program 33 (id=1706): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000480)={0x4, [0x3, 0x5, 0x0, 0x1, 0x2, 0x6, 0x7, 0x3, 0x10, 0x8, 0x6, 0x9edf, 0x228, 0x385, 0xef9a, 0xfff, 0x46, 0xb2, 0x2, 0xb, 0x5, 0x4, 0x1ff, 0x0, 0x192, 0x0, 0x2, 0x10, 0x6, 0xd, 0x8d7, 0x6, 0x5, 0x7, 0x6, 0x2, 0x229e, 0x1, 0x8002, 0x9, 0x0, 0x0, 0x423, 0xfff, 0x86, 0x400, 0x7, 0x7], 0xc}) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0xd, 0x0, 0x4, {0xad, 0x4, 0xfffffffd, 0xb8}}) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xfffffffffffffff7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000180)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000380)={{r3, 0x4, 0xc621, 0x6, 0x1000, 0xa, 0x7fffffffffffffff, 0x2005, 0x80000001, 0x80, 0x97e2, 0x7fffffffffffffff, 0x4, 0xfffffffffffff825, 0x7}}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x54, r7, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}}, 0x20000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000500)={r3}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r8, &(0x7f00000005c0)='+mM%', 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) 5m3.580790225s ago: executing program 0 (id=5094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000002068101000000000000000000000000050005000200000005000100"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000002100), 0x81, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020}, 0x2020) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x3, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="d800"], 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 5m3.487124355s ago: executing program 0 (id=5095): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x64010102, @local, {[@noop, @generic={0x86, 0xd, "c045d45768dc37efa0fc58"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x3d}}]}, @ssrr={0x89, 0xf, 0x0, [@empty, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@rand_addr=0x64010100}, {@private=0xa010101}, {@rand_addr, 0x3}, {@local, 0x4}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r2, 0x1) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000140), 0x0, 0x20080058) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r5) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc048aeca, &(0x7f00000001c0)={0x8, 0x0, [{0xab8, 0x0, 0x101}, {0x9e9, 0x0, 0x4}, {0x118, 0x0, 0x6}, {0x909, 0x0, 0x8}, {0xbc4, 0x0, 0x9}, {0x28b, 0x0, 0xff}, {0x373, 0x0, 0x5}, {0x891, 0x0, 0x13}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x5, 0x4, 0x8, 0xb}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5m2.505937197s ago: executing program 0 (id=5102): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r4 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000000)="ffffffffffff0011223344554305000f3200000000010011221f445500112233445500ff0000", 0x26, 0x4c004, &(0x7f0000000800)={0x11, 0x18, r3, 0x1, 0xfd, 0x6, @random="01bf3f77e467"}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001400030062617461647630000000000000000000cca7dacf9b9a9c27d7b79f8ac6d96491565b27e0bd5058f93f6bdda2b6834adcadae02f8018de6887cb36d002e421e471b677d8d742b2bd83eebfae62cdd1db2878b77bc34ba93b4bbfe7e6639726e11cf7b54f5ea603603f1c435bf618f6f148124d9899edf57eb61a821e9c9192164d9d80ec25407"], 0x34}}, 0x0) 5m2.284699868s ago: executing program 0 (id=5105): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x0, 0x0, 0x19, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x260, 0x17a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x8100}, 0x2800804c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = openat$bsg(0xffffff9c, &(0x7f0000000140)='/dev/bsg/2:0:0:0\x00', 0x20000, 0x0) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000005dc0)={0x18, 0x39, 0x825, 0x70bd2b, 0x25dfdbfb, {0x14}, [@nested={0x4, 0x7}]}, 0x18}, 0x1, 0x0, 0x0, 0x4054}, 0x40010) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d4}, 0x24044040) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ifreq(r7, 0x89b0, &(0x7f0000000880)={'xfrm0\x00', @ifru_settings={0x6, 0x6, @raw_hdlc=0x0}}) 5m2.078860544s ago: executing program 0 (id=5107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="bf76f64727d5"}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='tcp 2', 0x5) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00008864"], 0x44) 5m0.185228772s ago: executing program 0 (id=5118): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x1006}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010102}, @IFLA_VTI_LOCAL={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 4m51.586058908s ago: executing program 5 (id=5159): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x4b45, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000000c0), &(0x7f0000000440)=0x8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats\x00') r5 = socket$kcm(0x29, 0x2, 0x0) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000800)=""/203, 0xcb}], 0x1, 0x182, 0x20010000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, 0x0) syz_clone(0x400, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x6) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r8, 0x5411, 0xffffffffffffffff) 4m51.25528655s ago: executing program 5 (id=5161): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000000000000001000000"], 0x18}, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat$dir(0xffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x401, 0x12) r4 = openat(r3, &(0x7f0000000280)='.\x00', 0x230603, 0x4) write(r4, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) syz_emit_ethernet(0x29, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x1b, 0x64, 0x0, 0x0, 0x6c, 0x0, @multicast1, @rand_addr=0x64010102}, "86ef8690dd4f43"}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) getpid() r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='dummy_udc.0\n', 0xc) 4m50.006116979s ago: executing program 5 (id=5174): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) listen(r1, 0x1) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000019080)={{0x2, 0x4e23, @loopback}, {0x6, @local}, 0x22, {0x2, 0x4e22, @multicast1}, 'bridge0\x00'}) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x400, 0x5, 0x10000000000000, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0x7f, 0xff}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000019100)='./file1\x00') r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffedc) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='/\x00'/12, @ANYRES32=r3, @ANYBLOB="2979c0a009a2d9953312ae6d3a883fefcd3aa122", @ANYRES64=0x0], 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./proc\x00', 0x80800, 0x0) 4m48.740885449s ago: executing program 5 (id=5167): pipe(&(0x7f0000000040)) io_setup(0x3df, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$kcm(0x2b, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = socket(0x1a, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xd}, {0xffe0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000003c0)) 4m47.157331325s ago: executing program 5 (id=5171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="bf76f64727d5"}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='tcp 2', 0x5) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00008864"], 0x44) 4m46.444893432s ago: executing program 5 (id=5177): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000004c0)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000000c0)=0xfe, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000000000000000000080004", @ANYRES32=r3, @ANYBLOB="06001500070000000c0016", @ANYRES64=r2], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000140)) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r2, 0xc0207511, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) 4m44.590803937s ago: executing program 34 (id=5118): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x1006}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010102}, @IFLA_VTI_LOCAL={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 4m34.507542734s ago: executing program 1 (id=5227): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = syz_io_uring_setup(0x3949, &(0x7f0000000180)={0x0, 0x7ded, 0x8, 0x3, 0x132}, &(0x7f0000000240), &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x20) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000001340)={{r5}, r6, 0x4, @inherit={0x80, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000700000000000000e70e000000000000018000000000000016000000000080000010000000000000040000000000000002000000000000008130000000000000ff7fbf461af80057f5b400000000000000000000000000008c440000000000000a00000000000000"]}, @name="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"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000002a40)={{r0}, r6, 0xa, @inherit={0x78, &(0x7f0000000400)={0x1, 0x6, 0x8001, 0x9f8e, {0x28, 0x1, 0x2, 0x2}, [0x3, 0x7, 0x9, 0x7, 0x4, 0x800]}}, @subvolid=0x4}) read$FUSE(r4, &(0x7f0000000a00)={0x2020}, 0x2020) 4m34.372028299s ago: executing program 1 (id=5228): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x3, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x100}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000dc0)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\xd5\xec\x10\xd7\x01M\x7f\xb7\x17@)\x8fG&\xcb\xe3\xc2\x80\xc3MD\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xe7\x9d\x9a\x8a\x86>\f\xa8b\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xb6\x1c+\xf7gT\x9a\x02\x99\xc2\x00\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84X\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1\x00\x00\x00\x00\x00\x00E\xfc', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = timerfd_create(0x4, 0x80800) timerfd_settime(r4, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}}, &(0x7f0000000180)) keyctl$set_reqkey_keyring(0xe, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000340)=""/146, 0x92, 0x0, &(0x7f0000000500)=""/145, 0x91}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0xa43a6d}) 4m34.085743959s ago: executing program 1 (id=5231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000002068101000000000000000000000000050005000200000005000100"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000002100), 0x81, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020}, 0x2020) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x3, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="d8"], 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 4m34.046331144s ago: executing program 1 (id=5233): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)=[0xc], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = socket$inet6(0xa, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x9) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000f00)={0x2, 