last executing test programs: 4m52.197280035s ago: executing program 3 (id=940): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newsa={0x1b4, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0xffffffffffffffff}, {0xffffffff}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0xc8, 0x1, {{'sha1\x00'}, 0x400, "c1fc1176d858b905a1db4ff6cb8fc1f08589966e6e99a74a5f55ad725a1fe0dac791824a72fb9792a0f47d88e0dea44b765bb9c761ab943014be9e1e175df8adf35ac57e0121ada0c1320d3ef5a6b590b9ba9fff4a2475f0fa2502ec8fe225a6745191fe376e10b191eeb65be657050dddd68d5e0ea4c83ac887a61b5606d125"}}]}, 0x1b4}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x180) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r4, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000fc0)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x84, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xf9}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x44}, @IPSET_ATTR_SIZE={0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xf8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x20000880) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) close(r0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x10000000000) epoll_create1(0x80000) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r9, 0x40046208, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x69e9174b7d70c7b3, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40884}, 0xc857a35317b04aca) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x134, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8, 0x26}}}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x6}, @NL80211_ATTR_PBSS={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x155ec000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_HE_OBSS_PD={0x70, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x13}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x18}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x11}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "e5b6587b24158511"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "5d553abf140883b4"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "0d822f428f3e6a3c"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x8}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xc}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_HE_OBSS_PD={0x70, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x13}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xa}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x2}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "5a714a6838ac4e96"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x12}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, 'y\v [\x00%O\x00'}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "522c71ec21536ef7"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x16}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x810}, 0x4011) 4m52.104519291s ago: executing program 3 (id=941): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1010}, {r0, 0x8010}], 0x2, 0x5) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x4, 0x2d}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) utimes(&(0x7f0000000100)='./file0\x00', 0x0) 4m51.750519746s ago: executing program 3 (id=942): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0x200) r1 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_icreq_pdu(r1, &(0x7f0000000000)={{0x0, 0x0, 0x80, 0xe9}, 0x0, 0x0, 0x2, 0xa}, 0x80, 0x0, 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, r2, &(0x7f0000000140)) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r3, r1, 0x0) (async) ioctl$sock_ifreq(r3, 0x8949, &(0x7f0000000180)={'ip6gretap0\x00', @ifru_map={0x9, 0xa, 0x80, 0x4, 0x3, 0x9}}) (async) r4 = openat$uinput(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x7) r5 = mq_open(&(0x7f0000000200)='-(.#\x00', 0x40, 0x48, &(0x7f0000000240)={0x2, 0x7, 0x3, 0x400}) ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) (async) r6 = openat$sr(0xffffff9c, &(0x7f0000000280), 0xc00200, 0x0) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x4e24, @private=0xa010101}, 0x10) (async) connect$inet(r6, &(0x7f0000000300)={0x2, 0x4e20, @multicast2}, 0x10) recvfrom$inet_nvme(r6, &(0x7f0000000340)=""/226, 0xe2, 0x10001, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3, 0x1}}, 0x80) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r6) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r9, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x50) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000840)={'virt_wifi0\x00', &(0x7f0000000740)=@ethtool_eeprom={0x4f, 0x2, 0x7, 0xdb, "cf7a495946ae240ecc87eb61950ae60d92e9696a65658a310df828876283cfc4e19dca3e19154f97d36b90b8ed7e4f38f316e23e3a70679017a2626412823d7c164247dce7422780f994335dc33b149f6cf52744bf697e4ead2b1f8bd577ef2e5bcf7ff18f2f7ba7b71330d973c3fd50e7f330a8b4c891747b5c132a457838212c2866a021370360c5b2d9fdf590dc4d3ff1e5461191251f3b1c54aef688def7736b7befa8ce4277da1df56a339a087f9b42110aaaac88abe1af48b143dfc2b5d28368e22fced45dac2f758b443f2f47435064edcd33184160cf1e"}}) (async) openat$loop_ctrl(0xffffff9c, &(0x7f0000000880), 0xa0000, 0x0) (async) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000008c0), &(0x7f0000000900)=0x4) (async) syz_socket_connect_nvme_tcp() ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000940)={0x1, 