last executing test programs: 23m31.016575942s ago: executing program 32 (id=291): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000005, 0x50, r2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000002180)={'IDLETIMER\x00'}, &(0x7f00000021c0)=0x1e) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000002180)={'IDLETIMER\x00'}, &(0x7f00000021c0)=0x1e) socket(0x1b, 0x2, 0xd) (async) r4 = socket(0x1b, 0x2, 0xd) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x100010, r4, 0x80000000) (async) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x100010, r4, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r6 = socket$kcm(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r8, 0x621, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20}, 0x80) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) r10 = syz_clone3(&(0x7f0000000540)={0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0), {0x17}, &(0x7f0000000300)=""/125, 0x7d, &(0x7f0000000480)=""/78, &(0x7f0000000500)=[0x0, 0xffffffffffffffff, 0x0], 0x3, {r1}}, 0x58) sendmsg$AUDIT_SET(r4, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x3e9, 0x100, 0x70bd25, 0x25dfdbff, {0x23, 0x1, 0x0, r10, 0x4, 0x1, 0x6, 0xee67, 0x0, 0x3, 0x3c}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040014}, 0x81) creat(&(0x7f0000000440)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) (async) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 23m16.522950512s ago: executing program 33 (id=477): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000100", @ANYRES16=0x0, @ANYBLOB="200029bd7000fcffffff1400000018000180140002006e657464657673696d30000000000000050019"], 0x34}}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r2, r4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, '\x00'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) r5 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x30}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_TSC_KHZ_cpu(r7, 0xaea3) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000dd7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000000)="65f30f53dd3e0f8b0058673e670f01d1ba4300b051eeeac037a6002bba6488baf80c66b85ec3fc8266efbafc0cb0d0ee640f01c8bad004b885acef660f388013", 0x40}], 0x1, 0x40, &(0x7f0000000080)=[@cr4={0x1, 0x4040}, @dstype0={0x6, 0x3}], 0x2) ioctl$KVM_SET_DEBUGREGS(r6, 0x4080aea2, &(0x7f0000000180)={[0x3004, 0xffffffff, 0x0, 0x1000], 0x7, 0x2d, 0x3}) 22m31.906821439s ago: executing program 34 (id=1075): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x9}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0x3}}, './file1/file0\x00'}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000240)={'bridge_slave_1\x00', {0x2, 0x4e22, @rand_addr=0xfffffffd}}) 22m26.688721876s ago: executing program 35 (id=1124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x20000002}) ppoll(&(0x7f0000000000)=[{r1, 0x221}], 0x1, 0x0, 0x0, 0x0) msgget(0x0, 0x200) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0x800001f}) 22m19.755789901s ago: executing program 36 (id=1206): unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x2) mknod(&(0x7f0000000080)='./bus\x00', 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x8000026, r1, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x78cd11ca13800461, 0xa) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000180)={0x0, @aes256, 0x0, @desc4}) r4 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xa, &(0x7f0000000180), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x541b, &(0x7f0000000640)) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000800001f000006060400180000008cdb25", 0x39}], 0x1) 17m55.854840512s ago: executing program 37 (id=3519): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x100000) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x140, 0xa3) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x2, 0x2}) 14m23.524081127s ago: executing program 38 (id=5494): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x8, 0x80, 0x3, 0x9, {{0x31, 0x4, 0x2, 0x23, 0xc4, 0x68, 0x0, 0xb, 0x2f, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0x49, 0x2, [{0x2, 0x3, '['}, {0x6, 0xd, "bfb27ef43af52779f99efd"}, {0x7, 0xd, "531c2e46f15007fd5d3c3c"}, {0x1, 0x6, "00559753"}, {0x7, 0x4, "b895"}, {0x2, 0x11, "f1c97650b5e30b6719df62a0e1062e"}, {0x1, 0x9, "ed694c0bbf8593"}, {0x0, 0x2}]}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x51, 0x3, 0x1, [{@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x7}, {@broadcast, 0xd1}, {@dev={0xac, 0x14, 0x14, 0x39}, 0xffff7fff}]}, @timestamp={0x44, 0x14, 0x85, 0x0, 0x6, [0x0, 0x1, 0x4, 0x7]}, @timestamp={0x44, 0x28, 0xda, 0x0, 0xb, [0x40000000, 0x3ff, 0x2, 0x40000000, 0xa, 0x5, 0xc0000000, 0x9, 0x5]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@bridge_newneigh={0x2c, 0x1c, 0x400, 0x70bd2c, 0x25dfdbfb, {0x1c, 0x0, 0x0, r0, 0x1, 0x7, 0x8}, [@NDA_NH_ID={0x8, 0xd, 0x89d}, @NDA_LINK_NETNSID={0x8, 0xa, 0x2}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff080045000040000000000067907800000000ffffffff21009078120002282900002400000009ff000000ac3f277f5bb9a68c480d0000000006078e43df872a000000"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000300)={0x666666666666799}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x3, r6, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f0000000040)={0x30, r7, 0x0, 0x0, 0x0, 0x100000, 0x80000003, 0x0}) setns(r3, 0x24020000) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f00000002c0)={0x28, 0x1, r5, r5, 0x2, 0x1, 0x83d}) setns(r9, 0x2000000) fsopen(&(0x7f00000003c0)='coda\x00', 0x1) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000280)=0x1, 0x4) 13m58.063955222s ago: executing program 39 (id=5994): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe", 0x15) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r1, 0x8949, &(0x7f0000000000)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='anon_inodefs\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x22301, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x40020, &(0x7f00000003c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0]) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x30000000) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000280)=0x0) r5 = socket(0x400000000010, 0x1, 0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r6, {0xc, 0xfff2}, {}, {0x7, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x490d4}, 0x40144) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000901, r4, &(0x7f0000000440)) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000030c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESDEC=r9, @ANYRESHEX=r1, @ANYRES64=0x0, @ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4048800) recvmmsg(r7, &(0x7f0000005840), 0x4000000000000ef, 0x2000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x93) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 13m51.255599648s ago: executing program 40 (id=6034): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="15002abd7000ffdbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="0c007d800700"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 13m23.929432827s ago: executing program 41 (id=6420): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r1], 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000005c0)={&(0x7f0000000200)=[r1], &(0x7f0000000540), 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000c80)={&(0x7f0000000b80)=[0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000cc0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[{}, {}], &(0x7f0000000b00)=[0x0], &(0x7f0000000b40)=[0x0, 0x0], 0x2, 0x1, 0x3, 0x0, r2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_off}, {@userxattr}]}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x0) r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x4000, 0x1) renameat2(r3, &(0x7f0000000180)='./file2\x00', r4, &(0x7f0000000240)='./bus\x00', 0x4) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x262) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x1b, 0x5, 0x468, 0x188, 0xb8, 0xffffffff, 0x230, 0x0, 0x3d0, 0x3d0, 0xffffffff, 0x3d0, 0x3d0, 0x5, &(0x7f0000000380), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0xffffffff, 'wg0\x00', 'team_slave_1\x00', {}, {}, 0x62, 0x0, 0x8}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x10, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e22}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x7, 0x6, 0x4, 0x7, 0x6], 0x1}, {0x2, [0x0, 0x3, 0x2, 0xd, 0x5], 0x1, 0x6}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @local, @multicast1, @gre_key=0xd9a, @gre_key=0x6}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 'bond_slave_0\x00', 'wg2\x00', {}, {}, 0x62, 0x3, 0x2a}, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x7, 0x1, 0x8, 0x0, 'syz0\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @multicast2, @empty, @port=0x4e23, @icmp_id=0x67}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) 13m22.044611346s ago: executing program 42 (id=6435): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x600244, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x3f, 0x69, 0xfd, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0xff, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0x3, 0x8, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x41000, 0xfffc}, 0xddf8ffdb, 0x0, 0x100000, 0x110, 0x0, 0xf801, 0xeeee0000, [0x80000000, 0x0, 0x2, 0x1]}) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000680)={0x0, &(0x7f0000000400)=[@wr_drn={0x68, 0x20, {0x7, 0x7}}, @rdmsr={0x66, 0x18, {0xab9}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x40, 0x5, 0x4, 0x3}}, @wr_drn={0x68, 0x20, {0x7, 0x7f}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x10000, 0x4}}, @cpuid={0x64, 0x18, {0xfff, 0x2}}, @uexit={0x0, 0x18, 0x51}, @nested_amd_vmsave={0x183, 0x18}, @nested_load_code={0x12e, 0x6c, {0x1, "420f01c4440f20c0350f000000440f22c066ba420066b8d61366ef440f20c03504000000440f22c02e480fc79b10000000b9a00300000f3245dbcd420f30c481fde60eb9ed090000b80a000000ba008000000f30"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x614, 0xfff, 0x9, 0x4}}, @rdmsr={0x66, 0x18, {0x2f7}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @set_irq_handler={0xc8, 0x20, {0xdf, 0x1}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}], 0x254}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') read$FUSE(r8, &(0x7f00000041c0)={0x2020}, 0x2020) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)={0x3, 0x0, [{0x2, 0x0, 0xfffffdc8}, {0x4, 0x1, 0x55, 0x7fff, 0x5}, {0x40000001, 0xffff, 0x2, 0x2, 0xc58}]}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x67c, 0x6, 0xf3b8, 0xfffffffffffffffe, 0x1000, 0x400, 0x4002004c4, 0x8, 0x0, 0x2000000097, 0x10, 0x0, 0x5, 0x4, 0x0, 0x8], 0xeeee8000, 0x402}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 12m16.871911359s ago: executing program 43 (id=6897): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="340500ae616ac6b69bc5128715a6e735235b6caea4319bbda16e68581a5a6101449b8cc065", @ANYRES16=r4, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007000000"], 0x34}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r4, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000380)={@local, @random="d8be17d19221", @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x74, 0x64, 0x0, 0xf, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x20, 0x6071, 0x0, 0x9, {[@nop, @timestamp={0x8, 0xa, 0x40e48d43, 0x3}, @exp_fastopen={0xfe, 0x14, 0xf989, "79f896e581a39c08c9f0187d483b8c08"}, @generic={0xfe, 0x5, "de5293"}, @exp_fastopen={0xfe, 0x3, 0xf989, "a89cae8e2ac5"}, @md5sig={0x13, 0x12, "a957799803a0736c906e5975329864ca"}]}}}}}}}, 0x0) 7m2.068547068s ago: executing program 44 (id=10172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {0x6, 0x3}]}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x3c, 0x32, 0x20, 0x70bd25, 0x25dfdbde, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40006}, 0x4048801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x400d050}, 0x240c881c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000e1000"/20, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f00000000c0)="4336fecc", 0x4}], 0x2) 6m54.94462741s ago: executing program 45 (id=10277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x101ff, 0x5, 0x10000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) acct(0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) r8 = dup3(r2, r3, 0x80000) r9 = dup(r8) write$RDMA_USER_CM_CMD_CREATE_ID(r9, 0x0, 0x0) r10 = fcntl$dupfd(r1, 0x406, r1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a3f4fc2c9a6bb6a7a00e70a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280080003400000013014000000110001", @ANYRESHEX=r1, @ANYBLOB="cf32a2f4b1908a30dd3ace3c7ba190f8cd2d330b5465ea2e8fe52bfa7fe333c6a35020e75f9333b3e2f7b7c04990dc80c8ecfbacbe281d7d192f6b0cc81fd9668af4b78749826d9ac3124214ee9fa638c6e96f065cd91e1efa28c7e2109f64abbd4978ce78e93caaa169be96607a1122623c778cd2d82d97d3881f0059b1625194d3270a11b5f4b7179c88f3197e58a31db9ac90d096d783133215caa625c75796ba4f3c124b4f81eb27df7ed4d0014bebec6bfd2642bf21477fbb3392df36ad547d6ae89e0ce3", @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES8=r10, @ANYRESOCT=r10], 0x98}, 0x1, 0x0, 0x0, 0x4044010}, 0x200480d0) 6m54.391516178s ago: executing program 46 (id=10380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0xffff1000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0x1, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x15, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x8, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x8, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0x0, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x3, 0x5, '\x00', 0x4}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0x5, 0x1, '\x00', 0x21}, {0x5, 0xec, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000001c0)={0xc000, 0x3000, 0x2, 0x1, 0x81}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000001fc0), r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x82}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000000) (async) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xef, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000060100"}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000000)=0x90b2, 0x4) (async) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x0, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0x72, 0xb, 0xd3, '\x00', 0x5}, {0x6, 0x2, 0xf5, '\x00', 0xf}, {0x1, 0xd, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x6, 0xd5, 0xf1, '\x00', 0x7f}, {0x6, 0x4, 0xc}, {0x7f, 0x9, 0xb, '\x00', 0x4}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0xb, 0x6, '\x00', 0xdc}, {0x48, 0x1, 0x1, '\x00', 0x1}, {0xfe, 0x3, 0x80}, {0xcf, 0xff, 0x1, '\x00', 0x6}, {0xf, 0xee, 0xa, '\x00', 0x3}, {0xe4, 0x3, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x5, 0x6, 0x8, '\x00', 0xc}, {0x7, 0x69, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x20}, {0x1, 0xc, 0x7f, '\x00', 0x83}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) 5m27.749720931s ago: executing program 8 (id=11107): preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4090, 0xffa}], 0x1, 0xa, 0x203) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040), 0x10) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000140)={0x1, 0x0, @ioapic={0x50000, 0x380, 0xfffffffc, 0xc5, 0x0, [{0x8, 0x0, 0x7, '\x00', 0xb}, {0x8, 0x8, 0x5, '\x00', 0x6}, {0x69, 0x5, 0x25, '\x00', 0xf}, {0x7f, 0xb, 0x5, '\x00', 0x6}, {0xe, 0xf7, 0xe, '\x00', 0x4}, {0xf2, 0x3, 0x7d, '\x00', 0x2}, {0xb, 0x97, 0x2, '\x00', 0x6}, {0x3, 0x1, 0x9, '\x00', 0xd3}, {0x1, 0x1, 0x8}, {0x7, 0x10, 0x4, '\x00', 0x7f}, {0xb5, 0x6, 0x7, '\x00', 0xe}, {0x4, 0x3, 0x1, '\x00', 0x3}, {0x3, 0xc, 0x1}, {0x2, 0xfb, 0x9, '\x00', 0x9}, {0x8, 0x1b, 0x47, '\x00', 0xa}, {0x4, 0x9, 0x2, '\x00', 0xe}, {0x4b, 0x8, 0x6, '\x00', 0x91}, {0x3, 0x8, 0xae, '\x00', 0x9f}, {0x1a, 0x2, 0x8e, '\x00', 0xf7}, {0x81, 0x7, 0x16, '\x00', 0x80}, {0x96, 0x4, 0x6, '\x00', 0x4}, {0x1, 0x4, 0x6, '\x00', 0x2}, {0x9, 0xd, 0x7, '\x00', 0x81}, {0x9, 0x5, 0x9, '\x00', 0xc}]}}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000080)=0x6, 0x4) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000000)) syz_open_dev$usbfs(&(0x7f00000000c0), 0x4, 0x4400) 5m27.664308839s ago: executing program 8 (id=11109): r0 = fsopen(&(0x7f0000000080)='erofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) (async, rerun: 32) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 32) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) (async) r4 = syz_clone(0x95008100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) wait4(r4, 0x0, 0x80000000, 0x0) (async, rerun: 64) fchdir(r1) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffeb, 0x7}, {0x6, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x2000400c) (async) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 5m27.586100117s ago: executing program 8 (id=11112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="0f013b9a004800004600c4e193d04436e966b84600aedb4ae84ae8c40f2204c4c3690b6500d366baf80cb804b9d987ef66bafc0c66ed0fc71cbc0f011b", 0x3d}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m27.481310314s ago: executing program 8 (id=11113): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x20004000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x4, 0x3f}, 0x8) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x4010) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='@', 0x1}], 0x1, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x29) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ftruncate(r5, 0x4a8e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000280)="1a", 0x1) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[], [], 0x2f}) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(r7, &(0x7f0000000080)='gid_map\x00') pread64(r8, &(0x7f0000001240)=""/102400, 0x19000, 0x0) recvmsg$can_j1939(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/30, 0x1e}], 0x1}, 0x2140) 5m27.320189017s ago: executing program 8 (id=11116): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000040)=""/48, &(0x7f0000000080)=0x30) (async) io_uring_enter(0xffffffffffffffff, 0x18dd, 0xea6, 0x80, &(0x7f00000000c0)={[0x3]}, 0x8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000100)='\x00', 0x8000, &(0x7f0000000140)={@_ha_fsid={[0x6, 0x80000000]}, {0x8, 0x1000, 0x400, 0xfffffffffffffff2}}, 0x400, &(0x7f0000000180), &(0x7f00000001c0)}) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000240), 0x2) write$P9_RMKNOD(r1, &(0x7f0000000280)={0x14, 0x13, 0x1, {0x2, 0x0, 0x3}}, 0x14) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x8, 0xc}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000340)={r3, 0x5}, 0x8) (async, rerun: 64) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000380)) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000003c0)={r3, 0xfffffff2}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000440)={r4, 0x81}, &(0x7f0000000480)=0x8) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f00000004c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000500)={r3, @in6={{0xa, 0x4e21, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}}, 0x4, 0x9}, 0x90) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000005c0)=[@in={0x2, 0x4e21, @private=0xa010100}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}], 0x20) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000680), &(0x7f00000006c0)=0x4) (async) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700), 0x22080, 0x0) pread64(r5, &(0x7f0000000740)=""/10, 0xa, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000780)={r4, 0x200}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000800)=[@in6={0xa, 0x4e22, 0xa, @mcast2, 0x7}, @in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x2b}}], 0x38) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000840)=0x10, 0x4) (rerun: 32) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000880)={0xa, {0x9, 0x60, 0xd}}, 0xa) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000008c0)=[@in6={0xa, 0x4e20, 0x4, @mcast1, 0xc}], 0x1c) (async) r8 = open_tree(r1, &(0x7f0000000900)='./file0\x00', 0x9000) ioctl$XFS_IOC_FSBULKSTAT(r8, 0xc0205865, &(0x7f0000000c00)={&(0x7f0000000940), 0x298, &(0x7f0000000980)=[{}, {}, {}], &(0x7f0000000bc0)}) (async) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x6a00, 0x0, 0x2, 0x17, 0x4, "ae888ab2393980aa7a2259c064b76da99f93763496adaf591c832c2ec6aec498bd2f94a8ec29792273ea8586c4c249a9979d09ce2427fdfc8baa7e5ee9522839", "a84eed98d80e60225918e8825689707d9e99b293f16510f8c48275a76dbd1d0ad35be6534bb571bae4eefde7f12f35e552a26fd1015d0ce5b533b452b3602f64", "3554e912fa3a996813cb3645102e4490bcf4dd4f1760b88a7cb33a9c147488fc", [0x0, 0x7]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000dc0)={r7, 0x5c, &(0x7f0000000d40)=[@in={0x2, 0x4e24, @rand_addr=0x8}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e24, 0x6c1, @private0, 0x3}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}]}, &(0x7f0000000e00)=0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x400000, 0x51) 5m26.579869071s ago: executing program 8 (id=11123): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000240)) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000280)=""/248, 0xf8, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc0100"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 5m26.54300018s ago: executing program 47 (id=11123): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000240)) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000280)=""/248, 0xf8, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc0100"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 5m22.511336793s ago: executing program 2 (id=11161): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000400)="bcd622d66ac64802f04286b0e145", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="98551cf4a204934504a03f87452a556b09b8659c33054514c6f6ccb76e1a6f8dc95c4d0894cc1bd130162b7d8700139f017a020ca619ffdd36a921a8c07a37f64736313e307fb1666172a5534d260fe8455aee509640a1a5f70424dad4868874bfc53c6b37ef8f93d30491b1808558051f95f4dca7fcd923979874f035d133eee696287b8339cc55d33220dd89c7f47eb0e00f5d730376dc7a65a2bef95911e9449ca260cb045d16f7fd1efc3fef8b7fb00f55347f945bc1b6a33f52033bcc6d0ce61da29b8e33540a967f61bfa52a", @ANYBLOB="05d9a94de6e1cc4cf87a96de1727b047ce4f4a09b94faf0545ea83049fa3a1bc763ae9423a83f9b30b7b6f527ea4dbedeb167263c2dd21110416f974515e12fd13cfb3054fb8edf11a76b64a6538", @ANYRESDEC=r2, @ANYRESDEC=r1, @ANYRESHEX=r2], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x880) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) inotify_init1(0x40000) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000800)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000180)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x801) 5m22.510367728s ago: executing program 2 (id=11162): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0d, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x844}, 0x40000) r6 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) writev(r6, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000040)="b845d9", 0x3}], 0x2) 5m20.742323416s ago: executing program 2 (id=11177): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x6}}) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0)={0x0, 0xfb, 0x7b, 0x3, 0xe, "abfa4170cbf374fd8b423c20b1e811bd", "bb0f475ec66d168ff0a9b0fa2c206dcfd666465b4e490b279e1065d21e3caf6130fcbc5a06be14dd3c0bfeb83a3fed6847f8ff62565135a7c856077197a83da8283a481785583ad3c5709ec3874b7ab1fbfcd195a25a6d0c9aeebce5ac735fa78900af5aa12f"}, 0x7b, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1a36050, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, 0x0, 0x0) 5m20.665086394s ago: executing program 2 (id=11179): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r1, 0x8044610a, &(0x7f0000000000)={0x0, @raw}) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000200)=0x200001, 0x4) 5m20.661979799s ago: executing program 2 (id=11180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'caif0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0xa, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYRESDEC=r3, @ANYRES16=r1, @ANYBLOB="d0fcce3135044db35593ed9bbe99ff3c1e8b35ed3621568d9da9a50dfbb61f8303743d3166ff61a81225a3ea3ef91b3d994cb384a1a041286a164c2248de3bc37ba888dab77e756dea59778dc16aa1d2869c522dd8b96e6e8c9ee8abb3665bb13673b5d5414f9292946d2fdd24f38f28f6c2f040800df5fb137f42685fd9b2481ce8e6ada48521040a95a4", @ANYRESHEX=r3, @ANYBLOB="e93b4b126f116f9b77b8cace8450c16f707a3e40a847c6468b0475bb97ca2c2cc09536206823db37c1237f4a431b7dae1a190f05a2293b14ad07bbed15fc4569a6668eb4b7d38cb6d005c1a052f48300000000d9b174f52cb7f051bca199cf8abbcd4896f6f365aa6e24cd7ae0f53e40a35d566852d861d6dd3ad8e1ad4d733753a96cce109b77344dd44be8b3d9c084ed8bdc1f10c8674e42e9a4766a85a477"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r6 = socket(0x10, 0x803, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x201, 0x4000003e, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x14) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x8}) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC=r5], 0x3c}}, 0x40040c1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x2404c8d4}, 0x4010140) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r10, 0x0, 0x18, 0x0, &(0x7f00000001c0)) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000500)=@req={0x6, 0x9, 0x5}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRESOCT=r1, @ANYRES32=r9, @ANYBLOB="140000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40048c0}, 0x8000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000002c0)=0x5) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="196bf5e3ec316cc2288563"], 0xffdd) 5m13.891691576s ago: executing program 2 (id=11188): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000190c0)=[@in6={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}]}, &(0x7f0000000000)=0x10) getsockopt$bt_hci(r0, 0x84, 0x1c, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000f4688d8e5f000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) (async) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r2, 0x4004480d, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m57.741614418s ago: executing program 48 (id=11188): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000190c0)=[@in6={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}]}, &(0x7f0000000000)=0x10) getsockopt$bt_hci(r0, 0x84, 0x1c, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000f4688d8e5f000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) (async) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r2, 0x4004480d, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m46.772494083s ago: executing program 4 (id=12709): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="00000000000000002702000014000000b703000000000000850000009c000000bf09000000000000550901000000000095008d72cc270000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x8000000000000003, {}, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0x4}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0x9, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x57, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x5, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x1, 0x9, 0x8001, 0xffff, 0x5, 0x3a1838ea, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) sendto$packet(r7, &(0x7f0000000540)="05031c00d3fc1400000000000000", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) ppoll(&(0x7f0000000000)=[{r3, 0x327ef4b597f3941d}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) 2m46.429061797s ago: executing program 4 (id=12712): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x200001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r2) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001600)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x2, 0x1, 0x6, 0x9, 0x8, 0x9, 0xa, 0x9, 0x1, 0x2, 0x2, 0xd, 0x7, 0xe, 0x2, 0xf], 0x0, [0x0, 0x3, 0xd, 0x6, 0x5, 0xf, 0x7, 0x1ff, 0x2, 0xfb42, 0xc4b, 0x7ff, 0x9, 0x0, 0xb, 0x54], [0xfff9, 0x9, 0xffff, 0xff, 0x2, 0x9f1, 0x1, 0x3b27, 0x1, 0xd, 0x337, 0x5, 0x91b, 0x3, 0x20, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000000080)=0x8001) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) 2m46.205470795s ago: executing program 4 (id=12713): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x3, 0x100000000, 0x0, 0xfffffffffffffff8, 0x100000, 0x0, 0x202004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe, 0x2000000000], 0x80a0000, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f00000022c0)=""/4089, 0xff9, 0x10002, 0x0, 0x0) sendto(r0, &(0x7f0000000140)='[', 0x1, 0x800, 0x0, 0x0) 2m46.204886276s ago: executing program 4 (id=12714): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0xf9b}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 2m46.131630197s ago: executing program 4 (id=12715): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x2}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000008c0)={0xc0}) mknodat(r1, &(0x7f0000000140)='./file1\x00', 0x8000, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_capability(&(0x7f0000000600)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) semget$private(0x0, 0x0, 0x103) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f50100", 0x8, 0x11, 0x0, @remote, @local, {[], {0x4e24, 0xe22, 0x8}}}}}}, 0x0) 2m45.778585961s ago: executing program 4 (id=12718): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000100)={0x2, 0xffff, 0x0, 0x4000, 0xffffffffffffffff}) sync_file_range(r0, 0xd, 0x8000000000000000, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x88, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x3c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x101}, @IFLA_BRPORT_LEARNING={0x5}, @IFLA_BRPORT_MODE={0x5, 0x4, 0x1}, @IFLA_BRPORT_VLAN_TUNNEL={0x5, 0x1d, 0x1}, @IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_GUARD={0x5, 0x5, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) rmdir(&(0x7f0000000200)='./file0/file1\x00') 2m45.704519319s ago: executing program 49 (id=12718): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000100)={0x2, 0xffff, 0x0, 0x4000, 0xffffffffffffffff}) sync_file_range(r0, 0xd, 0x8000000000000000, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x88, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x3c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x101}, @IFLA_BRPORT_LEARNING={0x5}, @IFLA_BRPORT_MODE={0x5, 0x4, 0x1}, @IFLA_BRPORT_VLAN_TUNNEL={0x5, 0x1d, 0x1}, @IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_GUARD={0x5, 0x5, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) rmdir(&(0x7f0000000200)='./file0/file1\x00') 1m26.946116696s ago: executing program 7 (id=13649): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x800044, 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) setresuid(0x0, 0xee01, 0xee00) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r1 = accept$alg(r0, 0x0, 0x0) r2 = accept(r1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000880)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x10004000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r5, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) (async, rerun: 64) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40) ioctl$HIDIOCGREPORT(r6, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) (async, rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) (async, rerun: 64) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) close(r7) (async) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) (async) connect$pppl2tp(r7, 0x0, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {}, 0x7}) (async, rerun: 32) socket$kcm(0x2, 0xa, 0x2) (rerun: 32) 1m26.945769721s ago: executing program 7 (id=13650): socket$kcm(0x2, 0x5, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="05031c00d3fc141100004788031c09102c286d38b9a025344228f4b5c076160170995375979e3d5d4e135dee4ca6f19f4768f1d718646dc8d5e5b5537c6359916a4090dd9a05fb8ed50e2d73c6198e16a60d464411463b3ce474627b36b5cf1767f3e855e43dd829a3a89b0e13a2ef82e0a6dc899bb4d07fa0e0f6e363980379fc51658ac9410d9ae932d5ef9385abc68bb3eb793f4148a4f309c4aa8243437547516efd8fc87ea51b9f5f792dd5f2", 0xaf, 0x45, &(0x7f0000000140)={0x11, 0xf8, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x7}, 0x4) 1m26.636470453s ago: executing program 7 (id=13651): fcntl$lock(0xffffffffffffffff, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8080) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x400}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}}, 0x20000000) r4 = socket$kcm(0x10, 0x2, 0x0) recvmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10102) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) socket$pptp(0x18, 0x1, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r5, 0x24e2, 0x7721, 0x16, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000005c0)=0x9, 0xfc17) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x101, 0x5, 0x41, 0x3, 0x42, 0x9, 0xb1}, 0x0) sendto$packet(r7, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000180)="06bbaa0de0d4b9eb88ec84c0123a35f38895c211a0f1475a6f242ca4b49e4659671b3c67b129368cb863fae5085ed3a84d5626b59438d99094c5b7328f1391058e129ce60adcf1", 0x47, 0x4, &(0x7f0000000380)={0xa, 0x4e23, 0x8, @private0, 0xf8}, 0x1c) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000007b80), r9) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000007c40)={&(0x7f0000007bc0)=ANY=[@ANYBLOB="0000e8ff", @ANYRES16=r10, @ANYBLOB="2d8228bd7000ffdbdf250400000008000700ac1414bb080008000a01010108000c00020000000800020007000000"], 0x34}, 0x1, 0x0, 0x0, 0x48805}, 0x64040) r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r11) 1m26.358819692s ago: executing program 7 (id=13652): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x7, 0xffff}, {}, {0xd, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_TCP_DST={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8849}, 0x408c4) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x6, 0x2}, {0x0, 0xfff1}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040851}, 0x4041080) 1m26.358005293s ago: executing program 7 (id=13653): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001e80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001e40)={&(0x7f0000001580)={0x20, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x77}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000001}, 0x20008808) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000001000370429bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) splice(r3, 0x0, r2, 0x0, 0xfffd, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) sendmmsg$alg(r3, &(0x7f0000001dc0)=[{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001600)="381cae62b6213687233ed737b81ce5be7329b5dbc2428d7decf4bdceb0c38540b68b032311758942db6558e9e62bfac5ea521343187c5d42f72600f4bacfb3edfa82b5d2f15e74240e62e0f02a9670e1fe6f0ae632b99041f4a5c6521142281e317cd4ad51cf34b5699ec6a29577d9ea", 0x70}, {&(0x7f0000001680)="56e46ac969de96811eec774bcdfa11b8a5a2ef9c441e9244272e2c5d3c9758f543102828f3a2ca8bf31eb951abd53b96cb1c1020770484030585c102e0d80e63811811a773c3aa22bd0d16ef0b06c03317467fd24365c978c9c944e5263e3b9837d1c1cffc5916509616aacf845693d557360893af76115f023fa8008a8cb1be1490196b3f0d303678716ef71035243769782997d897c51cef431257882303c0055b767b94093950d38c32cd69c354c865d0e2187712961b01bdc90b7894ddb7c0be550bc3457739c80eee4052f768819515", 0xd2}, {&(0x7f0000001780)="dc3a01a190c7d3447e7d84a9c8f131a32878d61153a2edf89a1fd70b87", 0x1d}, {&(0x7f00000017c0)="44c52909945212eb3760de3013ee7f85c55b935d2f17fa7ecf9b7c7045d7bcdd02449d446529999776205efdbd5aad781eb579e9f764189164c2b9d51f4d4e05b47ba2f4533676ca9b2e7299566e2c57e7", 0x51}, {&(0x7f0000001840)="faaf9974c581c9eeeac2d80fdda8f492e7565f1965ccc6ef8fca3d0633b6dd7ee9d0a4245c35dcc4a4", 0x29}], 0x6}, {0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001900)="0632494ecca2b05a8f483a6b2659d94abba0d85452163a1d4504055414136dd2435ec0cbd8274e66724f24cd2b515415809fe1754d15dc70d6f7a7df05da0b73d86347db20466a744539cb6778b3a74add5ab2acb0c5a64eae8cbdc525da26b09716a52de62f470b2e2d362360fa003c370b602ce03acbff7954e200b08f2e3961612250fa994d154d39460194d9cc1a93c8", 0x92}, {&(0x7f00000019c0)="f0a69c305bea1e4579892adde5d1e3df95eca31ab30403395814191794192bf34f5b327ebcdafea5a480684616006ea8ec8fb08e43ab7bcdb4377b55a7476fdcc3698b2396f5aef8f6a0d49a790897d7ad58b42bb7a55ec7e10a3324592b1d7268de2b0e5b9878de0bab470c3b7d5179edeccc5817c6bd6bce41123ddc6ddf1ae9b2d1", 0x83}, {&(0x7f0000001a80)="3e71ab1adb2b93ae3bd66b27e29009af2811222a5cdd4a1ff4e21ea620a9d7189c97f596393bbedb79ad1fd7ac6d300ef8761c85dbf82ff71c33564efe23bc4a2b6ab75ca8d5690b71c141de118dbcbdf43d97481ec1cd3bdc965e59dee4c6f25213a40c57c55a0f20313cb04693828e33d43cc1fca224b6eab6ca7b668c60d0620351a3d89228a52dfb4245b15f76d324e65468ca7cd44d5279f4c6dac0f7ee05a4c91fe75d95119dd5bc408cd6a634b110f9466e60e135d77930bcdd02d308d484610749678d07259fefb1", 0xcc}, {&(0x7f0000001b80)="f1890b280d9b53691585071d8514922efb42a32c0ba4ca9b7a891a30c28ca32d101262d570c3d870fd3627983a3bd20c9269b2be05b8ddd80ae0787157de28baea2d676c5ab350f015772ac12e00f16eb2a4baf97989764216e5e372e8e426dd8ef51b80c53a5d97f4b73d51844ba89fa8be8137ae8b0d417ec4bee4b1dd465e27708444021748aebd5e87fc5e23169310d207ab698c7d82981303e4c5cb2d08931da467b98df7a6d05d360eac873e3b62940edfb09a5fe900d630203fc19f57c74816aa9c803245d456f3a191f33e1d3bf8fe0d0400e121013481c100f508f61a4fffa40656f3bdc2", 0xe9}], 0x4, &(0x7f0000001cc0)=[@iv={0xf8, 0x117, 0x2, 0xe1, "b9a7e4403f32a8cf82312f71c7450a1648d59dad507b9b11ddc88b15458ce244fb0737039453ea80244df51af4c19fc89731359ab7462238e4c76dd8766340487e2bb6b7e23eb7dad9dfa622b649c97f7d875f1de93a5a5f2448e6a3e2fc7b741e68e2230740f42d5988ed2582765ab797cc7985c52c9ee3a160894dc29df73fbf556d01c6c7d275dbe96da42a1edc636f5d148cc34aec677a2198ad71b58472139c991c9f1f2dabf7ea94c9afdeef2cc5bb21f5320846d69c767b31aa046fa346a52a133aa0f44bd2207d7c0dba19b74c34d8b093baa9c95706332d7e1f627dea"}], 0xf8, 0x4000014}], 0x2, 0x20000081) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x81899, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(0xffffffffffffffff, 0x4010586e, &(0x7f0000000300)={0x400, 0xd}) 1m26.240835127s ago: executing program 7 (id=13655): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3ee3ebcf8a4ed70f7d1c7c665b672afe9e657d60d7d51dc10912a09186db529c6c538f647c617e7a2303c5d896331485ae1f39b410762f7a060b690abda6fd7affe7f34bad09f4ba80b6341b634ab2e975f6e9e149f6b8f129606192712baf86cb1385cb52a5a3abbe06f20b60a4f29704a788", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1m23.277753001s ago: executing program 9 (id=13693): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60641068fd000000fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r4, 0x4, 0x6, 0x5}, 0x10) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000000000000000000000f8000000000000ac1414aa00000000000000000000000000000000000000000a003080"], 0xb8}}, 0x40004) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) (async) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) creat(&(0x7f0000000180)='./file1\x00', 0x40) (async) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x48c, 0x0, 0x9}]}) 1m23.108617351s ago: executing program 9 (id=13697): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0xa, "a36bd2f162e3c05d3034"}, &(0x7f0000000340)=0x12) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000380)={r1, 0x4, 0x1, 0x9, 0x56aa, 0x864}, 0x14) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x1}, 0xe) socketpair(0x9, 0xa, 0x9, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@multicast2, @private, 0x0}, &(0x7f0000000200)=0xc) connect$packet(r3, &(0x7f0000000280)={0x11, 0x9, r4, 0x1, 0x60, 0x6, @broadcast}, 0x14) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x147e) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(r6, &(0x7f0000000100)='wchan\x00') listen(r2, 0x3) accept4$bt_l2cap(r2, 0x0, 0x0, 0x800) syz_emit_vhci(0x0, 0x16) r7 = io_uring_setup(0x423a, &(0x7f0000000000)={0x0, 0x6087, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f0000000100)=[@ioring_restriction_sqe_op={0x1, 0x1e}], 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c81014001000050018040c0002000800ff7e9fec0200ff07"], 0x19) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00012cbd700002000000020020000800610054000000080061"], 0x24}}, 0x4000) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100140000307e0000000200000008000300", @ANYRES32=r10], 0x28}, 0x1, 0x700}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r5) 1m22.168568372s ago: executing program 9 (id=13719): r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='hugetlbfs\x00', 0xc00, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x489, 0x0, 0xffff}]}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000002340)={"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"}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) r7 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x840, 0x0) read$FUSE(r8, &(0x7f0000000300)={0x2020}, 0x2020) 1m21.827095231s ago: executing program 9 (id=13720): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') syz_socket_connect_nvme_tcp() mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) write$ublk_bdev(r4, &(0x7f0000000300)="626a0b2db8458dcf02b9e0e67c157386c17a8de99be7168ca5af1b5364ada8991d3c99eba058e1d86b5d22cdb4967d4a6b553cc3d32ca08441b0076103cbddb29a5f83f88ac9b2712a29371e5447d2d779efdf942b", 0x55) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000001c00)=r3) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x118, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f0e, {0x2, 0x0, @rand_addr=0x64010102}}) r9 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x4100, 0x0, 0x8}, 0x18) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = syz_open_dev$dvb_frontend(&(0x7f0000000140), 0x0, 0x10000) ioctl$FE_GET_PROPERTY(r11, 0x80106f53, &(0x7f0000000000)={0x15, &(0x7f0000000280)=[{0x20, '\x00', @data=0xfff, 0x2}]}) getsockopt$inet_pktinfo(r10, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) ioctl$SG_GET_SG_TABLESIZE(r9, 0x227f, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r9, 0x18, &(0x7f0000000100)={0x6, r0, 0x20, {0x1, 0x7}, 0x9}, 0x1) 1m21.570406215s ago: executing program 9 (id=13721): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x7}}]}, 0x30}}, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r2, 0x910, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff1a5}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008800}, 0x4080) 1m21.069157858s ago: executing program 9 (id=13724): r0 = socket(0x2a, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x80800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 1m21.020759823s ago: executing program 50 (id=13724): r0 = socket(0x2a, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x80800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 1m12.892325957s ago: executing program 5 (id=13826): recvfrom$unix(0xffffffffffffffff, &(0x7f0000000100)=""/41, 0x29, 0x0, 0x0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r3}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@deltclass={0x74, 0x29, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xd}, {0x6, 0xffe1}, {0x4, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0xd4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @TCA_RATE={0x6, 0x5, {0x6}}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x867}}}]}, 0x74}}, 0x0) r4 = io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'batadv_slave_1\x00', &(0x7f0000000540)=@ethtool_cmd={0x1e, 0xdd, 0x8394, 0xfa0d, 0x6, 0xfc, 0x2, 0xa, 0x5, 0x11, 0x5, 0x2, 0xb49d, 0xfa, 0x0, 0x10, [0x5, 0x8]}}) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) io_uring_enter(r4, 0x1203, 0x109c, 0x16, 0x0, 0xffffffffffffff02) 1m12.81906591s ago: executing program 5 (id=13827): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x53, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m12.579187829s ago: executing program 5 (id=13828): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='decodes '], 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000040)='GPL\x00', 0x5}, 0x90) 1m12.578903321s ago: executing program 5 (id=13829): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r3, 0x80084523, &(0x7f0000001f40)=""/231) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000540)={0x1d, r4}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 1m12.391894698s ago: executing program 5 (id=13830): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='fd\x00') read$FUSE(r3, &(0x7f0000000a00)={0x2020}, 0x2020) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000140)={r3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206050014000000000000000000000005000400000000000900020073797a320000000014000780050015000200000008001240000000000500050002000000050001000600000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r7, 0x100, 0x70bd27, 0x80000, {0x10}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c094}, 0x20000001) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)) (async) syz_open_procfs(r2, &(0x7f0000000040)='fd\x00') (async) read$FUSE(r3, &(0x7f0000000a00)={0x2020}, 0x2020) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000140)={r3}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206050014000000000000000000000005000400000000000900020073797a320000000014000780050015000200000008001240000000000500050002000000050001000600000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r7, 0x100, 0x70bd27, 0x80000, {0x10}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c094}, 0x20000001) (async) 1m12.390397586s ago: executing program 5 (id=13831): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x80000, 0x8) read$char_usb(r0, &(0x7f0000000040)=""/169, 0xa9) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000040), 0x10) sendmsg(r2, &(0x7f0000000380)={&(0x7f0000000080)=@l2tp6={0x1d, 0x0, 0x2000000, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="751edb18dbf46e8f09d97e5bbd402d11fea33f21e2", 0x15}, {&(0x7f00000001c0)="da", 0x1}, {&(0x7f0000000240)="6d5f67af894fc09d550067b675507cd5556770418b1b34525a6becaa1a13b103508a04d5cd215b761cd584cddde2539d4d275745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566098cbd4bb4b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f7797866066f2697c324aa5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f3f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d01158a497c68330c7a8878ad272b2fd9915717c58efd568017a16947f3145cc2d", 0xe2}], 0x3}, 0x40010) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) r4 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0xd0, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x2, 0x1, 0xb}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @enter_looper, @free_buffer={0x40086303, r4}, @increfs={0x40046304, 0x3}, @register_looper, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@flat=@handle={0x73682a85, 0x100, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/89, 0x59, 0x1, 0x19}, @fda={0x66646185, 0x0, 0x1, 0xf}}, &(0x7f0000000340)={0x0, 0x18, 0x40}}, 0x1000}, @increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0}) dup3(r3, r1, 0x80000) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) 1m9.724135283s ago: executing program 51 (id=13655): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3ee3ebcf8a4ed70f7d1c7c665b672afe9e657d60d7d51dc10912a09186db529c6c538f647c617e7a2303c5d896331485ae1f39b410762f7a060b690abda6fd7affe7f34bad09f4ba80b6341b634ab2e975f6e9e149f6b8f129606192712baf86cb1385cb52a5a3abbe06f20b60a4f29704a788", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 56.169866546s ago: executing program 52 (id=13831): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x80000, 0x8) read$char_usb(r0, &(0x7f0000000040)=""/169, 0xa9) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000040), 0x10) sendmsg(r2, &(0x7f0000000380)={&(0x7f0000000080)=@l2tp6={0x1d, 0x0, 0x2000000, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="751edb18dbf46e8f09d97e5bbd402d11fea33f21e2", 0x15}, {&(0x7f00000001c0)="da", 0x1}, {&(0x7f0000000240)="6d5f67af894fc09d550067b675507cd5556770418b1b34525a6becaa1a13b103508a04d5cd215b761cd584cddde2539d4d275745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566098cbd4bb4b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f7797866066f2697c324aa5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f3f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d01158a497c68330c7a8878ad272b2fd9915717c58efd568017a16947f3145cc2d", 0xe2}], 0x3}, 0x40010) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) r4 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0xd0, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x2, 0x1, 0xb}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @enter_looper, @free_buffer={0x40086303, r4}, @increfs={0x40046304, 0x3}, @register_looper, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@flat=@handle={0x73682a85, 0x100, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/89, 0x59, 0x1, 0x19}, @fda={0x66646185, 0x0, 0x1, 0xf}}, &(0x7f0000000340)={0x0, 0x18, 0x40}}, 0x1000}, @increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0}) dup3(r3, r1, 0x80000) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) 2.536539539s ago: executing program 6 (id=14616): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x40880) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r4}, @CGW_DST_IF={0x8, 0xa, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$CDROM_SET_OPTIONS(r5, 0x5320, 0xa) 2.209032673s ago: executing program 6 (id=14617): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="00be4402bc0eb90f2736389d4fb3ebfe38a8f9370ff93eee34c86b71d1448e751ca3d49ca85767fc4d59fdf7a7361bce13234cbe1c17aa6fc221b13ad9458b9c1d90e1e3ab28bfdb79", 0x49, 0x805, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000040)=0x6) 2.207961163s ago: executing program 6 (id=14618): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000040)=0x8, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x2, 0x4) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0xb, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x6, 0x1, '[\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0xe, 0x1, '\'!