0x7fffffff, 0x7, 0xffffffff, 0x7, 0x81}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000f00)={0x2, 0x7fffffff, 0x7, 0xffffffff, 0x7, 0x81}) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600)=0xfffffffe, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600)=0xfffffffe, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000020900020073797a310000000008000a40fffffffc0900010073797a310000000008000540000000242c00128014000180090001006c6173740000000004000280140001800c000100636f756ee339e7b2295bdf2708000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_io_uring_setup(0x3064, &(0x7f0000000080)={0x0, 0xa831, 0x40000, 0x0, 0x1ed}, &(0x7f0000000100), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x7a36, &(0x7f0000000640)={0x0, 0x591f, 0x10000, 0x0, 0x51}, 0x0, &(0x7f0000000000), &(0x7f0000000080)) (async) syz_io_uring_setup(0x7a36, &(0x7f0000000640)={0x0, 0x591f, 0x10000, 0x0, 0x51}, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000480)=""/105, 0x69}, {&(0x7f0000000500)=""/125, 0x7d}, {&(0x7f0000000580)=""/179, 0xb3}, {0x0}, {&(0x7f0000000700)=""/99, 0x63}], 0x5, 0x4, 0x1) (async) preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000480)=""/105, 0x69}, {&(0x7f0000000500)=""/125, 0x7d}, {&(0x7f0000000580)=""/179, 0xb3}, {0x0}, {&(0x7f0000000700)=""/99, 0x63}], 0x5, 0x4, 0x1) ppoll(&(0x7f0000000140)=[{r7}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000140)=[{r7}], 0x1, 0x0, 0x0, 0x0) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) munmap$IORING_OFF_CQ_RING(r4, 0x7126) (async) munmap$IORING_OFF_CQ_RING(r4, 0x7126) close(r8) syz_io_uring_submit(0x0, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r12 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r12, 0xffffffffffffffff, 0x0) 4m31.342767449s ago: executing program 35 (id=5177): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000004c0)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000000c0)=0xfe, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000000000000000000080004", @ANYRES32=r3, @ANYBLOB="06001500070000000c0016", @ANYRES64=r2], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000140)) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r2, 0xc0207511, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) 4m27.087253293s ago: executing program 1 (id=5269): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (fail_nth: 3) 4m25.766461862s ago: executing program 1 (id=5276): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r1, 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8000000010000104000000000300000000000000", @ANYRES32, @ANYBLOB="24200400858d0000400012800e00010069703665727370616e0000002c0002800500160003000000040012"], 0x80}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r4 = syz_open_dev$loop(&(0x7f00000014c0), 0x4, 0x2) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r5, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r7, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xffffffffffffff4e]}}) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r10, 0xc2c45512, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffff, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200080, 0x4000, 0x3, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdffc7, 0x8, 0xffff, 0x3, 0x401, 0x5, 0x3, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x80000001, 0x0, 0x0, 0x5, 0xf1e9, 0x0, 0x0, 0x2147, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x1ff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x800, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x200040]}) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f0000000240)={0x600, 0x1000000}) sendto$inet6(r8, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 4m25.537262716s ago: executing program 36 (id=5276): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r1, 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8000000010000104000000000300000000000000", @ANYRES32, @ANYBLOB="24200400858d0000400012800e00010069703665727370616e0000002c0002800500160003000000040012"], 0x80}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r4 = syz_open_dev$loop(&(0x7f00000014c0), 0x4, 0x2) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r5, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r7, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xffffffffffffff4e]}}) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r10, 0xc2c45512, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffff, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200080, 0x4000, 0x3, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdffc7, 0x8, 0xffff, 0x3, 0x401, 0x5, 0x3, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x80000001, 0x0, 0x0, 0x5, 0xf1e9, 0x0, 0x0, 0x2147, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x1ff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x800, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x200040]}) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f0000000240)={0x600, 0x1000000}) sendto$inet6(r8, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 1m49.049833824s ago: executing program 7 (id=6243): openat$kvm(0xffffffffffffff9c, 0x0, 0x902, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x13, {[@main=@item_4={0x3, 0x0, 0x9, '3gJV'}, @local=@item_4={0x3, 0x2, 0x2, "894f887a"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x6, "86"}, @main=@item_4={0x3, 0x0, 0xa, "11d16ded"}]}}, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r1, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f00000000c0)=0x1, 0x4) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f00000002c0)={0x3, 0xffffffff, 0xfffffffe, 0xffff01c2, 0x2, 0xa}) 1m47.12399501s ago: executing program 7 (id=6265): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xc) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14080000", @ANYRES16=r3, @ANYBLOB="0500000000000000fa890000000000000300", @ANYRES32=r4, @ANYBLOB="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"], 0x814}}, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_buf(r6, 0x29, 0x45, 0x0, &(0x7f0000000000)=0x1e) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x1) 1m47.123010093s ago: executing program 7 (id=6267): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x8}, 0x1c) listen(r1, 0x0) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000073d, &(0x7f0000e68000)={0x1f, 0x4e24, @empty}, 0x10) 1m46.236975783s ago: executing program 7 (id=6276): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1m46.023952876s ago: executing program 7 (id=6278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="09032abd7000fedbdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) (fail_nth: 1) 1m45.597745525s ago: executing program 7 (id=6281): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x3682, &(0x7f0000000540)={0x0, 0x276e, 0x303f357e926655f9, 0x0, 0xc3}, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="09032abd7000fedbdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) 1m45.421823795s ago: executing program 37 (id=6281): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x3682, &(0x7f0000000540)={0x0, 0x276e, 0x303f357e926655f9, 0x0, 0xc3}, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="09032abd7000fedbdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) 7.646999175s ago: executing program 6 (id=6688): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x5d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') r5 = io_uring_setup(0x358f, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r5, 0x20, &(0x7f0000000100)={0x1, 0x0, 0x8, 0x0, &(0x7f0000000200)={0x0}, &(0x7f0000000300)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}, {}, 0x0, 0x1000}, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d000000020000000100080022bf00000000", @ANYRES32=0x1, @ANYBLOB="0200000000005b3ffe8d7445c6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02002000010000000040"], 0x50) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) ioctl$COMEDI_SUBDINFO(r9, 0x80486402, &(0x7f0000000340)) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf250c00000008000300", @ANYRES32=r10, @ANYBLOB="0c0006000100007ccb2f190008878db659586d2c"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 7.16779508s ago: executing program 6 (id=6690): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x8, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000007c0)='syzkaller\x00', 0x795, 0xeb, &(0x7f00000004c0)=""/135, 0x40f00, 0x20, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x10, 0x1ff, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000600)=[0xffffffffffffffff, 0x1], &(0x7f0000000640)=[{0x4, 0x4, 0xe, 0x6}, {0x1, 0x4, 0xa, 0x1}, {0x3, 0x4, 0x10, 0x5}, {0x0, 0x2, 0x4, 0x9}, {0x3, 0x4, 0xb, 0x9}, {0x3, 0x3, 0xe, 0x2}], 0x10, 0x3}, 0x94) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000780)) mlock(&(0x7f0000f47000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0xb) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x8, 0x5}, &(0x7f0000000400)=0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xacb, r3}, 0x38) 5.21278726s ago: executing program 6 (id=6696): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r1 = syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(r1, 0x8, &(0x7f0000000080)={0x5, 0x8001}, &(0x7f0000000100)) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r2, 0x0}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.203475959s ago: executing program 9 (id=6697): syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x64010102, @local, {[@noop, @generic={0x86, 0xd, "c045d45768dc37efa0fc58"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x3d}}]}, @ssrr={0x89, 0xf, 0x0, [@empty, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r2, 0x1) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000140), 0x0, 0x20080058) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r5) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCSIFHWADDR(r5, 0x8b19, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc048aeca, &(0x7f00000001c0)={0x8, 0x0, [{0xab8, 0x0, 0x101}, {0x9e9, 0x0, 0x4}, {0x118, 0x0, 0x6}, {0x909, 0x0, 0x8}, {0xbc4, 0x0, 0x9}, {0x28b, 0x0, 0xff}, {0x373, 0x0, 0x5}, {0x891, 0x0, 0x13}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x5, 0x4, 0x8, 0xb}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5.203176602s ago: executing program 3 (id=6698): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x78) clock_adjtime(0x0, &(0x7f0000000580)={0x8003ff, 0xf, 0x23e654d4, 0xa, 0x120000000000, 0xffc99a3b, 0x401, 0x0, 0x200, 0x100, 0xfffffffffffffffe, 0xfffffdfffffffffd, 0x9, 0x10, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x1000, 