0x0, [{0x2d1, 0x0, 0x81}]}) (async) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1c) (async) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, 0x453, 0x10, 0x70bd27, 0x25dfdbfc, "3ab3478cce7ac4d36e04d5a22a897227ebb1538ac8303f4b2aac9aeeaf159a224310238ec12137013c8361c4b3f3f216ed09bc0442a8eab4a7be3a6cf5f9f4effcbdf6f33cb62cef0e0ffd57b0eabcf7dc79bd", ["", "", "", "", "", "", ""]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x8080) 4m51.670301501s ago: executing program 3 (id=943): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r1, 0x40086f52, &(0x7f0000000140)={0x3d, &(0x7f00000001c0)=[{0x26, '\x00', @st={0x4, [{0x0, @uvalue=0x164c}, {0x0, @uvalue=0x3}, {0x2, @uvalue=0x27d}, {0x0, @uvalue=0x99}]}, 0x8}]}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x100000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)={0x7, [0x5, 0x3, 0x4, 0xce, 0x5, 0x57a, 0xd747]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r6, 0x2, 0x13, r5, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x50000, 0x118000, 0xfffffffd}) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r8, @ANYBLOB="0800020096"], 0x20}}, 0x40000c0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}}, 0x440b0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="d5ec75ce233ac1ee6cfce8cd3c6283fa6e30d8f761f4643dc0bdc4f5e45761eb017f15439cacd25fb72146d6568a9a1ec6edf26b69d1b6221b3e06c50e33fdb64544f640d0d18107e30a04ace059261bdefd7d4358151e53ff74eb52b9580238c544766068a31341c10f5e7bad7974cb9c66f87050524321d1738040f235917925fb293ee353b3f4c5f2da58114d44b8414c94b9a987e307", 0x98}, {&(0x7f0000000480)="a12af157659596eb9c0b8c41bd7d8d372b840d75ebf7ab5d38f7bc88e0ec383a32180f32c3e7519d0ad852b579988b13c547f75308f8ca66d0ee2283a7eab6d6ee29a9249ee07d87f725614cf976c9fad25e7d2c8680f18eb8c07a7635ca3e77b093dbd2691c306ff987050475cd722fd489b1bd85a6268477b7157f7f9dcb309b6d83", 0x83}], 0x2, &(0x7f00000005c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @remote}}}], 0x18}}, {{&(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000640)}], 0x1, &(0x7f0000000740)=[@ip_ttl={{0x10, 0x0, 0x2, 0x3}}, @ip_ttl={{0x10}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @multicast2}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r8, @remote, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @rand_addr=0x64010102, @rand_addr=0x64010100}}}], 0x68}}], 0x2, 0x40010) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001a00010000020000000000"], 0x1c}}, 0x0) 4m51.288288629s ago: executing program 3 (id=948): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) prlimit64(0x0, 0xc, &(0x7f0000000480)={0x5, 0x8f}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000380)=0x6) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) (async) listen(r4, 0xffff7ffc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x4) (rerun: 64) syz_io_uring_setup(0x370a, &(0x7f0000000600)={0x0, 0xe808, 0x2, 0x2a, 0x2ce, 0x0, r5}, &(0x7f0000000500), &(0x7f0000000000), &(0x7f0000000000)) r6 = syz_open_procfs(r1, &(0x7f0000000580)='oom_score\x00') lseek(r6, 0x2004, 0x0) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000000280)={0x0, 0x0}) r7 = gettid() timer_create(0x0, &(0x7f0000000400)={0x0, 0x25, 0x4, @tid=r7}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, 0x0, 0x0) r8 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) (async) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYRES64=r2], 0x34}, 0x1, 0x0, 0x0, 0x49045}, 0x400d4) (rerun: 64) 4m51.138543939s ago: executing program 3 (id=952): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0xc0, 0x0, 0x0, 0x8001, 0x7fffffff, 0x0, 0x1676ab34, 0xdffffff9, 0x0}) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @remote}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x20000023896) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40046432, &(0x7f00000000c0)=0x368c) 4m36.135614538s ago: executing program 32 (id=952): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0xc0, 0x0, 0x0, 0x8001, 0x7fffffff, 0x0, 0x1676ab34, 0xdffffff9, 0x0}) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @remote}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x20000023896) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40046432, &(0x7f00000000c0)=0x368c) 4m33.899622703s ago: executing program 0 (id=1071): write$snddsp(0xffffffffffffffff, &(0x7f0000000000)="da0327efb03995e0261524957c86427964bb854c5103de6a707e5c48f7fa399c6278fa2fc1d3698482bc60a2ff3d9c3c687e127b107b3e339f9094c47d02629c217661fcdb5f00528fff090df3fa31968f7fed11bb0d82d05d2941485d730ae68ad9564087b4a6bfd2684d1fb245b8c455d2fe4bd3567c469475e99fa5a67f4e8c2aa1", 0x83) r0 = memfd_secret(0x0) r1 = syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x0, 0x24900) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x1ff}}, './file0\x00'}) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)=0x0) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000600, r3, &(0x7f0000000180)={0x7, 0x10, 0x1, 0x7}) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, 0xffffffffffffffff, 0x16, 0x0, @val=@kprobe_multi=@syms={0x1, 0x2, &(0x7f0000000240)=[&(0x7f00000001c0)='/dev/dvb/adapter#/demux#\x00', &(0x7f0000000200)='\x00'], 0x0, 0x7}}, 0x30) r5 = openat$tun(0xffffff9c, &(0x7f00000002c0), 0x2040, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000300)) io_setup(0x40, &(0x7f0000000340)=0x0) io_submit(r6, 