-z#:(&]\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x3, 'veth1_to_batadv\x00', {0xcae}, 0xff}) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000200)) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000280)) syz_ublk_setup_io_uring(0x6f9d, &(0x7f00000002c0)={0x0, 0xd332, 0x20000, 0x1, 0x27a}, &(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) r2 = mmap$IORING_OFF_CQ_RING(0x0, 0x1000, 0x0, 0x110, r0, 0x8000000) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000400)={0x0, 0x6450, 0x8, 0x0, 0x1b4, 0x0, r0}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb9a9, 0x8, 0x2, 0x29f, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x34b2, 0x20, 0x2, 0xb3}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc640, 0x80000, 0x0, 0x385, 0x0, r0}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc5c0, 0x40000, 0x0, 0x21c}}], 0x4, &(0x7f0000001700)={0x2e, 0x29, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xf}, 0x0, 0x0, '\x00', {0x4, 0xd29, 0x0, &(0x7f0000000700)=@buf_max_buf="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"}}, &(0x7f0000001780)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$UBLK_U_CMD_GET_FEATURES(r0, 0x80207513, &(0x7f0000001800)={0x0, 0xffff, 0x8, &(0x7f00000017c0)}) r9 = fcntl$getown(r0, 0x9) syz_io_uring_submit$UBLK(r1, r2, r5, &(0x7f0000001880)=@ublk_start_dev_sqe={0x2e, 0x10, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, r7, '\x00', {r8, 0xffff, 0x0, 0x0, r9}}) r11 = socket(0x0, 0x2, 0x49) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000001900), 0x4) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f0000001940)={0x3, 0x10000}, 0x0) syz_usb_connect(0x0, 0xdf4, &(0x7f0000001980)={{0x12, 0x1, 0x201, 0x7e, 0x35, 0xa2, 0x10, 0x13fd, 0x3940, 0x115c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xde2, 0x3, 0x1, 0x7f, 0xa0, 0x8, "", [{{0x9, 0x4, 0x63, 0x2, 0xf, 0x20, 0xe5, 0x97, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x1a}, [@mixer_unit={0x7, 0x24, 0x4, 0x3, 0x6, "13c6"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x2, 0x6}]}], [{{0x9, 0x5, 0xc, 0x2, 0x1ff, 0x8, 0xad, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x4}]}}, {{0x9, 0x5, 0x3, 0x10, 0x0, 0x1, 0x7, 0x6, [@generic={0x81, 0x1, "fafcb51e0bf0f281b1e6fd9fad0a78b820cd4ee06b15d048ad0c9f813823ae83371ba3b31a8b0f77da23faf11127da8253c65fb8bdd74aa3f99745db72cabadeed58ddaf36f438c464fc54cc6ec2625dfdb2419c8bf8ec47f6e1bc6168a410d848d76860f02be2a8f4acb695b20770275ffada84b563a725c9c6bfb35200e6"}, @generic={0x77, 0xc, "1487244d85de1d9781b3074500f73eb9af5aa5233b163e28168ebd65856a3da75f8b54ae32062e2a4189ac6d33cde842788157adc95759d83c6d8e298aac3d984724830d3a1cb830b009f209b80c4ff267a7df078ada2377528bc0c1e4f7308cda00a8eebc5f5a16feb5cceb056028a55923bf093f"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x20, 0x40, 0xa, 0xab, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x3}]}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x4, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x7}]}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0x0, 0x9, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0xfffc}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x80, 0xe, 0x4, [@generic={0x2c, 0xf, "578e2957f89f7e7afec24a8dfad4f226f553224d100537c24f7b57ba15f71e7a00428b77ce5a97ca5def"}, @generic={0xa2, 0x23, "36a621078b1e052eb00b93e63965c2682e06a4ab61c3c76aa6ee348cc83e7affae1fac44b3ea8ec84fc92d2e90505762091404356dc50d27805724f3af76cd8ae92b36559f6b99cf5327baf7eb4a9bc720533b2e965d926c4ff0cb0501a71754081694d00e962aa747c713a739c4eb9442869d603a78c997403ed2c72cced35e0f807cf7fde232116162d6a0cbb844d80b1d6c28e132383aa1e7b6b7708fb787"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xbe, 0x49, 0x7}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x9, 0x6, 0x82}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0xc5, 0x1, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x44, 0x2}]}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x8, 0x4, 0x7, [@generic={0x13, 0x23, "94862b6ce67618218606ccbee58c93c042"}, @generic={0xf1, 0xe, "245f7fc093a1388547071379d6de01dd6e3ed65c88044a6cbb715d3b5a0b4f261cff5de33f0e77bc7567b9e9b087e3e754d88f65a98a632970fc8d046becd4037879057dbcebc66fdaee06e90ed5161fd6028b7bd19270decc7914fa0d14959c4adc91494132ebf61b5f1ecea931aaf8acc46575c998e819a109f2913d4fdbd81ecac00c86c3da9a0c5a7fc38b5aeaf47ace5449c1d3a468e8827f16482ca08c391db0be4018c57c451e4903b3d7ebb16e71b1311130acb5eacd339faab6b895d39aa3e8bf7ff32d8bee1c1d07d15150a3e899d4a2eb9fd31aa918f6c3668cd3ca66dd1dd6c654ef5b508399a913ae"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x9, 0x6, 0x2, [@generic={0x7b, 0x8, "06cca2b666b5a9c3a34d35c4856ac43a4330a705622db0ac2f82db04298e98186496ff0b02eb522aa7043009b3deb67337ac3b9879aebfd0ef7e240d5c8fe083794503efa9f24066db74bd5a10c9cc026972caaccf0dc1073c5fe564ead91a974361309a60d502f98c45066596bdd9e3bc9759a7fc67f92392"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0x4, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xa}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x2, 0x5, 0x24, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x79, 0x5}]}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0x4, 0x7, 0x4, [@generic={0xef, 0x10, "e2ece2ceada1ee05c9c4f645344976035faee145e043d924e47b29ed04156aff1cf886b0a73dd38a36b074b9d30f036d7e9ff4de1df14f222bbd6becef80d95613eaa622d464bc40f591c72c39f08e84d90f5ac9cf6b04e3f9069791e177886deeed943812a73b4140ce53b119797d799a9a406f3aff3697a04470a9d7927861462fb7ed79a52ebc4cfd03315f90691f1f6f0b1fa3138f81ac70e4bb527295c683277bb63d80d1b8393b77f2d70cc8ffaf1bca35939b2eeead3ae6acdc62e06e460f879734c40a970aa42d417e0aad05feeac3a06b891aeabd8935239292167dc750dc3c9ff1a1e23df96a2e0c"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x8, 0x2, 0xf7}}]}}, {{0x9, 0x4, 0x8, 0xfd, 0xc, 0xff, 0x1, 0x3e, 0x2, [], [{{0x9, 0x5, 0x1e7446887618ec75, 0x4, 0x20, 0x20, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x10}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x7, 0x7, 0x4, [@generic={0x28, 0x23, "a800549ec4ce085263cc96ab475cfc013a7d914fe395a3eddcdaf7e476b1f12f80e7432dcb9a"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x0, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x368}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x56, 0x9}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x7f, 0x6, 0x4, [@generic={0x15, 0x6, "5133f1dfbac388eb4aff89b942b17bc371d1c6"}, @generic={0xfb, 0xc, "d69fc8393935e505114794a640f237096a7b805caa61b60131b2d9ab19966c1820405d8129fc86cae9ff0c7bd912cf3bfba526e3da364fee90311c80058a980ba6a8db6695b99cdfa539d4201a2e884685236b91955c690a74b94aa1ff564caf9d7161a4a537ce29631a3cd0d7211c5dfe03906434269f497de2c057758f8a029836dcd5584e673871b7f9602dd26cbf11b0a27fb459f69df69b06040b87db1c2cfb4d84263cf719154aecbe802a12d79724fe3158e3c2258340a387c17fd48ff1724e273735552c991fea9fd4cd9ff4e30025a4c0bb87b1515ee747f5dc7df74968ac7331927c665fb4be090ed89b018f38a6f391d46cfe26"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x1, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x7}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x0, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}, @generic={0x92, 0x23, "e00cbcbe8540f6b5d91fbd0bea3164bd0e6bc52b4992b7bd4a8a16a195430a3e75a3980bc6fbb8263ee75109e63b53f5a4bbeb6c4ab3855525f36ba3cc5e247d115be12c429f39dd88cfa5be7678d59136486967a1685acaef6a181397d72a69704358f9eaa631ad8287f48c930654572b1beced7488a5c98438c23d0cc679ccb216a6d530a58c04e8524c5085751d7a"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x3ff, 0xa, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xb0, 0x1}]}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0x9, 0x7, 0xae}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x4, 0xa0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x61, 0x20e8}]}}, {{0x9, 0x5, 0x6, 0x4, 0x10, 0x40, 0x1, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xd, 0xff}, @generic={0xf5, 0x0, "d2e06d2135cb2d3fc4e68cadc3977e4cbed7fca3e8fc88f06075ce2240d4baca0b46a028f3528554e46ff846c66f46e85d1ecdd0f7ff69b5e30895de5ac451c8c3ccd60c01f5f0bb9d3a99e68bc3c64854e4ff83a1deed535591fcf997a5931bc9493674cf86ff989f75d35f6955ca847470d2dd9b6cb346fe5eb45525d192ef0da2ca0d8c5047876e798e7eb4def8b37cb6001496bb3964a5e6de389bd4fa527e98af6a2a79de8f7e351b7719822816644ec34c2b1131525d5e5434bba72b8b6acd0e4a015fe9b932fb53a9aab0f48f055d470d55f6cb4bba64bab64efa4895d5f4a25540f4dc7611445b58a81c5b75b0a46c"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x42, 0x81, 0xea, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x1, 0x8, 0xaa}}]}}, {{0x9, 0x4, 0x6f, 0xc7, 0xe, 0xff, 0xff, 0xff, 0x7, [], [{{0x9, 0x5, 0x4, 0x1, 0x10, 0x8, 0x4, 0x3, [@generic={0x90, 0x6, "1325dfe799976fcade44a2c14eb42ba61e54658ff8464c52b6e07011bf0678b26b4e464e8d534ee74640945ab4285908bae867e30cbfd9c26157d0691a1c4cfb4e1f1fd65bd238cbc7da1d9fc640057fc5abbfce88ce87def434545d8c9620222dc5729e2d8e7a11bc4fa13887ead49342b1e9d254bc4c75084547f505b0b1c2b8bc7e116903baed5c4f48188e18"}]}}, {{0x9, 0x5, 0x289a539002d24620, 0x2, 0x200, 0x2, 0x7f, 0x7a}}, {{0x9, 0x5, 0x5, 0x8, 0x200, 0x10, 0x1, 0xeb, [@generic={0x94, 0x3, "c928de341e6aae151f59dad1b7933cb724fd86fd0d037cea6a57c72dad5ea4a76e7b42bfbaaee1e331aa85db37fdd99a4c6307fccb197c254c0778653c7d066811a4b3e9a9acd3f8761553cf44db4fe23010a4c2da82d34fbf6d44360a2a8ee7ced2035ba2080d598b5cc755366150d6bcf9fd6385e36582701da61f6efb480b2a302fe8243ab0d75d60177214862c3b3319"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x2, 0x5, 0x8, [@generic={0x1a, 0x10, "42488349602ce3365da1e739d56575d2702ef26727dcfc67"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x3, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x400}]}}, {{0x9, 0x5, 0xa, 0x2, 0x40, 0x6, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x6}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x0, 0x9, 0x87}}, {{0x9, 0x5, 0xf, 0x1, 0x200, 0xe, 0x1, 0x7, [@generic={0xf2, 0x31, "8a97cfe1dea364b9028b7309fef90a99090778a750053fb7ddc5264fccf27e9c4fe1ce2cc3f010b960d9e31ba32bc6edc54ca5397509a30d74834e4923cbe2c2440c5bbe0fbc78e210bc05827f0e355e947f97804bb9912fd9b201b0831598b033722dd39bcaef2a57d9cf9ec1e1fd881108b7639c0f690cb511a892ab05ef107df1ee41626ec58167e93666c19276b288551c9304b5a3c2c63b5f238b56b3801369223984015930acefcdaae6ad46724f14a167e0a7ff8ea525289878711e047ff7e3228d8dbd883df91bc6ce69ba07f977c5b39b898c4cc8445814831392b47814df0b303d3f7e0ac336ddb5302299"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x280}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x3, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xd, 0xd000}]}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0x9, 0x1, 0x5, [@generic={0x33, 0x11, "9d97b78565f2da32e678fe7fe39319c417efb5266a278c77e5dd32df6b39d3610bd08deb0dde7657930ce9a4a72e97c1fb"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x7f}]}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x0, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x5b3}, @generic={0xd4, 0xf, "3e12a35de2007ae930f6009e1a7db00f707f9451a731b65d72b937cf3f4d6bcffd69ed5995da4f9c879739eac26c055b6d63c8e3d5f682ece37ea86cf056cb2fef08a47bb6daf63d34901059fff07682d6f651d2c5be09e7e182be6d934105b427bdcbf40935249e14b23f18fcee00953f55918c35172a721bd2cf32ac28ee884b8642ddb16bff5560d34b96c45c15b660cbee5ca038b9e2ef616040e3f8829f7f765bea1ef466a5f077f88a7c9d203cbf40ba662104529e34a9245e0788b42f38937efbc73f4f3bafb0156b95f4e36634ad"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x400, 0x0, 0x39, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe, 0x3}, @generic={0x94, 0x9, "b41d331860b035b350da210d699811237bdbfbf0af986f9e50d3ee5ad30e1bedc4334cae82c7a38863011e901b5b16afc013edec6ad5d52894f264211482e64f97c92beedf3f6a6c97cfb0a30a5b001fd5ad012f5e7fe75aa463830f5a03b725adafec79758cb9cb68c2465740d27a7cb297c6d2cd7403e0a16f92d10a40da604fd003f1cc52ccd0fa2a8657ce0d5837a004"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x99, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x1, 0x7b7, 0x3, 0x3f, 0x6, [@generic={0xb1, 0x1, "960f7700999df52895fb7ccf268769479038e0e708151b2f2b8f23610dc4e9a2faeec70664bb39c559c562af21ac6c25c93058137e56b23c3c21ece460ea0966fe589319f8a1b4c8453627a87db025882d63741b17f7b785b60f729352101b4635d335741f9842a1b2a1ca1bdb2ca97e3a2d93a385453015d64c1cad0e8f58da38b52b4011602adee47f2bc6e15cb634551bdc32906e0214eb82883ed2cf7043695368c88d2cbedef73df4489782bc"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x71, 0x2}]}}]}}]}}]}}, &(0x7f0000002a00)={0xa, &(0x7f0000002780)={0xa, 0x6, 0x300, 0x7, 0xf2, 0x4a, 0x0, 0xf9}, 0x52, &(0x7f00000027c0)={0x5, 0xf, 0x52, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x7f, 0x2, 0x3, 0xf, 0x200, [0x30, 0x3f30]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "7c21f5b607569f6ae9dac45a569288e1"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "0f1af34187f4a45a1343db6f44bb2bac"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xb, 0x8, 0x2}]}, 0x3, [{0x8a, &(0x7f0000002840)=@string={0x8a, 0x3, "0c11c7fbb41caddf2cc892883a5cfe255d2b9301f36a69bfb852e6373748402e1501d8ed5e14fa6463a78a67eaaedcc3880ae61c33b203198b8942b09833e4213bc9e0bb1a8740c6d7c664a081edc7cd9483dca74f54b346504f3c1b0ce6ec013db78ee7e3af8ec87a5d1f776ceeafa237ff2a365fb449fb4619ad65e5771fc5e7c82a757a151511"}}, {0xa0, &(0x7f0000002900)=@string={0xa0, 0x3, "cbb885bb6d3d784fb25b92393f56ccdefda5bb8edfdfcd09e5651f269efe1b3a2f6211822512140f7c2250b5a2d4dd858aafcfda00f579b15f810293742ed091097965b2ba746d02f57d3192c3612558e78b4a4bc72dcbbe1d8b57ab2c216ffdba75426f6b93a6c9ef960a19ebf7cc4419dac1a72537792327bdb446b4f85b168267e4fd2efdac5c9f2613de845cac80db10c66a94523c7ea490f1ec1bc7"}}, {0x4, &(0x7f00000029c0)=@lang_id={0x4, 0x3, 0x41a}}]}) getsockopt$inet_sctp_SCTP_NODELAY(r11, 0x84, 0x3, &(0x7f0000002a40), &(0x7f0000002a80)=0x4) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r11, &(0x7f0000002c00)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x5020640}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x28, r12, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000002c40)=0x5) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000002c80)={'dummy0\x00', {0x2, 0x0, @local}}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000002cc0)={0x5e0, 0x6, 0x1, 0x8, 0x2, 0x26}) recvmsg$can_raw(r0, &(0x7f0000002f00)={&(0x7f0000002d00)=@rc={0x1f, @none}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002d80)=""/113, 0x71}], 0x1, &(0x7f0000002e40)=""/161, 0xa1}, 0x40) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000002f40)={0x3, 0x3, 0x10}) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f00000030c0)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003080)={&(0x7f0000002fc0)={0x94, r12, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000003100)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) sendmsg$nl_netfilter(r11, &(0x7f00000035c0)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003580)={&(0x7f0000003240)={0x30c, 0x12, 0x7, 0x801, 0x70bd28, 0x25dfdbfb, {0xa}, [@nested={0x14c, 0x6c, 0x0, 0x1, [@nested={0x4, 0x137}, @generic="479ee458de0185f291b8b18e227731ee0e12f6b3ba57bcbc34875fd25e6e82898881534fb6c9c3d2cd780a48c895e5cb2833b560ee107175561ab7d55a82691e2b37fc0ffddd23da0191291ca08ed34be65bdd2b3953740dcfaba9ca4151e7f17221f9a5ca2634dc8e71cae69b0940b0f10db137c8a15f93f9727de1a95360205db23c8395456b1bfe6dc8caad26d6b37a1d52", @generic="69294fcc6b007291a49c235395feee2ef4b1d2f6aefe3f9ffe28f0b6c8193ebc78714c0427a7da7939c7d55e9a4d3f8f2eb63402c55948e4edee0d6a1d3f0d385b8db12a0d3bda4b078baf7cc1deb7bb685040d840e0e3f818c6fb7fe89051db15ef5eabe2c77af829fcaad3aa8a6cd4e580379af0eeda370ce022062217ccee6de2540394e6b7021749969d3f6813d1925d4005d9b2138abed5116661", @nested={0x4, 0x6d}, @typed={0x4, 0xb6}, @nested={0x4, 0x124}, @nested={0x4, 0x13c}, @nested={0x4, 0x26}]}, @generic="a682671648ece0b17a3d9c88924b536ecf028c1561a51cb850a73ed38c34", @generic="37c4cc14432d4e16d03e5911be7389e03c27d468447f99c875962255732e326552a08d6094434c537394f48281c05c77638860389e44bf4a2e9aa9aba0e2e066f61e5ff9e887069da4802e19104ff5f097cbfa929a67b06ce4e95dc26b071f76dfa4e3f122f4370471c92a0653aa1c34134eb41960bc3d7b40c4543f0aa60048ea9570734d247895940c2312c90871d36cb1fb94b4fae4dcae86aba8f7494558d2402de6d9847c503dcdd935e54d8bf48fe26edc637109891e732c6960cf19d1d8309745869bd199ac9d036d16f5efd8381793d1937739b1a3133c3cc7f7b29aaea42c38924eff3fb1cd5c008e16bc", @typed={0x8, 0x65, 0x0, 0x0, @uid}, @nested={0x4c, 0x8d, 0x0, 0x1, [@generic="cd5b9fcea56d49eea5a389406d9c9fc234b134a314ee49da195d8894766dd4fd8c877c1cd15f29e75cb345e68f32f72519c31c5aab1b26689e8eba065ddd6676", @typed={0x8, 0x11, 0x0, 0x0, @pid=r10}]}, @nested={0x1c, 0x6, 0x0, 0x1, [@nested={0x4, 0x45}, @nested={0x4, 0x68}, @typed={0x8, 0xe7, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x5d, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @typed={0x8, 0x90, 0x0, 0x0, @ipv4=@loopback}, @typed={0xc, 0x156, 0x0, 0x0, @u64=0x800}, @typed={0x8, 0xdc, 0x0, 0x0, @ipv4=@multicast1}, @typed={0xf, 0xf7, 0x0, 0x0, @str=':$&-]%{&#/\x00'}]}, 0x30c}, 0x1, 0x0, 0x0, 0x8002}, 0x48000) 1.27511182s ago: executing program 1 (id=14627): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x9}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0xfffffffd, 0x0, 0x54, 0x1007, 0x73}, 0x9c) r1 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0xa, 0x2) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5202) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000040)={0x3a, &(0x7f0000000180)=[{0x16, '\x00', @st={0x4, [{0x1, @uvalue=0x401}, {0x2, @svalue=0x6}, {0x3, @svalue=0xffffffffffffffff}, {0x3, @svalue=0x3}]}, 0x6}]}) 1.272478589s ago: executing program 3 (id=14628): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x6f09, &(0x7f0000001340)={0x0, 0x595f, 0x80, 0x1, 0x53}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x6030}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000040)={0x9, 0xffffffffffffffff, 0x2, {0xfffffffffffffffb, 0xfffffffffffffc01}, 0x1}, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000008c0)={0xc0}) mknodat(r5, &(0x7f0000000140)='./file1\x00', 0x8000, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_capability(&(0x7f0000000600)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) 1.147293984s ago: executing program 3 (id=14630): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents(r0, &(0x7f0000000040)=""/50, 0x32) getdents64(r0, 0x0, 0x43) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003040)=ANY=[], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='8'], 0x38}}, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000040)=[{0x20}, {0x6}]}) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000890000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 948.467297ms ago: executing program 0 (id=14637): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001b80), 0x2, 0x0) write$vhost_msg(r2, &(0x7f0000000580)={0x1, {0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfe74) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x12, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 695.916113ms ago: executing program 6 (id=14638): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) sendfile(r0, r0, 0x0, 0x15) 695.406303ms ago: executing program 0 (id=14639): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x2710, 0x0, &(0x7f0000ffd000/0x3000)=nil}) (async) ioctl$KVM_CAP_STEAL_TIME(r0, 0x4068aea3, &(0x7f0000000040)) r1 = accept$packet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x14) r2 = dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0x7, 0x200, 0xfffffffe, 0x100, 0x0}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000200)={r3, 0x93}, &(0x7f0000000240)=0x8) (async) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f0000000280)=""/108, 0x6c}, &(0x7f0000000300), 0x29}, 0x20) (async) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000500)={0x9, 0x323, &(0x7f0000000380)="cf4db8b12dd755e6b47be4e879aad191d927a86ebe38efd6d4dafd5688b12ff6dd7d14eebf516325593428ffb35721325e41d1b2fed17c0ac1a9eeff472928d0ed3f09a0874ae1a2161f13899eee897a941068a7e35e521f769f98764ba12739c1992393f6238086c88cb547ada5044f323ddd28e8a713b9a59d11c5dcf146b907446e82046482c6655308453d3c962ec13e1d04655e5dc2bf1c577e2061816ca3501fb48036af624a667739d5ae99c453f2e25becc0ee4aa6178192319dbd6c3e90ae66978e86283355bc1cfce320aaacf4cd22db0cad3ae55bf402bd97f173", &(0x7f0000000480)="34ee0689988521d1ff5972204cf8344e4fa6e57ede8ab7e0d7688da0dcf6744956ef14426d8fb376ac11e3e979aa48a05abbc43d08d0d64ae999384bcb8824a5f015d578a02b5cecd23351963d68a1728e465bee69c13183f47d896b60059821fea55f9a0bb7ee636198e06ebcfb60d0de03addf", 0xe0, 0x74}) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000540)={0x2, @capture={0x0, 0x1, {0xffffff99, 0x15ed}, 0x800, 0x7}}) connect$802154_dgram(r2, &(0x7f0000000640)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x30000, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(0xffffffffffffffff, 0xc0106440, &(0x7f0000000700)={0x3, 0x8001, &(0x7f00000006c0)}) (async) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x27) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000740)={0x10200, 0x6, 0x4, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000780)=@assoc_value={r4, 0x3}, 0x8) (async) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000007c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0xd) (async) flock(r1, 0x1) (async) r8 = syz_clone(0x44010080, &(0x7f0000000800)="c03d09b412feb5599394184cc7fb9c4db813dd2b4461de1e9e808da87544edfd59d86dd70ee8b9b660b7e14f910fecfe1f84f4b85c3c9702961f9a43b8b047573ef7b2c29fe22ff867ddc9d99a82c38f38a7d65b19bc28dc128f96061cbbc15c42994b5e1048b1d5b117bb347abbf83a3f0303caf0c36b8f3eb769cdab8cd25120b79a6e82b942c6fb9bfc9fd38e4bb745642fff1e23a91bdcf8c7474bf1d43f12dc93c55fc95e725c0309eb016afdaa4f56e965e7e04c8f28dfe98e96f572c52cd0b3b740b7", 0xc6, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)="5f0ca6ed18d7b7c78cc1dda28f2a2347db945d695ad9190ef61904d4bb6d83274feaa696bed426a16ae1f8d8cb69d589d6547904f131c1bea12b72a8f8d2af50c5389abe4ea9b9b53f6b86a90ecdc3f261646a63356134e8194138831c5a3757becadc797ba995843bc179e0665544a71f21e864430e99585e241d16b7029c320e4d0dfda55190b5133a5882a0a38f0f95cebd4ccb16a9fe45bc7d7a024884d48ebdaf5243ea1fbb4b05b974c664830f82d8a916") timer_create(0x1, &(0x7f0000000a40)={0x0, 0x1a, 0x1, @tid=r8}, &(0x7f0000000a80)) ioctl$VHOST_VDPA_GET_CONFIG(r5, 0x8008af73, &(0x7f0000000ac0)={0x0, 0xfa, ""/250}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000c80), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r9, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) write$cgroup_devices(r2, &(0x7f0000000dc0)={'a', ' *:* ', 'rwm\x00'}, 0xa) (async) timer_gettime(0x0, &(0x7f0000001f80)) 691.948322ms ago: executing program 6 (id=14640): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/79, 0x4f) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x0, &(0x7f0000000140)='grpquota') 575.123217ms ago: executing program 0 (id=14641): io_uring_register$IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, 0xfffffffffffffffe, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_clone(0x100000, &(0x7f0000000100)="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", 0xc00, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000004180)=[{&(0x7f0000003cc0)=""/115, 0x73}], 0x1, &(0x7f0000004240)=[{&(0x7f0000004200)=""/12, 0xc}], 0x1, 0x0) r2 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x146, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683d, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) 451.806776ms ago: executing program 6 (id=14642): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) (async) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x1000000010) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) close(0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000300)={0x4, 0x9, 0x0, 'queue0\x00', 0x9}) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x6f2, 0x9, 0x0, 0x3, 0xbd99, 0x1, 0x5, 0x1000, 0xa, 0x800, 0x6, 0x1, 0x8, 0x1, 0x2, 0xb, 0xfffffffa, 0x200, 0x9, 0x401, 0xa, 0x8, 0xcd00, 0x1, 0x1, 0x8000, 0x400, 0x800, 0x6, 0x8, 0x4, 0x25b56227, 0x3, 0xffffffb8, 0x6, 0x10, 0x7, 0x9, 0x4, 0x3, 0x5, 0x7, 0x0, 0x1, 0x9, 0x0, 0x4, 0x7, 0x800000, 0x1, 0x8, 0x800, 0xdc1f, 0x7fff, 0xfff, 0x2, 0xfffffffe, 0x0, 0x6, 0x1, 0xc98, 0x8d8, 0x3, 0x6, 0xfff, 0x0, 0x5a, 0x37, 0x8, 0x81, 0xd0e5ebc6, 0x0, 0x7, 0x4, 0x4, 0xfffffff9, 0xd83, 0x2, 0x6, 0x9, 0x6, 0x80000000, 0x9, 