0x8, 0x2, 0x6, 0x0, 0x3, 0x0, 0xffffffff}) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x404, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize}, {@allow_other}, {@blksize}, {@allow_other}, {@allow_other}, {@allow_other}, {@blksize}, {@default_permissions}]}}) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x10, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x82401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4020ae46, &(0x7f00000001c0)={0x80000000, 0x25000, 0x0, 0xffffffffffffffff, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004800)={0x2020}, 0x2020) readv(r3, &(0x7f0000000700)=[{&(0x7f00000006c0)=""/14, 0xe}], 0x1) 5.057272316s ago: executing program 3 (id=6699): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000916000/0x4000)=nil, 0x4000, 0x4) write(r0, &(0x7f0000000080)='4', 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a858000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0xba, &(0x7f0000000800)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000037}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500001c0065000000688186ad53a82ac26711907800000000e000000100004e21000806000000f9bdab610d67b4ae188eceb5a8bbe9fa50b361ca3208ce9b6934726c1535b95776657874f4192e7d8d457e524be161c71127872bf376e4965e1324ecfa742e882ab56b57a530363c45e801cedcc5d6a84698211ef9b2edd150eb66ab6db4f28c7af46c436d5309c9ee8055cfbb292090b67595ae446d2e963d728a32569a43f45f0657c18366a88a67"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) splice(r4, 0x0, r3, 0x0, 0x8, 0x0) splice(r2, 0x0, r5, 0x0, 0x84, 0xd) ppoll(&(0x7f0000000440)=[{r5, 0x4410}], 0x1, 0x0, 0x0, 0x0) ioctl$int_out(r4, 0x2, &(0x7f0000000240)) write$binfmt_misc(r3, &(0x7f0000000100)='F', 0x1) readv(0xffffffffffffffff, &(0x7f0000001e80)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) syz_open_dev$sndctrl(&(0x7f0000001a00), 0x1, 0x800) madvise(&(0x7f000087a000/0x1000)=nil, 0x1000, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) 4.929516359s ago: executing program 9 (id=6700): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0xfffd, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900010325bd700000000000200100000000000000000000000000000000000000000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000040f000000000000ffffffffffffffff0000008000000000eb0300000000000000000000000000000180000000000000020000000000000009060000000000000000000000000000000001004400050064010102000000000000000000004000fffffffc3c00000000000000000000000000000000000000000000000000000003000000000000000700000000000000"], 0xfc}}, 0x4080010) syz_emit_ethernet(0x46, &(0x7f0000000800)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x1, @dev, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0xf, 0x9, 0x401b}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000200)={'vlan0\x00', @local}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000003100)=@newtaction={0xf8c, 0x30, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{0xf78, 0x1, [@m_gact={0x94, 0x15, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x4, 0x0, 0x6, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1abe}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x4, 0x4, 0x3}}]}, {0x2a, 0x6, "b8f5c6c35906a124988b37079c84fe998773f08f30f8f7b2138fb430e7405c3875181e3fb1e0"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0xee0, 0xd, 0x0, 0x0, {{0xb}, {0xea4, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10a5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0xffffffff, 0x9, 0x1, {0xff, 0x2, 0x8001, 0x59a, 0x1, 0xd}, {0xfb, 0x1, 0x0, 0x5, 0x1}, 0x3, 0x40, 0x985}}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x874, 0x101, 0xa, 0x8d, 0x8, 0x9, 0x3, 0x3, 0x7, 0x2, 0x8, 0x800, 0x8, 0x9, 0x2, 0x8, 0x81, 0x7, 0x4, 0xfffffffa, 0xa75, 0x39, 0xe, 0x900, 0x9d7, 0x6, 0x81, 0xfffffffc, 0x4, 0xba, 0x9, 0xfffffffa, 0x0, 0x7, 0x3ff, 0x0, 0x5c3, 0x10000, 0x100, 0x7fffffff, 0x80, 0x2, 0xee6, 0x0, 0x3ff, 0x7, 0x91a4, 0x38, 0x8, 0x4, 0x9190, 0xf, 0xdc92, 0x0, 0x7, 0x8000, 0x4, 0x9, 0xfff, 0x7, 0x3, 0x6, 0x4, 0x5, 0x1ff, 0x6, 0x1, 0x81, 0x1000000, 0x7, 0x4, 0x4, 0x7, 0x4, 0x600, 0xe, 0x6, 0x2, 0x4, 0xa, 0xfffffffc, 0x5, 0x0, 0x9, 0x6, 0x2, 0xfffffff7, 0x9, 0x80000000, 0x1, 0x40, 0x3, 0x7fff, 0x4, 0x2, 0x7f, 0x8, 0x6, 0x10, 0x8, 0xa76, 0x8001, 0x6d7, 0x8, 0x5, 0x4, 0x100, 0x1, 0x9, 0xfe2, 0x735, 0xd, 0xe0000000, 0x9, 0x9, 0x0, 0x80, 0x8, 0xfffffff8, 0x7fff, 0x6, 0x7ff, 0x1, 0x200, 0x5, 0x7fff, 0x6, 0xd, 0x8, 0x4, 0x0, 0x6, 0xfffffff5, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x2, 0x2, 0x5, 0x5, 0xffffffff, 0x2, 0x0, 0x9, 0x9, 0x2, 0x8, 0x5, 0x5, 0x7, 0x3, 0x8001, 0x4, 0x5, 0x4, 0x4b2, 0x8, 0x10001, 0xc2, 0x10001, 0x7, 0x9, 0x5, 0x0, 0x4, 0x9, 0x9, 0x79, 0x2, 0x5243, 0x8, 0x8000, 0xe129, 0x3, 0x9, 0xbe, 0x0, 0x400, 0x1, 0x8, 0x2, 0x5, 0x5, 0x234f77bc, 0x2e60, 0x8001, 0xa30a, 0x0, 0x3, 0x10001, 0x1, 0x250, 0x5, 0x80000000, 0x2, 0xfffffffa, 0x200, 0x40, 0x24ee, 0x9, 0x6, 0x7, 0x8000, 0xfffffff7, 0x7, 0x1, 0x8, 0x2, 0x441, 0x4ca4, 0xc, 0x5, 0x9, 0x6, 0x3, 0x5, 0x4b, 0xf65, 0x7, 0x5, 0x5, 0x3, 0x93e7, 0x7, 0x6, 0x1, 0x0, 0x2, 0x8, 0xa0, 0xe91a, 0x7ff, 0x10cbfd90, 0x8, 0x0, 0x8, 0xc178, 0x2, 0x10, 0xfffffffe, 0x4, 0x5, 0x2, 0x7, 0x2, 0x7, 0x3, 0x3, 0x4, 0xfffffffe, 0x40, 0x100, 0x29b, 0xd86d]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x8, 0x0, 0x2, 0x101, {0x2, 0x0, 0x0, 0x77e0, 0x94, 0x2}, {0x80, 0x1, 0x0, 0x6, 0xb, 0x7f}, 0x3, 0x3, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x7, 0xd86, 0x2, 0x3, {0x8c, 0x2, 0x3, 0x6, 0x0, 0x5}, {0xf6, 0x1, 0x200, 0x90, 0x4, 0xad63}, 0x2, 0x3, 0xab6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0xffffffffffffffff, 0x7, 0x8, 0x7fae, {0x2, 0x1, 0x6, 0x8, 0x3, 0x1000}, {0x40, 0x2, 0x7, 0x2, 0x6, 0x4fbd}, 0x3, 0x781, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x6d95, 0xa30e, 0x3, {0x3, 0x2, 0x0, 0x8, 0xfff9, 0x1}, {0x1, 0x1, 0x7, 0x5, 0x3, 0x31}, 0x2, 0x1, 0x5}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfe92, 0xfffffffffffffffa, 0xffffffff, 0x7ab, 0xd1, {0x3d, 0x1, 0x8000, 0x478f, 0x40, 0x3065}, {0x6, 0x2, 0x7f, 0x6, 0x7, 0x2}, 0xa8d, 0x4}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0xa, 0x6, 0x3ff, 0xffffffaa, 0xffffff16, 0x0, 0x9, 0x200, 0x80000000, 0x3, 0x24d1, 0x8, 0x849, 0x7fff, 0x9, 0x8f, 0x10000, 0x3, 0xfffffffb, 0x1, 0x200, 0x5, 0xffffffff, 0x0, 0xffff, 0xfffff800, 0x8, 0x0, 0xfffeffff, 0x1, 0x8, 0x6, 0xb7, 0x5a1, 0x8, 0x49c, 0xe, 0x3, 0x5, 0x7, 0x7, 0xffffffff, 0x9, 0x3, 0x8, 0x1, 0x8, 0x7, 0xfffffffa, 0x8, 0x7, 0x3d9, 0x1, 0x6f, 0x1000, 0x5, 0x80000000, 0x2, 0x8001, 0x9, 0x5, 0x2f, 0xe, 0x4, 0x2, 0x6, 0x791, 0x2, 0x1f0, 0x6, 0x9, 0x9c, 0x4, 0x9, 0x5, 0x2, 0x8, 0x60, 0x6, 0x8237, 0x7, 0xcc, 0x3, 0x7, 0x1, 0x0, 0x9, 0x9, 0x7, 0x10000, 0x4, 0x15, 0x2, 0x200, 0xc4, 0x0, 0xfffffc01, 0x5, 0x3, 0x5, 0x4, 0x7fff, 0x5, 0x3ff, 0x8, 0xffff, 0x1, 0x1, 0x1, 0x0, 0x9, 0x6b, 0x0, 0x4, 0x180000, 0x1, 0x4, 0xfffffffb, 0x51, 0x81, 0x4, 0x2, 0xa, 0x5898, 0x1, 0x4, 0x0, 0x9, 0x101, 0x51ef, 0x0, 0x7, 0xffffffff, 0x365, 0x0, 0x401, 0x2, 0xffb, 0x4, 0x8, 0xfffffff8, 0x5, 0x0, 0x2776f52e, 0x1, 0x101, 0x7, 0x3, 0x532, 0x31da9cc0, 0xfffff5d4, 0x4, 0x4, 0x8, 0x1, 0x6, 0xfffffffa, 0x4, 0x0, 0xffff8000, 0x9, 0xfffffffb, 0xc, 0x1, 0x10000, 0x10001, 0x0, 0x1, 0x9, 0x9, 0x3, 0x8, 0x6, 0xfffffffe, 0x4, 0xa, 0x0, 0x5, 0x30, 0x2, 0x6, 0x7, 0x0, 0x78000000, 0x3d, 0x6, 0x101, 0x2, 0x7fffffff, 0xe117, 0xf9cd, 0x800000, 0x4, 0x2, 0x4, 0x5, 0x1, 0xe, 0x9, 0x8, 0x4, 0x8, 0x8, 0x10000, 0xe, 0x4, 0x2, 0x9, 0x7, 0xb3e5, 0x401, 0xf6, 0x7, 0xd90, 0xfff, 0x1, 0x2eaf, 0x7fffffff, 0x0, 0x7, 0x56, 0x9, 0x1, 0x1, 0x3, 0xc9, 0x2, 0x1, 0x9, 0x5, 0x40, 0xfffffffc, 0x9, 0xd, 0x3, 0x7fff, 0x5, 0x2, 0x8, 0xffffffff, 0xfffff800, 0x2, 0x7, 0x1, 0x1, 0x3, 0x3, 0xfffffff8, 0x8, 0x8000, 0x1, 0x80000000, 0x6, 0x40, 0x9]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x2e9, 0xffffffff, 0x1, 0x6, 0x9, 0x6, 0x3, 0x5, 0xfffffffc, 0xffff7fff, 0x1, 0xd, 0xcb2, 0x9, 0xa, 0x6, 0x5, 0x8, 0xffffffff, 0x7, 0x4, 0x9, 0x0, 0xfffffff3, 0x1, 0x80, 0x4, 0x1, 0x7, 0x2, 0x5, 0x5, 0x7, 0x5, 0x9, 0xfffff3f1, 0x40, 0x4, 0x4, 0x7872, 0x408, 0x6, 0x8, 0xa0000000, 0x2, 0x1, 0x5, 0x101, 0x8, 0x10000, 0x3ff, 0x1, 0x1, 0xe0000, 0x8001, 0x6, 0x4, 0x1, 0x60, 0x0, 0x7, 0x80, 0xffffff6a, 0x6000, 0xf9f0, 0x7, 0x4, 0x1, 0x10001, 0xffff, 0x1, 0x10001, 0x6, 0x8, 0x9, 0x7, 0x10000, 0x8001, 0x3, 0x2, 0x28, 0x3, 0x4, 0x8, 0x6, 0x200, 0x1, 0x1, 0x5, 0x80, 0xa, 0x3, 0xf5, 0x1, 0x1, 0x8, 0x1, 0x4, 0x8, 0xfffffff8, 0xffffff80, 0xfffffffd, 0xd17b, 0xffffff01, 0x0, 0xe, 0x0, 0xa, 0x4, 0x9, 0x80000000, 0x2, 0x7, 0x3, 0x8, 0x80c, 0x5, 0x0, 0x5, 0x2, 0x76a4, 0xff, 0x0, 0x0, 0xe5, 0x81, 0xfffffff9, 0x5a9, 0x5, 0x401, 0x2, 0x7ff, 0x6, 0x2, 0x9, 0x6, 0x5, 0xfffffffe, 0x1000, 0x7fff, 0x0, 0x5, 0xa64c, 0x101, 0x400, 0x10, 0xfde7, 0x6, 0x7fffffff, 0x1, 0x7fff, 0x8, 0xc, 0x4, 0x7, 0x3d9c, 0x1, 0x845, 0xb, 0x4, 0xe8d4, 0x2, 0x8, 0x8, 0x7861, 0x2, 0x5, 0x0, 0x68306dfb, 0xffff0001, 0x7fff, 0x6, 0x8000, 0xee2, 0x4, 0xd55, 0x0, 0x2, 0x8, 0x3, 0x1000, 0x0, 0xe5f811c0, 0x7fffffff, 0x8, 0x401, 0x0, 0x6, 0x10, 0x6, 0xa046, 0x9, 0xff, 0x0, 0x1c000, 0x1, 0x0, 0xfffffffd, 0x9, 0x8, 0xffffffff, 0x708, 0xe, 0x5, 0x9, 0x4, 0x1a9c, 0x9, 0x1980, 0xd, 0x9, 0x8, 0x8, 0x10000, 0x0, 0x3, 0x1000, 0x7, 0x0, 0x1ff, 0x100, 0x9, 0x6, 0x1, 0x401, 0x1, 0x7f, 0x2a, 0x4, 0x0, 0x8, 0x6, 0x9, 0x0, 0x8, 0x5, 0x126, 0xc, 0x4768, 0x5, 0x9, 0x4, 0x3ff, 0x7fffffff, 0x9, 0x0, 0x80, 0x2, 0x0, 0x3, 0x3, 0x4, 0x8, 0x0, 0x4c8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80d0, 0x0, 0x0, 0x9, 0x0, {0x0, 0x1, 0x1, 0x2, 0x9, 0x7fffffff}, {0x9, 0x2, 0x8, 0x5, 0xfff6, 0x3}, 0xe, 0x3, 0x47a}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffb6a6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x8, 0xfffffe01, 0x6, {0x1, 0x0, 0x7, 0x40, 0x40, 0x9}, {0x8, 0x2, 0x3, 0x1, 0xb85f, 0x401}, 0x1, 0x7, 0x11d1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0xffffffff, 0x101, 0x40, {0xee, 0x1, 0xde6c, 0x80, 0x8, 0xcf}, {0xf, 0x2, 0x8c, 0x1, 0x2800, 0x3}, 0x0, 0xea0, 0x7}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]]}, {0x14, 0x6, "a022d13c4848658a5b6b0fa08e0019de"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xf8c}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000140)=@xdp={0x2c, 0x7, r6, 0x17}, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)='!', 0x1}], 0x1}, 0x20044014) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000002e00)={{0x8, 0x7, 0xa512, 0xfffdfffe, '\x00', 0x7b}, 0x0, [0x8, 0x1, 0x1000, 0x9, 0xb, 0x7fffffff, 0x6, 0x8, 0xbc0, 0x2007, 0x15b, 0x7, 0x5941, 0x5, 0x7, 0x8004a9, 0xd, 0x5, 0xb, 0x3, 0x2a, 0x400, 0x2000040, 0x10200000, 0x7, 0x0, 0x6, 0x804, 0x0, 0x3, 0x4, 0x6, 0x6, 0x7ff, 0x3ff, 0x1, 0x5, 0x3, 0xfffffeff, 0x6, 0x3, 