0x2, &(0x7f00000005c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x401, r5, &(0x7f0000000380)="a9836f5e41c2d79d6138b40c1c84f0eb2774721c839c14d2c165b21e882ad4d7496bdfceb4dda59048b8f9fae6cf6d1100439fca363a37a1bca2b8d4582661b52e836526b84eece8dd90a077da7983f54bb8fb814441ed24c56e723f67aed62b53461bf92e1b742ee394aa313573edf94b02d8a1c8d679b7288ac1286aa57b87664bb5b11ff5c52d7009de2376129e1f71113a5375562a40f44da8147a9d06735bf4c8b6880bd41112039d4ebe575a714880a7d374a5a38f264c1ec81bbe7a5c81713f8e2ec1a9f6d30cc5c407aa77b0aa521b08d595882e25c7857c5af9a10dd69d88967f", 0xe5, 0x6, 0x0, 0x0, r2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x9, r5, &(0x7f00000004c0)="16b3b2be90f9f5d8e33f130f5ea11b9c9aa6e453889f7f5f49a22293aa541a7048cc497000952eca40472b9bee38475345371dc2b154c24ff997495ce8772b5130ba0aa9f178cde99161a06a7d33c71165f9a982d08caf6f17bb1ad462e2365bd74c0b8d57f902f605e95bfae428bb06538338f0913ddbcc947328463d4ef734055fde28", 0x84, 0xc, 0x0, 0x1, r0}]) r7 = syz_ublk_setup_io_uring(0x4ae3, &(0x7f0000000600)={0x0, 0x3, 0x80014, 0x1, 0x3a8, 0x0, r0}, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000740)) connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e23, 0x0, @local, 0x5}, 0x1c) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x4) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@getstats={0x1c, 0x5e, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, 0x3}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x6fcb5f4333b541cf}, 0x24008081) r9 = syz_open_dev$audion(&(0x7f0000000940), 0x3, 0x0) poll(&(0x7f0000000980)=[{r1, 0x41}, {r0, 0x22}, {r9, 0x7030}], 0x3, 0x8) r10 = eventfd2(0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000a80)={r2}) pipe2$9p(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) io_submit(r6, 0x3, &(0x7f0000000cc0)=[&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x2, 0x5, r7, &(0x7f00000009c0)="357c8f60fcab48f503d7e0262d84501456e3504d27c12c8bdb9d274629fe9ab18c0b735a14b8a947459770fb4f78d1a32400aeadfb792c32b7ebe494e901939f6dc28ed1ab34bc7faebce76a5129ab2014698d11ec3590f52f94572779aa63", 0x5f, 0xffa, 0x0, 0x2, r10}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x5, 0x5, r11, &(0x7f0000000ac0)="691bf94496a9befe", 0x8, 0x6b, 0x0, 0x0, r2}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, r13, &(0x7f0000000b80)="ce9ce42c6f63d7bb46410f014f6280a2a46690f7ff121ec13317eff066bec24bf83cad1c37b8468556fef32e3b2af15ee110d3df6949c983c5e59ace03822b762ea9672b3e8a0e75c9d763715389a27c9e4d54770dbafbd793dc66ff1501424691b07c59edb59eee3f907870aa64879a10e2c143b4d63b5559bcb8b54aeb6697f9635c211d60d1df9d07ea0cb996d0078a794d39bf4506b1fa4cb3c7f17024f962f7bec7fbd0ce8d6698b7065325e6a513d7a44d1df2fb25fd74a79d2d87ba84ea2ec3c247740d42c1aa0b595ead2f9e40362afb4f583c59f848008bdec65e6fcb08d338165eca993d9c75", 0xeb, 0x3, 0x0, 0x2}]) openat$adsp1(0xffffff9c, &(0x7f0000000d00), 0x101000, 0x0) ioctl$TIOCSPTLCK(r9, 0x40045431, &(0x7f0000000d40)) r14 = openat$vimc0(0xffffff9c, &(0x7f0000000d80), 0x2, 0x0) ioctl$VIDIOC_S_INPUT(r14, 0xc0045627, &(0x7f0000000dc0)=0x1587) setsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f0000000e00)=0x35, 0x4) syncfs(r4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r12, &(0x7f0000000e40)={0xb0000001}) 4m33.789059244s ago: executing program 0 (id=1072): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r4 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x20000004}) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) epoll_pwait(r4, &(0x7f0000000340)=[{}], 0x1, 0x12, 0x0, 0x0) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1023124706ffffff", @ANYRES64=0x3], 0x10) (async) ioprio_set$pid(0x3, 0x0, 0x0) (async) r6 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x2, 0x3, 0x5, 0x6, 0x3, 0x4, {0x1, 0x3ff, 0xff, 0x4, 0x100, 0x4, 0x9, 0x7ffffffd, 0x9, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080)=0x2, 0x7f03) 4m33.719982002s ago: executing program 0 (id=1073): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x0, 0x0, 0x4020, 0x0, "bb02a3c344ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x800) r2 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r3, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x20, 0x8000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r9, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1008d1}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0xa4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r4, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 4m33.621764649s ago: executing program 0 (id=1074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000040), 0x808000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/235, 0xeb}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x6}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000003700)=ANY=[@ANYBLOB="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"/2542], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r4) set_thread_area(&(0x7f0000000400)={0x1, 0x100000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x1}) keyctl$clear(0x7, r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind'}}}]}) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$CDROMVOLCTRL(r5, 0x5392, &(0x7f0000000080)={0x2, 0xc3, 0x8, 