0x3, 0x0, 0x3800, 0x1, 0xc8, 0x8, 0x1, 0x5, 0x7fff, 0x2, 0x2, 0x3, 0x4, 0x341d, 0x8, 0x400, 0xa19, 0x1, 0x2, 0x10001, 0x1, 0x3ff, 0x400, 0x4, 0x9, 0x1ff, 0xee, 0xbe8, 0x2, 0x6, 0x4, 0x6, 0x3eb, 0x5, 0x6, 0x1c, 0x7, 0x8, 0xb, 0x4, 0x4, 0x40, 0xba, 0xf9d2, 0x9, 0x4, 0x7, 0x400, 0xffffffff, 0xfbb, 0x200, 0x9, 0x8, 0x0, 0x7ff, 0x11a92593, 0xa, 0x2, 0xe, 0x1, 0x1, 0x100, 0x3, 0x7, 0xffffffff, 0x5, 0x101, 0x6, 0x2, 0x3, 0x5, 0x2, 0x8, 0x0, 0x9, 0xa213, 0xffffffff, 0x8, 0x8000, 0x5, 0x4, 0x5, 0x5, 0x9, 0x4, 0x6f1, 0x6e, 0x7f, 0x100, 0xfff, 0x7c66, 0x1, 0x6, 0x7, 0xfffffffa, 0x1, 0x7f, 0x0, 0xa, 0xe93b, 0x6, 0x8b6, 0xa8b, 0x5, 0xfffffff8, 0x10, 0xffffffff, 0x0, 0xfffffff6, 0x7, 0x7, 0x3, 0xffff8001, 0x9, 0x2, 0x0, 0x80fa, 0x0, 0xffffffff, 0x3, 0x9, 0x4f7, 0x0, 0x9, 0x9, 0x1, 0x4, 0x4, 0x2, 0x6, 0x9, 0x2, 0x8, 0x81, 0x6672, 0x7, 0xe1f, 0x1, 0x1, 0x80000000, 0x0, 0x5, 0x1, 0xdbb9, 0x2, 0x40, 0x400, 0x7, 0x10000, 0x7, 0x9, 0x779, 0x400, 0x41, 0x3, 0xd, 0x1cf, 0x6, 0x2000000, 0x6, 0x1, 0x1, 0xb, 0xbbb65607, 0x5, 0x18, 0x8, 0xfffffff8, 0xd, 0x4, 0x9, 0x6a0]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x75de, 0x101, 0x400, 0x9, 0xffffffdd, 0x53, 0x4, 0x2, 0x40000, 0x3, 0x400, 0x4, 0x3, 0x100, 0x6, 0x8, 0x8, 0x54, 0x8, 0x3, 0x8, 0x1, 0x9f3a, 0x2, 0x7, 0x101, 0x8, 0x1ff, 0x8, 0x5, 0x5, 0x7, 0x5, 0x9, 0x800, 0x8, 0x2, 0xf, 0xfffffff8, 0x7, 0x6, 0x2, 0xb5, 0xbc0, 0x38f, 0x10000, 0x6, 0x3, 0x7, 0x8, 0x7, 0xf91, 0x6d, 0x3, 0x3, 0x3, 0x80000000, 0xa, 0x2, 0x1800000, 0x0, 0x10000, 0x4, 0x0, 0x4, 0xffff8000, 0x3, 0x7, 0x1, 0x4, 0xffff, 0xd89c, 0x9, 0x2, 0x3, 0x1, 0x4, 0x6, 0x5, 0x8, 0xee, 0x80, 0x7, 0x88, 0x5, 0x5, 0x5, 0x3, 0x200, 0xff, 0x6, 0x80000000, 0x2, 0x10, 0x1000, 0x100, 0x8, 0xea0, 0x3, 0x4, 0x0, 0xc, 0xff, 0xfb2, 0x90, 0x9, 0xffff1a47, 0x5, 0x6, 0xfffffffa, 0xbb, 0x5, 0xffffffff, 0x5, 0x5, 0x4, 0x4, 0x7fff, 0x0, 0xe, 0x2, 0x800, 0x20000, 0x1, 0x3, 0x38b, 0x101, 0x5, 0x0, 0x4, 0xfffffffc, 0x6, 0x3, 0x200, 0xd50, 0xc68, 0x101, 0xff, 0x2, 0xfffff051, 0x400, 0x0, 0x2, 0xa7, 0x80000000, 0x0, 0x3, 0x6, 0x3, 0x7, 0x4, 0x5, 0x7a74bbd9, 0x0, 0x3, 0x5, 0xe, 0x4, 0x2, 0x6b, 0x9, 0x4, 0x200, 0x4, 0x3, 0xffffff7f, 0x8, 0x3, 0x200, 0xe, 0x6, 0x0, 0x80, 0x101, 0x7, 0xfffffffc, 0x2, 0x1, 0x9, 0x1, 0x2, 0x8, 0x800, 0x6, 0x7f, 0x7f, 0x4, 0x7, 0x5, 0x7, 0xc, 0x169d, 0x6, 0x0, 0x800, 0x9, 0x7, 0x3, 0x9, 0x78d2, 0x3, 0x5f2, 0x6, 0x459, 0x0, 0x53, 0x0, 0x988, 0x8, 0x3, 0x9, 0x1000, 0x800, 0x240000, 0x0, 0x5, 0x1, 0x50000, 0x7ff, 0x1, 0x4, 0x5, 0x7, 0x1, 0x80, 0x9, 0xfc4e, 0x9e1, 0x3e74, 0xf, 0x1, 0x8, 0xfff, 0x7fff, 0xc73f, 0x7, 0x3, 0x3, 0x31, 0x1, 0x3, 0xe, 0xff, 0xffff, 0x1, 0x6, 0x2, 0x7, 0x3, 0x5bea, 0x8000000, 0x0, 0x5, 0x3fce, 0xd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x3, 0x2, 0x101, {0xb, 0x1, 0x8, 0x4, 0x85, 0x10001}, {0xb, 0x4c162f18af4d7184, 0xe, 0x4000, 0xfff, 0x10}, 0x4, 0x1, 0x2}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 32) ioctl$BLKRRPART(r1, 0x125f, 0x0) (rerun: 32) 270.801681ms ago: executing program 1 (id=14643): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 267.92428ms ago: executing program 1 (id=14644): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000006111680000000000950000000000000068dd253aa0e2332c817c5e9376eaf9"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x8, 0x7, {{0xe, 0x4, 0x3, 0x7, 0x38, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @broadcast, {[@rr={0x7, 0x1b, 0xc1, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010100]}, @noop, @ssrr={0x89, 0x7, 0xc0, [@broadcast]}]}}}}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, 0xffffffffffffffff}, 0x4) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x2b, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) (async) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x28011, r6, 0xaae46000) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xa, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7617}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7d4}, @map_val={0x18, 0xc, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x100010}, @jmp={0x5, 0x1, 0x78b2786769b2b08f, 0x7, 0x7, 0x4, 0xfffffffffffffffd}]}, &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x2e, &(0x7f00000006c0)=""/46, 0x41100, 0x8, '\x00', r1, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0xe, 0x4, 0xffffffff}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000440)=[r3, r4, r5, r6], &(0x7f0000000480)=[{0x2, 0x5, 0xb, 0x5}, {0x4, 0x3, 0x6}, {0x1, 0x1, 0xf, 0xc}, {0x5, 0x5, 0xa, 0x6}, {0x2, 0x4, 0x8, 0xb}, {0x1, 0x2, 0x9, 0x9}, {0x2, 0x4, 0x2, 0x3}, {0x2, 0x1, 0xa}, {0x2, 0x1, 0x9, 0xa}, {0x0, 0x1, 0x1, 0xb}], 0x10, 0xbc5d}, 0x94) (rerun: 64) 216.192772ms ago: executing program 3 (id=14645): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000002500090000000000000800000300000004000180604f7abc081b35c22f2a4a260841f0e8204de80213f5b8289f9ad1dbdc5523084ede211eb2bb578a9902d6a39ef6e0bb037948dd03daf055a37574cf989045301b3919ecbd"], 0x18}}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00'}) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0xfff1}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x6d14, 0x3, 0x981, 0x8, 0xbe0c, 0x7, 0x4, 0x5, 0x2, 0x1ff, 0x91f, 0x3, 0x5, 0xfffffff8, 0x6000000, 0x20000, 0x3, 0x0, 0x9, 0x7fff, 0x2, 0x0, 0x0, 0xfffffff3, 0x9, 0x41, 0x8, 0x8c1, 0x7, 0x5, 0x8b5, 0x6, 0x5, 0x9, 0x2, 0x5, 0xdf, 0x1, 0xfffffff7, 0x214c000, 0x9, 0xad3, 0x8000, 0x4, 0x0, 0x0, 0x5, 0x2, 0x5, 0x4, 0xfff, 0x9, 0x5, 0x4, 0x4, 0x6, 0x1, 0x1, 0x5, 0x3, 0x2, 0xca, 0x8, 0x7fffffff, 0x2, 0x1, 0xfffeffff, 0x10, 0x1, 0x3ff, 0xf, 0x9, 0x4, 0x7, 0x3, 0xfffffffc, 0x1, 0x4e, 0x6, 0x8, 0x6, 0xeb5, 0xa, 0x7ffe, 0x8, 0x4, 0x10, 0x1, 0x80000001, 0x0, 0x5, 0x1, 0xfff, 0x3, 0x5, 0x6, 0x5, 0x80000001, 0xc, 0x2, 0xd8f3, 0x3ff, 0x9, 0x3, 0x24000, 0x5, 0x3, 0x200, 0x6, 0x1, 0xfffffff2, 0x1, 0x0, 0xb1, 0x8000000, 0x7, 0x2, 0x81f, 0x7ff, 0x4, 0x65b6, 0x2, 0x315, 0x80, 0x1ff, 0xb, 0x1, 0x800, 0x0, 0x8e, 0x80000000, 0x401, 0x8, 0xff, 0x10000, 0x2, 0xc469, 0x71, 0x1, 0x2b, 0xa, 0x8f, 0xe88c, 0x6, 0x80000001, 0x4, 0xb618, 0xf3, 0xffff8001, 0x51, 0x0, 0x2, 0x5, 0x81, 0xea5, 0x0, 0x9, 0x7, 0x3, 0x80000001, 0x0, 0xe19, 0xd6, 0x3, 0x1, 0x6, 0x0, 0x80000001, 0x7, 0x3, 0x80, 0x7fffffff, 0x0, 0x6, 0x9, 0xfffffff7, 0x66, 0xffffffb1, 0x9d1f, 0x7fffffff, 0x8, 0x7fffffff, 0x4, 0x81, 0x6885b8d8, 0x0, 0x3, 0x82, 0x400, 0x70, 0xf9, 0x0, 0x5, 0x1, 0x30b, 0xa, 0x200, 0xfffffffd, 0x5, 0x0, 0x0, 0xa1, 0x9, 0xfff, 0x4, 0x401, 0x3, 0x2, 0x0, 0x0, 0x40, 0x101, 0x7, 0x0, 0xaad, 0x3, 0x0, 0x0, 0x8, 0x0, 0x8, 0x3, 0x10, 0xff, 0x3, 0x2, 0x9, 0x200, 0x5, 0xfffff001, 0x0, 0xfffffffe, 0x3, 0x3, 0x0, 0xfc4, 0x4, 0x296, 0x2, 0x7, 0x1, 0x8000, 0x80000001, 0x7fffffff, 0x7f, 0x4, 0x5, 0x7, 0x6, 0x2, 0x0, 0x4, 0x4, 0xbc4, 0x10000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x3d4, 0x5, 0x0, 0x2, 0x10, 0x7, 0x9, 0x5, 0x8, 0x7, 0x8, 0x8, 0x9, 0xffff, 0x8f13, 0x1, 0x3, 0x8, 0x8, 0x9, 0x4, 0x8, 0x81, 0x0, 0x7ff, 0x6, 0x10001, 0x6, 0x100, 0xfffffff4, 0x2, 0x8, 0x0, 0x800, 0x0, 0x4, 0x61, 0x7, 0x7, 0xdf4, 0x1ff, 0x80000001, 0xffffffff, 0xffffffc0, 0x7, 0xec3a, 0x80000001, 0x7, 0xe429, 0x8c9, 0x4, 0x8001, 0xc, 0x5, 0x7fff, 0x10001, 0xb436, 0x8001, 0x4, 0x2, 0x5, 0x5, 0x5ba7, 0x5, 0xe3c, 0xfff, 0x2, 0x0, 0x8, 0xd9a1, 0x4, 0x3, 0x8, 0x4, 0xd6fa, 0x2, 0x9, 0x4, 0x31c00000, 0x6, 0x7f, 0x0, 0x67, 0x2, 0x400, 0x10, 0x0, 0xfd, 0x9, 0x8, 0x1ff, 0x9, 0x1, 0xa, 0x4, 0x80000000, 0x2, 0x1, 0x81, 0xfffffffb, 0x6, 0x1, 0x4e, 0x9, 0x3, 0x2, 0x6, 0x8, 0x2b3, 0xb003, 0x3, 0x8001, 0x1, 0x2, 0xec, 0x41, 0x9, 0x0, 0x8, 0x7, 0xa, 0x5, 0xc21, 0x8000, 0x401, 0x3, 0x8, 0x24c8000, 0x2, 0x7c9, 0x5, 0x400, 0xd2, 0xfffff8a1, 0x80, 0x2, 0xf1, 0x76d0, 0x5ab, 0xfff, 0x7, 0x1, 0xfffffffe, 0x52d, 0x401, 0x0, 0x200, 0x5, 0x66fc6967, 0x4d5d, 0x79f, 0x0, 0x3, 0x680, 0x9, 0x4, 0xb460, 0x7, 0x3d4, 0x9, 0x0, 0x5, 0xb, 0x0, 0x9, 0x4, 0x80000001, 0x9, 0x4, 0x5, 0xff, 0x8, 0x5, 0xe, 0x0, 0x2, 0x3, 0xfffffffc, 0x9, 0x401, 0x1602, 0x2, 0x337162be, 0x1, 0x90, 0xfffff475, 0xffc00000, 0x4, 0x80, 0x2, 0x7, 0xf6, 0x1, 0xa196, 0x6, 0xb28, 0x6b, 0x1c0, 0xc, 0x2, 0x7, 0x8, 0x10000, 0x6, 0x0, 0x7, 0x8, 0x7f, 0x7, 0x9, 0x9, 0x32, 0x0, 0xb7, 0x2, 0x2, 0x7, 0x8, 0x0, 0x0, 0x4, 0xd, 0x7, 0x5, 0x3, 0x7ff, 0x2ab, 0x7c, 0x9, 0x2, 0xe, 0x8f9, 0xb, 0xd6de, 0x10, 0x10, 0x10001, 0xe7, 0x8, 0x5, 0x9, 0x0, 0x9, 0x0, 0x4, 0x32788e81, 0xc, 0x3, 0x81, 0xfffffffa, 0x1, 0x5, 0x5, 0x6]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={r6, @in={{0x2, 0x4e21, @empty}}, 0x7, 0x4, 0x2, 0x7, 0x54, 0x6, 0xf5}, &(0x7f0000000480)=0x9c) r7 = socket$netlink(0x10, 0x3, 0x4) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 143.088344ms ago: executing program 1 (id=14646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000080)={0xd, {0xf0, 0x3, 0x9, 0x2}, {0x0, 0x4, 0x1, 0x4}, {0x7, 0x55d}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200fffd0900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x98}}, 0x0) 142.48096ms ago: executing program 3 (id=14647): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getnexthop={0x18, 0x76, 0xb0d, 0x0, 0x25dfdbfd, {0x3}}, 0x18}}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3) 142.030859ms ago: executing program 0 (id=14648): r0 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) (async) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000180)=0x2, 0x9, 0x1) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000774000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000658000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x73e9, 0x1c410, 0x2, 0x20002f7}) 78.57494ms ago: executing program 3 (id=14649): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000003c0)={0xa, 0x2, 0x2}) (async) r1 = socket$inet(0x2, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x4, 0x2, 0x8a, 0x519261e6, 0x41}) (async) r2 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3b, 0x0, &(0x7f0000000180)) (async) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (async) kcmp(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$LOOP_CONFIGURE(r3, 0x801070cf, 0x0) (async) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000d80)=@v={0x93, 0x1, 0x90, 0xb, @MIDI_NOTEON=@note=0x9, 0x2, 0xec}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x20c0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000140)={0x0, 0xfffff6de, 0x3010}) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) 76.836758ms ago: executing program 1 (id=14650): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) ioctl$CDROMVOLCTRL(r2, 0x31f, &(0x7f0000000040)={0xb0, 0x7, 0x7, 0x3}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x0, 0xe, 0x0, &(0x7f0000000240)="ae24a21f9a824666f9acf0e0163fa8d7ad3a0f8e52dfe78a4408100d6ccf068949dbe6ef096242a591f586f19e69e5761f2c2c367a9f3f8e73f487fc3af670b3d9d57112e4d63c230dd8b25837909c10b4864f30", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2003}, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB="54125900", @ANYRES16=r4, @ANYBLOB="01002cbd7000fe0f0000010000000c0002000200000000000000400007800c00018008000100", @ANYRES64=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB="0c0001855810cafc6352be4549c93335b40fef31befb08001c0400000049240e0000000000003cb76cef635c4ae29300", @ANYRES32=r1, @ANYBLOB="0c0005004001"], 0x6c}}, 0x0) 55.623988ms ago: executing program 0 (id=14651): r0 = epoll_create1(0x80000) epoll_pwait2(r0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)={[0x3]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007000000"], 0x34}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r5, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="03ad0000000000000000010000000000000002"], 0x2c}}, 0x0) 51.046981ms ago: executing program 3 (id=14652): r0 = syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x80201) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000240)=0xd5) write(r0, &(0x7f0000000540)="19718f3d240000005043b5c7ed4a46be89d283b62d1fee60d46ec7c45b9f1f6affc0fac97ffcedaa797e", 0x2a) getrandom(0xfffffffffffffffe, 0xffffffffffffff9b, 0x4) r1 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r3, &(0x7f0000000580)={&(0x7f0000000100)={0xa, 0x4e22, 0x8a49, @private1, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="80", 0x1}], 0x1}, 0x44010) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x400) shutdown(r3, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) 3.768346ms ago: executing program 0 (id=14653): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00000001c0)=0x40) (async) ioctl$TCGETS(r3, 0x5401, &(0x7f00000010c0)) (async) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000200)) write$binfmt_misc(r2, &(0x7f0000000b00), 0x91) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f00000000c0)={0x10000, r4, 'id1\x00'}) ioctl$XFS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000180)) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TIOCEXCL(r7, 0x540c) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002c80)=ANY=[@ANYBLOB="300000001c00010029bd700001dcdf2507000000", @ANYRES32=r5, @ANYBLOB="80006e0a0a000200aaaaaaaaaabb000008000f0002"], 0x30}, 0x1, 0x0, 0x0, 0x4008840}, 0x4040000) r8 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r8, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r9, &(0x7f0000000540)=""/99, 0x63) (async) syz_usb_disconnect(r8) (async) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000009}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x6, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x408d0) (async) splice(r1, 0x0, r0, &(0x7f0000000140)=0x8006, 0x4, 0x4) 0s ago: executing program 1 (id=14654): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap(&(0x7f0000569000/0x4000)=nil, 0x4000, 0x1000000, 0x28011, r2, 0xc4f32000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x3}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x2}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230000) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e3100000000000000000014000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) r7 = socket$netlink(0x10, 0x3, 0xc) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0x29e, 0x0, 0x2}]}) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c5}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000200)={&(0x7f0000000180)=[r1], 0x0, 0xea25, 0x1, 0xb}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000a000085000000ad0000009500000000000000b3cd91115eb8e652f2de1652464abeffe45ea5d02a47dd0af49d3cbdb819ac0afe07341685ca0461afbead16a3e9cb460665223ffb26b9fd6339402d71f59771e951e6ffa0e9c6c9a7352c6b"], &(0x7f0000000340)='GPL\x00', 0x3}, 0x94) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014004a61729cdde0243000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) kernel console output (not intermixed with test programs): ault 515 [ 1458.649298][T22242] inactive_anon 232865792 [ 1458.653900][T22242] active_anon 63877120 [ 1458.655791][T22242] inactive_file 0 [ 1458.657570][T22242] active_file 4096 [ 1458.660191][T22242] unevictable 0 [ 1458.667419][T22242] hierarchical_memory_limit 314572800 [ 1458.669940][T22242] hierarchical_memsw_limit 9223372036854771712 [ 1458.673106][T22242] total_cache 296607744 [ 1458.674869][T22242] total_rss 90112 [ 1458.676478][T22242] total_rss_huge 0 [ 1458.678069][T22242] total_shmem 296603648 [ 1458.680336][T22242] total_mapped_file 1576960 [ 1458.682475][T22242] total_dirty 0 [ 1458.684448][T22242] total_writeback 0 [ 1458.686557][T22242] total_workingset_refault_anon 1552 [ 1458.688663][T22242] total_workingset_refault_file 2712 [ 1458.690638][T22242] total_swap 76505088 [ 1458.692168][T22242] total_swapcached 177692672 [ 1458.693789][T22242] total_pgpgin 468024 [ 1458.695140][T22242] total_pgpgout 395597 [ 1458.696708][T22242] total_pgfault 277154 [ 1458.698332][T22242] total_pgmajfault 515 [ 1458.700093][T22242] total_inactive_anon 232865792 [ 1458.701934][T22242] total_active_anon 63877120 [ 1458.703945][T22242] total_inactive_file 0 [ 1458.725265][T22242] total_active_file 4096 [ 1458.727943][T22242] total_unevictable 0 [ 1458.729760][T22242] anon_cost 0 [ 1458.731290][T22242] file_cost 0 [ 1458.732739][T22242] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.14183,pid=22230,uid=0 [ 1458.739416][T22242] Memory cgroup out of memory: Killed process 22230 (syz.6.14183) total-vm:100208kB, anon-rss:1252kB, file-rss:54028kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 1458.759509][T22432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14237'. [ 1458.762541][T22432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14237'. [ 1458.763177][T22233] syz.6.14183 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1458.778451][T22233] CPU: 3 UID: 0 PID: 22233 Comm: syz.6.14183 Tainted: G L syzkaller #0 PREEMPT(full) [ 1458.778472][T22233] Tainted: [L]=SOFTLOCKUP [ 1458.778476][T22233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1458.778483][T22233] Call Trace: [ 1458.778488][T22233] [ 1458.778493][T22233] dump_stack_lvl+0x100/0x190 [ 1458.778513][T22233] dump_header+0xfb/0x606 [ 1458.778527][T22233] oom_kill_process.cold+0xd/0x330 [ 1458.778540][T22233] out_of_memory+0x340/0x14f0 [ 1458.778560][T22233] ? __pfx_out_of_memory+0x10/0x10 [ 1458.778579][T22233] mem_cgroup_out_of_memory+0xc6/0x130 [ 1458.778598][T22233] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1458.778628][T22233] ? find_held_lock+0x2b/0x80 [ 1458.778648][T22233] ? do_raw_spin_unlock+0x145/0x1e0 [ 1458.778663][T22233] ? _raw_spin_unlock+0x28/0x50 [ 1458.778680][T22233] try_charge_memcg+0x6e5/0xdf0 [ 1458.778697][T22233] ? __pfx_try_charge_memcg+0x10/0x10 [ 1458.778710][T22233] ? find_held_lock+0x2b/0x80 [ 1458.778725][T22233] ? rcu_read_unlock+0x17/0x60 [ 1458.778739][T22233] ? rcu_read_unlock+0x17/0x60 [ 1458.778753][T22233] ? find_held_lock+0x2b/0x80 [ 1458.778769][T22233] ? rcu_read_unlock+0x17/0x60 [ 1458.778786][T22233] charge_memcg+0x187/0x1e0 [ 1458.778800][T22233] __mem_cgroup_charge+0x2b/0x1c0 [ 1458.778817][T22233] shmem_alloc_and_add_folio+0x451/0xd40 [ 1458.778838][T22233] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1458.778857][T22233] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1458.778877][T22233] shmem_get_folio_gfp+0x6ad/0x1910 [ 1458.778896][T22233] ? __lock_acquire+0x49f/0x1a40 [ 1458.778908][T22233] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1458.778933][T22233] shmem_write_begin+0x1a4/0x420 [ 1458.778952][T22233] ? __pfx_shmem_write_begin+0x10/0x10 [ 1458.778970][T22233] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1458.778982][T22233] ? lockdep_hardirqs_on+0x78/0x100 [ 1458.779000][T22233] generic_perform_write+0x292/0xa40 [ 1458.779019][T22233] ? __pfx_generic_perform_write+0x10/0x10 [ 1458.779036][T22233] ? file_update_time_flags+0x373/0x500 [ 1458.779052][T22233] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1458.779064][T22233] shmem_file_write_iter+0x10e/0x140 [ 1458.779077][T22233] __kernel_write_iter+0x2ac/0x930 [ 1458.779095][T22233] ? __pfx___kernel_write_iter+0x10/0x10 [ 1458.779112][T22233] ? __up_read+0x333/0x980 [ 1458.779126][T22233] ? dump_user_range+0x65e/0xad0 [ 1458.779141][T22233] ? copy_mc_enhanced_fast_string+0x6/0xf [ 1458.779158][T22233] dump_user_range+0x3f9/0xad0 [ 1458.779174][T22233] ? __pfx_dump_user_range+0x10/0x10 [ 1458.779193][T22233] ? __pfx_writenote+0x10/0x10 [ 1458.779208][T22233] ? elf_core_dump+0x1f25/0x3d20 [ 1458.779224][T22233] elf_core_dump+0x2d68/0x3d20 [ 1458.779247][T22233] ? __pfx_elf_core_dump+0x10/0x10 [ 1458.779260][T22233] ? kasan_save_stack+0x3f/0x50 [ 1458.779271][T22233] ? kasan_save_stack+0x30/0x50 [ 1458.779282][T22233] ? kasan_save_track+0x14/0x30 [ 1458.779292][T22233] ? __kasan_kmalloc+0xaa/0xb0 [ 1458.779304][T22233] ? vfs_coredump+0x22a6/0x56f0 [ 1458.779315][T22233] ? get_signal+0x1f2a/0x21e0 [ 1458.779329][T22233] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1458.779344][T22233] ? 0xffffffffff600000 [ 1458.779378][T22233] ? vfs_coredump+0x294b/0x56f0 [ 1458.779390][T22233] vfs_coredump+0x294b/0x56f0 [ 1458.779409][T22233] ? __pfx_vfs_coredump+0x10/0x10 [ 1458.779425][T22233] ? __lock_acquire+0x49f/0x1a40 [ 1458.779451][T22233] ? bpf_ksym_find+0x128/0x1c0 [ 1458.779478][T22233] ? unwind_get_return_address+0x59/0xa0 [ 1458.779503][T22233] ? arch_stack_walk+0xa6/0xf0 [ 1458.779532][T22233] ? __sigqueue_free+0xbe/0x2a0 [ 1458.779564][T22233] ? stack_trace_save+0x8e/0xc0 [ 1458.779582][T22233] ? __pfx_stack_trace_save+0x10/0x10 [ 1458.779627][T22233] ? stack_depot_save_flags+0x27/0x9d0 [ 1458.779684][T22233] ? proc_coredump_connector+0x2d3/0x4f0 [ 1458.779703][T22233] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1458.779722][T22233] ? rcu_is_watching+0x12/0xc0 [ 1458.779740][T22233] get_signal+0x1f2a/0x21e0 [ 1458.779759][T22233] ? __pfx_get_signal+0x10/0x10 [ 1458.779776][T22233] arch_do_signal_or_restart+0x91/0x7e0 [ 1458.779788][T22233] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1458.779808][T22233] irqentry_exit+0x402/0xa00 [ 1458.779832][T22233] asm_exc_page_fault+0x26/0x30 [ 1458.779849][T22233] RIP: 0033:0x7f53d779de61 [ 1458.779865][T22233] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1458.779878][T22233] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1458.779888][T22233] RAX: 0000000000000000 RBX: 00007f53d7a25fa0 RCX: 00007f53d779de59 [ 1458.779895][T22233] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1458.779902][T22233] RBP: 00007f53d7833e6f R08: 0000000000000000 R09: 0000000000000000 [ 1458.779909][T22233] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1458.779915][T22233] R13: 00007f53d7a26038 R14: 00007f53d7a25fa0 R15: 00007ffcb697bbd8 [ 1458.779935][T22233] [ 1458.780039][T22233] memory: usage 307200kB, limit 307200kB, failcnt 34773 [ 1458.948730][T22443] EXT4-fs error: 27 callbacks suppressed [ 1458.948744][T22443] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:12: iget: checksum invalid [ 1458.951103][T22233] memory+swap: usage 348560kB, limit 9007199254740988kB, failcnt 0 [ 1458.956328][T22444] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:60: iget: checksum invalid [ 1458.957482][T22233] kmem: usage 17312kB, limit 9007199254740988kB, failcnt 0 [ 1458.964305][T22442] FAULT_INJECTION: forcing a failure. [ 1458.964305][T22442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1458.965144][T22233] Memory cgroup stats for [ 1458.971571][T22442] CPU: 1 UID: 0 PID: 22442 Comm: syz.0.14241 Tainted: G L syzkaller #0 PREEMPT(full) [ 1458.971624][T22442] Tainted: [L]=SOFTLOCKUP [ 1458.971632][T22442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1458.971643][T22442] Call Trace: [ 1458.971650][T22442] [ 1458.971657][T22442] dump_stack_lvl+0x100/0x190 [ 1458.971681][T22442] should_fail_ex.cold+0x5/0xa [ 1458.971704][T22442] _copy_from_iter+0x1f4/0x1690 [ 1458.971729][T22442] ? __asan_memset+0x23/0x50 [ 1458.971756][T22442] ? __pfx__copy_from_iter+0x10/0x10 [ 1458.971775][T22442] ? __pfx___alloc_skb+0x10/0x10 [ 1458.971799][T22442] netlink_sendmsg+0x808/0xda0 [ 1458.971825][T22442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1458.971866][T22442] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1458.971894][T22442] ____sys_sendmsg+0xa4d/0xbe0 [ 1458.971913][T22442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1458.971935][T22442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1458.971967][T22442] ___sys_sendmsg+0x190/0x1e0 [ 1458.971990][T22442] ? __pfx____sys_sendmsg+0x10/0x10 [ 1458.972006][T22442] ? __lock_acquire+0x49f/0x1a40 [ 1458.972026][T22442] ? get_pid_task+0x106/0x250 [ 1458.972075][T22442] __sys_sendmsg+0x160/0x210 [ 1458.972093][T22442] ? __pfx___sys_sendmsg+0x10/0x10 [ 1458.972117][T22442] do_syscall_64+0x115/0x870 [ 1458.972141][T22442] ? clear_bhb_loop+0x40/0x90 [ 1458.972161][T22442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.972178][T22442] RIP: 0033:0x7f170219de59 [ 1458.972194][T22442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1458.972209][T22442] RSP: 002b:00007f1702fb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1458.972224][T22442] RAX: ffffffffffffffda RBX: 00007f1702425fa0 RCX: 00007f170219de59 [ 1458.972236][T22442] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1458.972245][T22442] RBP: 00007f1702fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1458.972255][T22442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1458.972264][T22442] R13: 00007f1702426038 R14: 00007f1702425fa0 R15: 00007fffc4c9b338 [ 1458.972288][T22442] [ 1459.077586][T22233] /syz6: [ 1459.077711][T22233] cache 272908288 [ 1459.080585][T22233] rss 90112 [ 1459.082059][T22233] rss_huge 0 [ 1459.083643][T22233] shmem 272900096 [ 1459.085581][T22233] mapped_file 1576960 [ 1459.087574][T22233] dirty 0 [ 1459.089474][T22233] writeback 0 [ 1459.090955][T22233] workingset_refault_anon 1552 [ 1459.092993][T22233] workingset_refault_file 2713 [ 1459.094934][T22233] swap 66056192 [ 1459.096496][T22233] swapcached 177692672 [ 1459.098283][T22233] pgpgin 468024 [ 1459.100195][T22233] pgpgout 401383 [ 1459.102064][T22233] pgfault 277154 [ 1459.104315][T22233] pgmajfault 515 [ 1459.106099][T22233] inactive_anon 208539648 [ 1459.107945][T22233] active_anon 64499712 [ 1459.110651][T22233] inactive_file 0 [ 1459.112277][T22233] active_file 8192 [ 1459.113884][T22233] unevictable 0 [ 1459.115399][T22233] hierarchical_memory_limit 314572800 [ 1459.117694][T22233] hierarchical_memsw_limit 9223372036854771712 [ 1459.120430][T22233] total_cache 272908288 [ 1459.122269][T22233] total_rss 90112 [ 1459.124278][T22233] total_rss_huge 0 [ 1459.126205][T22233] total_shmem 272900096 [ 1459.128387][T22233] total_mapped_file 1576960 [ 1459.130522][T22233] total_dirty 0 [ 1459.132331][T22233] total_writeback 0 [ 1459.133969][T22233] total_workingset_refault_anon 1552 [ 1459.136227][T22233] total_workingset_refault_file 2713 [ 1459.138488][T22233] total_swap 66056192 [ 1459.140202][T22233] total_swapcached 177692672 [ 1459.141140][T22451] XFS (nbd1): SB validate failed with error -5. [ 1459.142474][T22233] total_pgpgin 468025 [ 1459.146467][T22233] total_pgpgout 401384 [ 1459.148408][T22233] total_pgfault 277155 [ 1459.150247][T22233] total_pgmajfault 515 [ 1459.152233][T22233] total_inactive_anon 208539648 [ 1459.153926][T22233] total_active_anon 64499712 [ 1459.155774][T22233] total_inactive_file 0 [ 1459.157622][T22233] total_active_file 8192 [ 1459.159417][T22233] total_unevictable 0 [ 1459.161088][T22233] anon_cost 0 [ 1459.162493][T22233] file_cost 0 [ 1459.164485][T22233] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.14183,pid=22247,uid=0 [ 1459.172361][T22233] Memory cgroup out of memory: Killed process 22247 (syz.6.14183) total-vm:100208kB, anon-rss:1252kB, file-rss:54028kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 1459.337947][ T42] kauditd_printk_skb: 155 callbacks suppressed [ 1459.337966][ T42] audit: type=1400 audit(1784510308.903:69109): avc: denied { create } for pid=22460 comm="syz.6.14235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1459.381277][ T42] audit: type=1400 audit(1784510308.912:69110): avc: denied { bind } for pid=22460 comm="syz.6.14235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1459.412529][ T42] audit: type=1400 audit(1784510308.912:69111): avc: denied { accept } for pid=22460 comm="syz.6.14235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1459.444576][ T42] audit: type=1400 audit(1784510308.921:69112): avc: denied { read } for pid=22460 comm="syz.6.14235" name="video3" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1459.525294][ T42] audit: type=1400 audit(1784510308.959:69113): avc: denied { write } for pid=22460 comm="syz.6.14235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1459.568493][ T42] audit: type=1400 audit(1784510308.968:69114): avc: denied { ioctl } for pid=22460 comm="syz.6.14235" path="socket:[288607]" dev="sockfs" ino=288607 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1459.582227][T22471] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:60: iget: checksum invalid [ 1459.609328][ T42] audit: type=1400 audit(1784510308.978:69115): avc: denied { create } for pid=22462 comm="syz.1.14245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1459.637613][ T42] audit: type=1400 audit(1784510308.987:69116): avc: denied { ioctl } for pid=22462 comm="syz.1.14245" path="socket:[288616]" dev="sockfs" ino=288616 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1459.647190][T22472] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:60: iget: checksum invalid [ 1459.725388][ T42] audit: type=1400 audit(1784510308.987:69117): avc: denied { create } for pid=22462 comm="syz.1.14245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1459.793975][T30312] net_ratelimit: 96 callbacks suppressed [ 1459.793996][T30312] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1459.805657][T30312] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1459.806546][ T42] audit: type=1400 audit(1784510308.987:69118): avc: denied { bind } for pid=22462 comm="syz.1.14245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1459.932888][ T5832] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1459.935460][ T5832] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1459.943713][ T29] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 1460.022503][T22233] syz.6.14183 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1460.034450][T22233] CPU: 3 UID: 0 PID: 22233 Comm: syz.6.14183 Tainted: G L syzkaller #0 PREEMPT(full) [ 1460.034470][T22233] Tainted: [L]=SOFTLOCKUP [ 1460.034474][T22233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1460.034482][T22233] Call Trace: [ 1460.034487][T22233] [ 1460.034492][T22233] dump_stack_lvl+0x100/0x190 [ 1460.034513][T22233] dump_header+0xfb/0x606 [ 1460.034527][T22233] oom_kill_process.cold+0xd/0x330 [ 1460.034541][T22233] out_of_memory+0x340/0x14f0 [ 1460.034562][T22233] ? __pfx_out_of_memory+0x10/0x10 [ 1460.034581][T22233] mem_cgroup_out_of_memory+0xc6/0x130 [ 1460.034600][T22233] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1460.034618][T22233] ? find_held_lock+0x2b/0x80 [ 1460.034637][T22233] ? do_raw_spin_unlock+0x145/0x1e0 [ 1460.034653][T22233] ? _raw_spin_unlock+0x28/0x50 [ 1460.034670][T22233] try_charge_memcg+0x6e5/0xdf0 [ 1460.034687][T22233] ? __pfx_try_charge_memcg+0x10/0x10 [ 1460.034700][T22233] ? find_held_lock+0x2b/0x80 [ 1460.034729][T22233] ? rcu_read_unlock+0x17/0x60 [ 1460.034744][T22233] ? rcu_read_unlock+0x17/0x60 [ 1460.034759][T22233] ? find_held_lock+0x2b/0x80 [ 1460.034775][T22233] ? rcu_read_unlock+0x17/0x60 [ 1460.034793][T22233] charge_memcg+0x187/0x1e0 [ 1460.034808][T22233] __mem_cgroup_charge+0x2b/0x1c0 [ 1460.034824][T22233] shmem_alloc_and_add_folio+0x451/0xd40 [ 1460.034846][T22233] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1460.034865][T22233] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1460.034887][T22233] shmem_get_folio_gfp+0x6ad/0x1910 [ 1460.034908][T22233] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1460.034927][T22233] ? timestamp_truncate+0x22e/0x2f0 [ 1460.034942][T22233] shmem_write_begin+0x1a4/0x420 [ 1460.034961][T22233] ? __pfx_shmem_write_begin+0x10/0x10 [ 1460.034978][T22233] ? rcu_is_watching+0x12/0xc0 [ 1460.034995][T22233] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1460.035010][T22233] generic_perform_write+0x292/0xa40 [ 1460.035033][T22233] ? __pfx_generic_perform_write+0x10/0x10 [ 1460.035048][T22233] ? __mark_inode_dirty+0x55c/0x16e0 [ 1460.035066][T22233] ? mnt_put_write_access_file+0x4e/0x100 [ 1460.035078][T22233] ? file_update_time_flags+0x373/0x500 [ 1460.035093][T22233] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1460.035105][T22233] shmem_file_write_iter+0x10e/0x140 [ 1460.035119][T22233] __kernel_write_iter+0x2ac/0x930 [ 1460.035136][T22233] ? __pfx___kernel_write_iter+0x10/0x10 [ 1460.035152][T22233] ? __up_read+0x333/0x980 [ 1460.035168][T22233] ? dump_user_range+0x65e/0xad0 [ 1460.035187][T22233] dump_user_range+0x3f9/0xad0 [ 1460.035204][T22233] ? __pfx_dump_user_range+0x10/0x10 [ 1460.035224][T22233] ? __pfx_writenote+0x10/0x10 [ 1460.035239][T22233] ? elf_core_dump+0x1f25/0x3d20 [ 1460.035256][T22233] elf_core_dump+0x2d68/0x3d20 [ 1460.035279][T22233] ? __pfx_elf_core_dump+0x10/0x10 [ 1460.035293][T22233] ? kasan_save_stack+0x3f/0x50 [ 1460.035305][T22233] ? kasan_save_stack+0x30/0x50 [ 1460.035316][T22233] ? kasan_save_track+0x14/0x30 [ 1460.035326][T22233] ? __kasan_kmalloc+0xaa/0xb0 [ 1460.035337][T22233] ? vfs_coredump+0x22a6/0x56f0 [ 1460.035349][T22233] ? get_signal+0x1f2a/0x21e0 [ 1460.035363][T22233] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1460.035378][T22233] ? 0xffffffffff600000 [ 1460.035418][T22233] ? vfs_coredump+0x294b/0x56f0 [ 1460.035431][T22233] vfs_coredump+0x294b/0x56f0 [ 1460.035451][T22233] ? __pfx_vfs_coredump+0x10/0x10 [ 1460.035465][T22233] ? __lock_acquire+0x49f/0x1a40 [ 1460.035493][T22233] ? bpf_ksym_find+0x128/0x1c0 [ 1460.035514][T22233] ? unwind_get_return_address+0x59/0xa0 [ 1460.035533][T22233] ? arch_stack_walk+0xa6/0xf0 [ 1460.035554][T22233] ? __sigqueue_free+0xbe/0x2a0 [ 1460.035571][T22233] ? stack_trace_save+0x8e/0xc0 [ 1460.035618][T22233] ? __pfx_stack_trace_save+0x10/0x10 [ 1460.035640][T22233] ? stack_depot_save_flags+0x27/0x9d0 [ 1460.035695][T22233] ? proc_coredump_connector+0x2d3/0x4f0 [ 1460.035714][T22233] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1460.035734][T22233] ? rcu_is_watching+0x12/0xc0 [ 1460.035752][T22233] get_signal+0x1f2a/0x21e0 [ 1460.035772][T22233] ? __pfx_get_signal+0x10/0x10 [ 1460.035799][T22233] arch_do_signal_or_restart+0x91/0x7e0 [ 1460.035811][T22233] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1460.035832][T22233] irqentry_exit+0x402/0xa00 [ 1460.035853][T22233] asm_exc_page_fault+0x26/0x30 [ 1460.035865][T22233] RIP: 0033:0x7f53d779de61 [ 1460.035876][T22233] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1460.035887][T22233] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1460.035897][T22233] RAX: 0000000000000000 RBX: 00007f53d7a25fa0 RCX: 00007f53d779de59 [ 1460.035908][T22233] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1460.035915][T22233] RBP: 00007f53d7833e6f R08: 0000000000000000 R09: 0000000000000000 [ 1460.035921][T22233] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1460.035928][T22233] R13: 00007f53d7a26038 R14: 00007f53d7a25fa0 R15: 00007ffcb697bbd8 [ 1460.035944][T22233] [ 1460.037181][T22233] memory: usage 307200kB, limit 307200kB, failcnt 42769 [ 1460.082057][T30312] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1460.093618][T22233] memory+swap: usage 381876kB, limit 9007199254740988kB, failcnt 0 [ 1460.101139][T30312] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1460.101674][T22233] kmem: usage 17260kB, limit 9007199254740988kB, failcnt 0 [ 1460.133568][T22486] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:12: iget: checksum invalid [ 1460.135337][T22233] Memory cgroup stats for [ 1460.139666][T22487] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:12: iget: checksum invalid [ 1460.140089][T22233] /syz6 [ 1460.220876][T30312] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1460.227449][ T29] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 1460.240986][ T29] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1460.242661][T22233] : [ 1460.244792][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1460.244828][T22233] cache 296620032 [ 1460.247792][ T29] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1460.248599][T22233] rss 249856 [ 1460.249290][ T29] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1460.252226][T22233] rss_huge 0 [ 1460.252832][T30312] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1460.253850][ T29] usb 8-1: Product: syz [ 1460.256769][T22233] shmem 296611840 [ 1460.257679][ T29] usb 8-1: Manufacturer: syz [ 1460.260360][T22233] mapped_file 1576960 [ 1460.261639][ T29] usb 8-1: SerialNumber: syz [ 1460.263042][T22233] dirty 0 [ 1460.267562][ T29] usb 8-1: config 0 descriptor?? [ 1460.267813][T22233] writeback 0 [ 1460.270597][ T29] hub 8-1:0.0: bad descriptor, ignoring hub [ 1460.271551][T22233] workingset_refault_anon 1553 [ 1460.273404][ T29] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1460.275572][T22233] workingset_refault_file 5260 [ 1460.279853][ T29] usb 8-1: selecting invalid altsetting 0 [ 1460.284770][T22233] swap 76468224 [ 1460.286785][T22233] swapcached 191467520 [ 1460.288768][T22233] pgpgin 487623 [ 1460.290056][T30312] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1460.290402][T22233] pgpgout 415162 [ 1460.296272][T30312] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1460.315606][T22233] pgfault 278336 [ 1460.317409][T22233] pgmajfault 542 [ 1460.319870][T22233] inactive_anon 182120448 [ 1460.321268][T22233] active_anon 114757632 [ 1460.323748][T22233] inactive_file 4096 [ 1460.324855][T17274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1460.325060][T22233] active_file 4096 [ 1460.329755][T17274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1460.330468][T22233] unevictable 0 [ 1460.334396][T17274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1460.335693][T22233] hierarchical_memory_limit 314572800 [ 1460.341438][T22233] hierarchical_memsw_limit 9223372036854771712 [ 1460.346277][T22233] total_cache 296620032 [ 1460.349993][T22496] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:38: iget: checksum invalid [ 1460.356873][T22233] total_rss 249856 [ 1460.358646][T22233] total_rss_huge 0 [ 1460.367249][T22233] total_shmem 296611840 [ 1460.373262][T22233] total_mapped_file 1576960 [ 1460.375277][T22233] total_dirty 0 [ 1460.381190][T22233] total_writeback 0 [ 1460.383894][T22233] total_workingset_refault_anon 1553 [ 1460.388041][T22233] total_workingset_refault_file 5260 [ 1460.389747][T22233] total_swap 76468224 [ 1460.392763][T22233] total_swapcached 191467520 [ 1460.394894][T22233] total_pgpgin 487624 [ 1460.396717][T22233] total_pgpgout 415163 [ 1460.398604][T22233] total_pgfault 278337 [ 1460.400226][T22233] total_pgmajfault 542 [ 1460.401537][T22233] total_inactive_anon 182120448 [ 1460.402035][T22501] CIFS mount error: No usable UNC path provided in device string! [ 1460.402035][T22501] [ 1460.404928][T22233] total_active_anon 114757632 [ 1460.409094][T22233] total_inactive_file 4096 [ 1460.410472][T22501] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1460.410638][T22233] total_active_file 4096 [ 1460.415337][T22233] total_unevictable 0 [ 1460.416765][T22233] anon_cost 0 [ 1460.417864][T22233] file_cost 0 [ 1460.418944][T22233] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.14183,pid=22240,uid=0 [ 1460.423976][T22233] Memory cgroup out of memory: Killed process 22240 (syz.6.14183) total-vm:100208kB, anon-rss:1256kB, file-rss:55664kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 1460.486969][T22266] syz.6.14183 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1460.502171][T22266] CPU: 3 UID: 0 PID: 22266 Comm: syz.6.14183 Tainted: G L syzkaller #0 PREEMPT(full) [ 1460.502207][T22266] Tainted: [L]=SOFTLOCKUP [ 1460.502214][T22266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1460.502224][T22266] Call Trace: [ 1460.502232][T22266] [ 1460.502240][T22266] dump_stack_lvl+0x100/0x190 [ 1460.502277][T22266] dump_header+0xfb/0x606 [ 1460.502297][T22266] oom_kill_process.cold+0xd/0x330 [ 1460.502315][T22266] out_of_memory+0x340/0x14f0 [ 1460.502344][T22266] ? __pfx_out_of_memory+0x10/0x10 [ 1460.502374][T22266] mem_cgroup_out_of_memory+0xc6/0x130 [ 1460.502401][T22266] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1460.502427][T22266] ? find_held_lock+0x2b/0x80 [ 1460.502456][T22266] ? do_raw_spin_unlock+0x145/0x1e0 [ 1460.502477][T22266] ? _raw_spin_unlock+0x28/0x50 [ 1460.502502][T22266] try_charge_memcg+0x6e5/0xdf0 [ 1460.502562][T22266] ? __pfx_try_charge_memcg+0x10/0x10 [ 1460.502583][T22266] ? find_held_lock+0x2b/0x80 [ 1460.502607][T22266] ? rcu_read_unlock+0x17/0x60 [ 1460.502627][T22266] ? rcu_read_unlock+0x17/0x60 [ 1460.502649][T22266] ? find_held_lock+0x2b/0x80 [ 1460.502675][T22266] ? rcu_read_unlock+0x17/0x60 [ 1460.502701][T22266] charge_memcg+0x187/0x1e0 [ 1460.502724][T22266] __mem_cgroup_charge+0x2b/0x1c0 [ 1460.502751][T22266] shmem_alloc_and_add_folio+0x451/0xd40 [ 1460.502786][T22266] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1460.502815][T22266] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1460.502848][T22266] shmem_get_folio_gfp+0x6ad/0x1910 [ 1460.502879][T22266] ? __lock_acquire+0x49f/0x1a40 [ 1460.502899][T22266] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1460.502929][T22266] shmem_write_begin+0x1a4/0x420 [ 1460.502956][T22266] ? __pfx_shmem_write_begin+0x10/0x10 [ 1460.502981][T22266] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1460.502999][T22266] ? lockdep_hardirqs_on+0x78/0x100 [ 1460.503078][T22266] generic_perform_write+0x292/0xa40 [ 1460.503108][T22266] ? __pfx_generic_perform_write+0x10/0x10 [ 1460.503133][T22266] ? file_update_time_flags+0x373/0x500 [ 1460.503155][T22266] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1460.503173][T22266] shmem_file_write_iter+0x10e/0x140 [ 1460.503194][T22266] __kernel_write_iter+0x2ac/0x930 [ 1460.503223][T22266] ? __pfx___kernel_write_iter+0x10/0x10 [ 1460.503247][T22266] ? __up_read+0x333/0x980 [ 1460.503271][T22266] ? dump_user_range+0x65e/0xad0 [ 1460.503299][T22266] dump_user_range+0x3f9/0xad0 [ 1460.503325][T22266] ? __pfx_dump_user_range+0x10/0x10 [ 1460.503355][T22266] ? __pfx_writenote+0x10/0x10 [ 1460.503377][T22266] ? elf_core_dump+0x1f25/0x3d20 [ 1460.503403][T22266] elf_core_dump+0x2d68/0x3d20 [ 1460.503441][T22266] ? __pfx_elf_core_dump+0x10/0x10 [ 1460.503463][T22266] ? kasan_save_stack+0x3f/0x50 [ 1460.503481][T22266] ? kasan_save_stack+0x30/0x50 [ 1460.503499][T22266] ? kasan_save_track+0x14/0x30 [ 1460.503532][T22266] ? __kasan_kmalloc+0xaa/0xb0 [ 1460.503550][T22266] ? vfs_coredump+0x22a6/0x56f0 [ 1460.503571][T22266] ? get_signal+0x1f2a/0x21e0 [ 1460.503650][T22266] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1460.503677][T22266] ? 0xffffffffff600000 [ 1460.503738][T22266] ? vfs_coredump+0x294b/0x56f0 [ 1460.503761][T22266] vfs_coredump+0x294b/0x56f0 [ 1460.503795][T22266] ? __pfx_vfs_coredump+0x10/0x10 [ 1460.503822][T22266] ? __lock_acquire+0x49f/0x1a40 [ 1460.503866][T22266] ? bpf_ksym_find+0x128/0x1c0 [ 1460.503903][T22266] ? unwind_get_return_address+0x59/0xa0 [ 1460.503932][T22266] ? arch_stack_walk+0xa6/0xf0 [ 1460.503970][T22266] ? __sigqueue_free+0xbe/0x2a0 [ 1460.503998][T22266] ? stack_trace_save+0x8e/0xc0 [ 1460.504026][T22266] ? __pfx_stack_trace_save+0x10/0x10 [ 1460.504056][T22266] ? stack_depot_save_flags+0x27/0x9d0 [ 1460.504128][T22266] ? proc_coredump_connector+0x2d3/0x4f0 [ 1460.504160][T22266] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1460.504192][T22266] ? rcu_is_watching+0x12/0xc0 [ 1460.504225][T22266] get_signal+0x1f2a/0x21e0 [ 1460.504257][T22266] ? __pfx_get_signal+0x10/0x10 [ 1460.504287][T22266] arch_do_signal_or_restart+0x91/0x7e0 [ 1460.504310][T22266] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1460.504345][T22266] irqentry_exit+0x402/0xa00 [ 1460.504377][T22266] asm_exc_page_fault+0x26/0x30 [ 1460.504399][T22266] RIP: 0033:0x7f53d779de61 [ 1460.504418][T22266] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1460.504436][T22266] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1460.504454][T22266] RAX: 0000000000000000 RBX: 00007f53d7a25fa0 RCX: 00007f53d779de59 [ 1460.504466][T22266] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1460.504477][T22266] RBP: 00007f53d7833e6f R08: 0000000000000000 R09: 0000000000000000 [ 1460.504488][T22266] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1460.504499][T22266] R13: 00007f53d7a26038 R14: 00007f53d7a25fa0 R15: 00007ffcb697bbd8 [ 1460.504531][T22266] [ 1460.504613][T22266] memory: usage 307200kB, limit 307200kB, failcnt 43150 [ 1460.685296][T22266] memory+swap: usage 354208kB, limit 9007199254740988kB, failcnt 0 [ 1460.688618][T22266] kmem: usage 17260kB, limit 9007199254740988kB, failcnt 0 [ 1460.691903][T22266] Memory cgroup stats for /syz6: [ 1460.692051][T22266] cache 279056384 [ 1460.695767][T22266] rss 245760 [ 1460.697278][T22266] rss_huge 0 [ 1460.698767][T22266] shmem 278794240 [ 1460.700518][T22266] mapped_file 1576960 [ 1460.702917][T22266] dirty 0 [ 1460.707776][T22266] writeback 0 [ 1460.709227][T22266] workingset_refault_anon 1553 [ 1460.711235][T22266] workingset_refault_file 5322 [ 1460.712812][T18450] usb 8-1: USB disconnect, device number 65 [ 1460.713685][T22266] swap 66408448 [ 1460.716436][T22266] swapcached 191467520 [ 1460.717849][T22266] pgpgin 490165 [ 1460.719399][T22266] pgpgout 421993 [ 1460.721040][T22266] pgfault 278492 [ 1460.722591][T22266] pgmajfault 543 [ 1460.723988][T22266] inactive_anon 167002112 [ 1460.725552][T22266] active_anon 112041984 [ 1460.727032][T22266] inactive_file 143360 [ 1460.728543][T22266] active_file 4096 [ 1460.729782][T22266] unevictable 0 [ 1460.730896][T22266] hierarchical_memory_limit 314572800 [ 1460.732573][T22266] hierarchical_memsw_limit 9223372036854771712 [ 1460.735173][T22266] total_cache 279056384 [ 1460.737124][T22266] total_rss 245760 [ 1460.738488][T22266] total_rss_huge 0 [ 1460.739813][T22266] total_shmem 278794240 [ 1460.741194][T22266] total_mapped_file 1576960 [ 1460.742717][T22266] total_dirty 0 [ 1460.744001][T22266] total_writeback 0 [ 1460.746286][T22266] total_workingset_refault_anon 1553 [ 1460.748744][T22266] total_workingset_refault_file 5322 [ 1460.751321][T22266] total_swap 66408448 [ 1460.753359][T22266] total_swapcached 191467520 [ 1460.756078][T22266] total_pgpgin 490166 [ 1460.757908][T22266] total_pgpgout 421994 [ 1460.759698][T22266] total_pgfault 278493 [ 1460.762088][T22266] total_pgmajfault 543 [ 1460.764003][T22266] total_inactive_anon 167002112 [ 1460.767360][T22266] total_active_anon 112041984 [ 1460.769963][T22266] total_inactive_file 143360 [ 1460.772378][T22266] total_active_file 4096 [ 1460.774351][T22266] total_unevictable 0 [ 1460.776862][T22266] anon_cost 0 [ 1460.778271][T22266] file_cost 0 [ 1460.779754][T22266] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.14183,pid=22228,uid=0 [ 1460.785836][T22266] Memory cgroup out of memory: Killed process 22228 (syz.6.14183) total-vm:100208kB, anon-rss:1252kB, file-rss:54628kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 1461.516244][T22533] comedi comedi3: adq12b: a I/O base address must be specified [ 1461.680208][T22266] syz.6.14183 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1461.687239][T22266] CPU: 3 UID: 0 PID: 22266 Comm: syz.6.14183 Tainted: G L syzkaller #0 PREEMPT(full) [ 1461.687262][T22266] Tainted: [L]=SOFTLOCKUP [ 1461.687267][T22266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1461.687273][T22266] Call Trace: [ 1461.687278][T22266] [ 1461.687283][T22266] dump_stack_lvl+0x100/0x190 [ 1461.687303][T22266] dump_header+0xfb/0x606 [ 1461.687317][T22266] oom_kill_process.cold+0xd/0x330 [ 1461.687331][T22266] out_of_memory+0x340/0x14f0 [ 1461.687351][T22266] ? __pfx_out_of_memory+0x10/0x10 [ 1461.687370][T22266] mem_cgroup_out_of_memory+0xc6/0x130 [ 1461.687389][T22266] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1461.687405][T22266] ? find_held_lock+0x2b/0x80 [ 1461.687425][T22266] ? do_raw_spin_unlock+0x145/0x1e0 [ 1461.687440][T22266] ? _raw_spin_unlock+0x28/0x50 [ 1461.687457][T22266] try_charge_memcg+0x6e5/0xdf0 [ 1461.687491][T22266] ? __pfx_try_charge_memcg+0x10/0x10 [ 1461.687504][T22266] ? find_held_lock+0x2b/0x80 [ 1461.687519][T22266] ? rcu_read_unlock+0x17/0x60 [ 1461.687533][T22266] ? rcu_read_unlock+0x17/0x60 [ 1461.687547][T22266] ? find_held_lock+0x2b/0x80 [ 1461.687587][T22266] ? rcu_read_unlock+0x17/0x60 [ 1461.687605][T22266] charge_memcg+0x187/0x1e0 [ 1461.687620][T22266] __mem_cgroup_charge+0x2b/0x1c0 [ 1461.687636][T22266] shmem_alloc_and_add_folio+0x451/0xd40 [ 1461.687658][T22266] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1461.687681][T22266] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1461.687702][T22266] shmem_get_folio_gfp+0x6ad/0x1910 [ 1461.687721][T22266] ? __lock_acquire+0x49f/0x1a40 [ 1461.687733][T22266] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1461.687754][T22266] shmem_write_begin+0x1a4/0x420 [ 1461.687773][T22266] ? __pfx_shmem_write_begin+0x10/0x10 [ 1461.687791][T22266] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1461.687806][T22266] generic_perform_write+0x292/0xa40 [ 1461.687826][T22266] ? __pfx_generic_perform_write+0x10/0x10 [ 1461.687842][T22266] ? file_update_time_flags+0x373/0x500 [ 1461.687858][T22266] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1461.687869][T22266] shmem_file_write_iter+0x10e/0x140 [ 1461.687883][T22266] __kernel_write_iter+0x2ac/0x930 [ 1461.687900][T22266] ? __pfx___kernel_write_iter+0x10/0x10 [ 1461.687916][T22266] ? __up_read+0x333/0x980 [ 1461.687931][T22266] ? dump_user_range+0x65e/0xad0 [ 1461.687949][T22266] dump_user_range+0x3f9/0xad0 [ 1461.687965][T22266] ? __pfx_dump_user_range+0x10/0x10 [ 1461.687984][T22266] ? __pfx_writenote+0x10/0x10 [ 1461.687999][T22266] ? elf_core_dump+0x1f25/0x3d20 [ 1461.688016][T22266] elf_core_dump+0x2d68/0x3d20 [ 1461.688040][T22266] ? __pfx_elf_core_dump+0x10/0x10 [ 1461.688055][T22266] ? kasan_save_stack+0x3f/0x50 [ 1461.688067][T22266] ? kasan_save_stack+0x30/0x50 [ 1461.688077][T22266] ? kasan_save_track+0x14/0x30 [ 1461.688087][T22266] ? __kasan_kmalloc+0xaa/0xb0 [ 1461.688098][T22266] ? vfs_coredump+0x22a6/0x56f0 [ 1461.688110][T22266] ? get_signal+0x1f2a/0x21e0 [ 1461.688123][T22266] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1461.688138][T22266] ? 