0x0, 0xffff8007, 0x2000000e, 0xe, 0x0, 0x200002, 0x5, 0xe, 0x0, 0x9, 0x80010001, 0x400, 0x9, 0x40000009, 0xfffff647, 0xb3d, 0x4, 0x10, 0x9, 0x8, 0x9000, 0x5, 0x8, 0x98, 0xbe, 0x801, 0x1, 0x8, 0x3d, 0x1, 0xa, 0xfffffffe, 0x80000000, 0x69e, 0xb, 0x7004000, 0x0, 0x8, 0x8, 0x7, 0x9, 0x1, 0x3, 0xfffffffd, 0xffff, 0x6, 0x4, 0x100007ff, 0x4, 0xef, 0xff, 0x4, 0x3, 0x0, 0x58a0, 0xb, 0x19, 0x48895, 0x6, 0x7, 0x89, 0xfffffffe, 0xa1a9, 0xe0ae, 0x9, 0xfffff561, 0x12, 0x3, 0x3, 0xfffffffa, 0x8, 0x2, 0x1, 0xc3c, 0x1, 0x11, 0x5, 0x8, 0x2, 0xf2, 0x4, 0x621c6328, 0x7, 0xfffffffe, 0x7, 0x6, 0xff]}) mount(&(0x7f0000000400)=@md0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='xfs\x00', 0x8000, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000280)=ANY=[@ANYBLOB="580d9bbb3827248edb2d7c6c36", @ANYRES32=r0, @ANYBLOB="080024b9e4423098581850ad000008000100e00c3929c1367d9a15c8542e916c5fdc0cb9911d6a226d9a34226d89c9e8b7e9509873c10c0adc1913e8967954d3984cceb099279421199448e5b77eb9fac3e078f51b7f8cfa4a5adfed4ece30aa6db76c6145353dc82baa74578f0988c1f9e6476deb4c154a85655f961e847cff3fe57bd6a520d352b2ec0c66a8dc13df60df23f718159f33c0f99d18a6892968e5e8ec149ac19ae0f4cf0a1b9da55dccfe70110f8502a9d7f93ed7898a18234f060eeb012eae9890fb8a11c25821da54a95f8e1a9de9aa5a36e927759b37d983979861802b6b1d3bc52d4ca00000", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040081000000"], 0x58}, 0x1, 0x0, 0x0, 0x4040df5}, 0x4040084) setresuid(0xee01, 0xee00, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, 0x0, 0x0) r9 = syz_io_uring_setup(0xf03, &(0x7f0000000280)={0x0, 0x79fb, 0x40000, 0x0, 0x51}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000540)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0xa84e5475952f9a3}], 0x1}, 0x40001002, 0x40c1, 0x1, {0x1}}) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 4.047890647s ago: executing program 9 (id=6703): syz_clone3(&(0x7f0000000c40)={0x400101000, 0x0, 0x0, &(0x7f0000000480), {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00006b52349e02508086f000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000038000180060001000a0000000700060073680000080005000100000008000800000000000c00070000000000000000000800090080000000"], 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000500000014000180060001000a00000008000500010000004000028014000100fe8000000000000000000000000000aa06000200500000000800030000000000080004000100000008000500000000000800060000000000"], 0x68}}, 0x0) 1.717470862s ago: executing program 9 (id=6704): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x1f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_setup(0x4, &(0x7f0000000140)) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fanotify_init(0xf00, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, r4, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000240)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x2) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) 1.685488389s ago: executing program 3 (id=6705): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000f00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x7, 0x1}, r1}}, 0x120) 1.684663761s ago: executing program 8 (id=6706): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) (fail_nth: 5) 1.630916837s ago: executing program 6 (id=6707): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x78) clock_adjtime(0x0, &(0x7f0000000580)={0x8003ff, 0xf, 0x23e654d4, 0xa, 0x120000000000, 0xffc99a3b, 0x401, 0x0, 0x200, 0x100, 0xfffffffffffffffe, 0xfffffdfffffffffd, 0x9, 0x10, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x1000, 0x8, 0x2, 0x6, 0x0, 0x3, 0x0, 0xffffffff}) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x404, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize}, {@allow_other}, {@blksize}, {@allow_other}, {@allow_other}, {@allow_other}, {@blksize}, {@default_permissions}]}}) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x10, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x82401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4020ae46, &(0x7f00000001c0)={0x80000000, 0x25000, 0x0, 0xffffffffffffffff, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004800)={0x2020}, 0x2020) readv(r3, &(0x7f0000000700)=[{&(0x7f00000006c0)=""/14, 0xe}], 0x1) 1.506900521s ago: executing program 3 (id=6708): syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x64010102, @local, {[@noop, @generic={0x86, 0xd, "c045d45768dc37efa0fc58"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x3d}}]}, @ssrr={0x89, 0xf, 0x0, [@empty, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r2, 0x1) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000140), 0x0, 0x20080058) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r5) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCSIFHWADDR(r5, 0x8b19, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc048aeca, &(0x7f00000001c0)={0x8, 0x0, [{0xab8, 0x0, 0x101}, {0x9e9, 0x0, 0x4}, {0x118, 0x0, 0x6}, {0x909, 0x0, 0x8}, {0xbc4, 0x0, 0x9}, {0x28b, 0x0, 0xff}, {0x373, 0x0, 0x5}, {0x891, 0x0, 0x13}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x5, 0x4, 0x8, 0xb}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.377295235s ago: executing program 8 (id=6709): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0xfffd, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900010325bd700000000000200100000000000000000000000000000000000000000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000040f000000000000ffffffffffffffff0000008000000000eb0300000000000000000000000000000180000000000000020000000000000009060000000000000000000000000000000001004400050064010102000000000000000000004000fffffffc3c00000000000000000000000000000000000000000000000000000003000000000000000700000000000000"], 0xfc}}, 0x4080010) syz_emit_ethernet(0x46, &(0x7f0000000800)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x1, @dev, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0xf, 0x9, 0x401b}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000200)={'vlan0\x00', @local}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000140)=@xdp={0x2c, 0x7, r6, 0x17}, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)='!', 0x1}], 0x1}, 0x20044014) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000002e00)={{0x8, 0x7, 0xa512, 0xfffdfffe, '\x00', 0x7b}, 0x0, [0x8, 0x1, 0x1000, 0x9, 0xb, 0x7fffffff, 0x6, 0x8, 0xbc0, 0x2007, 0x15b, 0x7, 0x5941, 0x5, 0x7, 0x8004a9, 0xd, 0x5, 0xb, 0x3, 0x2a, 0x400, 0x2000040, 0x10200000, 0x7, 0x0, 0x6, 0x804, 0x0, 0x3, 0x4, 0x6, 0x6, 0x7ff, 0x3ff, 0x1, 0x5, 0x3, 0xfffffeff, 0x6, 0x3, 0x0, 0xffff8007, 0x2000000e, 0xe, 0x0, 0x200002, 0x5, 0xe, 0x0, 0x9, 0x80010001, 0x400, 0x9, 0x40000009, 0xfffff647, 0xb3d, 0x4, 0x10, 0x9, 0x8, 0x9000, 0x5, 0x8, 0x98, 0xbe, 0x801, 0x1, 0x8, 0x3d, 0x1, 0xa, 0xfffffffe, 0x80000000, 0x69e, 0xb, 0x7004000, 0x0, 0x8, 0x8, 0x7, 0x9, 0x1, 0x3, 0xfffffffd, 0xffff, 0x6, 0x4, 0x100007ff, 0x4, 0xef, 0xff, 0x4, 0x3, 0x0, 0x58a0, 0xb, 0x19, 0x48895, 0x6, 0x7, 0x89, 0xfffffffe, 0xa1a9, 0xe0ae, 0x9, 0xfffff561, 0x12, 0x3, 0x3, 0xfffffffa, 0x8, 0x2, 0x1, 0xc3c, 0x1, 0x11, 0x5, 0x8, 0x2, 0xf2, 0x4, 0x621c6328, 0x7, 0xfffffffe, 0x7, 0x6, 0xff]}) mount(&(0x7f0000000400)=@md0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='xfs\x00', 0x8000, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000280)=ANY=[@ANYBLOB="580d9bbb3827248edb2d7c6c36", @ANYRES32=r0, @ANYBLOB="080024b9e4423098581850ad000008000100e00c3929c1367d9a15c8542e916c5fdc0cb9911d6a226d9a34226d89c9e8b7e9509873c10c0adc1913e8967954d3984cceb099279421199448e5b77eb9fac3e078f51b7f8cfa4a5adfed4ece30aa6db76c6145353dc82baa74578f0988c1f9e6476deb4c154a85655f961e847cff3fe57bd6a520d352b2ec0c66a8dc13df60df23f718159f33c0f99d18a6892968e5e8ec149ac19ae0f4cf0a1b9da55dccfe70110f8502a9d7f93ed7898a18234f060eeb012eae9890fb8a11c25821da54a95f8e1a9de9aa5a36e927759b37d983979861802b6b1d3bc52d4ca00000", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040081000000"], 0x58}, 0x1, 0x0, 0x0, 0x4040df5}, 0x4040084) setresuid(0xee01, 0xee00, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, 0x0, 0x0) r9 = syz_io_uring_setup(0xf03, &(0x7f0000000280)={0x0, 0x79fb, 0x40000, 0x0, 0x51}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000540)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0xa84e5475952f9a3}], 0x1}, 0x40001002, 0x40c1, 0x1, {0x1}}) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.303071134s ago: executing program 9 (id=6710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x1, 0xa}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (fail_nth: 5) 1.259938426s ago: executing program 6 (id=6711): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @remote, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@end]}}, {{0x4e20, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, 0xffffffffffffffff, 0x18}, 0x38) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (fail_nth: 5) 1.259714947s ago: executing program 3 (id=6712): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x8, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000007c0)='syzkaller\x00', 0x795, 0xeb, &(0x7f00000004c0)=""/135, 0x40f00, 0x20, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x10, 0x1ff, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000600)=[0xffffffffffffffff, 0x1], &(0x7f0000000640)=[{0x4, 0x4, 0xe, 0x6}, {0x1, 0x4, 0xa, 0x1}, {0x3, 0x4, 0x10, 0x5}, {0x0, 0x2, 0x4, 0x9}, {0x3, 0x4, 0xb, 0x9}, {0x3, 0x3, 0xe, 0x2}], 0x10, 0x3}, 0x94) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000780)) mlock(&(0x7f0000f47000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0xb) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x8, 0x5}, &(0x7f0000000400)=0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xacb, r3}, 0x38) 1.175734147s ago: executing program 8 (id=6713): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0xfffd, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900010325bd700000000000200100000000000000000000000000000000000000000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000040f000000000000ffffffffffffffff0000008000000000eb0300000000000000000000000000000180000000000000020000000000000009060000000000000000000000000000000001004400050064010102000000000000000000004000fffffffc3c00000000000000000000000000000000000000000000000000000003000000000000000700000000000000"], 0xfc}}, 0x4080010) syz_emit_ethernet(0x46, &(0x7f0000000800)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x1, @dev, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0xf, 0x9, 0x401b}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000200)={'vlan0\x00', @local}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000140)=@xdp={0x2c, 0x7, r6, 0x17}, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)='!', 