0x5}) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r2, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) syz_clone(0x4000100, &(0x7f0000000240)="86a51773faa8ffa7373148919bb3ac8c65f63abf989fe8b6652e8c4e2a102b0dc0a52ccb924c26254ec37f6852a8b6b5f28e31bc51a5e4cf206344d60299d8dfacc9c3e7c35d54db71071d14b06cfbe82777fb7aed55cadf57fe010cde943949e36ad7a627221a92fa76ad156cb410c56690fad4d4314f027ebfba8a6b4bcaa8b991c65bc84e9f7226c03e7644518537bd0706664d5e2359a871d40bdb5cd3e7f56d026ac446dedde3e4b5cca8d13f485041ec0c0b7c52edb4b7b224c137f6c156fe01e882d382218e187441753da02bb904", 0xd2, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="cf4d91ec82d76e") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001400)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) close(r0) 4m33.363709454s ago: executing program 0 (id=1076): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100039042abd70000040000000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000200012800b0001006272696467650000100002800a00"], 0x40}}, 0x40048814) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x8, 0x0, 0x0, 0xf, 0x1, [], 'I'}]}}, 0x0, 0x2a, 0x0, 0x1, 0x20000000}, 0x28) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x36, 0x301, 0x70bd2d, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000300)='befs\x00', 0x200000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x1e, 0x4, 0x0) connect$can_bcm(r3, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000001f40), 0x0, 0x1, 0x0, 0x0, r5}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2}, 0x40440) sendmsg(0xffffffffffffffff, 0x0, 0x4) creat(&(0x7f0000000200)='./file0/../file0\x00', 0x82) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@deltaction={0x19c, 0x31, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff0001}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x3ffe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcd2}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setrlimit(0xd, &(0x7f0000000300)={0x8, 0x4}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, 0x0) 4m32.668262727s ago: executing program 0 (id=1077): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xa, 0xffff]}, 0x8) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x50) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, &(0x7f0000000200)=0x1) r3 = syz_open_dev$vcsa(&(0x7f0000000240), 0x92, 0x8040) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xffff, 0x14}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4084}, 0x4040000) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r1, 0x0, 0x70bd2d, 0x1, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf2d6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c0}, 0x20000800) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6dff4cb9f940"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000101}, 0x4004810) r4 = dup3(r3, r3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xc) ioprio_set$pid(0x2, r5, 0x6004) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000680)={0x4, 0xa4, 0x9}) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f00000006c0)="772889291297a3b5deb65fce802c2a470c434b9f4c9dac560fb41a3884b513dde47eef394f37da1b279f2ba7f8c6ca4a64b0e975f1bead26690084c86d8acd44dfd63e586ce452589902daba5869626b9218f4c28c3374d8d40daf01c3f1a1e684acde99052b1d480cd2670b58beb6c519f5cb9a7544141727782b8b") r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x74, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2723}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040044}, 0x4000000) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x4, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x18}, 0x20000805) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000009c0)=0x0) ptrace$setregs(0xd, r7, 0x46, &(0x7f0000000a00)="c101025f5d1fa26080858a508b20fae647b0a8e9322bda5716382a9c1c703b55257137e4b32d99874971b4f1f1ee876f610a1c3a6e7ff3a556990f27ef") gettid() socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r8, &(0x7f0000000a80)=@file={0x1, './file0\x00'}, 0x6e) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000ec0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2ec, r9, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5f73}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29ef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40d2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdd9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5f}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf880}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdfb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x73c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd326}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc860}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xaf}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xce}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth0\x00'}}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x80}, 