0xffffffffff600000 [ 1461.688184][T22266] ? vfs_coredump+0x294b/0x56f0 [ 1461.688198][T22266] vfs_coredump+0x294b/0x56f0 [ 1461.688217][T22266] ? __pfx_vfs_coredump+0x10/0x10 [ 1461.688231][T22266] ? __lock_acquire+0x49f/0x1a40 [ 1461.688258][T22266] ? bpf_ksym_find+0x128/0x1c0 [ 1461.688278][T22266] ? unwind_get_return_address+0x59/0xa0 [ 1461.688297][T22266] ? arch_stack_walk+0xa6/0xf0 [ 1461.688318][T22266] ? __sigqueue_free+0xbe/0x2a0 [ 1461.688334][T22266] ? stack_trace_save+0x8e/0xc0 [ 1461.688351][T22266] ? __pfx_stack_trace_save+0x10/0x10 [ 1461.688369][T22266] ? stack_depot_save_flags+0x27/0x9d0 [ 1461.688410][T22266] ? proc_coredump_connector+0x2d3/0x4f0 [ 1461.688427][T22266] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1461.688446][T22266] ? rcu_is_watching+0x12/0xc0 [ 1461.688465][T22266] get_signal+0x1f2a/0x21e0 [ 1461.688484][T22266] ? __pfx_get_signal+0x10/0x10 [ 1461.688501][T22266] arch_do_signal_or_restart+0x91/0x7e0 [ 1461.688513][T22266] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1461.688533][T22266] irqentry_exit+0x402/0xa00 [ 1461.688553][T22266] asm_exc_page_fault+0x26/0x30 [ 1461.688565][T22266] RIP: 0033:0x7f53d779de61 [ 1461.688576][T22266] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1461.688586][T22266] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1461.688597][T22266] RAX: 0000000000000000 RBX: 00007f53d7a25fa0 RCX: 00007f53d779de59 [ 1461.688604][T22266] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1461.688610][T22266] RBP: 00007f53d7833e6f R08: 0000000000000000 R09: 0000000000000000 [ 1461.688617][T22266] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1461.688623][T22266] R13: 00007f53d7a26038 R14: 00007f53d7a25fa0 R15: 00007ffcb697bbd8 [ 1461.688639][T22266] [ 1461.690309][T22266] memory: usage 307200kB, limit 307200kB, failcnt 49727 [ 1461.813166][ T5737] Bluetooth: hci0: command 0x1003 tx timeout [ 1461.848031][ T9163] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1461.883782][T22266] memory+swap: usage 381932kB, limit 9007199254740988kB, failcnt 0 [ 1461.887391][T22266] kmem: usage 16912kB, limit 9007199254740988kB, failcnt 0 [ 1461.890671][T22266] Memory cgroup stats for /syz6: [ 1461.890805][T22266] cache 297234432 [ 1461.894705][T22266] rss 4096 [ 1461.896461][T22266] rss_huge 0 [ 1461.898111][T22266] shmem 297213952 [ 1461.903779][T22266] mapped_file 1576960 [ 1461.909118][T22266] dirty 0 [ 1461.910132][T22266] writeback 0 [ 1461.911308][T22266] workingset_refault_anon 1553 [ 1461.912888][T22266] workingset_refault_file 8443 [ 1461.914523][T22266] swap 76525568 [ 1461.915729][T22266] swapcached 215244800 [ 1461.917316][T22266] pgpgin 510141 [ 1461.918619][T22266] pgpgout 437590 [ 1461.920147][T22266] pgfault 279522 [ 1461.921372][T22266] pgmajfault 595 [ 1461.922630][T22266] inactive_anon 35061760 [ 1461.923995][T22266] active_anon 262172672 [ 1461.925359][T22266] inactive_file 12288 [ 1461.926079][T22547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14269'. [ 1461.926681][T22266] active_file 8192 [ 1461.926690][T22266] unevictable 0 [ 1461.933758][T22266] hierarchical_memory_limit 314572800 [ 1461.935477][T22266] hierarchical_memsw_limit 9223372036854771712 [ 1461.937512][T22266] total_cache 297234432 [ 1461.938842][T22266] total_rss 4096 [ 1461.940001][T22266] total_rss_huge 0 [ 1461.941472][T22266] total_shmem 297213952 [ 1461.942795][T22266] total_mapped_file 1576960 [ 1461.944772][T22266] total_dirty 0 [ 1461.946174][T22266] total_writeback 0 [ 1461.947773][T22266] total_workingset_refault_anon 1553 [ 1461.949742][T22266] total_workingset_refault_file 8443 [ 1461.951926][T22266] total_swap 76525568 [ 1461.953628][T22266] total_swapcached 215244800 [ 1461.955190][T22266] total_pgpgin 510142 [ 1461.957976][T22266] total_pgpgout 437591 [ 1461.959398][T22266] total_pgfault 279523 [ 1461.961882][T22266] total_pgmajfault 595 [ 1461.963330][T22266] total_inactive_anon 35061760 [ 1461.965056][T22266] total_active_anon 262172672 [ 1461.966591][T22266] total_inactive_file 12288 [ 1461.968079][T22266] total_active_file 8192 [ 1461.969506][T22266] total_unevictable 0 [ 1461.970939][T22266] anon_cost 0 [ 1461.972090][T22266] file_cost 0 [ 1461.977017][T22266] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.14183,pid=22261,uid=0 [ 1461.989714][T22266] Memory cgroup out of memory: Killed process 22261 (syz.6.14183) total-vm:100208kB, anon-rss:1252kB, file-rss:55520kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 1462.016526][T22242] syz.6.14183 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1462.037829][T22242] CPU: 1 UID: 0 PID: 22242 Comm: syz.6.14183 Tainted: G L syzkaller #0 PREEMPT(full) [ 1462.037855][T22242] Tainted: [L]=SOFTLOCKUP [ 1462.037861][T22242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1462.037870][T22242] Call Trace: [ 1462.037877][T22242] [ 1462.037883][T22242] dump_stack_lvl+0x100/0x190 [ 1462.037911][T22242] dump_header+0xfb/0x606 [ 1462.037932][T22242] oom_kill_process.cold+0xd/0x330 [ 1462.037952][T22242] out_of_memory+0x340/0x14f0 [ 1462.037982][T22242] ? __pfx_out_of_memory+0x10/0x10 [ 1462.038011][T22242] mem_cgroup_out_of_memory+0xc6/0x130 [ 1462.038038][T22242] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1462.038062][T22242] ? find_held_lock+0x2b/0x80 [ 1462.038090][T22242] ? do_raw_spin_unlock+0x145/0x1e0 [ 1462.038112][T22242] ? _raw_spin_unlock+0x28/0x50 [ 1462.038138][T22242] try_charge_memcg+0x6e5/0xdf0 [ 1462.038163][T22242] ? __pfx_try_charge_memcg+0x10/0x10 [ 1462.038182][T22242] ? find_held_lock+0x2b/0x80 [ 1462.038204][T22242] ? rcu_read_unlock+0x17/0x60 [ 1462.038224][T22242] ? rcu_read_unlock+0x17/0x60 [ 1462.038251][T22242] ? find_held_lock+0x2b/0x80 [ 1462.038273][T22242] ? rcu_read_unlock+0x17/0x60 [ 1462.038299][T22242] charge_memcg+0x187/0x1e0 [ 1462.038321][T22242] __mem_cgroup_charge+0x2b/0x1c0 [ 1462.038345][T22242] filemap_add_folio+0xe7/0x630 [ 1462.038370][T22242] ? __pfx_filemap_add_folio+0x10/0x10 [ 1462.038400][T22242] __filemap_get_folio_mpol+0x584/0x1320 [ 1462.038429][T22242] filemap_fault+0x879/0x3130 [ 1462.038459][T22242] ? __pfx_filemap_fault+0x10/0x10 [ 1462.038489][T22242] ? find_held_lock+0x2b/0x80 [ 1462.038514][T22242] __do_fault+0x10b/0x440 [ 1462.038535][T22242] do_fault+0xa99/0x1750 [ 1462.038559][T22242] __handle_mm_fault+0x187d/0x2a00 [ 1462.038585][T22242] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1462.038610][T22242] ? __pfx___handle_mm_fault+0x10/0x10 [ 1462.038635][T22242] ? pte_offset_map_lock+0x174/0x320 [ 1462.038654][T22242] ? find_held_lock+0x2b/0x80 [ 1462.038684][T22242] ? follow_page_pte+0x4d0/0x13f0 [ 1462.038708][T22242] handle_mm_fault+0x37b/0xa30 [ 1462.038737][T22242] __get_user_pages+0x1178/0x32a0 [ 1462.038765][T22242] ? __pfx___get_user_pages+0x10/0x10 [ 1462.038791][T22242] get_dump_page+0x27e/0x3d0 [ 1462.038813][T22242] ? __pfx_get_dump_page+0x10/0x10 [ 1462.038833][T22242] ? dump_user_range+0x65e/0xad0 [ 1462.038859][T22242] dump_user_range+0x18d/0xad0 [ 1462.038884][T22242] ? __pfx_dump_user_range+0x10/0x10 [ 1462.038913][T22242] ? __pfx_writenote+0x10/0x10 [ 1462.038933][T22242] ? elf_core_dump+0x1f25/0x3d20 [ 1462.038958][T22242] elf_core_dump+0x2d68/0x3d20 [ 1462.038992][T22242] ? __pfx_elf_core_dump+0x10/0x10 [ 1462.039013][T22242] ? kasan_save_stack+0x3f/0x50 [ 1462.039028][T22242] ? kasan_save_stack+0x30/0x50 [ 1462.039044][T22242] ? kasan_save_track+0x14/0x30 [ 1462.039060][T22242] ? __kasan_kmalloc+0xaa/0xb0 [ 1462.039076][T22242] ? vfs_coredump+0x22a6/0x56f0 [ 1462.039092][T22242] ? get_signal+0x1f2a/0x21e0 [ 1462.039111][T22242] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1462.039133][T22242] ? 0xffffffffff600000 [ 1462.039187][T22242] ? vfs_coredump+0x294b/0x56f0 [ 1462.039205][T22242] vfs_coredump+0x294b/0x56f0 [ 1462.039234][T22242] ? __pfx_vfs_coredump+0x10/0x10 [ 1462.039259][T22242] ? __lock_acquire+0x49f/0x1a40 [ 1462.039300][T22242] ? bpf_ksym_find+0x128/0x1c0 [ 1462.039331][T22242] ? unwind_get_return_address+0x59/0xa0 [ 1462.039357][T22242] ? arch_stack_walk+0xa6/0xf0 [ 1462.039388][T22242] ? __sigqueue_free+0xbe/0x2a0 [ 1462.039412][T22242] ? stack_trace_save+0x8e/0xc0 [ 1462.039438][T22242] ? __pfx_stack_trace_save+0x10/0x10 [ 1462.039463][T22242] ? stack_depot_save_flags+0x27/0x9d0 [ 1462.039526][T22242] ? proc_coredump_connector+0x2d3/0x4f0 [ 1462.039583][T22242] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1462.039627][T22242] ? rcu_is_watching+0x12/0xc0 [ 1462.039656][T22242] get_signal+0x1f2a/0x21e0 [ 1462.039685][T22242] ? __pfx_get_signal+0x10/0x10 [ 1462.039711][T22242] arch_do_signal_or_restart+0x91/0x7e0 [ 1462.039729][T22242] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1462.039759][T22242] irqentry_exit+0x402/0xa00 [ 1462.039787][T22242] asm_exc_page_fault+0x26/0x30 [ 1462.039805][T22242] RIP: 0033:0x7f53d779de61 [ 1462.039824][T22242] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1462.039839][T22242] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1462.039854][T22242] RAX: 0000000000000000 RBX: 00007f53d7a25fa0 RCX: 00007f53d779de59 [ 1462.039865][T22242] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1462.039874][T22242] RBP: 00007f53d7833e6f R08: 0000000000000000 R09: 0000000000000000 [ 1462.039884][T22242] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1462.039893][T22242] R13: 00007f53d7a26038 R14: 00007f53d7a25fa0 R15: 00007ffcb697bbd8 [ 1462.039916][T22242] [ 1462.040306][T22242] memory: usage 307200kB, limit 307200kB, failcnt 49927 [ 1462.221952][T22242] memory+swap: usage 377436kB, limit 9007199254740988kB, failcnt 0 [ 1462.224469][T22242] kmem: usage 17152kB, limit 9007199254740988kB, failcnt 0 [ 1462.226714][T22242] Memory cgroup stats for /syz6: [ 1462.226814][T22242] cache 293093376 [ 1462.230044][T22242] rss 208896 [ 1462.231244][T22242] rss_huge 0 [ 1462.232476][T22242] shmem 291160064 [ 1462.233833][T22242] mapped_file 3444736 [ 1462.235208][T22242] dirty 0 [ 1462.236162][T22242] writeback 0 [ 1462.237272][T22242] workingset_refault_anon 1554 [ 1462.238767][T22242] workingset_refault_file 8599 [ 1462.240652][T22242] swap 74817536 [ 1462.241787][T22242] swapcached 217022464 [ 1462.243107][T22242] pgpgin 513721 [ 1462.244199][T22242] pgpgout 442124 [ 1462.245324][T22242] pgfault 279884 [ 1462.246448][T22242] pgmajfault 615 [ 1462.247630][T22242] inactive_anon 256942080 [ 1462.248992][T22242] active_anon 34353152 [ 1462.250360][T22242] inactive_file 860160 [ 1462.252045][T22242] active_file 1073152 [ 1462.253589][T22242] unevictable 0 [ 1462.254991][T22242] hierarchical_memory_limit 314572800 [ 1462.256885][T22242] hierarchical_memsw_limit 9223372036854771712 [ 1462.258823][T22242] total_cache 293093376 [ 1462.260133][T22242] total_rss 208896 [ 1462.261319][T22242] total_rss_huge 0 [ 1462.262831][T22242] total_shmem 291160064 [ 1462.264164][T22242] total_mapped_file 3444736 [ 1462.265619][T22242] total_dirty 0 [ 1462.267315][T22242] total_writeback 0 [ 1462.300573][T22242] total_workingset_refault_anon 1554 [ 1462.302493][T22242] total_workingset_refault_file 8599 [ 1462.308794][T22242] total_swap 74817536 [ 1462.310088][T22242] total_swapcached 217022464 [ 1462.314920][T22242] total_pgpgin 513722 [ 1462.316430][T22242] total_pgpgout 442125 [ 1462.319114][T22242] total_pgfault 279885 [ 1462.320692][T22242] total_pgmajfault 615 [ 1462.323727][T22242] total_inactive_anon 256942080 [ 1462.325453][T22242] total_active_anon 34353152 [ 1462.327337][T22242] total_inactive_file 860160 [ 1462.328819][T22242] total_active_file 1073152 [ 1462.330522][T22242] total_unevictable 0 [ 1462.331967][T22242] anon_cost 0 [ 1462.335811][T22242] file_cost 0 [ 1462.373759][T22242] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.14183,pid=22242,uid=0 [ 1462.389167][T22242] Memory cgroup out of memory: Killed process 22242 (syz.6.14183) total-vm:100208kB, anon-rss:1252kB, file-rss:54692kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 1462.403458][T22237] syz.6.14183 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1462.420121][T22237] CPU: 1 UID: 0 PID: 22237 Comm: syz.6.14183 Tainted: G L syzkaller #0 PREEMPT(full) [ 1462.420144][T22237] Tainted: [L]=SOFTLOCKUP [ 1462.420148][T22237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1462.420155][T22237] Call Trace: [ 1462.420161][T22237] [ 1462.420167][T22237] dump_stack_lvl+0x100/0x190 [ 1462.420189][T22237] dump_header+0xfb/0x606 [ 1462.420203][T22237] oom_kill_process.cold+0xd/0x330 [ 1462.420223][T22237] out_of_memory+0x340/0x14f0 [ 1462.420244][T22237] ? __pfx_out_of_memory+0x10/0x10 [ 1462.420264][T22237] mem_cgroup_out_of_memory+0xc6/0x130 [ 1462.420284][T22237] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1462.420301][T22237] ? find_held_lock+0x2b/0x80 [ 1462.420320][T22237] ? do_raw_spin_unlock+0x145/0x1e0 [ 1462.420336][T22237] ? _raw_spin_unlock+0x28/0x50 [ 1462.420353][T22237] try_charge_memcg+0x6e5/0xdf0 [ 1462.420371][T22237] ? __pfx_try_charge_memcg+0x10/0x10 [ 1462.420385][T22237] ? find_held_lock+0x2b/0x80 [ 1462.420401][T22237] ? rcu_read_unlock+0x17/0x60 [ 1462.420416][T22237] ? rcu_read_unlock+0x17/0x60 [ 1462.420431][T22237] ? find_held_lock+0x2b/0x80 [ 1462.420447][T22237] ? rcu_read_unlock+0x17/0x60 [ 1462.420465][T22237] charge_memcg+0x187/0x1e0 [ 1462.420481][T22237] __mem_cgroup_charge+0x2b/0x1c0 [ 1462.420498][T22237] shmem_alloc_and_add_folio+0x451/0xd40 [ 1462.420521][T22237] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1462.420540][T22237] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1462.420561][T22237] shmem_get_folio_gfp+0x6ad/0x1910 [ 1462.420582][T22237] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1462.420601][T22237] ? timestamp_truncate+0x22e/0x2f0 [ 1462.420616][T22237] shmem_write_begin+0x1a4/0x420 [ 1462.420635][T22237] ? __pfx_shmem_write_begin+0x10/0x10 [ 1462.420652][T22237] ? rcu_is_watching+0x12/0xc0 [ 1462.420675][T22237] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1462.420699][T22237] generic_perform_write+0x292/0xa40 [ 1462.420732][T22237] ? __pfx_generic_perform_write+0x10/0x10 [ 1462.420753][T22237] ? __mark_inode_dirty+0x55c/0x16e0 [ 1462.420783][T22237] ? mnt_put_write_access_file+0x4e/0x100 [ 1462.420797][T22237] ? file_update_time_flags+0x373/0x500 [ 1462.420812][T22237] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1462.420825][T22237] shmem_file_write_iter+0x10e/0x140 [ 1462.420840][T22237] __kernel_write_iter+0x2ac/0x930 [ 1462.420858][T22237] ? __pfx___kernel_write_iter+0x10/0x10 [ 1462.420874][T22237] ? __up_read+0x333/0x980 [ 1462.420891][T22237] ? dump_user_range+0x65e/0xad0 [ 1462.420908][T22237] dump_user_range+0x3f9/0xad0 [ 1462.420926][T22237] ? __pfx_dump_user_range+0x10/0x10 [ 1462.420947][T22237] ? __pfx_writenote+0x10/0x10 [ 1462.420962][T22237] ? elf_core_dump+0x1f25/0x3d20 [ 1462.420985][T22237] elf_core_dump+0x2d68/0x3d20 [ 1462.421024][T22237] ? __pfx_elf_core_dump+0x10/0x10 [ 1462.421048][T22237] ? kasan_save_stack+0x3f/0x50 [ 1462.421067][T22237] ? kasan_save_stack+0x30/0x50 [ 1462.421082][T22237] ? kasan_save_track+0x14/0x30 [ 1462.421093][T22237] ? __kasan_kmalloc+0xaa/0xb0 [ 1462.421105][T22237] ? vfs_coredump+0x22a6/0x56f0 [ 1462.421118][T22237] ? get_signal+0x1f2a/0x21e0 [ 1462.421132][T22237] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1462.421147][T22237] ? 0xffffffffff600000 [ 1462.421182][T22237] ? vfs_coredump+0x294b/0x56f0 [ 1462.421195][T22237] vfs_coredump+0x294b/0x56f0 [ 1462.421220][T22237] ? __pfx_vfs_coredump+0x10/0x10 [ 1462.421235][T22237] ? __lock_acquire+0x49f/0x1a40 [ 1462.421262][T22237] ? bpf_ksym_find+0x128/0x1c0 [ 1462.421283][T22237] ? unwind_get_return_address+0x59/0xa0 [ 1462.421302][T22237] ? arch_stack_walk+0xa6/0xf0 [ 1462.421325][T22237] ? __sigqueue_free+0xbe/0x2a0 [ 1462.421342][T22237] ? stack_trace_save+0x8e/0xc0 [ 1462.421361][T22237] ? __pfx_stack_trace_save+0x10/0x10 [ 1462.421379][T22237] ? stack_depot_save_flags+0x27/0x9d0 [ 1462.421421][T22237] ? proc_coredump_connector+0x2d3/0x4f0 [ 1462.421440][T22237] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1462.421461][T22237] ? rcu_is_watching+0x12/0xc0 [ 1462.421479][T22237] get_signal+0x1f2a/0x21e0 [ 1462.421498][T22237] ? __pfx_get_signal+0x10/0x10 [ 1462.421517][T22237] arch_do_signal_or_restart+0x91/0x7e0 [ 1462.421529][T22237] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1462.421550][T22237] irqentry_exit+0x402/0xa00 [ 1462.421570][T22237] asm_exc_page_fault+0x26/0x30 [ 1462.421582][T22237] RIP: 0033:0x7f53d779de61 [ 1462.421594][T22237] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1462.421605][T22237] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1462.421616][T22237] RAX: 0000000000000000 RBX: 00007f53d7a25fa0 RCX: 00007f53d779de59 [ 1462.421623][T22237] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1462.421630][T22237] RBP: 00007f53d7833e6f R08: 0000000000000000 R09: 0000000000000000 [ 1462.421637][T22237] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1462.421644][T22237] R13: 00007f53d7a26038 R14: 00007f53d7a25fa0 R15: 00007ffcb697bbd8 [ 1462.421659][T22237] [ 1462.421665][T22237] memory: usage 307196kB, limit 307200kB, failcnt 50327 [ 1462.636617][T22584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=22584 comm=syz.6.14281 [ 1462.739650][T22596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14283'. [ 1462.753040][T22237] memory+swap: usage 356196kB, limit 9007199254740988kB, failcnt 0 [ 1462.758222][T22237] kmem: usage 16356kB, limit 9007199254740988kB, failcnt 0 [ 1462.765701][T22237] Memory cgroup stats for /syz6: [ 1462.765811][T22237] cache 282157056 [ 1462.774598][T22237] rss 241664 [ 1462.775815][T22237] rss_huge 0 [ 1462.776917][T22237] shmem 279961600 [ 1462.781225][T22237] mapped_file 3674112 [ 1462.783070][T22237] dirty 0 [ 1462.798134][T22237] writeback 0 [ 1462.801271][T22237] workingset_refault_anon 1556 [ 1462.807306][T22237] workingset_refault_file 9085 [ 1462.812549][T22237] swap 65871872 [ 1462.814116][T22237] swapcached 219791360 [ 1462.821250][T22237] pgpgin 523452 [ 1462.823005][T22237] pgpgout 454526 [ 1462.826850][T22237] pgfault 280464 [ 1462.831463][T22237] pgmajfault 632 [ 1462.833084][T22237] inactive_anon 25538560 [ 1462.835358][T22237] active_anon 254590976 [ 1462.837154][T22237] inactive_file 0 [ 1462.843522][T22237] active_file 2195456 [ 1462.845311][T22237] unevictable 0 [ 1462.846901][T22237] hierarchical_memory_limit 314572800 [ 1462.851365][T22602] gtp0: entered promiscuous mode [ 1462.851772][T22237] hierarchical_memsw_limit 9223372036854771712 [ 1462.854162][T22602] gtp0: entered allmulticast mode [ 1462.854804][T22606] IPVS: length: 136 != 216 [ 1462.857110][T22237] total_cache 282157056 [ 1462.865775][T22237] total_rss 241664 [ 1462.881649][T22237] total_rss_huge 0 [ 1462.883415][T22237] total_shmem 279961600 [ 1462.885271][T22237] total_mapped_file 3674112 [ 1462.887423][T22237] total_dirty 0 [ 1462.889002][T22237] total_writeback 0 [ 1462.890684][T22237] total_workingset_refault_anon 1556 [ 1462.904166][T22610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14290'. [ 1462.907811][T22237] total_workingset_refault_file 9085 [ 1462.912606][T22237] total_swap 65871872 [ 1462.921587][T22237] total_swapcached 219791360 [ 1462.925663][T22608] xfrm0 speed is unknown, defaulting to 1000 [ 1462.929114][T22237] total_pgpgin 523453 [ 1462.933485][T22237] total_pgpgout 454527 [ 1462.935452][T22237] total_pgfault 280465 [ 1462.939821][T22237] total_pgmajfault 632 [ 1462.944384][T22237] total_inactive_anon 25538560 [ 1462.947842][T22608] speed is unknown, defaulting to 1000 [ 1462.949193][T22237] total_active_anon 254590976 [ 1462.952734][T22237] total_inactive_file 0 [ 1462.954621][T22237] total_active_file 2195456 [ 1462.969015][T22237] total_unevictable 0 [ 1462.970846][T22237] anon_cost 0 [ 1462.977359][T22237] file_cost 0 [ 1463.000247][T22237] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.14183,pid=22259,uid=0 [ 1463.009725][T22237] Memory cgroup out of memory: Killed process 22259 (syz.6.14183) total-vm:100208kB, anon-rss:1288kB, file-rss:55664kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 1463.102838][T22231] syz.6.14183 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1463.106158][T22231] CPU: 1 UID: 0 PID: 22231 Comm: syz.6.14183 Tainted: G L syzkaller #0 PREEMPT(full) [ 1463.106176][T22231] Tainted: [L]=SOFTLOCKUP [ 1463.106181][T22231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1463.106187][T22231] Call Trace: [ 1463.106193][T22231] [ 1463.106198][T22231] dump_stack_lvl+0x100/0x190 [ 1463.106225][T22231] dump_header+0xfb/0x606 [ 1463.106245][T22231] oom_kill_process.cold+0xd/0x330 [ 1463.106268][T22231] out_of_memory+0x340/0x14f0 [ 1463.106297][T22231] ? __pfx_out_of_memory+0x10/0x10 [ 1463.106327][T22231] mem_cgroup_out_of_memory+0xc6/0x130 [ 1463.106356][T22231] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1463.106375][T22231] ? find_held_lock+0x2b/0x80 [ 1463.106394][T22231] ? do_raw_spin_unlock+0x145/0x1e0 [ 1463.106409][T22231] ? _raw_spin_unlock+0x28/0x50 [ 1463.106427][T22231] try_charge_memcg+0x6e5/0xdf0 [ 1463.106443][T22231] ? __pfx_try_charge_memcg+0x10/0x10 [ 1463.106457][T22231] ? find_held_lock+0x2b/0x80 [ 1463.106471][T22231] ? rcu_read_unlock+0x17/0x60 [ 1463.106485][T22231] ? rcu_read_unlock+0x17/0x60 [ 1463.106499][T22231] ? find_held_lock+0x2b/0x80 [ 1463.106515][T22231] ? rcu_read_unlock+0x17/0x60 [ 1463.106532][T22231] charge_memcg+0x187/0x1e0 [ 1463.106546][T22231] __mem_cgroup_charge+0x2b/0x1c0 [ 1463.106563][T22231] shmem_alloc_and_add_folio+0x451/0xd40 [ 1463.106584][T22231] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1463.106602][T22231] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1463.106622][T22231] shmem_get_folio_gfp+0x6ad/0x1910 [ 1463.106641][T22231] ? __lock_acquire+0x49f/0x1a40 [ 1463.106653][T22231] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1463.106674][T22231] shmem_write_begin+0x1a4/0x420 [ 1463.106692][T22231] ? __pfx_shmem_write_begin+0x10/0x10 [ 1463.106710][T22231] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1463.106722][T22231] ? lockdep_hardirqs_on+0x78/0x100 [ 1463.106741][T22231] generic_perform_write+0x292/0xa40 [ 1463.106760][T22231] ? __pfx_generic_perform_write+0x10/0x10 [ 1463.106777][T22231] ? file_update_time_flags+0x373/0x500 [ 1463.106792][T22231] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1463.106804][T22231] shmem_file_write_iter+0x10e/0x140 [ 1463.106817][T22231] __kernel_write_iter+0x2ac/0x930 [ 1463.106834][T22231] ? __pfx___kernel_write_iter+0x10/0x10 [ 1463.106856][T22231] ? __up_read+0x333/0x980 [ 1463.106871][T22231] ? dump_user_range+0x65e/0xad0 [ 1463.106888][T22231] dump_user_range+0x3f9/0xad0 [ 1463.106905][T22231] ? __pfx_dump_user_range+0x10/0x10 [ 1463.106924][T22231] ? __pfx_writenote+0x10/0x10 [ 1463.106938][T22231] ? elf_core_dump+0x1f25/0x3d20 [ 1463.106955][T22231] elf_core_dump+0x2d68/0x3d20 [ 1463.106976][T22231] ? __pfx_elf_core_dump+0x10/0x10 [ 1463.106990][T22231] ? kasan_save_stack+0x3f/0x50 [ 1463.107001][T22231] ? kasan_save_stack+0x30/0x50 [ 1463.107011][T22231] ? kasan_save_track+0x14/0x30 [ 1463.107022][T22231] ? __kasan_kmalloc+0xaa/0xb0 [ 1463.107032][T22231] ? vfs_coredump+0x22a6/0x56f0 [ 1463.107044][T22231] ? get_signal+0x1f2a/0x21e0 [ 1463.107057][T22231] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1463.107071][T22231] ? 