0x1}], 0x1}, 0x20044014) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000002e00)={{0x8, 0x7, 0xa512, 0xfffdfffe, '\x00', 0x7b}, 0x0, [0x8, 0x1, 0x1000, 0x9, 0xb, 0x7fffffff, 0x6, 0x8, 0xbc0, 0x2007, 0x15b, 0x7, 0x5941, 0x5, 0x7, 0x8004a9, 0xd, 0x5, 0xb, 0x3, 0x2a, 0x400, 0x2000040, 0x10200000, 0x7, 0x0, 0x6, 0x804, 0x0, 0x3, 0x4, 0x6, 0x6, 0x7ff, 0x3ff, 0x1, 0x5, 0x3, 0xfffffeff, 0x6, 0x3, 0x0, 0xffff8007, 0x2000000e, 0xe, 0x0, 0x200002, 0x5, 0xe, 0x0, 0x9, 0x80010001, 0x400, 0x9, 0x40000009, 0xfffff647, 0xb3d, 0x4, 0x10, 0x9, 0x8, 0x9000, 0x5, 0x8, 0x98, 0xbe, 0x801, 0x1, 0x8, 0x3d, 0x1, 0xa, 0xfffffffe, 0x80000000, 0x69e, 0xb, 0x7004000, 0x0, 0x8, 0x8, 0x7, 0x9, 0x1, 0x3, 0xfffffffd, 0xffff, 0x6, 0x4, 0x100007ff, 0x4, 0xef, 0xff, 0x4, 0x3, 0x0, 0x58a0, 0xb, 0x19, 0x48895, 0x6, 0x7, 0x89, 0xfffffffe, 0xa1a9, 0xe0ae, 0x9, 0xfffff561, 0x12, 0x3, 0x3, 0xfffffffa, 0x8, 0x2, 0x1, 0xc3c, 0x1, 0x11, 0x5, 0x8, 0x2, 0xf2, 0x4, 0x621c6328, 0x7, 0xfffffffe, 0x7, 0x6, 0xff]}) mount(&(0x7f0000000400)=@md0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='xfs\x00', 0x8000, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000280)=ANY=[@ANYBLOB="580d9bbb3827248edb2d7c6c36", @ANYRES32=r0, @ANYBLOB="080024b9e4423098581850ad000008000100e00c3929c1367d9a15c8542e916c5fdc0cb9911d6a226d9a34226d89c9e8b7e9509873c10c0adc1913e8967954d3984cceb099279421199448e5b77eb9fac3e078f51b7f8cfa4a5adfed4ece30aa6db76c6145353dc82baa74578f0988c1f9e6476deb4c154a85655f961e847cff3fe57bd6a520d352b2ec0c66a8dc13df60df23f718159f33c0f99d18a6892968e5e8ec149ac19ae0f4cf0a1b9da55dccfe70110f8502a9d7f93ed7898a18234f060eeb012eae9890fb8a11c25821da54a95f8e1a9de9aa5a36e927759b37d983979861802b6b1d3bc52d4ca00000", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040081000000"], 0x58}, 0x1, 0x0, 0x0, 0x4040df5}, 0x4040084) setresuid(0xee01, 0xee00, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, 0x0, 0x0) r9 = syz_io_uring_setup(0xf03, &(0x7f0000000280)={0x0, 0x79fb, 0x40000, 0x0, 0x51}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000540)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0xa84e5475952f9a3}], 0x1}, 0x40001002, 0x40c1, 0x1, {0x1}}) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.016427909s ago: executing program 9 (id=6714): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e5a2d0000000000010902240001000000000904000001030102000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313"], 0x0}, 0x0) munlockall() openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) 759.21711ms ago: executing program 6 (id=6715): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000916000/0x4000)=nil, 0x4000, 0x4) write(r0, &(0x7f0000000080)='4', 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a858000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0xba, &(0x7f0000000800)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000037}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500001c0065000000688186ad53a82ac26711907800000000e000000100004e21000806000000f9bdab610d67b4ae188eceb5a8bbe9fa50b361ca3208ce9b6934726c1535b95776657874f4192e7d8d457e524be161c71127872bf376e4965e1324ecfa742e882ab56b57a530363c45e801cedcc5d6a84698211ef9b2edd150eb66ab6db4f28c7af46c436d5309c9ee8055cfbb292090b67595ae446d2e963d728a32569a43f45f0657c18366a88a67"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) splice(r4, 0x0, r3, 0x0, 0x8, 0x0) splice(r2, 0x0, r5, 0x0, 0x84, 0xd) ppoll(&(0x7f0000000440)=[{r5, 0x4410}], 0x1, 0x0, 0x0, 0x0) ioctl$int_out(r4, 0x2, &(0x7f0000000240)) write$binfmt_misc(r3, &(0x7f0000000100)='F', 0x1) readv(0xffffffffffffffff, &(0x7f0000001e80)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) syz_open_dev$sndctrl(&(0x7f0000001a00), 0x1, 0x800) madvise(&(0x7f000087a000/0x1000)=nil, 0x1000, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) 715.83116ms ago: executing program 8 (id=6716): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000f00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x7, 0x1}, r1}}, 0x120) 571.028692ms ago: executing program 8 (id=6717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0xf5, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x1, 0xa}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 256.881659ms ago: executing program 8 (id=6718): socket$inet_tcp(0x2, 0x1, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/ip_vs_stats_percpu\x00') setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x31c, 0xffffffff, 0x108, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xe4, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x2, 0x1}}, @common=@inet=@socket3={{0x24}, 0x2}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xbc, 0xe0, 0x0, {}, [@common=@inet=@udplite={{0x2c}, {[0x4e22, 0x4e22], [0x4e24, 0x4e24], 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0xe96, 0x101}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x2, 0x4}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x378) fchdir(r1) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000040)=@arm64={0x7c, 0x5, 0xa, '\x00', 0x9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x19, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffff001}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @jmp={0x5, 0x1, 0x8, 0x8, 0xa, 0xffffffffffffffff, 0xffffffffffffffff}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x812f}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f00000006c0)='GPL\x00', 0xff, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000700)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x6, 0xb, 0xfffffff8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000780)=[r0, r0, r1, r0, r1], &(0x7f00000007c0)=[{0x4, 0x4, 0x6, 0x4}, {0x2, 0x5, 0x1, 0x1}, {0x5, 0x5, 0x9, 0xb}, {0x1, 0x3, 0x4, 0xc}, {0x2, 0x5, 0x8, 0x4}, {0x2, 0x3, 0x8, 0x9}, {0x2, 0x3, 0xe, 0x9}, {0x5, 0x4, 0xb, 0x8}], 0x10, 0x7}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x4f4c82, 0x5c, 0x36}, 0x18) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0xc}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{0xa, 0x4000, 0x3, 0x1}, 'syz1\x00', 0x26}) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x3) openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x101000, 0x0) r4 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x4004510d, &(0x7f0000000000)) ioctl$UI_DEV_CREATE(r2, 0x5501) 0s ago: executing program 3 (id=6719): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x78) clock_adjtime(0x0, &(0x7f0000000580)={0x8003ff, 0xf, 0x23e654d4, 0xa, 0x120000000000, 0xffc99a3b, 0x401, 0x0, 0x200, 0x100, 0xfffffffffffffffe, 0xfffffdfffffffffd, 0x9, 0x10, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x1000, 0x8, 0x2, 0x6, 0x0, 0x3, 0x0, 0xffffffff}) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x404, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize}, {@allow_other}, {@blksize}, {@allow_other}, {@allow_other}, {@allow_other}, {@blksize}, {@default_permissions}]}}) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x10, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x82401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4020ae46, &(0x7f00000001c0)={0x80000000, 0x25000, 0x0, 0xffffffffffffffff, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004800)={0x2020}, 0x2020) readv(r3, &(0x7f0000000700)=[{&(0x7f00000006c0)=""/14, 0xe}], 0x1) kernel console output (not intermixed with test programs): [ 1188.315224][T18755] usb 11-1: USB disconnect, device number 14 .file0ރm#։!f۪y&jAcaAC|D9 ^瀘hyfH8fC2l%S`-$mRFZ|H7M[ >Q,EGXIQ5J?V9g4aS3% FhM^6)Q7:L]>]bHYv€r8`)5ݺŦ.=W&W!s.)#>01A'^䮅nȈgQR~UvCD/p%E:b& Zq`CJjM37`xl!Xۀv`6o{FН,gIKL,gPe[^++ǀ bQ=䌸+?0?Znv?60EFy#H5LⅯ unK"qYBfQdiq kxcK]۠y18_MQAİ"Ϸ RUZWlˌ[dtgvb-Bl\[;ΑŏqM?Xdr ]O "?]:n6Sq\R`V U]Q\@|ή)tP3H8dh.gjo9j|:5yX566 ڔX$ogX?q=w2H*xxBaubrx;21#[v#U~vv'1A T!kmzMxqFQe[ԙcS[K@|ZYŸ 'ĩÊU^B0Sd ;޻p) 5G~M(ylU ou&&3+ 1u䦗fCU-mΖQ0qD"^._g|t>ˊ6y#!rb6hԘki$әhN.v^wkXȔn; 6#< ޏ*t\^M9y [qU7f!:; Nѫ.a w*uU@m`K|0e)^ޔ8c~)$Kt^x,Q ;*5'e\ݖ~sq :,D)0RP=1HT{OM,᐀x(P6M4>s~z͡]y"inkP&;t(v>%`lOsZO6qԑ]8G\{E_Q;CLa M&Fn67I4W֘E-&xܥKJR[hCB:n 8ȿAr'J4-g qĕQQo!˱&]sLr])U;:y]-`Bxo rI?ǒvCfJ52 о j$l6Wƹ܃zCީH`cs̄"M3"Bȕ@uqg86ʹaUj`dfSEz֮"IFBxH`"s٠ϠڎrG^ND(7QI4G>ն>@HMUK?.x?L:5dPU:}"BWXYyTՌt*lv2knRsd$MC?ȁ? *$3Ij{ E* r=ڏem!{U4+\<|뻝OLf]EMҋ!~a1x^ڼH&q}ZX6;K9/PHto^FPByF FN9SM3Ke5)h* mF/.X{7.b!HqqW]Dž^zg1ZFhd`ڷjc̀&:IUkHz X_-LAFg|J,K^Jtk~oKqKp(I (wk¨|ao 2G?';[:@Ic}̼/ zfq|YlV h^ޖ{>拌YVL;k,X8~08,QEe QkyVj g?ت`w7WIDQzh$PFG$wʆbAr"mf+$>]ܨ(|WQ @,6 4}KI^/xɥ;cd>dGnh[;-͉<hhI&}o+N{iu*Jgh4/B$|R|+ `dPz-&7YF*hh C㖹t5a%GТ'7 6oCKI/]b0|6oԅ|@IXqU5/R$mF.p2vdMŘo'?9Q!B@EƼ6bs <'C"L5p})dn u|eM;)oz$VQ6*YVZƱث̔Ƴ;1OnP`WdU]O@,~%ˤ"9IXuC:"\BwFv}z:Je:f?*;&^i"pX*K\!,4_O~$fOs|`gd_]KlFK<~rŵˮsd!<F׸ln;^(+|n{Ѱ!0̯zY)Qdut<]ɁK;%bGy50~nÀ q0³UHSIVS%sn|$\)Z=^:ra(5 j0) u=u)-+6iY ^@}ދĖq#&jvk@$a)gmGwBn>Im.q(r֮3 yȶNز L,K 0K{ݜf@"0Al_~A)GRa?J((HR̫.axzݨ<wH׵$8HC-Y.aq,/qC*#IU$@#44L{j/''dϕxF.;>bCZg^%65ߪh>օA?[Q ЦFt,娇FLF $Q-(՗. I۾gc"N2;ԽTDR.#14>fbj:r^C9`@#|K^tӮ|DVpT7q,nQc*LMoÄ#ո( 5Ad*kpPPu/OkC߃ h*ogzL[;{cʦ{q1UU,q88a] {%Js?%&3b]=C K{Z ;6 {5y, _ u(;8\ rB^Q D<^Ő؝`t* ,/E}] kO].ox"VO/N^^1e7LΎxrc8'g0b;*p!qzKqKr9ľ ]9d4A ;Mgz8ke=ݮ[0ג>4!Y!)d]n!]SkNb:C^ A K,I{~>✌ &d66LHQOU6$A\_704x¬;E(O| } 76%8gTtwyMfJ'dsuc0LlIdThR3JVXDA|u ;hhkVmw%0&q;ɑ3̼'7AoRB :Fj O-м/Ƕ6(~[ 1189.287040][T27958] jffs2: notice: (27958) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1189.300863][T27960] syz_tun: entered allmulticast mode [ 1189.321388][T27964] jffs2: notice: (27964) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1189.350575][T27960] dvmrp6: entered allmulticast mode [ 1189.963920][T27955] syz_tun: left allmulticast mode [ 1190.192611][T27975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6608'. [ 1190.210574][T27975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6608'. [ 1190.231076][T27973] fuse: blksize only supported for fuseblk [ 1190.519778][T27979] jffs2: notice: (27979) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1190.743861][T27962] 9p: Could not find request transport: vss=any [ 1190.763893][T27979] overlayfs: missing 'lowerdir' [ 1190.875205][T27990] ip6t_rt: too many addresses specified   /dev/fuse ( ^ syz0@,  syz0 syz2fd=0x0000000000000008,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000@V@P)F@s/dev/i2c-#raw 0PPD8rt -D @   hCT  netbios-nssyz0netdevsim0ip_vti0! hCTsyz1syz0 $[ 1192.427101][T28005] jffs2: notice: (28005) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1193.971915][T28015] fuse: fd is not a fuse device [ 1194.353205][T28021] syz_tun: entered allmulticast mode [ 1194.366044][T28021] dvmrp6: entered allmulticast mode [ 1194.427297][T28023] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6622'. [ 1194.436529][T28023] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6622'. [ 