0x40081) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000f00)={0x4a, "47a5159247dbd90d1b2d30d01858811c8e11fd364760506acc8ae31520ad4ec34635c5a5bc95bd3a2091d67627d3fd51f1c54f43a491273ca39b857cc03202f5cd19eccba3f33217d519a1fc57c79e70479097b5d7b86ef46df39ea21cc45ee8cf9645125909bdafc6d8ea46a7e8c9473919e557c3c8f405c3e61525c3ac8dd0dea26b7ae0941ee053867d9bd84c70c78b718260d5f49aac429dfcc7a8e79154bfab96e751ce4058fde1d493e4f44cdd735a1ccd5aec59276b583932a55b7ef6d4cd9a23fea9624dd5c8c9ac49195de614e9926a5050d487d9238d2f0b7f4cd307fb52e207315b902315068d35fd44b96eeb0fc2ff77d49022748d23679bea1d46eaa8ce216efc73369a592f49a042a71f38c26417e5f0fa91597dc6f259e2530d857aa67a740766a2819491b51cce6aa75d9b075aa246905c78b3051a7bfd2d188b2d10f5c42c541b8cb9063f7c99f9f4ffa423c11089317be60f1f4269c17842d0797a676d8d142856685a1dedff5eb9b6ae62159ba6d3d2339229cf99af96ad502179cbd21b467a3d3f7851a9ef6186bcf4956af2aea00db1a4658922b68dd650e8308e86f3f9f5ef22aefd6c372e9429e517fa7e23aaa9638d02e58294748672b992346ffeea3efe585563fc6c787273cf194868670d25e48b2233a6bf89a689674a2e513d229259e61aa0066936f866ab0c845d306123696d1c6774abb5"}) utimes(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)={{}, {0x77359400}}) ioctl$PPPIOCGIDLE(r4, 0x8008743f, &(0x7f00000011c0)) 4m32.614299808s ago: executing program 33 (id=1077): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xa, 0xffff]}, 0x8) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x50) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, &(0x7f0000000200)=0x1) r3 = syz_open_dev$vcsa(&(0x7f0000000240), 0x92, 0x8040) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xffff, 0x14}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4084}, 0x4040000) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r1, 0x0, 0x70bd2d, 0x1, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf2d6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c0}, 0x20000800) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6dff4cb9f940"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000101}, 0x4004810) r4 = dup3(r3, r3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xc) ioprio_set$pid(0x2, r5, 0x6004) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000680)={0x4, 0xa4, 0x9}) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f00000006c0)="772889291297a3b5deb65fce802c2a470c434b9f4c9dac560fb41a3884b513dde47eef394f37da1b279f2ba7f8c6ca4a64b0e975f1bead26690084c86d8acd44dfd63e586ce452589902daba5869626b9218f4c28c3374d8d40daf01c3f1a1e684acde99052b1d480cd2670b58beb6c519f5cb9a7544141727782b8b") r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x74, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2723}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040044}, 0x4000000) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x4, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x18}, 0x20000805) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000009c0)=0x0) ptrace$setregs(0xd, r7, 0x46, &(0x7f0000000a00)="c101025f5d1fa26080858a508b20fae647b0a8e9322bda5716382a9c1c703b55257137e4b32d99874971b4f1f1ee876f610a1c3a6e7ff3a556990f27ef") gettid() socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r8, &(0x7f0000000a80)=@file={0x1, './file0\x00'}, 0x6e) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000ec0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2ec, r9, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5f73}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29ef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40d2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdd9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5f}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf880}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdfb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x73c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd326}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc860}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xaf}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xce}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth0\x00'}}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x80}, 0x40081) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000f00)={0x4a, "47a5159247dbd90d1b2d30d01858811c8e11fd364760506acc8ae31520ad4ec34635c5a5bc95bd3a2091d67627d3fd51f1c54f43a491273ca39b857cc03202f5cd19eccba3f33217d519a1fc57c79e70479097b5d7b86ef46df39ea21cc45ee8cf9645125909bdafc6d8ea46a7e8c9473919e557c3c8f405c3e61525c3ac8dd0dea26b7ae0941ee053867d9bd84c70c78b718260d5f49aac429dfcc7a8e79154bfab96e751ce4058fde1d493e4f44cdd735a1ccd5aec59276b583932a55b7ef6d4cd9a23fea9624dd5c8c9ac49195de614e9926a5050d487d9238d2f0b7f4cd307fb52e207315b902315068d35fd44b96eeb0fc2ff77d49022748d23679bea1d46eaa8ce216efc73369a592f49a042a71f38c26417e5f0fa91597dc6f259e2530d857aa67a740766a2819491b51cce6aa75d9b075aa246905c78b3051a7bfd2d188b2d10f5c42c541b8cb9063f7c99f9f4ffa423c11089317be60f1f4269c17842d0797a676d8d142856685a1dedff5eb9b6ae62159ba6d3d2339229cf99af96ad502179cbd21b467a3d3f7851a9ef6186bcf4956af2aea00db1a4658922b68dd650e8308e86f3f9f5ef22aefd6c372e9429e517fa7e23aaa9638d02e58294748672b992346ffeea3efe585563fc6c787273cf194868670d25e48b2233a6bf89a689674a2e513d229259e61aa0066936f866ab0c845d306123696d1c6774abb5"}) utimes(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)={{}, {0x77359400}}) ioctl$PPPIOCGIDLE(r4, 0x8008743f, &(0x7f00000011c0)) 30.705297092s ago: executing program 2 (id=2120): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x2}, 0x8) close(r0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) r4 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r4, &(0x7f0000000100)={0x14}, 0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0004000206030000000000000000000d0000000c000300686173683a6970000500040000000000090002007379010006000000"], 