0xffffffffff600000 [ 1463.107104][T22231] ? vfs_coredump+0x294b/0x56f0 [ 1463.107116][T22231] vfs_coredump+0x294b/0x56f0 [ 1463.107135][T22231] ? __pfx_vfs_coredump+0x10/0x10 [ 1463.107149][T22231] ? __lock_acquire+0x49f/0x1a40 [ 1463.107175][T22231] ? bpf_ksym_find+0x128/0x1c0 [ 1463.107195][T22231] ? unwind_get_return_address+0x59/0xa0 [ 1463.107213][T22231] ? arch_stack_walk+0xa6/0xf0 [ 1463.107233][T22231] ? __sigqueue_free+0xbe/0x2a0 [ 1463.107249][T22231] ? stack_trace_save+0x8e/0xc0 [ 1463.107267][T22231] ? __pfx_stack_trace_save+0x10/0x10 [ 1463.107284][T22231] ? stack_depot_save_flags+0x27/0x9d0 [ 1463.107327][T22231] ? proc_coredump_connector+0x2d3/0x4f0 [ 1463.107352][T22231] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1463.107379][T22231] ? rcu_is_watching+0x12/0xc0 [ 1463.107408][T22231] get_signal+0x1f2a/0x21e0 [ 1463.107440][T22231] ? __pfx_get_signal+0x10/0x10 [ 1463.107468][T22231] arch_do_signal_or_restart+0x91/0x7e0 [ 1463.107488][T22231] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1463.107527][T22231] irqentry_exit+0x402/0xa00 [ 1463.107581][T22231] asm_exc_page_fault+0x26/0x30 [ 1463.107593][T22231] RIP: 0033:0x7f53d779de61 [ 1463.107605][T22231] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1463.107616][T22231] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1463.107627][T22231] RAX: 0000000000000000 RBX: 00007f53d7a25fa0 RCX: 00007f53d779de59 [ 1463.107634][T22231] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1463.107641][T22231] RBP: 00007f53d7833e6f R08: 0000000000000000 R09: 0000000000000000 [ 1463.107647][T22231] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1463.107654][T22231] R13: 00007f53d7a26038 R14: 00007f53d7a25fa0 R15: 00007ffcb697bbd8 [ 1463.107669][T22231] [ 1463.107673][T22231] memory: usage 307200kB, limit 307200kB, failcnt 53483 [ 1463.135456][T18450] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x105) [ 1463.136854][T22231] memory+swap: usage 381952kB, limit 9007199254740988kB, failcnt 0 [ 1463.194452][T22625] /dev/sg0: Can't lookup blockdev [ 1463.196189][T22231] kmem: usage 16452kB, limit 9007199254740988kB, failcnt 0 [ 1463.291918][T22231] Memory cgroup stats for /syz6: [ 1463.292020][T22231] cache 297070592 [ 1463.296276][T22231] rss 270336 [ 1463.297444][T22231] rss_huge 0 [ 1463.298605][T22231] shmem 297062400 [ 1463.299890][T22231] mapped_file 1576960 [ 1463.301445][T22231] dirty 0 [ 1463.302642][T22231] writeback 0 [ 1463.303932][T22231] workingset_refault_anon 1556 [ 1463.305586][T22231] workingset_refault_file 9179 [ 1463.307087][T22231] swap 75673600 [ 1463.308234][T22231] swapcached 233213952 [ 1463.309673][T22231] pgpgin 533453 [ 1463.310806][T22231] pgpgout 460879 [ 1463.311978][T22231] pgfault 280575 [ 1463.313879][T22231] pgmajfault 638 [ 1463.315094][T22231] inactive_anon 207089664 [ 1463.316539][T22231] active_anon 90189824 [ 1463.316942][T22617] geneve3: entered promiscuous mode [ 1463.317842][T22231] inactive_file 0 [ 1463.317850][T22231] active_file 8192 [ 1463.317855][T22231] unevictable 0 [ 1463.317860][T22231] hierarchical_memory_limit 314572800 [ 1463.317866][T22231] hierarchical_memsw_limit 9223372036854771712 [ 1463.317872][T22231] total_cache 297070592 [ 1463.317877][T22231] total_rss 270336 [ 1463.317882][T22231] total_rss_huge 0 [ 1463.317886][T22231] total_shmem 297062400 [ 1463.317892][T22231] total_mapped_file 1576960 [ 1463.317897][T22231] total_dirty 0 [ 1463.331187][T22617] geneve3: entered allmulticast mode [ 1463.332255][T22231] total_writeback 0 [ 1463.340305][T22231] total_workingset_refault_anon 1556 [ 1463.342177][T22231] total_workingset_refault_file 9179 [ 1463.343898][T22231] total_swap 75673600 [ 1463.345170][T22231] total_swapcached 233213952 [ 1463.346643][T22231] total_pgpgin 533454 [ 1463.348244][T22231] total_pgpgout 460880 [ 1463.349605][T22231] total_pgfault 280576 [ 1463.350931][T22231] total_pgmajfault 638 [ 1463.352942][T22231] total_inactive_anon 207089664 [ 1463.354487][T22231] total_active_anon 90189824 [ 1463.356075][T22231] total_inactive_file 0 [ 1463.357505][T22231] total_active_file 8192 [ 1463.358984][T22231] total_unevictable 0 [ 1463.360730][T22231] anon_cost 0 [ 1463.361963][T22231] file_cost 0 [ 1463.363515][T22231] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.14183,pid=22254,uid=0 [ 1463.369145][T22231] Memory cgroup out of memory: Killed process 22254 (syz.6.14183) total-vm:100208kB, anon-rss:1288kB, file-rss:55664kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 1463.973764][T22651] cgroup: Need name or subsystem set [ 1464.031253][T22654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14304'. [ 1464.031286][T22654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14304'. [ 1464.693647][ T42] kauditd_printk_skb: 525 callbacks suppressed [ 1464.693659][ T42] audit: type=1400 audit(1784510313.919:69644): avc: denied { mount } for pid=22655 comm="syz.0.14305" name="/" dev="overlay" ino=2628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1464.717049][ T42] audit: type=1400 audit(1784510313.928:69645): avc: denied { mount } for pid=22655 comm="syz.0.14305" name="/" dev="9p" ino=76022879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1464.750102][ T42] audit: type=1400 audit(1784510313.928:69646): avc: denied { setopt } for pid=22658 comm="syz.3.14307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1464.771749][ T42] audit: type=1400 audit(1784510313.937:69647): avc: denied { getopt } for pid=22657 comm="syz.6.14306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1464.779445][T22663] Invalid argument reading file caps for ./file0 [ 1464.785537][T22663] netlink: 68 bytes leftover after parsing attributes in process `syz.3.14310'. [ 1464.796596][ T42] audit: type=1400 audit(1784510313.965:69648): avc: denied { unmount } for pid=16569 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1464.836502][ T42] audit: type=1400 audit(1784510314.003:69649): avc: denied { execute } for pid=22662 comm="syz.3.14310" name="file0" dev="tmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1464.840937][T22666] nfs4: Bad value for 'source' [ 1464.852965][ T42] audit: type=1400 audit(1784510314.003:69650): avc: denied { execute_no_trans } for pid=22662 comm="syz.3.14310" path="/130/file0" dev="tmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1464.869289][ T42] audit: type=1400 audit(1784510314.003:69651): avc: denied { unmount } for pid=16569 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1464.884345][ T42] audit: type=1400 audit(1784510314.012:69652): avc: denied { write } for pid=22662 comm="syz.3.14310" name="comedi2" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1464.903336][ T42] audit: type=1400 audit(1784510314.012:69653): avc: denied { open } for pid=22662 comm="syz.3.14310" path="/dev/comedi2" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1464.906157][T22668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14311'. [ 1464.963571][T22671] netlink: 'syz.6.14312': attribute type 1 has an invalid length. [ 1465.015256][T22671] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1465.109614][T22684] EXT4-fs error: 13 callbacks suppressed [ 1465.109627][T22684] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:30: iget: checksum invalid [ 1465.119141][T22685] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:30: iget: checksum invalid [ 1465.154017][T22687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=22687 comm=syz.3.14317 [ 1465.161201][ T12] net_ratelimit: 91 callbacks suppressed [ 1465.161221][ T12] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1465.166456][T22687] xt_l2tp: wrong L2TP version: 0 [ 1465.167082][ T12] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1465.204569][T22689] JFS: charset not found [ 1465.287853][T15971] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1465.290927][T15971] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1465.406547][T15971] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1465.411896][T15971] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1465.422064][T22703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14322'. [ 1465.433397][T22703] xfrm1: entered promiscuous mode [ 1465.436896][T22703] xfrm1: entered allmulticast mode [ 1465.534921][T22714] tmpfs: Bad value for 'mpol' [ 1465.542650][ T13] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1465.547483][ T13] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1465.559633][T22716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14326'. [ 1465.567875][T22716] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1465.607182][T20035] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1465.660905][T15971] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1465.714458][T22727] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:30: iget: checksum invalid [ 1465.723550][T22729] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:30: iget: checksum invalid [ 1465.766897][T20035] usb 5-1: Using ep0 maxpacket: 8 [ 1465.774933][T20035] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 1465.779269][T20035] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 1465.780558][T22719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14327'. [ 1465.782822][T20035] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1465.792930][T20035] usb 5-1: config 250 has no interface number 0 [ 1465.797047][T20035] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1465.803055][T20035] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1465.806441][T20035] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1465.809813][T20035] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1465.813635][T20035] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1465.818257][T20035] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1465.822710][T20035] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1465.825783][T20035] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1465.828475][T20035] usb 5-1: Product: syz [ 1465.830017][T20035] usb 5-1: SerialNumber: syz [ 1465.838254][T20035] hub 5-1:250.228: bad descriptor, ignoring hub [ 1465.844453][T20035] hub 5-1:250.228: probe with driver hub failed with error -5 [ 1465.935943][T22719] tipc: Enabling of bearer rejected, failed to enable media [ 1466.012048][T22737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14331'. [ 1466.059313][T22698] geneve2: entered promiscuous mode [ 1466.065253][T20035] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 97 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1466.083708][T17274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1466.089018][T17274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1466.093590][T17274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1466.411777][T17274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1466.442991][T22760] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1466.449571][T22760] udevd[22760]: failed to execute '/lib/udev/cdrom_id' 'cdrom_id --lock-media /dev/sr0': Bad message [ 1466.506034][T17274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1466.521006][T22763] udevd[22763]: failed to execute '/lib/udev/ata_id' 'ata_id --export /dev/sr0': Bad message [ 1466.545902][T22765] udevd[22765]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sr0': Bad message [ 1466.747324][ T29] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1466.750138][T22698] usb 5-1: reset high-speed USB device number 97 using dummy_hcd [ 1466.851413][T22769] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 1466.902618][T22771] overlayfs: failed lookup in lower (newroot/142, name='file0', err=-40): overlapping layers [ 1466.904132][T22698] usb 5-1: device descriptor read/64, error -71 [ 1466.910139][T22771] kAFS: Can only specify source 'none' with -o dyn [ 1466.922614][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 1466.938097][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1466.943174][ T29] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1466.948723][ T29] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1466.954314][ T29] usb 6-1: config 14 has no interface number 0 [ 1466.956416][ T29] usb 6-1: config 14 has no interface number 1 [ 1466.959160][ T29] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1466.964139][ T29] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 1466.968797][ T29] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1466.972824][ T29] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1466.977384][ T29] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1466.981478][ T29] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1466.986780][ T29] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1466.990972][ T29] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1467.000878][ T29] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1467.004414][ T29] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1467.010050][ T29] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1467.013809][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.016547][ T29] usb 6-1: Product: syz [ 1467.018447][ T29] usb 6-1: Manufacturer: syz [ 1467.020065][ T29] usb 6-1: SerialNumber: syz [ 1467.177851][T22698] usb 5-1: reset high-speed USB device number 97 using dummy_hcd [ 1467.332411][T22698] usb 5-1: device descriptor read/64, error -71 [ 1467.459654][ T29] legousbtower 6-1:14.57: interrupt endpoints not found [ 1467.529530][T22777] vlan2: entered allmulticast mode [ 1467.583668][T22698] usb 5-1: reset high-speed USB device number 97 using dummy_hcd [ 1467.621430][T22698] usb 5-1: device descriptor read/8, error -71 [ 1467.892145][ T29] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1467.896615][T22698] usb 5-1: reset high-speed USB device number 97 using dummy_hcd [ 1467.931759][T22698] usb 5-1: device descriptor read/8, error -71 [ 1468.047897][ T5886] usb 5-1: USB disconnect, device number 97 [ 1468.052789][ T29] legousbtower 6-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 1468.068082][ T5886] usblp0: removed [ 1468.213918][ T5886] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1468.353029][ T5886] usb 5-1: device descriptor read/64, error -71 [ 1468.503385][ T29] usb 6-1: USB disconnect, device number 59 [ 1468.511889][ T29] legousbtower 6-1:14.228: LEGO USB Tower #-159 now disconnected [ 1468.611605][ T5886] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1468.759128][T22829] __nla_validate_parse: 6 callbacks suppressed [ 1468.759141][T22829] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.14357'. [ 1468.822957][T22835] ALSA: seq fatal error: cannot create timer (-16) [ 1468.905956][T22840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14360'. [ 1468.972915][ T5886] usb 5-1: device descriptor read/64, error -71 [ 1469.089589][T22849] loop2: detected capacity change from 0 to 7 [ 1469.090498][ T5886] usb usb5-port1: attempt power cycle [ 1469.094262][T22849] Dev loop2: unable to read RDB block 7 [ 1469.097036][T22849] loop2: unable to read partition table [ 1469.099696][T22849] loop2: partition table beyond EOD, truncated [ 1469.103136][T22849] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1469.150330][T22851] udevd[22851]: failed to execute '/lib/udev/cdrom_id' 'cdrom_id --lock-media /dev/sr0': Bad message [ 1469.162582][T22853] syzkaller0: entered promiscuous mode [ 1469.166293][T22853] syzkaller0: entered allmulticast mode [ 1469.189833][T22853] tipc: Started in network mode [ 1469.192078][T22853] tipc: Node identity 264a300cbb76, cluster identity 4711 [ 1469.194957][T22853] tipc: Enabled bearer , priority 0 [ 1469.195522][T22854] udevd[22854]: failed to execute '/lib/udev/ata_id' 'ata_id --export /dev/sr0': Bad message [ 1469.203170][T22852] tipc: Resetting bearer [ 1469.225897][T22855] udevd[22855]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sr0': Bad message [ 1469.249708][T22852] tipc: Disabling bearer [ 1469.333473][T22857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14365'. [ 1469.429849][T22867] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14366'. [ 1469.466594][ T5886] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1469.467706][T22870] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14367'. [ 1469.474277][T22870] nfs4: Bad value for 'source' [ 1469.478143][T22867] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22867 comm=syz.6.14366 [ 1469.493010][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1469.501676][ T5886] usb 5-1: config 4 has an invalid interface number: 13 but max is 0 [ 1469.505706][ T5886] usb 5-1: config 4 has no interface number 0 [ 1469.509545][ T5886] usb 5-1: config 4 interface 13 has no altsetting 0 [ 1469.515418][ T5886] usb 5-1: New USB device found, idVendor=0bda, idProduct=0184, bcdDevice=6f.98 [ 1469.525331][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.532488][ T5886] usb 5-1: Product: syz [ 1469.535854][ T5886] usb 5-1: Manufacturer: syz [ 1469.539405][ T5886] usb 5-1: SerialNumber: syz [ 1469.700228][T22885] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1469.743335][T22885] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14371'. [ 1469.796528][T22885] hsr_slave_1 (unregistering): left promiscuous mode [ 1469.807981][T22817] netlink: 'syz.0.14354': attribute type 1 has an invalid length. [ 1469.826067][ T5886] ums-realtek 5-1:4.13: USB Mass Storage device detected [ 1470.010062][ T5886] usb 5-1: USB disconnect, device number 100 [ 1470.024847][T22903] netlink: 'syz.1.14375': attribute type 7 has an invalid length. [ 1470.036925][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1470.040727][T22903] netlink: 'syz.1.14375': attribute type 7 has an invalid length. [ 1470.041246][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1470.047771][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1470.052718][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1470.055433][ T42] kauditd_printk_skb: 214 callbacks suppressed [ 1470.055468][ T42] audit: type=1400 audit(1784510318.935:69868): avc: denied { create } for pid=22902 comm="syz.1.14375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1470.057183][T22903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14375'. [ 1470.058140][ T42] audit: type=1400 audit(1784510318.935:69869): avc: denied { write } for pid=22902 comm="syz.1.14375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1470.077307][ T42] audit: type=1400 audit(1784510318.935:69870): avc: denied { read } for pid=22902 comm="syz.1.14375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1470.085013][ T42] audit: type=1400 audit(1784510318.935:69871): avc: denied { ioctl } for pid=22902 comm="syz.1.14375" path="socket:[290241]" dev="sockfs" ino=290241 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1470.125611][ T42] audit: type=1400 audit(1784510319.000:69872): avc: denied { unmount } for pid=21482 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1470.158719][ T42] audit: type=1400 audit(1784510319.028:69873): avc: denied { allowed } for pid=22908 comm="syz.6.14378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1470.169208][ T42] audit: type=1400 audit(1784510319.037:69874): avc: denied { create } for pid=22908 comm="syz.6.14378" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1470.205444][T22918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14380'. [ 1470.207669][T22917] netlink: 'syz.3.14379': attribute type 21 has an invalid length. [ 1470.209478][T22918] netlink: 'syz.1.14380': attribute type 10 has an invalid length. [ 1470.212134][T22917] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14379'. [ 1470.212197][T22917] netlink: 'syz.3.14379': attribute type 4 has an invalid length. [ 1470.212208][T22917] netlink: 'syz.3.14379': attribute type 5 has an invalid length. [ 1470.212216][T22917] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14379'. [ 1470.259636][ T42] audit: type=1400 audit(1784510319.131:69875): avc: denied { map_read map_write } for pid=22921 comm="syz.1.14382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1470.264621][T22922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=22922 comm=syz.1.14382 [ 1470.275092][ T42] audit: type=1400 audit(1784510319.131:69876): avc: denied { create } for pid=22921 comm="syz.1.14382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1470.287214][ T42] audit: type=1400 audit(1784510319.131:69877): avc: denied { getopt } for pid=22921 comm="syz.1.14382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1470.609377][ T5832] net_ratelimit: 94 callbacks suppressed [ 1470.609393][ T5832] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1470.623310][ T5832] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1470.630853][ T29] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1470.736040][ T5810] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1470.743501][ T5810] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1470.800363][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 1470.803904][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1470.809976][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1470.818524][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1470.824657][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1470.833933][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1470.842212][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.864905][ T5810] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1470.866156][T17274] EXT4-fs error: 41 callbacks suppressed [ 1470.866171][T17274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1470.867756][ T5810] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1470.883031][T17274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1470.889472][T17274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1470.992403][ T5810] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1470.995987][ T5810] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1471.003170][T20035] usb 5-1: new low-speed USB device number 101 using dummy_hcd [ 1471.070951][ T29] usb 6-1: GET_CAPABILITIES returned 0 [ 1471.075809][ T29] usbtmc 6-1:16.0: can't read capabilities [ 1471.120911][ T5810] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1471.124581][ T5810] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1471.188331][T20035] usb 5-1: config 1 interface 0 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1471.206122][T20035] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1471.285656][T18304] usb 6-1: USB disconnect, device number 60 [ 1472.164639][T23002] netlink: 'syz.1.14407': attribute type 1 has an invalid length. [ 1472.189917][T23002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1472.227804][T23002] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1472.859294][T23005] loop8: detected capacity change from 0 to 7 [ 1472.892672][ C2] blk_print_req_error: 10 callbacks suppressed [ 1472.892693][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1472.899629][ C2] buffer_io_error: 10 callbacks suppressed [ 1472.899647][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 1472.906315][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1472.909768][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 1472.912620][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1472.916714][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1472.920769][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1472.925340][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1472.929502][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1472.933380][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1472.937590][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1472.942097][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1472.946732][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1472.950754][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1472.954112][T23005] ldm_validate_partition_table(): Disk read failed. [ 1472.957845][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1472.961752][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 1472.965909][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1472.969296][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 1472.972406][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1472.976413][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1472.980869][T23005] Dev loop8: unable to read RDB block 0 [ 1472.984754][T23005] loop8: unable to read partition table [ 1472.990715][T23005] loop8: partition table beyond EOD, truncated [ 1473.001671][T23005] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1473.072921][T23009] fuse: Unknown parameter '$-v rejected, failed to enable media [ 1481.695586][ T13] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1481.705978][ T13] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1481.821099][ T13] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1481.826641][ T13] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1481.829460][T23480] EXT4-fs error: 34 callbacks suppressed [ 1481.829478][T23480] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:43: iget: checksum invalid [ 1481.843651][T23484] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:43: iget: checksum invalid [ 1481.863639][T23479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14554'. [ 1481.980465][T23499] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:13: iget: checksum invalid [ 1481.986583][T23500] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:13: iget: checksum invalid [ 1482.078062][T23502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14560'. [ 1482.082276][T23502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1482.106345][T23502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1482.168319][T23515] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:46: iget: checksum invalid [ 1482.185119][T23516] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:46: iget: checksum invalid [ 1482.433104][T23521] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:46: iget: checksum invalid [ 1482.446520][T23524] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u33:46: iget: checksum invalid [ 1482.455133][T23520] SET target dimension over the limit! [ 1482.461623][T23520] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14564'. [ 1482.839145][T23547] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1483.545632][ T5144] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1483.555115][ T5144] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1222: comm udevd: iget: checksum invalid [ 1483.608047][T23552] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20002 [ 1483.669846][T23553] SET target dimension over the limit! [ 1483.783994][ T5737] Bluetooth: hci0: command 0x1003 tx timeout [ 1483.784098][ T9163] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1483.901879][T23556] macsec1: entered promiscuous mode [ 1483.958876][T23558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14576'. [ 1483.973042][T23562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14577'. [ 1483.993253][T23562] input: syz1 as /devices/virtual/input/input178 [ 1484.212947][T23571] netlink: 156 bytes leftover after parsing attributes in process `syz.0.14579'. [ 1484.266710][T23574] netlink: 'syz.0.14580': attribute type 10 has an invalid length. [ 1484.273387][T23574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1484.277019][T23574] batadv0: entered promiscuous mode [ 1484.279562][T23574] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1484.291339][T23574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1484.329468][T23574] bond_slave_0: left promiscuous mode [ 1484.336967][T23574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1484.372363][T23574] bond_slave_1: left promiscuous mode [ 1484.378196][T23574] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1484.421328][T23574] batadv0: left promiscuous mode [ 1484.426707][T23574] bond0 (unregistering): Released all slaves [ 1484.551200][T23577] netlink: 68 bytes leftover after parsing attributes in process `syz.3.14582'. [ 1484.633791][T23584] netlink: 'syz.3.14584': attribute type 10 has an invalid length. [ 1484.637022][T23584] ipvlan0: entered allmulticast mode [ 1484.642106][T23584] veth0_vlan: entered allmulticast mode [ 1484.654633][T23584] team0: Device ipvlan0 failed to register rx_handler [ 1484.711771][T23586] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1485.060057][T23620] syzkaller0: entered promiscuous mode [ 1485.067287][T23620] syzkaller0: entered allmulticast mode [ 1485.614039][T23640] udevd[23640]: failed to execute '/lib/udev/cdrom_id' 'cdrom_id --lock-media /dev/sr0': Bad message [ 1485.672671][T23645] udevd[23645]: failed to execute '/lib/udev/ata_id' 'ata_id --export /dev/sr0': Bad message [ 1485.705224][T23654] udevd[23654]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sr0': Bad message [ 1485.769203][T23664] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 1485.780963][T23664] __nla_validate_parse: 2 callbacks suppressed [ 1485.780980][T23664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14606'. [ 1485.802891][T23666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14601'. [ 1485.827732][T23666] hsr_slave_0: left promiscuous mode [ 1486.031463][T23679] netlink: 40 bytes leftover after parsing attributes in process `syz.6.14613'. [ 1486.049025][T20034] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 1486.219876][T20034] usb 8-1: Using ep0 maxpacket: 8 [ 1486.224356][T20034] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1486.227785][T20034] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1486.232008][T20034] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1486.236376][T20034] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1486.245944][T20034] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1486.259801][T20034] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.262388][T20034] usb 8-1: Product: syz [ 1486.263941][T20034] usb 8-1: Manufacturer: syz [ 1486.266200][T20034] usb 8-1: SerialNumber: syz [ 1486.267026][ T42] kauditd_printk_skb: 246 callbacks suppressed [ 1486.267040][ T42] audit: type=1400 audit(1784510334.104:70674): avc: denied { create } for pid=23689 comm="syz.6.14616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1486.270337][T20034] usb 8-1: config 0 descriptor?? [ 1486.275441][T23690] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.14616'. [ 1486.282848][ T42] audit: type=1400 audit(1784510334.123:70675): avc: denied { write } for pid=23689 comm="syz.6.14616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1486.282897][T23664] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1486.512166][T20034] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1486.530268][T20034] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input179 [ 1486.537102][ T42] audit: type=1400 audit(1784510334.357:70676): avc: denied { read } for pid=5129 comm="acpid" name="event4" dev="devtmpfs" ino=5696 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1486.556902][ T42] audit: type=1400 audit(1784510334.357:70677): avc: denied { open } for pid=5129 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=5696 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1486.565695][ T42] audit: type=1400 audit(1784510334.357:70678): avc: denied { ioctl } for pid=5129 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=5696 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1486.595745][ T42] audit: type=1400 audit(1784510334.422:70679): avc: denied { create } for pid=23692 comm="syz.6.14617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1486.602892][ T42] audit: type=1400 audit(1784510334.422:70680): avc: denied { bind } for pid=23692 comm="syz.6.14617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1486.616316][ T42] audit: type=1400 audit(1784510334.422:70681): avc: denied { write } for pid=23692 comm="syz.6.14617" path="socket:[295083]" dev="sockfs" ino=295083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1486.634866][T23694] udevd[23694]: failed to execute '/lib/udev/cdrom_id' 'cdrom_id --lock-media /dev/sr0': Bad message [ 1486.663261][T23695] udevd[23695]: failed to execute '/lib/udev/ata_id' 'ata_id --export /dev/sr0': Bad message [ 1486.683890][ T42] audit: type=1400 audit(1784510334.497:70682): avc: denied { allowed } for pid=23696 comm="syz.6.14618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1486.700056][ T42] audit: type=1400 audit(1784510334.497:70683): avc: denied { module_request } for pid=23696 comm="syz.6.14618" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1486.703235][T23699] udevd[23699]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sr0': Bad message [ 1486.765775][ T13] net_ratelimit: 87 callbacks suppressed [ 1486.765796][ T13] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1486.770514][ T13] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1486.797654][ C0] powermate: config urb returned -71 [ 1486.798182][ T5886] usb 8-1: USB disconnect, device number 68 [ 1486.799925][ C0] powermate: usb_submit_urb(config) failed [ 1486.799969][ C0] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1486.882911][ T5832] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1486.886533][ T5832] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1486.957307][T24195] usb 11-1: new high-speed USB device number 68 using dummy_hcd [ 1487.010920][ T12] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1487.014170][ T12] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1487.145399][ T12] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1487.146684][T24195] usb 11-1: Using ep0 maxpacket: 16 [ 1487.150816][ T12] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1487.156299][T24195] usb 11-1: config 1 has an invalid interface number: 99 but max is 2 [ 1487.159717][T24195] usb 11-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1487.163216][T24195] usb 11-1: config 1 has an invalid interface number: 8 but max is 2 [ 1487.167230][T24195] usb 11-1: config 1 has an invalid interface number: 111 but max is 2 [ 1487.171292][T24195] usb 11-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1487.174131][T24195] usb 11-1: config 1 has no interface number 0 [ 1487.176297][T24195] usb 11-1: config 1 has no interface number 1 [ 1487.178906][T24195] usb 11-1: config 1 has no interface number 2 [ 1487.181997][T24195] usb 11-1: config 1 interface 99 altsetting 2 bulk endpoint 0xC has invalid maxpacket 511 [ 1487.186503][T24195] usb 11-1: config 1 interface 99 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1487.190343][T24195] usb 11-1: config 1 interface 99 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1487.195091][T24195] usb 11-1: config 1 interface 99 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1487.200020][T24195] usb 11-1: config 1 interface 99 altsetting 2 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1487.205742][T24195] usb 11-1: config 1 interface 99 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1487.209442][T24195] usb 11-1: config 1 interface 99 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1487.213158][T24195] usb 11-1: config 1 interface 99 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1487.216990][T24195] usb 11-1: config 1 interface 99 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1487.221351][T24195] usb 11-1: config 1 interface 99 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 1487.225987][T24195] usb 11-1: config 1 interface 99 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 1487.230621][T24195] usb 11-1: config 1 interface 99 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1487.235847][T24195] usb 11-1: config 1 interface 8 altsetting 253 has an endpoint descriptor with address 0x75, changing to 0x5 [ 1487.241285][T24195] usb 11-1: config 1 interface 8 altsetting 253 has a duplicate endpoint with address 0x5, skipping [ 1487.241968][ T9163] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1487.247682][ T5737] Bluetooth: hci0: command 0x1003 tx timeout [ 1487.248716][T24195] usb 11-1: config 1 interface 8 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 1487.248735][T24195] usb 11-1: config 1 interface 8 altsetting 253 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1487.248750][T24195] usb 11-1: config 1 interface 8 altsetting 253 has a duplicate endpoint with address 0x3, skipping [ 1487.248762][T24195] usb 11-1: config 1 interface 8 altsetting 253 has a duplicate endpoint with address 0x2, skipping [ 1487.248775][T24195] usb 11-1: config 1 interface 8 altsetting 253 has a duplicate endpoint with address 0x2, skipping [ 1487.248787][T24195] usb 11-1: config 1 interface 8 altsetting 253 has a duplicate endpoint with address 0xF, skipping [ 1487.248798][T24195] usb 11-1: config 1 interface 8 altsetting 253 has a duplicate endpoint with address 0x2, skipping [ 1487.248810][T24195] usb 11-1: config 1 interface 8 altsetting 253 has a duplicate endpoint with address 0x6, skipping [ 1487.248821][T24195] usb 11-1: config 1 interface 8 altsetting 253 has a duplicate endpoint with address 0x1, skipping [ 1487.248833][T24195] usb 11-1: config 1 interface 8 altsetting 253 has a duplicate endpoint with address 0x2, skipping [ 1487.248859][T24195] usb 11-1: config 1 interface 111 altsetting 199 has an invalid descriptor for endpoint zero, skipping [ 1487.248870][T24195] usb 11-1: config 1 interface 111 altsetting 199 has a duplicate endpoint with address 0x5, skipping [ 1487.248882][T24195] usb 11-1: config 1 interface 111 altsetting 199 has a duplicate endpoint with address 0x5, skipping [ 1487.248894][T24195] usb 11-1: config 1 interface 111 altsetting 199 has a duplicate endpoint with address 0x6, skipping [ 1487.248906][T24195] usb 11-1: config 1 interface 111 altsetting 199 has a duplicate endpoint with address 0xA, skipping [ 1487.248918][T24195] usb 11-1: config 1 interface 111 altsetting 199 has a duplicate endpoint with address 0x5, skipping [ 1487.248929][T24195] usb 11-1: config 1 interface 111 altsetting 199 has a duplicate endpoint with address 0xF, skipping [ 1487.248941][T24195] usb 11-1: config 1 interface 111 altsetting 199 has a duplicate endpoint with address 0x5, skipping [ 1487.248959][T24195] usb 11-1: config 1 interface 111 altsetting 199 has a duplicate endpoint with address 0x9, skipping [ 1487.248971][T24195] usb 11-1: config 1 interface 111 altsetting 199 has a duplicate endpoint with address 0x3, skipping [ 1487.248983][T24195] usb 11-1: config 1 interface 111 altsetting 199 has an invalid descriptor for endpoint zero, skipping [ 1487.248994][T24195] usb 11-1: config 1 interface 111 altsetting 199 has a duplicate endpoint with address 0x3, skipping [ 1487.249006][T24195] usb 11-1: config 1 interface 99 has no altsetting 0 [ 1487.249016][T24195] usb 11-1: config 1 interface 8 has no altsetting 0 [ 1487.249025][T24195] usb 11-1: config 1 interface 111 has no altsetting 0 [ 1487.251001][T24195] usb 11-1: New USB device found, idVendor=13fd, idProduct=3940, bcdDevice=11.5c [ 1487.251020][T24195] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.251031][T24195] usb 11-1: Product: К [ 1487.251039][T24195] usb 11-1: Manufacturer: 룋뮅㵭佸宲㦒嘿ꗽ躻্日☟ﺞ㨛戯舑ሥ༔≼땐풢藝꾊녹腟錂⹴釐礉뉥璺ɭ緵鈱懃堥诧䭊⷇뻋謝ꭗℬﵯ疺潂鍫즦雯ᤊ䓌ꟁ㜥⍹봧䚴ᙛ枂﷤ﴮ岬⚟岄肬მ櫆劔縼邤윛 [ 1487.251056][T24195] usb 11-1: SerialNumber: syz [ 1487.261236][T23697] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1487.299697][ T5810] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1487.303366][T23697] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1487.320553][ T5810] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1487.590487][T24195] usb 11-1: USB disconnect, device number 68 [ 1487.613728][T23732] netlink: 4376 bytes leftover after parsing attributes in process `syz.0.14629'. [ 1487.617842][T23732] netlink: 4376 bytes leftover after parsing attributes in process `syz.0.14629'. [ 1487.618709][T16750] EXT4-fs error: 35 callbacks suppressed [ 1487.618719][T16750] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1487.628553][T17218] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1487.636369][T17218] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1487.642670][T16750] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1487.649365][T17274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1487.656877][T17218] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1487.662488][T16750] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1487.667974][T17274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1487.674829][T17274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1487.682119][T23737] netlink: 84 bytes leftover after parsing attributes in process `syz.0.14631'. [ 1487.714850][T23739] random: crng reseeded on system resumption [ 1488.213696][T23763] XFS (nbd6): SB validate failed with error -5. [ 1488.921547][T23813] netlink: 64 bytes leftover after parsing attributes in process `syz.1.14654'. [ 1488.967659][T23813] ------------[ cut here ]------------ [ 1488.969703][T23813] 1 [ 1488.969712][T23813] WARNING: mm/page_alloc.c:5280 at __alloc_frozen_pages_noprof+0x2427/0x2dc0, CPU#1: syz.1.14654/23813 [ 1488.974419][T23813] Modules linked in: [ 1488.976600][T23813] CPU: 1 UID: 0 PID: 23813 Comm: syz.1.14654 Tainted: G L syzkaller #0 PREEMPT(full) [ 1488.980522][T23813] Tainted: [L]=SOFTLOCKUP [ 1488.982121][T23813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1488.985419][T23813] RIP: 0010:__alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 1488.988251][T23813] Code: e9 8d fb ff ff 31 d2 be 28 12 00 00 48 c7 c7 a0 64 e1 8b e8 bb b0 68 ff 2e 2e 2e 31 c0 e9 02 ed ff ff c6 05 7a 8f 9d 0e 01 90 <0f> 0b 90 e9 6f df ff ff 48 c7 c7 40 9c d3 8e 45 89 f7 44 8b 74 24 [ 1488.995480][T23813] RSP: 0018:ffffc900075a7728 EFLAGS: 00010246 [ 1488.997641][T23813] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1489.000361][T23813] RDX: 0000000000000000 RSI: 1ffff92000eb4eff RDI: 0000000000040cc0 [ 1489.003028][T23813] RBP: 0000000000000012 R08: 0000000000000005 R09: 0000000000000009 [ 1489.005667][T23813] R10: 0000000000000012 R11: 0000000000000000 R12: 0000000000040cc0 [ 1489.008220][T23813] R13: 1ffff92000eb4f3d R14: ffffffff9b752444 R15: 0000000000000001 [ 1489.010971][T23813] FS: 00007fdb7cdd36c0(0000) GS:ffff8880d5ee8000(0000) knlGS:0000000000000000 [ 1489.014153][T23813] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1489.016662][T23813] CR2: 000000110c230000 CR3: 00000000273c2000 CR4: 0000000000352ef0 [ 1489.020203][T23813] Call Trace: [ 1489.021715][T23813] [ 1489.023248][T23813] ? find_held_lock+0x2b/0x80 [ 1489.025088][T23813] ? is_bpf_text_address+0x8a/0x1a0 [ 1489.026905][T23813] ? is_bpf_text_address+0x8a/0x1a0 [ 1489.028996][T23813] ? bpf_ksym_find+0x128/0x1c0 [ 1489.030945][T23813] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1489.033651][T23813] ? is_bpf_text_address+0x94/0x1a0 [ 1489.035951][T23813] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1489.038170][T23813] ? __pfx_widen_string+0x10/0x10 [ 1489.039931][T23813] ? __kernel_text_address+0xd/0x30 [ 1489.041915][T23813] ? unwind_get_return_address+0x59/0xa0 [ 1489.043822][T23813] ? arch_stack_walk+0xa6/0xf0 [ 1489.045580][T23813] ? __pfx_stack_trace_save+0x10/0x10 [ 1489.047432][T23813] ? stack_depot_save_flags+0x27/0x9d0 [ 1489.049606][T23813] ? __lock_acquire+0x49f/0x1a40 [ 1489.052089][T23813] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1489.054417][T23813] ? policy_nodemask+0xed/0x4f0 [ 1489.056038][T23813] alloc_pages_mpol+0x1fb/0x540 [ 1489.057660][T23813] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1489.059386][T23813] ___kmalloc_large_node+0xe5/0x120 [ 1489.061065][T23813] __kmalloc_large_node_noprof+0x1c/0x70 [ 1489.063037][T23813] __kmalloc_noprof+0x5a1/0x820 [ 1489.064661][T23813] ? drm_syncobj_array_find+0x34/0x3a0 [ 1489.066524][T23813] drm_syncobj_array_find+0x34/0x3a0 [ 1489.068304][T23813] drm_syncobj_timeline_wait_ioctl+0x236/0x390 [ 1489.070447][T23813] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 1489.073946][T23813] ? find_held_lock+0x2b/0x80 [ 1489.076401][T23813] ? drm_dev_exit+0x41/0x60 [ 1489.078532][T23813] ? drm_dev_exit+0x41/0x60 [ 1489.080369][T23813] drm_ioctl_kernel+0x1f3/0x3e0 [ 1489.082352][T23813] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 1489.086823][T23813] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1489.089064][T23813] drm_ioctl+0x5e6/0xc60 [ 1489.090744][T23813] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 1489.093336][T23813] ? __pfx_drm_ioctl+0x10/0x10 [ 1489.095533][T23813] ? selinux_file_ioctl+0x13b/0x290 [ 1489.097717][T23813] ? selinux_file_ioctl+0xb6/0x290 [ 1489.099944][T23813] ? __pfx_drm_ioctl+0x10/0x10 [ 1489.101945][T23813] __x64_sys_ioctl+0x18e/0x210 [ 1489.103830][T23813] do_syscall_64+0x115/0x870 [ 1489.105411][T23813] ? clear_bhb_loop+0x40/0x90 [ 1489.107139][T23813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.109541][T23813] RIP: 0033:0x7fdb7bf9de59 [ 1489.111433][T23813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1489.119289][T23813] RSP: 002b:00007fdb7cdd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1489.122486][T23813] RAX: ffffffffffffffda RBX: 00007fdb7c225fa0 RCX: 00007fdb7bf9de59 [ 1489.125278][T23813] RDX: 0000200000000200 RSI: 00000000c03064ca RDI: 0000000000000003 [ 1489.128434][T23813] RBP: 00007fdb7c033e6f R08: 0000000000000000 R09: 0000000000000000 [ 1489.131746][T23813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1489.135660][T23813] R13: 00007fdb7c226038 R14: 00007fdb7c225fa0 R15: 00007ffd523f5678 [ 1489.138636][T23813] [ 1489.139702][T23813] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1489.142508][T23813] CPU: 1 UID: 0 PID: 23813 Comm: syz.1.14654 Tainted: G L syzkaller #0 PREEMPT(full) [ 1489.146685][T23813] Tainted: [L]=SOFTLOCKUP [ 1489.148401][T23813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1489.152658][T23813] Call Trace: [ 1489.154271][T23813] [ 1489.155701][T23813] dump_stack_lvl+0x100/0x190 [ 1489.157753][T23813] vpanic+0x552/0x970 [ 1489.159331][T23813] ? __pfx_vpanic+0x10/0x10 [ 1489.161130][T23813] panic+0xd1/0xe0 [ 1489.162594][T23813] ? __pfx_panic+0x10/0x10 [ 1489.164115][T23813] check_panic_on_warn.cold+0x19/0x34 [ 1489.165941][T23813] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 1489.168372][T23813] __warn.cold+0x191/0x318 [ 1489.170278][T23813] __report_bug+0x30f/0x440 [ 1489.172522][T23813] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 1489.175287][T23813] ? __pfx___report_bug+0x10/0x10 [ 1489.177395][T23813] ? __lock_acquire+0x49f/0x1a40 [ 1489.179308][T23813] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 1489.181706][T23813] report_bug+0xb2/0x220 [ 1489.183418][T23813] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 1489.185866][T23813] handle_bug+0x16a/0x2a0 [ 1489.187778][T23813] exc_invalid_op+0x17/0x50 [ 1489.189786][T23813] asm_exc_invalid_op+0x1a/0x20 [ 1489.191976][T23813] RIP: 0010:__alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 1489.194802][T23813] Code: e9 8d fb ff ff 31 d2 be 28 12 00 00 48 c7 c7 a0 64 e1 8b e8 bb b0 68 ff 2e 2e 2e 31 c0 e9 02 ed ff ff c6 05 7a 8f 9d 0e 01 90 <0f> 0b 90 e9 6f df ff ff 48 c7 c7 40 9c d3 8e 45 89 f7 44 8b 74 24 [ 1489.202421][T23813] RSP: 0018:ffffc900075a7728 EFLAGS: 00010246 [ 1489.205154][T23813] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1489.208660][T23813] RDX: 0000000000000000 RSI: 1ffff92000eb4eff RDI: 0000000000040cc0 [ 1489.211748][T23813] RBP: 0000000000000012 R08: 0000000000000005 R09: 0000000000000009 [ 1489.214741][T23813] R10: 0000000000000012 R11: 0000000000000000 R12: 0000000000040cc0 [ 1489.218046][T23813] R13: 1ffff92000eb4f3d R14: ffffffff9b752444 R15: 0000000000000001 [ 1489.221717][T23813] ? find_held_lock+0x2b/0x80 [ 1489.223608][T23813] ? is_bpf_text_address+0x8a/0x1a0 [ 1489.225659][T23813] ? is_bpf_text_address+0x8a/0x1a0 [ 1489.227695][T23813] ? bpf_ksym_find+0x128/0x1c0 [ 1489.229532][T23813] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1489.231947][T23813] ? is_bpf_text_address+0x94/0x1a0 [ 1489.233951][T23813] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1489.236943][T23813] ? __pfx_widen_string+0x10/0x10 [ 1489.239407][T23813] ? __kernel_text_address+0xd/0x30 [ 1489.241516][T23813] ? unwind_get_return_address+0x59/0xa0 [ 1489.243755][T23813] ? arch_stack_walk+0xa6/0xf0 [ 1489.245653][T23813] ? __pfx_stack_trace_save+0x10/0x10 [ 1489.247731][T23813] ? stack_depot_save_flags+0x27/0x9d0 [ 1489.249833][T23813] ? __lock_acquire+0x49f/0x1a40 [ 1489.251901][T23813] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1489.254451][T23813] ? policy_nodemask+0xed/0x4f0 [ 1489.256760][T23813] alloc_pages_mpol+0x1fb/0x540 [ 1489.258797][T23813] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1489.260960][T23813] ___kmalloc_large_node+0xe5/0x120 [ 1489.263017][T23813] __kmalloc_large_node_noprof+0x1c/0x70 [ 1489.265188][T23813] __kmalloc_noprof+0x5a1/0x820 [ 1489.267081][T23813] ? drm_syncobj_array_find+0x34/0x3a0 [ 1489.269241][T23813] drm_syncobj_array_find+0x34/0x3a0 [ 1489.271435][T23813] drm_syncobj_timeline_wait_ioctl+0x236/0x390 [ 1489.274183][T23813] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 1489.276980][T23813] ? find_held_lock+0x2b/0x80 [ 1489.278898][T23813] ? drm_dev_exit+0x41/0x60 [ 1489.280707][T23813] ? drm_dev_exit+0x41/0x60 [ 1489.282505][T23813] drm_ioctl_kernel+0x1f3/0x3e0 [ 1489.284421][T23813] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 1489.287022][T23813] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1489.289259][T23813] drm_ioctl+0x5e6/0xc60 [ 1489.291274][T23813] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 1489.294438][T23813] ? __pfx_drm_ioctl+0x10/0x10 [ 1489.296478][T23813] ? selinux_file_ioctl+0x13b/0x290 [ 1489.298579][T23813] ? selinux_file_ioctl+0xb6/0x290 [ 1489.300580][T23813] ? __pfx_drm_ioctl+0x10/0x10 [ 1489.302419][T23813] __x64_sys_ioctl+0x18e/0x210 [ 1489.304323][T23813] do_syscall_64+0x115/0x870 [ 1489.306137][T23813] ? clear_bhb_loop+0x40/0x90 [ 1489.308093][T23813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.310436][T23813] RIP: 0033:0x7fdb7bf9de59 [ 1489.312453][T23813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1489.320630][T23813] RSP: 002b:00007fdb7cdd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1489.324071][T23813] RAX: ffffffffffffffda RBX: 00007fdb7c225fa0 RCX: 00007fdb7bf9de59 [ 1489.327356][T23813] RDX: 0000200000000200 RSI: 00000000c03064ca RDI: 0000000000000003 [ 1489.331428][T23813] RBP: 00007fdb7c033e6f R08: 0000000000000000 R09: 0000000000000000 [ 1489.334772][T23813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1489.337757][T23813] R13: 00007fdb7c226038 R14: 00007fdb7c225fa0 R15: 00007ffd523f5678 [ 1489.340798][T23813] [ 1489.342977][T23813] Kernel Offset: disabled [ 1489.344750][T23813] Rebooting in 86400 seconds..