1194.530289][T28023] syzkaller0: entered promiscuous mode [ 1194.530366][T28023] syzkaller0: entered allmulticast mode [ 1194.617160][T28034] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6624'. [ 1196.535465][T28052] ip6t_rt: too many addresses specified [ 1196.607785][T28054] fuse: fd is not a fuse device [ 1196.998093][T28059] jffs2: notice: (28059) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1199.211459][T28018] syz_tun: left allmulticast mode [ 1199.521821][T28069] fuse: blksize only supported for fuseblk [ 1199.642924][T28071] fuse: blksize only supported for fuseblk [ 1199.710269][T28073] jffs2: notice: (28073) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1199.740887][T28073] overlayfs: missing 'lowerdir' [ 1200.457709][T28096] jffs2: notice: (28096) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1201.629605][T28098] fuse: blksize only supported for fuseblk [ 1201.982574][T28111] fuse: fd is not a fuse device [ 1202.345537][T28121] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6648'. [ 1202.353599][T28121] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6648'. [ 1202.387252][T28128] jffs2: notice: (28128) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1202.405030][T28128] overlayfs: missing 'lowerdir' [ 1202.630027][T28139] jffs2: notice: (28139) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1202.904315][T28146] fuse: fd is not a fuse device [ 1202.958766][T28139] overlayfs: missing 'lowerdir' [ 1202.991725][T28148] overlayfs: missing 'lowerdir' [ 1203.245107][T28154] fuse: fd is not a fuse device [ 1203.474162][T28162] bond4: entered allmulticast mode [ 1203.475892][T28162] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1203.649417][T28168] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6662'. [ 1203.652049][T28168] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6662'. [ 1203.896442][T28176] fuse: blksize only supported for fuseblk [ 1204.097657][T28182] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 1204.111175][T28182] syzkaller0: entered promiscuous mode [ 1204.111248][T28182] syzkaller0: entered allmulticast mode [ 1204.114403][T28182] FAULT_INJECTION: forcing a failure. [ 1204.114403][T28182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1204.114424][T28182] CPU: 2 UID: 0 PID: 28182 Comm: syz.9.6666 Tainted: G L syzkaller #0 PREEMPT(full) [ 1204.114441][T28182] Tainted: [L]=SOFTLOCKUP [ 1204.114445][T28182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1204.114453][T28182] Call Trace: [ 1204.114457][T28182] [ 1204.114462][T28182] dump_stack_lvl+0x100/0x190 [ 1204.114481][T28182] should_fail_ex.cold+0x5/0xa [ 1204.114496][T28182] _copy_from_iter+0x1f4/0x1690 [ 1204.114516][T28182] ? __pfx__copy_from_iter+0x10/0x10 [ 1204.114538][T28182] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1204.114554][T28182] ? __lock_acquire+0x4c5/0x1ec0 [ 1204.114575][T28182] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1204.114623][T28182] skb_copy_datagram_from_iter+0x11f/0x720 [ 1204.114647][T28182] packet_sendmsg+0x2257/0x4f00 [ 1204.114667][T28182] ? aa_sk_perm+0x389/0xab0 [ 1204.114683][T28182] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1204.114699][T28182] ? __pfx_aa_sk_perm+0x10/0x10 [ 1204.114716][T28182] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 1204.114735][T28182] ? __pfx_packet_sendmsg+0x10/0x10 [ 1204.114749][T28182] ? aa_sock_msg_perm+0x11e/0x200 [ 1204.114762][T28182] ? apparmor_socket_sendmsg+0x165/0x280 [ 1204.114777][T28182] ____sys_sendmsg+0xa4d/0xbe0 [ 1204.114793][T28182] ? __pfx_packet_sendmsg+0x10/0x10 [ 1204.114806][T28182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1204.114828][T28182] ___sys_sendmsg+0x190/0x1e0 [ 1204.114846][T28182] ? __pfx____sys_sendmsg+0x10/0x10 [ 1204.114871][T28182] ? find_held_lock+0x2b/0x80 [ 1204.114891][T28182] __sys_sendmsg+0x160/0x210 [ 1204.114904][T28182] ? __pfx___sys_sendmsg+0x10/0x10 [ 1204.114921][T28182] ? __pfx_ksys_write+0x10/0x10 [ 1204.114935][T28182] __do_fast_syscall_32+0x13a/0x8b0 [ 1204.114950][T28182] ? lockdep_hardirqs_on+0x7d/0x110 [ 1204.114965][T28182] do_fast_syscall_32+0x32/0x70 [ 1204.114981][T28182] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1204.114995][T28182] RIP: 0023:0xf706efec [ 1204.115009][T28182] Code: Unable to access opcode bytes at 0xf706efc2. [ 1204.115014][T28182] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1204.115025][T28182] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000180 [ 1204.115032][T28182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1204.115039][T28182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1204.115045][T28182] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1204.115052][T28182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1204.115065][T28182] [ 1204.208161][ T50] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 1204.264720][T28184] jffs2: notice: (28184) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1204.330959][T28184] overlayfs: missing 'lowerdir' [ 1204.358253][ T50] usb 11-1: Using ep0 maxpacket: 16 [ 1204.361660][ T50] usb 11-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1204.365411][ T50] usb 11-1: config 0 has an invalid interface number: 8 but max is 0 [ 1204.365426][ T50] usb 11-1: config 0 has no interface number 0 [ 1204.365445][ T50] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1204.370757][ T50] usb 11-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1204.370773][ T50] usb 11-1: Product: syz [ 1204.370781][ T50] usb 11-1: SerialNumber: syz [ 1204.372165][ T50] usb 11-1: config 0 descriptor?? [ 1204.373958][ T50] cm109 11-1:0.8: invalid payload size 208, expected 4 [ 1204.379301][ T50] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.8/input/input58 [ 1204.751381][ C2] cm109_urb_ctl_callback: 18 callbacks suppressed [ 1204.751411][ C2] cm109 11-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1204.751619][ C2] cm109 11-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1204.751672][ T50] usb 11-1: USB disconnect, device number 15 [ 1204.751806][ C2] cm109 11-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1204.751818][ C2] cm109 11-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1204.765572][ T50] cm109 11-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1205.506259][T28204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6672'. [ 1205.512697][T28204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6672'. [ 1205.868943][T28213] fuse: blksize only supported for fuseblk [ 1206.052736][T28224] jffs2: notice: (28224) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1206.066649][ T5907] wg2 speed is unknown, defaulting to 1000 [ 1206.087565][T28224] overlayfs: failed to clone upperpath [ 1206.098390][T28228] FAULT_INJECTION: forcing a failure. [ 1206.098390][T28228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1206.098483][T28228] CPU: 0 UID: 0 PID: 28228 Comm: syz.9.6677 Tainted: G L syzkaller #0 PREEMPT(full) [ 1206.098512][T28228] Tainted: [L]=SOFTLOCKUP [ 1206.098517][T28228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1206.098524][T28228] Call Trace: [ 1206.098529][T28228] [ 1206.098534][T28228] dump_stack_lvl+0x100/0x190 [ 1206.098552][T28228] should_fail_ex.cold+0x5/0xa [ 1206.098577][T28228] _copy_from_iter+0x1f4/0x1690 [ 1206.098593][T28228] ? _copy_from_iter+0x350/0x1690 [ 1206.098606][T28228] ? _copy_from_iter+0x270/0x1690 [ 1206.098618][T28228] ? __pfx__copy_from_iter+0x10/0x10 [ 1206.098632][T28228] ? __pfx__copy_from_iter+0x10/0x10 [ 1206.098644][T28228] ? __lock_acquire+0x4c5/0x1ec0 [ 1206.098662][T28228] copy_page_from_iter+0x238/0x300 [ 1206.098676][T28228] skb_copy_datagram_from_iter+0x399/0x720 [ 1206.098699][T28228] tun_get_user+0x1866/0x3cc0 [ 1206.098719][T28228] ? __lock_acquire+0x4c5/0x1ec0 [ 1206.098734][T28228] ? __pfx_tun_get_user+0x10/0x10 [ 1206.098748][T28228] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1206.098768][T28228] ? find_held_lock+0x2b/0x80 [ 1206.098779][T28228] ? tun_get+0x191/0x370 [ 1206.098790][T28228] ? tun_get+0x191/0x370 [ 1206.098805][T28228] tun_chr_write_iter+0xdc/0x200 [ 1206.098819][T28228] vfs_write+0x6af/0x1050 [ 1206.098831][T28228] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1206.098845][T28228] ? __pfx_vfs_write+0x10/0x10 [ 1206.098855][T28228] ? find_held_lock+0x2b/0x80 [ 1206.098875][T28228] ksys_write+0x12a/0x250 [ 1206.098886][T28228] ? __pfx_ksys_write+0x10/0x10 [ 1206.098901][T28228] do_int80_emulation+0x166/0x650 [ 1206.098918][T28228] asm_int80_emulation+0x1a/0x20 [ 1206.098930][T28228] RIP: 0023:0xf71a75ab [ 1206.098940][T28228] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1206.098951][T28228] RSP: 002b:00000000f543c44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1206.098963][T28228] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080001500 [ 1206.098970][T28228] RDX: 00000000000013be RSI: 0000000000000000 RDI: 0000000000000000 [ 1206.098977][T28228] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1206.098983][T28228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1206.098989][T28228] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1206.099003][T28228] [ 1206.217546][T28229] overlayfs: missing 'lowerdir'   /dev/fuse ( ^ syz0@,  syz0 syz2fd=0x0000000000000005,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000@V@P)F@s./file0fuseh.s[ 1207.098170][ T50] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 1207.258065][ T50] usb 13-1: Using ep0 maxpacket: 16 [ 1207.260142][ T50] usb 13-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1207.262572][ T50] usb 13-1: config 0 has an invalid interface number: 8 but max is 0 [ 1207.262589][ T50] usb 13-1: config 0 has no interface number 0 [ 1207.262609][ T50] usb 13-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1207.266619][ T50] usb 13-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1207.266634][ T50] usb 13-1: Product: syz [ 1207.266642][ T50] usb 13-1: SerialNumber: syz [ 1207.268046][ T50] usb 13-1: config 0 descriptor?? [ 1207.270313][ T50] cm109 13-1:0.8: invalid payload size 208, expected 4 [ 1207.271278][ T50] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.8/input/input59 [ 1207.461916][T15932] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 1207.839171][ C2] cm109 13-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1207.839396][ C2] cm109 13-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1207.839583][ C2] cm109 13-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1207.839783][ C2] cm109 13-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1207.839979][ C2] cm109 13-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1207.840176][ C2] cm109 13-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1207.840365][ C2] cm109 13-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1207.843872][ T5907] usb 13-1: USB disconnect, device number 10 [ 1207.843920][ C2] cm109 13-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1207.865714][ T5907] cm109 13-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1208.004535][T28262] jffs2: notice: (28262) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1208.022951][T28262] overlayfs: failed to clone upperpath [ 1208.071594][T28262] overlayfs: missing 'lowerdir' [ 1208.204939][T28271] fuse: fd is not a fuse device [ 1208.300354][T28264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6688'. [ 1208.301990][T28264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6688'. [ 1208.798055][ T10] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 1208.948090][ T10] usb 11-1: Using ep0 maxpacket: 16 [ 1208.950711][ T10] usb 11-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1208.961663][ T10] usb 11-1: config 0 has an invalid interface number: 8 but max is 0 [ 1208.964309][ T10] usb 11-1: config 0 has no interface number 0 [ 1208.966351][ T10] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1208.971857][ T10] usb 11-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1208.974912][ T10] usb 11-1: Product: syz [ 1208.976347][ T10] usb 11-1: SerialNumber: syz [ 1208.979629][ T10] usb 11-1: config 0 descriptor?? [ 1208.984034][ T10] cm109 11-1:0.8: invalid payload size 208, expected 4 [ 1209.029829][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.8/input/input60 [ 1209.241996][T28284] fuse: fd is not a fuse device [ 1209.614546][ T853] usb 11-1: USB disconnect, device number 16 [ 1209.614678][ C0] cm109 11-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1209.627332][ T853] cm109 11-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1210.384314][T28296] fuse: fd is not a fuse device [ 1210.416965][T28295] jffs2: notice: (28295) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1210.446824][T28295] overlayfs: missing 'lowerdir' [ 1210.588196][ T5907] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 1210.738134][ T5907] usb 11-1: Using ep0 maxpacket: 8 [ 1210.740589][ T5907] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1210.744539][ T5907] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 1210.747366][ T5907] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1210.751256][ T5907] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1210.756060][ T5907] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1210.759948][ T5907] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1210.764090][ T5907] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.019797][ T5907] usb 11-1: GET_CAPABILITIES returned 0 [ 1211.019861][ T5907] usbtmc 11-1:16.0: can't read capabilities [ 1211.069004][T28306] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6700'. [ 1211.223859][T28306] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6700'. [ 1211.236289][ T5907] usb 11-1: USB disconnect, device number 17 [ 1211.508430][T15932] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1211.508588][T15932] Bluetooth: hci0: Injecting HCI hardware error event [ 1211.522010][T23560] Bluetooth: hci0: hardware error 0x00   /dev/fuse ( ^ syz0@,  syz0 syz2fd=0x0000000000000005,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000P)F@s./file0fuseh%.s.&file0ރm#։!f۪y&jAcaAC|D9 ^瀘hyfH8fC2l%S`-$mRFZ|H7M[ >Q,EGXIQ5J?V9g4aS3% FhM^6)Q7:L]>]bHYv€r8`)5ݺŦ.=W&W!s.)#>01A'^䮅nȈgQR~UvCD/p%E:b& Zq`CJjM37`xl!Xۀv`6o{FН,gIKL,gPe[^++ǀ bQ=䌸+?0?Znv?60EFy#H5LⅯ unK"qYBfQdiq kxcK]۠y18_MQAİ"Ϸ RUZWlˌ[dtgvb-Bl\[;ΑŏqM?Xdr ]O "?]:n6Sq\R`V U]Q\@|ή)tP3H8dh.gjo9j|:5yX566 ڔX$ogX?q=w2H*xxBaubrx;21#[v#U~vv'1A T!kmzMxqFQe[ԙcS[K@|ZYŸ 'ĩÊU^B0Sd ;޻p) 5G~M(ylU ou&&3+ 1u䦗fCU-mΖQ0qD"^._g|t>ˊ6y#!rb6hԘki$әhN.v^wkXȔn; 6#< ޏ*t\^M9y [qU7f!:; Nѫ.a w*uU@m`K|0e)^ޔ8c~)$Kt^x,Q ;*5'e\ݖ~sq :,D)0RP=1HT{OM,᐀x(P6M4>s~z͡]y"inkP&;t(v>%`lOsZO6qԑ]8G\{E_Q;CLa M&Fn67I4W֘E-&xܥKJR[hCB:n 8ȿAr'J4-g qĕQQo!˱&]sLr])U;:y]-`Bxo rI?ǒvCfJ52 о j$l6Wƹ܃zCީH`cs̄"M3"Bȕ@uqg86ʹaUj`dfSEz֮"IFBxH`"s٠ϠڎrG^ND(7QI4G>ն>@HMUK?.x?L:5dPU:}"BWXYyTՌt*lv2knRsd$MC?ȁ? *$3Ij{ E* r=ڏem!{U4+\<|뻝OLf]EMҋ!~a1x^ڼH&q}ZX6;K9/PHto^FPByF FN9SM3Ke5)h* mF/.X{7.b!HqqW]Dž^zg1ZFhd`ڷjc̀&:IUkHz X_-LAFg|J,K^Jtk~oKqKp(I (wk¨|ao 2G?';[:@Ic}̼/ zfq|YlV h^ޖ{>拌YVL;k,X8~08,QEe QkyVj g?ت`w7WIDQzh$PFG$wʆbAr"mf+$>]ܨ(|WQ @,6 4}KI^/xɥ;cd>dGnh[;-͉<hhI&}o+N{iu*Jgh4/B$|R|+ `dPz-&7YF*hh C㖹t5a%GТ'7 6oCKI/]b0|6oԅ|@IXqU5/R$mF.p2vdMŘo'?9Q!B@EƼ6bs <'C"L5p})dn u|eM;)oz$VQ6*YVZƱث̔Ƴ;1OnP`WdU]O@,~%ˤ"9IXuC:"\BwFv}z:Je:f?*;&^i"pX*K\!,4_O~$fOs|`gd_]KlFK<~rŵˮsd!<F׸ln;^(+|n{Ѱ!0̯zY)Qdut<]ɁK;%bGy50~nÀ q0³UHSIVS%sn|$\)Z=^:ra(5 j0) u=u)-+6iY ^@}ދĖq#&jvk@$a)gmGwBn>Im.q(r֮3 yȶNز L,K 0K{ݜf@"0Al_~A)GRa?J((HR̫.axzݨ<wH׵$8HC-Y.aq,/qC*#IU$@#44L{j/''dϕxF.;>bCZg^%65ߪh>օA?[Q ЦFt,娇FLF $Q-(՗. I۾gc"N2;ԽTDR.#14>fbj:r^C9`@#|K^tӮ|DVpT7q,nQc*LMoÄ#ո( 5Ad*kpPPu/OkC߃ h*ogzL[;{cʦ{q1UU,q88a] {%Js?%&3b]=C K{Z ;6 {5y, _ u(;8\ rB^Q D<^Ő؝`t* ,/E}] kO].ox"VO/N^^1e7LΎxrc8'g0b;*p!qzKqKr9ľ ]9d4A ;Mgz8ke=ݮ[0ג>4!Y!)d]n!]SkNb:C^ A K,I{~>✌ &d66LHQOU6$A\_704x¬;E(O| } 76%8gTtwyMfJ'dsuc0LlIdThR3JVXDA|u ;hhkVmw%0&q;ɑ3̼'7AoRB :Fj O-м/Ƕ6(~[ 1213.731689][T23560] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1214.036018][T28330] fuse: blksize only supported for fuseblk [ 1214.079219][T28334] jffs2: notice: (28334) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1214.084862][T28334] overlayfs: failed to clone upperpath [ 1214.085679][T28331] FAULT_INJECTION: forcing a failure. [ 1214.085679][T28331] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.085700][T28331] CPU: 2 UID: 0 PID: 28331 Comm: syz.8.6706 Tainted: G L syzkaller #0 PREEMPT(full) [ 1214.085716][T28331] Tainted: [L]=SOFTLOCKUP [ 1214.085720][T28331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1214.085728][T28331] Call Trace: [ 1214.085732][T28331] [ 1214.085743][T28331] dump_stack_lvl+0x100/0x190 [ 1214.085762][T28331] should_fail_ex.cold+0x5/0xa [ 1214.085792][T28331] should_failslab+0xc2/0x120 [ 1214.085810][T28331] __kmalloc_noprof+0xfc/0x840 [ 1214.085822][T28331] ? __pfx_stack_trace_save+0x10/0x10 [ 1214.085837][T28331] ? nla_strdup+0xc3/0x150 [ 1214.085856][T28331] nla_strdup+0xc3/0x150 [ 1214.085873][T28331] rtnl_linkprop.isra.0+0x53b/0x750 [ 1214.085888][T28331] ? consume_skb+0xb0/0x110 [ 1214.085903][T28331] ? __pfx_rtnl_linkprop.isra.0+0x10/0x10 [ 1214.085917][T28331] ? netlink_unicast+0x62b/0x850 [ 1214.085928][T28331] ? netlink_sendmsg+0x8b0/0xda0 [ 1214.085938][T28331] ? ____sys_sendmsg+0xa4d/0xbe0 [ 1214.085977][T28331] ? rtnetlink_rcv_msg+0x371/0xe90 [ 1214.085992][T28331] ? __lock_acquire+0x4c5/0x1ec0 [ 1214.086010][T28331] ? __pfx___mutex_lock+0x10/0x10 [ 1214.086025][T28331] ? find_held_lock+0x2b/0x80 [ 1214.086045][T28331] ? __pfx_rtnl_dellinkprop+0x10/0x10 [ 1214.086060][T28331] rtnetlink_rcv_msg+0x3c9/0xe90 [ 1214.086076][T28331] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1214.086095][T28331] ? ref_tracker_free+0x37e/0x6c0 [ 1214.086112][T28331] netlink_rcv_skb+0x159/0x420 [ 1214.086124][T28331] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1214.086140][T28331] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1214.086158][T28331] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1214.086179][T28331] netlink_unicast+0x585/0x850 [ 1214.086192][T28331] ? __pfx_netlink_unicast+0x10/0x10 [ 1214.086208][T28331] netlink_sendmsg+0x8b0/0xda0 [ 1214.086222][T28331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1214.086236][T28331] ? apparmor_socket_sendmsg+0x165/0x280 [ 1214.086252][T28331] ____sys_sendmsg+0xa4d/0xbe0 [ 1214.086268][T28331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1214.086281][T28331] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1214.086300][T28331] ? _kstrtoull+0x144/0x200 [ 1214.086316][T28331] ? __pfx__kstrtoull+0x10/0x10 [ 1214.086333][T28331] ___sys_sendmsg+0x190/0x1e0 [ 1214.086351][T28331] ? __pfx____sys_sendmsg+0x10/0x10 [ 1214.086368][T28331] ? __lock_acquire+0x4c5/0x1ec0 [ 1214.086389][T28331] ? __fget_files+0x34/0x3d0 [ 1214.086411][T28331] __sys_sendmmsg+0x309/0x440 [ 1214.086427][T28331] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1214.086440][T28331] ? find_held_lock+0x2b/0x80 [ 1214.086456][T28331] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1214.086479][T28331] ? fput+0x7c/0x100 [ 1214.086493][T28331] ? ksys_write+0x1ac/0x250 [ 1214.086506][T28331] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1214.086524][T28331] ? lockdep_hardirqs_on+0x7d/0x110 [ 1214.086539][T28331] __do_fast_syscall_32+0x13a/0x8b0 [ 1214.086554][T28331] ? lockdep_hardirqs_on+0x7d/0x110 [ 1214.086570][T28331] do_fast_syscall_32+0x32/0x70 [ 1214.086585][T28331] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1214.086600][T28331] RIP: 0023:0xf7f23fec [ 1214.086614][T28331] Code: Unable to access opcode bytes at 0xf7f23fc2. [ 1214.086620][T28331] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 1214.086631][T28331] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 1214.086638][T28331] RDX: 0000000004924b68 RSI: 0000000000000000 RDI: 0000000000000000 [ 1214.086645][T28331] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1214.086652][T28331] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1214.086658][T28331] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1214.086673][T28331] [ 1214.155546][T28336] overlayfs: missing 'lowerdir' [ 1214.162847][T28338] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6709'. [ 1214.164095][T28338] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6709'. [ 1214.332885][T28342] FAULT_INJECTION: forcing a failure. [ 1214.332885][T28342] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.332952][T28342] CPU: 2 UID: 0 PID: 28342 Comm: syz.9.6710 Tainted: G L syzkaller #0 PREEMPT(full) [ 1214.332980][T28342] Tainted: [L]=SOFTLOCKUP [ 1214.332985][T28342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1214.332992][T28342] Call Trace: [ 1214.332997][T28342] [ 1214.333002][T28342] dump_stack_lvl+0x100/0x190 [ 1214.333021][T28342] should_fail_ex.cold+0x5/0xa [ 1214.333034][T28342] ? __netlink_lookup+0x652/0x900 [ 1214.333054][T28342] should_failslab+0xc2/0x120 [ 1214.333069][T28342] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1214.333083][T28342] ? skb_clone+0x190/0x400 [ 1214.333099][T28342] skb_clone+0x190/0x400 [ 1214.333112][T28342] netlink_deliver_tap+0xaed/0xcc0 [ 1214.333133][T28342] netlink_unicast+0x62b/0x850 [ 1214.333147][T28342] ? __pfx_netlink_unicast+0x10/0x10 [ 1214.333163][T28342] netlink_sendmsg+0x8b0/0xda0 [ 1214.333176][T28342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1214.333190][T28342] ? apparmor_socket_sendmsg+0x165/0x280 [ 1214.333206][T28342] ____sys_sendmsg+0xa4d/0xbe0 [ 1214.333222][T28342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1214.333240][T28342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1214.333263][T28342] ___sys_sendmsg+0x190/0x1e0 [ 1214.333282][T28342] ? __pfx____sys_sendmsg+0x10/0x10 [ 1214.333305][T28342] ? find_held_lock+0x2b/0x80 [ 1214.333327][T28342] __sys_sendmsg+0x160/0x210 [ 1214.333341][T28342] ? __pfx___sys_sendmsg+0x10/0x10 [ 1214.333358][T28342] ? __pfx_ksys_write+0x10/0x10 [ 1214.333373][T28342] __do_fast_syscall_32+0x13a/0x8b0 [ 1214.333389][T28342] ? lockdep_hardirqs_on+0x7d/0x110 [ 1214.333404][T28342] do_fast_syscall_32+0x32/0x70 [ 1214.333420][T28342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1214.333435][T28342] RIP: 0023:0xf706efec [ 1214.333448][T28342] Code: Unable to access opcode bytes at 0xf706efc2. [ 1214.333453][T28342] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1214.333465][T28342] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000900 [ 1214.333472][T28342] RDX: 0000000020000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 1214.333479][T28342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1214.333485][T28342] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1214.333492][T28342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1214.333506][T28342] [ 1214.450642][T28353] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6713'. [ 1214.488049][T28353] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6713'. [ 1214.828392][ T50] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 1214.990560][ T50] usb 14-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1214.991464][ T50] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.991491][ T50] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.992903][ T50] usb 14-1: config 0 descriptor?? [ 1215.406777][ T50] savu 0003:1E7D:2D5A.000E: unknown main item tag 0x0 [ 1215.406856][ T50] savu 0003:1E7D:2D5A.000E: unknown main item tag 0x0 [ 1215.412443][ T50] savu 0003:1E7D:2D5A.000E: unknown main item tag 0x0 [ 1215.412461][ T50] savu 0003:1E7D:2D5A.000E: unknown main item tag 0x0 [ 1215.412474][ T50] savu 0003:1E7D:2D5A.000E: unknown main item tag 0x0 [ 1215.412490][ T50] savu 0003:1E7D:2D5A.000E: unknown main item tag 0x0 [ 1215.412508][ T50] savu 0003:1E7D:2D5A.000E: unknown main item tag 0x0 [ 1215.412525][ T50] savu 0003:1E7D:2D5A.000E: unknown main item tag 0x0 [ 1215.412543][ T50] savu 0003:1E7D:2D5A.000E: unknown main item tag 0x0 [ 1215.412562][ T50] savu 0003:1E7D:2D5A.000E: unknown main item tag 0x0 [ 1215.461698][ T50] savu 0003:1E7D:2D5A.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 1215.664731][T28360] ------------[ cut here ]------------ [ 1215.664760][T28360] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 1215.664823][T28360] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x944/0x1bd0, CPU#0: syz.9.6714/28360 [ 1215.666880][T28374] fuse: fd is not a fuse device [ 1215.674630][T28360] Modules linked in: [ 1215.676152][T28360] CPU: 0 UID: 0 PID: 28360 Comm: syz.9.6714 Tainted: G L syzkaller #0 PREEMPT(full) [ 1215.680369][T28360] Tainted: [L]=SOFTLOCKUP [ 1215.681915][T28360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1215.685141][T28360] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 1215.686967][T28360] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 c8 48 76 05 45 85 c0 75 13 48 8d 3d 5c 53 79 05 48 c7 c6 80 f3 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 1215.693496][T28360] RSP: 0018:ffffc9000784f770 EFLAGS: 00010246 [ 1215.695626][T28360] RAX: 0000000000000003 RBX: ffff8880519e6080 RCX: 1ffffffff228abbc [ 1215.698253][T28360] RDX: 0000000000000000 RSI: ffffffff8beff380 RDI: ffffffff91486880 [ 1215.700941][T28360] RBP: ffffc9000784f8e0 R08: 0000000000000000 R09: 0000000000000000 [ 1215.703490][T28360] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1215.706373][T28360] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880519e6008 [ 1215.709118][T28360] FS: 0000000000000000(0000) GS:ffff888096967000(0063) knlGS:00000000f545db40 [ 1215.713130][T28360] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1215.715765][T28360] CR2: 00000000f73448d0 CR3: 0000000063aa1000 CR4: 0000000000352ef0 [ 1215.718818][T28360] Call Trace: [ 1215.719984][T28360] [ 1215.721052][T28360] ? roccat_open+0x105/0x660 [ 1215.722602][T28360] ? __pfx___mutex_lock+0x10/0x10 [ 1215.724246][T28360] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1215.726234][T28360] ? lock_acquire+0x1d1/0x380 [ 1215.727808][T28360] ? roccat_open+0x8b/0x660 [ 1215.729523][T28360] ? roccat_open+0x105/0x660 [ 1215.731157][T28360] roccat_open+0x105/0x660 [ 1215.732874][T28360] ? __pfx_roccat_open+0x10/0x10 [ 1215.734801][T28360] chrdev_open+0x234/0x6a0 [ 1215.736446][T28360] ? __pfx_chrdev_open+0x10/0x10 [ 1215.739078][T28360] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1215.741251][T28360] do_dentry_open+0x6ab/0x14d0 [ 1215.742944][T28360] ? __pfx_chrdev_open+0x10/0x10 [ 1215.745119][T28360] vfs_open+0x82/0x3f0 [ 1215.746785][T28360] path_openat+0x19fa/0x2440 [ 1215.749098][T28360] ? __pfx_path_openat+0x10/0x10 [ 1215.750633][T28360] do_file_open+0x20e/0x430 [ 1215.752176][T28360] ? __pfx_do_file_open+0x10/0x10 [ 1215.753741][T28360] ? _raw_spin_unlock+0x28/0x50 [ 1215.755270][T28360] ? alloc_fd+0x471/0x7a0 [ 1215.756765][T28360] do_sys_openat2+0x10f/0x1e0 [ 1215.758432][T28360] ? __pfx_do_sys_openat2+0x10/0x10 [ 1215.760280][T28360] __ia32_compat_sys_openat+0x12d/0x210 [ 1215.762130][T28360] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1215.764593][T28360] __do_fast_syscall_32+0x13a/0x8b0 [ 1215.766195][T28360] ? lockdep_hardirqs_on+0x7d/0x110 [ 1215.767774][T28360] do_fast_syscall_32+0x32/0x70 [ 1215.769362][T28360] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1215.771356][T28360] RIP: 0023:0xf706efec [ 1215.772691][T28360] Code: Unable to access opcode bytes at 0xf706efc2. [ 1215.774771][T28360] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 1215.777618][T28360] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 1215.781175][T28360] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1215.783754][T28360] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1215.786332][T28360] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1215.789347][T28360] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1215.792032][T28360] [ 1215.793048][T28360] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1215.795402][T28360] CPU: 0 UID: 0 PID: 28360 Comm: syz.9.6714 Tainted: G L syzkaller #0 PREEMPT(full) [ 1215.799353][T28360] Tainted: [L]=SOFTLOCKUP [ 1215.800770][T28360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1215.803820][T28360] Call Trace: [ 1215.804986][T28360] [ 1215.805987][T28360] dump_stack_lvl+0x100/0x190 [ 1215.807572][T28360] vpanic+0x553/0x970 [ 1215.808875][T28360] ? __pfx_vpanic+0x10/0x10 [ 1215.810309][T28360] ? lock_release+0x24d/0x310 [ 1215.811867][T28360] panic+0xd1/0xe0 [ 1215.813183][T28360] ? __pfx_panic+0x10/0x10 [ 1215.814442][T28360] check_panic_on_warn.cold+0x19/0x34 [ 1215.816030][T28360] ? __mutex_lock+0x944/0x1bd0 [ 1215.817649][T28360] __warn.cold+0x191/0x318 [ 1215.819176][T28360] __report_bug+0x30f/0x440 [ 1215.820767][T28360] ? __mutex_lock+0x944/0x1bd0 [ 1215.822335][T28360] ? __pfx___report_bug+0x10/0x10 [ 1215.823929][T28360] ? __lock_acquire+0x4c5/0x1ec0 [ 1215.825473][T28360] report_bug_entry+0xe2/0x290 [ 1215.827050][T28360] ? __mutex_lock+0x94b/0x1bd0 [ 1215.828794][T28360] handle_bug+0x1cd/0x2a0 [ 1215.830224][T28360] exc_invalid_op+0x17/0x50 [ 1215.831664][T28360] asm_exc_invalid_op+0x1a/0x20 [ 1215.833209][T28360] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 1215.834983][T28360] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 c8 48 76 05 45 85 c0 75 13 48 8d 3d 5c 53 79 05 48 c7 c6 80 f3 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 1215.841296][T28360] RSP: 0018:ffffc9000784f770 EFLAGS: 00010246 [ 1215.843234][T28360] RAX: 0000000000000003 RBX: ffff8880519e6080 RCX: 1ffffffff228abbc [ 1215.845709][T28360] RDX: 0000000000000000 RSI: ffffffff8beff380 RDI: ffffffff91486880 [ 1215.848263][T28360] RBP: ffffc9000784f8e0 R08: 0000000000000000 R09: 0000000000000000 [ 1215.850939][T28360] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1215.853680][T28360] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880519e6008 [ 1215.856116][T28360] ? roccat_open+0x105/0x660 [ 1215.857637][T28360] ? __pfx___mutex_lock+0x10/0x10 [ 1215.859255][T28360] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1215.861005][T28360] ? lock_acquire+0x1d1/0x380 [ 1215.862516][T28360] ? roccat_open+0x8b/0x660 [ 1215.863962][T28360] ? roccat_open+0x105/0x660 [ 1215.865506][T28360] roccat_open+0x105/0x660 [ 1215.867171][T28360] ? __pfx_roccat_open+0x10/0x10 [ 1215.869083][T28360] chrdev_open+0x234/0x6a0 [ 1215.870566][T28360] ? __pfx_chrdev_open+0x10/0x10 [ 1215.872225][T28360] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1215.874369][T28360] do_dentry_open+0x6ab/0x14d0 [ 1215.876031][T28360] ? __pfx_chrdev_open+0x10/0x10 [ 1215.877871][T28360] vfs_open+0x82/0x3f0 [ 1215.879372][T28360] path_openat+0x19fa/0x2440 [ 1215.880991][T28360] ? __pfx_path_openat+0x10/0x10 [ 1215.882599][T28360] do_file_open+0x20e/0x430 [ 1215.884035][T28360] ? __pfx_do_file_open+0x10/0x10 [ 1215.885629][T28360] ? _raw_spin_unlock+0x28/0x50 [ 1215.887180][T28360] ? alloc_fd+0x471/0x7a0 [ 1215.888632][T28360] do_sys_openat2+0x10f/0x1e0 [ 1215.890237][T28360] ? __pfx_do_sys_openat2+0x10/0x10 [ 1215.892098][T28360] __ia32_compat_sys_openat+0x12d/0x210 [ 1215.894192][T28360] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1215.896414][T28360] __do_fast_syscall_32+0x13a/0x8b0 [ 1215.898196][T28360] ? lockdep_hardirqs_on+0x7d/0x110 [ 1215.899845][T28360] do_fast_syscall_32+0x32/0x70 [ 1215.901412][T28360] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1215.903422][T28360] RIP: 0023:0xf706efec [ 1215.904722][T28360] Code: Unable to access opcode bytes at 0xf706efc2. [ 1215.906881][T28360] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 1215.910211][T28360] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 1215.913364][T28360] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1215.915907][T28360] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1215.918464][T28360] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1215.920979][T28360] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1215.923453][T28360] [ 1215.925029][T28360] Kernel Offset: disabled [ 1215.926412][T28360] Rebooting in 86400 seconds..