0x3c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160004000000000000000000fe880000000000000000000000000001ff0100000000000000000000000000010000000000000082000000002b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000096cd4c7d212ca3702bb6000000aa000000002b"], 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x180080) ioctl$BLKROTATIONAL(r6, 0x127e, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000009ac0)=[{&(0x7f0000000880)=@in={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000bc0)=[{&(0x7f00000008c0)="1d", 0x1}], 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000200030001010e00100000008400000007000000ac14143400000000"], 0x24, 0x1}], 0x1, 0x8ddcc1c97e7a01d0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000023c0)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000200)="e099547ebb87dbe9abc89bb68658917bdb181fa28b952936b3d082", 0x0, 0xfffffffc, 0x0, 0x3d, 0x12, 0x0, 0x0, 0x4, 0x0, 0xfffffffe}, 0x4c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005480)=@newtaction={0x3024, 0x30, 0x300, 0x4, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x21}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x2fdc, 0x1, [@m_ct={0xb0, 0xb, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_LABELS={0x14, 0x7, "19e00bca3a4dc607a2a828b017d91e16"}]}, {0x6b, 0x6, "cf89e7c60192c0149124540b2e3083b4b0dfea0011b7400c043a6342b6ad4ead8b58b7d45873aecd64b376ca624b9c4af0ea1615a35555c8edc57f4766af4f8bbc8705ef57b9d81f438175780d9f7733c6e805c4406c8c1c9f906b08f0f2fcf23b89d4c3afc7a2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x268, 0x5, 0x0, 0x0, {{0x7}, {0x204, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xdc, 0x6, {0x133, 'filter\x00', 0x9, 0x9, "6c9c28c69de26aff25ab8943a00bf1bb7f685d36d272398a8717d1bbb6f1ded3f637558eb464fc844cb524a028494476b75b507272e5f24d27d88ae84654e5d315b824d3fda3b9ec18f52578a4fceb7082d45781f398906f06db2a8fc43162c0875ffdc4d2b68c0d056f6d11806cf0b660be0af8fc677f79cd8985bd03db41d6b0d52272d6f0718d18ced01b1470a456ed0483d3924660c58fda4519b4d3edf072f0fcd7c0aaa31333e1fd0e1899631aed08"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x9f, 0x6, {0x8, 'nat\x00', 0x9d, 0x0, "5af748d7371e22f1c2ac08cd523acd6b2cb648f4c582daedaa200ba5970fcec1dc215e3ad4f99afba1102356994a9691da3550513fa9a6b50f195b4cb09ee53a926f663d1e14fade9936af49913f930afad56c07c655ffbdfbf0225fd2cfd4bd4e8fd843b6a5bbf4aeb06cf17b9bd7c33791678403"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7fff}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}]}, {0x3e, 0x6, "a6dd24d4501a3585fc509743636af4e04027cae14c397a4333d7e1ffcf5b0c1a12f85190bee260e106c3b471a934e52a82e406e58e9dcc9427cc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x26cc, 0x19, 0x0, 0x0, {{0xb}, {0x262c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3f2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0x81, 0x1, 0x9, {0xff, 0x0, 0x200, 0x4, 0x6, 0x3d9}, {0xfe, 0x0, 0x2, 0x1, 0x10, 0x8}, 0xcb, 0x7, 0x93}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x26d8, 0x4, 0xffffffff, 0x0, 0x5, {0x0, 0x2, 0x6, 0xd, 0x9}, {0x0, 0x2, 0x1, 0x7, 0x6, 0x200}, 0x8, 0x77e, 0x8}}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xfffffbb2, 0x0, 0xd, 0x9, 0x2, 0xfffffffd, 0x401, 0x7, 0xc2, 0x9, 0xffff, 0x1000, 0x0, 0x5, 0x7, 0x9, 0x3, 0x8, 0x9, 0xfffffffb, 0x6, 0x7, 0x101, 0x11, 0xffffffff, 0x0, 0x3, 0x8, 0x3, 0xb, 0xffff, 0xc, 0x1ff, 0x1, 0xb, 0x101, 0x0, 0x7, 0x7, 0x100, 0x8000, 0x1ff, 0x6, 0x2, 0x6, 0x28, 0x7f, 0x3, 0xfffffff9, 0x4, 0x10000, 0x5, 0xcef5, 0x1, 0x92, 0x7f, 0x6, 0x80000001, 0x2, 0x9, 0x4, 0x26, 0x6, 0x101, 0x200, 0x8, 0xa214, 0x7f, 0x2, 0xc043, 0x8, 0x2dec, 0xc4e, 0x9, 0x4, 0x10000, 0x7ff, 0x1, 0x8, 0x5, 0x101, 0x5, 0x4, 0x6, 0x4, 0x1d020000, 0x3, 0x6da1, 0x4, 0x100, 0x80000001, 0x6, 0x6, 0x80, 0x1, 0x5, 0xfeda, 0x3, 0x7, 0x7bc, 0x81, 0x7, 0x4, 0x0, 0x3, 0x9, 0xffffffff, 0x4, 0x8, 0x4, 0x61c, 0x8, 0x8, 0x80000000, 0x2, 0x5, 0x0, 0xb, 0xff, 0xb30, 0x563, 0x9, 0x6, 0x7, 0xff, 0xd68, 0x9, 0x46d, 0x4, 0x8, 0x6, 0xce0, 0x1ff, 0x10000, 0x9, 0x7, 0x50, 0x1, 0x3, 0x7, 0x10001, 0x1, 0x2, 0xff, 0xff, 0x5, 0x8, 0x9, 0x8, 0x401, 0x5, 0xfffffff3, 0x6, 0xfffff001, 0x6, 0x401, 0x4, 0x6, 0x21, 0x4000000, 0xb3d7, 0x6, 0x2b2c7d64, 0x4, 0x8001, 0x48a, 0x5, 0x1000, 0x8, 0x1, 0x2, 0x40000, 0xe4, 0x3, 0x79ed, 0xc1, 0x0, 0xcb3, 0x80, 0x10000fff, 0x0, 0x9, 0x4, 0x400, 0x6, 0x8001, 0x9, 0x0, 0xb4, 0x3, 0x2, 0x1, 0x3, 0xd, 0x4, 0x80, 0x7fff, 0xb, 0x1, 0x3c, 0x3, 0x77618, 0x0, 0x8, 0x7fffffff, 0xffff7fff, 0x0, 0x81, 0xffffffff, 0x7, 0xfff, 0x1, 0x3, 0x7, 0xfffffff8, 0x8e, 0x8276, 0xac, 0x6, 0x3, 0x6, 0x5, 0x80, 0x9, 0x7d6, 0x240000, 0x1ff, 0x8, 0x2, 0x8, 0x800, 0x8, 0x8, 0x4, 0x1, 0x4e5e, 0xffffffff, 0x4, 0x8001, 0x5, 0x800, 0x2, 0x723, 0x3, 0x4, 0x5, 0x2, 0x8, 0xfff, 0xfffffff9, 0x2, 0x1, 0xfff, 0x4, 0x288]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa03, 0x1, 0x1, 0x1, 0xa, {0x7f, 0x0, 0x2, 0x0, 0x1, 0xc}, {0x7, 0x0, 0x0, 0xfa9, 0x0, 0x200}, 0x1369d054, 0x22, 0x5}}], [], [@TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x1, 0x1, 0x0, 0x3ff, {0x5, 0x0, 0x5, 0x7, 0xb, 0x64}, {0xc2, 0x2, 0x8, 0x2, 0x1}, 0xffff, 0x2, 0x5}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x7, 0x8, 0x6, {0x0, 0x0, 0x6, 0xc5, 0xc, 0x5}, {0x3, 0x0, 0x7, 0x85, 0x7, 0x7}, 0x2, 0x4, 0x92}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x401, 0x7fffffff, 0x3, 0x0, 0x9, 0x3, 0xd779, 0x100, 0xffff, 0xe0cb, 0x5, 0x38000, 0x8, 0x10, 0x2, 0xa, 0x2, 0x200, 0x6, 0x3, 0x4, 0x1b, 0x8, 0x6, 0x7, 0xffffffff, 0x9, 0x0, 0x0, 0x6, 0x4, 0x3374, 0x0, 0x40, 0x7, 0x7, 0x0, 0x7, 0x225, 0x6, 0xffffffc0, 0x5, 0x2, 0x6, 0x3ad, 0x0, 0x2, 0x39c, 0xbf6, 0x0, 0x79, 0x0, 0x62, 0x2, 0x1, 0x3, 0x26972b38, 0x9cef, 0xb93e, 0xfa4, 0x1, 0x7, 0x40, 0x8, 0x2, 0x7, 0x3, 0x8, 0x1, 0xffffffff, 0x8, 0x3, 0x5, 0x9, 0x3, 0x6, 0xfff, 0x3, 0x3b79aae, 0x8de, 0x0, 0x3, 0x9, 0x6, 0x8, 0x200, 0xdb, 0x4, 0x4, 0xc, 0x5, 0xa72, 0x6, 0x8, 0x5, 0x1ff, 0x8, 0x6, 0xc5d, 0x4, 0xf, 0x6, 0x2, 0x6, 0x6, 0x7, 0xf7, 0x2, 0x7fff, 0xd, 0x2, 0x8000000, 0x2, 0x28, 0x1000, 0x148d, 0x5, 0xffffffbe, 0x7fff, 0x5, 0x6, 0x100, 0x7c74, 0x401, 0x1, 0x7, 0x10000, 0x59, 0x687d, 0x6, 0x0, 0x7, 0x4, 0x1, 0x17a5, 0x0, 0xfffff7ba, 0x101, 0xefc4429, 0x200, 0x6, 0x800, 0xc, 0xfffffffe, 0x0, 0x80, 0xd, 0x2, 0x8000, 0x8, 0x9, 0x0, 0xca8, 0x0, 0xfffffffd, 0xc, 0x777, 0x7, 0x0, 0x100, 0x0, 0x1, 0xffffa8b0, 0x9, 0x2, 0x7f3, 0xff, 0x0, 0x2, 0x5, 0x8, 0x7, 0x3, 0x5, 0x2, 0x10001, 0x3, 0x2, 0x3, 0xe, 0x980d, 0xfffffff7, 0x80000000, 0x4, 0x7, 0xdac, 0x80, 0x401, 0x8001, 0xfffffff8, 0x0, 0x3, 0x0, 0x3, 0xfffffff6, 0x3ac6d307, 0x7, 0x6, 0x2, 0x2b98, 0x34, 0x1, 0x100, 0xe85, 0x775, 0x40, 0xffff9d91, 0x6, 0x8bd4, 0x5, 0x1ff, 0x0, 0x800, 0xda, 0x21, 0x13, 0x4, 0x1, 0x5c1, 0x8, 0x100, 0x80000000, 0xfffffffd, 0x1, 0x8001, 0x200, 0x9, 0x4, 0x5, 0x10000, 0x2, 0x0, 0x101, 0xfffff1ab, 0x5, 0x5, 0x1ef, 0x8, 0xffff, 0x2, 0x3, 0xc391, 0x401, 0x2, 0x10, 0xfffffd31, 0x2, 0x9, 0xc, 0x7ff, 0x8001, 0x7, 0x3, 0x10, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6800, 0x2, 0x10000, 0x400, 0xfffffffe, 0x0, 0x1, 0x3, 0x9, 0x5, 0x20000, 0xcb6, 0x2, 0x400000, 0x9, 0x80d, 0xfff, 0x1, 0x3, 0x9, 0xffff, 0xfffffffa, 0x4, 0x6, 0x2, 0x3, 0x7, 0x1, 0x10a44dc1, 0xfffffff8, 0x2, 0xfffffffa, 0x5, 0x6, 0xd, 0x45e, 0x3, 0x3, 0xdb7f, 0x40, 0x8, 0x9, 0x6, 0x9, 0x6, 0x1, 0x5, 0xc1, 0x7f, 0x8, 0x2, 0xe249, 0x1, 0x1, 0xb6e8, 0x4, 0x2, 0x11, 0x5, 0x3, 0x3, 0x0, 0x7fffffff, 0x83c, 0xa, 0x400, 0x2, 0x7, 0x9, 0xf5, 0x4, 0x6, 0x767b, 0x40, 0x4, 0x5, 0x9, 0x4, 0x101, 0x9a080000, 0x401, 0x6, 0x5, 0x200, 0xe19, 0xa, 0x96, 0x0, 0x5, 0x423, 0x5, 0x10000, 0x9, 0x101, 0x6, 0xfffffff7, 0x97ae, 0x6, 0xa, 0x7, 0x5e, 0x0, 0x7ff, 0x4b0, 0x4, 0x9, 0x100, 0x7, 0xf, 0x3, 0x2, 0x1, 0x8, 0x0, 0x8, 0x800, 0xfffffff9, 0xfffe000, 0x0, 0x40, 0x400, 0x4, 0x1, 0x5, 0x200, 0x4, 0x8, 0x7, 0x646f, 0x1ff, 0xfff, 0x7fff, 0x5, 0x1, 0x1, 0x7f, 0x697, 0x4, 0xeb1, 0x10000, 0x3, 0x6, 0x97, 0x2, 0x6, 0xb, 0x5, 0x6, 0x165, 0x9, 0x5, 0xfffffffb, 0xaa, 0x9, 0x9, 0xe2, 0x2, 0x7, 0xd6c, 0x8000, 0x4e, 0x8001, 0x10001, 0x0, 0x6, 0x8, 0x1, 0xf01, 0x100, 0x4, 0x3ff, 0x8, 0x0, 0x6, 0x3ff, 0xa72, 0x7, 0x5, 0xffffffff, 0x1, 0x4, 0x8, 0x5, 0xced, 0x7, 0xffffffff, 0x0, 0x5, 0x4, 0x3e, 0x7, 0x5, 0x9, 0xf426, 0xffffffff, 0x7, 0x9, 0xfffffffb, 0x2b, 0x4, 0x696c, 0x6ac06e4, 0x7f, 0x9, 0x7, 0x911b, 0x1, 0x7, 0x3, 0x68, 0x0, 0xfffffffe, 0x1, 0x7, 0x5, 0x1, 0x1, 0xfff, 0x6, 0x1, 0x9, 0x5, 0x0, 0x5, 0x6, 0x2, 0x0, 0x7fffffff, 0x8, 0x31d, 0x9, 0x39ad, 0xc1bd, 0x7fff, 0x8001, 0xf661, 0x7fee0e0f, 0x1c8e, 0x465b00a8, 0xe4, 0x4, 0x2, 0xb, 0x200, 0x5, 0x2, 0x7, 0x2, 0x0, 0x4, 0x9, 0x4, 0x1, 0x1, 0x3, 0x4]}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0x4, 0xb4, 0x12, {0x4, 0x2, 0x1, 0x3, 0xb, 0x5c}, {0x0, 0x2, 0x3, 0x6, 0xfffe, 0x4}, 0x0, 0xec12, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x6, 0x8001, 0x6, 0x6, 0x8, 0x8001, 0x9, 0xffffffff, 0x1, 0xaa, 0xb9c4, 0x4, 0x8001, 0xa1c, 0x10, 0x6, 0x7fff, 0x60000000, 0x3, 0x80000000, 0x8, 0x0, 0x1ff, 0x80, 0x12, 0x7f, 0x506, 0x80000001, 0x290, 0x8, 0x8000, 0x24c04a54, 0x8001, 0xb8e, 0x0, 0x3a6154f0, 0x9, 0x8, 0x2c2, 0x80000001, 0x1c, 0x0, 0x5, 0x10, 0x4bcd4ee0, 0x1ff, 0x8, 0xfffffff2, 0xf6, 0x8, 0x5, 0xfff, 0x2, 0x0, 0x40, 0x8000, 0x3, 0x925c, 0x6, 0x5, 0x632a, 0x8, 0x8, 0x5, 0x9, 0x4ac2, 0x6, 0x7, 0x0, 0xa0000000, 0x2d, 0x5, 0x3ff, 0xffff671b, 0x3, 0x8, 0x3, 0x1, 0x7f, 0x54dc, 0x6, 0x10000, 0x1, 0x1, 0xfffffff9, 0x8, 0x7f, 0x80000001, 0x0, 0x3, 0x531, 0x40, 0x80000000, 0x9d, 0x8, 0xfff, 0x1, 0x8, 0x3, 0x5, 0x1, 0x9, 0xae0, 0x7c, 0xfffffff9, 0x1, 0x9, 0x3569, 0x800, 0x169, 0x1, 0xe, 0xd0, 0x6, 0xe, 0x0, 0x401, 0x9, 0x5, 0x3, 0x3f24ea04, 0x1218, 0x40, 0x37, 0xd, 0x3, 0x1, 0x7, 0x4, 0x4, 0x4, 0xffff, 0xc0, 0x70b, 0xa58, 0x8, 0xe, 0x8, 0x9, 0x7, 0x7, 0xfffffff8, 0x400, 0x1, 0x3c9, 0xaf, 0x1, 0xff, 0x7991, 0x5a1, 0x9a03, 0x2, 0x8, 0x523, 0x0, 0x7, 0x7, 0x2, 0x3, 0x5, 0xf72, 0x5, 0x9, 0x7, 0x0, 0x5, 0x37b, 0x10001, 0x200, 0xd1e9, 0xe, 0x9, 0xfd, 0x9, 0x0, 0x81, 0x1, 0x5, 0x4, 0xffff, 0x710d, 0x3, 0x101, 0x7, 0x4, 0x80000001, 0x4, 0x4, 0x6, 0x2, 0xd0, 0x6, 0x7a0, 0x6, 0x9, 0x7, 0x7, 0x6, 0x6, 0xfffffff8, 0x7, 0x4, 0x4, 0x9, 0x8, 0x6, 0xffffffff, 0x9, 0x8000, 0x4a00, 0x3, 0x4, 0x5, 0x4, 0x6, 0x6, 0x4, 0x58a, 0x7, 0x3ff, 0x3ff, 0x7, 0x10, 0x5, 0x5, 0x7ff, 0x7, 0xfffffffe, 0xca6e, 0x0, 0x8, 0x5e5, 0x5, 0x9, 0x0, 0x3ff, 0x8, 0x8, 0xff, 0x3, 0x8, 0x400, 0x3, 0x1, 0x8, 0x7, 0x8, 0x5, 0xc7e, 0x5, 0x1, 0x1, 0xfffffff9, 0x6, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x9, 0x4, 0x8, 0x1233, 0xa3, 0x7c7, 0x3, 0x7, 0xfffffffe, 0x8, 0x7, 0x79aad04b, 0x8, 0x3, 0x3, 0x2, 0x38, 0x9, 0x6, 0x5, 0x4e14fb0e, 0x8000, 0x0, 0x6, 0x3, 0x7ff, 0x9766, 0x5, 0x80000001, 0xf, 0x7, 0x4, 0x3, 0x3, 0x36a, 0x6, 0x3, 0x9, 0x3, 0xfffffc01, 0x4, 0x0, 0x1, 0x15df, 0x8, 0x20000000, 0x7, 0xffffffbe, 0x2, 0x5, 0x4, 0x7, 0x0, 0xb4, 0x9, 0x5, 0x105bc0, 0x0, 0x9, 0x3, 0xc, 0x0, 0x7e, 0x10001, 0x9, 0x1, 0x3, 0x8, 0x200, 0x6, 0x55, 0xffffffff, 0x8, 0x10000, 0x5, 0x4944, 0x90, 0x2, 0xc, 0x6, 0xc, 0x3, 0x55, 0x8, 0x4, 0xa9d, 0x5, 0x3, 0x8, 0x7ff, 0x4, 0x0, 0x79d, 0xd6, 0x80000000, 0x2, 0x0, 0x0, 0xa, 0xf4, 0xf6e5, 0x0, 0x7, 0x3, 0x6, 0xff, 0xfb71, 0x2, 0x5, 0x6, 0xfffffff8, 0x5, 0x9, 0x4, 0x6, 0x1ff, 0x200, 0x0, 0xfec, 0x9b, 0xfffffffc, 0x1, 0x9, 0x9, 0x3, 0xd, 0x0, 0xc, 0xb1c, 0x3, 0x64bd, 0x3, 0x3, 0xfffff347, 0x7540, 0x1ff, 0x0, 0x5, 0x3, 0x4, 0x80, 0x7758, 0x0, 0x2, 0x1, 0x6, 0x3, 0x3, 0x1, 0x6, 0xb5, 0x4, 0x6, 0x3, 0x2, 0x6a72, 0xa479, 0x8, 0x0, 0x7fff, 0x80000000, 0x799, 0x5ec5, 0x80000001, 0x737f, 0x9, 0x1, 0x1ff, 0x6, 0x9, 0xfffffff9, 0x3, 0x0, 0x5, 0x7, 0x400, 0x0, 0x1, 0x401, 0x461a152b, 0xc60, 0x3, 0x129e, 0x1, 0x0, 0x0, 0xd, 0x4, 0x9, 0x3, 0x8000, 0x40, 0x7, 0x6, 0x8, 0x1ff, 0xfffff001, 0xdee, 0x3, 0x3, 0x80, 0xb2a, 0x5, 0x5, 0x3, 0x6, 0x6, 0x7, 0x1, 0x20, 0x7, 0x0, 0x5, 0x3, 0x2, 0x9, 0xffffffff, 0x7, 0xffffffff, 0x7, 0x1, 0x7, 0x8, 0x4, 0x56f, 0xa77, 0x4, 0x5, 0x5, 0x80, 0x5, 0x7ff, 0x75, 0x40, 0x1, 0x1, 0x1, 0x7, 0x5, 0x3, 0x80000000, 0x2, 0x9, 0x7, 0x2, 0x763, 0xff, 0xfffffbff, 0x8000, 0x1, 0x5, 0xc, 0x9, 0x2, 0x3a28]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x24e, 0x9, 0x10000, 0x3, 0x4, 0x7, 0x0, 0x6, 0x4, 0x7fff, 0x757, 0x1, 0x7fff, 0x0, 0x48, 0x0, 0x5, 0x7f, 0x1, 0x0, 0x4, 0x3, 0x1, 0x7, 0x7fffffff, 0xa874, 0x2, 0xa4, 0x6, 0x0, 0x2, 0x2622, 0xfffffffc, 0x0, 0x2, 0x4, 0x4, 0x80, 0x0, 0xa3, 0x5, 0x8, 0x6, 0x9, 0x7, 0x2, 0x6, 0x1ff, 0x6, 0x1, 0x8000, 0x0, 0x4, 0x0, 0x4, 0x3, 0x0, 0x5706, 0x5, 0x8001, 0x9, 0x9, 0x58f3077c, 0x4, 0x8, 0x4, 0x9, 0x4, 0x101, 0x2, 0x6, 0xc628, 0xd7, 0xffffff81, 0x8, 0x7, 0x5, 0xbe81, 0x80000001, 0xe576, 0x2, 0x6, 0x0, 0x6, 0x1, 0x3ff, 0x7fffffff, 0x7fffffff, 0x4800, 0x1, 0x46, 0x1, 0x10, 0x8000, 0xff, 0x5d24, 0x4, 0x8, 0x9, 0x5, 0x101, 0x7fffffff, 0x8, 0x0, 0x5, 0x27, 0x39, 0x5, 0xfff, 0x2, 0x10000, 0x1, 0x4, 0x9, 0x1ff, 0x0, 0x6, 0x6, 0x1, 0x4, 0x5, 0x4, 0x3ff, 0x4, 0x8, 0x0, 0x54000, 0x0, 0x883, 0x2, 0xd6b5, 0x6, 0x8000, 0x10, 0x30c, 0xfffffffe, 0x81, 0x73, 0x5, 0x0, 0x1, 0x5, 0x6, 0x8ec, 0x6, 0x9, 0x6, 0xff, 0x2a40, 0x6, 0x7, 0x1, 0x657e, 0xa, 0x400, 0x9, 0x4, 0x1ff8, 0x2, 0xfffffeff, 0x8, 0x7, 0x7ff, 0xa2, 0x55, 0x9, 0xc, 0x2, 0x0, 0x0, 0xffffffab, 0x8e, 0x2, 0x1, 0x3, 0x9, 0x5eacbf0d, 0x6, 0x3, 0x1ff, 0x6, 0x10, 0xb, 0x6, 0xbd9, 0x28, 0x39cce252, 0x80, 0x3969, 0x5, 0x5, 0x5, 0x3, 0x9, 0x9, 0x7f, 0x0, 0x4, 0x3, 0x3, 0xd7, 0x9, 0x6, 0x3, 0x1, 0x1, 0x3, 0x7, 0x4d1, 0xffffffff, 0x4, 0x1, 0x5b66, 0xf7, 0x5, 0x3, 0xa, 0x10000, 0x5, 0x9, 0x80, 0xc26e, 0x3, 0x0, 0x2, 0xf, 0x80000000, 0xffffff49, 0x3, 0x6, 0x9, 0x7, 0xe, 0x401, 0x4, 0x8, 0x5e6ae60, 0x1, 0x5, 0x2, 0x101, 0x10001, 0x8, 0x200, 0x4, 0x0, 0x1, 0x2, 0x1, 0x7f, 0xe6, 0x66, 0x6, 0x3, 0xffff, 0xfffffff7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x64, 0x2, 0x4, 0x2, 0xc0, 0x2b, 0x77, 0x7, 0x5, 0x5cc, 0x1, 0x2b60, 0x3, 0x4, 0x4, 0x4, 0x8, 0x8, 0xfffffffd, 0x4, 0xe0, 0x80, 0x3, 0x475, 0x1, 0x8, 0x1ff, 0x1, 0x7, 0x6, 0x0, 0x7ff, 0x9, 0x7, 0x0, 0xb, 0x3, 0x10001, 0x2, 0x9, 0x2, 0xc539, 0x93b, 0x4, 0x101, 0x6, 0x0, 0x4, 0x6, 0x8, 0x10, 0x1, 0x2, 0x0, 0x23f4000, 0xb, 0x6, 0x75e6, 0x4, 0xfffff3ae, 0x2, 0x4, 0x6, 0x0, 0x80, 0x81, 0x9, 0x1, 0x1, 0x100, 0xaecf, 0x7fff, 0x4fd, 0x8, 0x0, 0xe6b3, 0x3, 0x9fc1, 0x7, 0x47fbb0a5, 0x2, 0x5, 0x0, 0x7fff, 0x6, 0x39a1783, 0x3, 0xfffffff7, 0x1, 0x4, 0x9b5f, 0x9, 0x6, 0x8, 0x0, 0x10, 0x36e, 0x5, 0x0, 0x7, 0x80000001, 0x4, 0x7, 0x3, 0x1, 0x1daa, 0x2, 0x6, 0xcd86, 0xae9, 0xcd5e, 0xffff, 0x9, 0x4, 0x3, 0x7a2, 0x7, 0x5, 0x4, 0x9, 0x81, 0x93a, 0x9, 0x0, 0x7, 0x1, 0xeab, 0xfffffff7, 0x200, 0x3, 0x5a, 0x3, 0x1, 0xb, 0x0, 0x7, 0x9, 0xfffffffc, 0x1, 0xf5, 0x0, 0x3, 0x8, 0x6, 0x0, 0x7fff, 0x1, 0x3, 0x3, 0x9, 0x7, 0x1, 0x1000, 0x646, 0x9, 0xd24, 0x8, 0xfffffff8, 0x3, 0x0, 0x2, 0x8000, 0xe4b, 0x8, 0x101, 0x3757, 0x9, 0x2, 0x80000001, 0x12c1, 0x6, 0x4, 0x6, 0x2, 0x3, 0x5, 0xa, 0x5, 0x8000, 0x5, 0x84bc, 0x0, 0x6, 0x2, 0x6, 0x6, 0xb0, 0x4, 0x9, 0xa, 0x401, 0xfffffc00, 0x7fff, 0x8, 0x0, 0x4, 0x0, 0xfffffffd, 0x2, 0x5, 0x499, 0x5, 0xfffffffe, 0x5, 0x40, 0x0, 0x5, 0x8, 0x1b, 0x2, 0xeca0, 0x7, 0xb, 0x6, 0xfffffff9, 0x8, 0x8, 0x357, 0x5, 0x3, 0x200, 0x96cc, 0x0, 0x2, 0x1, 0x6, 0x10000, 0x7fff, 0xdfd, 0x5, 0x9, 0x1, 0x4, 0x6, 0x100, 0xa540, 0x3, 0x200, 0x5, 0x10001, 0x9, 0x7, 0x400, 0x9, 0x6e, 0x7, 0x8, 0x3, 0xd, 0x2a, 0x8, 0x80000000, 0x0, 0xff, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x40, 0x10001, 0x7, 0x0, 0x0, 0xf, 0x6, 0x1ffc, 0x8, 0x3, 0x9837, 0x6, 0x9, 0x6, 0x6, 0x1000, 0x6, 0x42, 0xf100, 0x0, 0xfe000000, 0xe, 0x1, 0x2, 0x3, 0x6, 0x9, 0xd458, 0x692, 0x1, 0x7f, 0x7, 0x9, 0x3ff, 0x742, 0x80000000, 0x1, 0x10a80000, 0x5, 0x1, 0x80000000, 0x4, 0x51, 0x7, 0x800, 0x5, 0x9, 0x3, 0x473e, 0x7, 0x40, 0x2, 0x4dcbc559, 0xfffffffd, 0xffffff21, 0x5, 0x63, 0x4, 0x1, 0x40, 0x789b, 0x6, 0x93a, 0x1, 0x5, 0x1, 0x8c, 0x3, 0x6, 0x6, 0x8, 0x80, 0x401, 0x2, 0x1ff, 0x95, 0x40400, 0x100, 0x8, 0x24, 0x5e93a073, 0x1, 0xa, 0x3ff, 0x1, 0x7, 0x5, 0x9, 0xe3, 0x5, 0x8, 0xffffffbb, 0x2, 0x3ff, 0x8, 0x8, 0x8000, 0x2, 0x3, 0x7, 0x4, 0x8, 0x9, 0x80000001, 0x6c2c, 0x1, 0xa, 0x4, 0xd3, 0x7, 0x8, 0x80, 0x1, 0x100, 0x7fff, 0x6, 0x5, 0x400, 0x10, 0x8, 0x0, 0xe62, 0x1, 0x0, 0x7, 0x1, 0x2000, 0x2, 0x6, 0x5, 0x200, 0x0, 0x9, 0x8, 0x5, 0x8, 0x3, 0x2, 0x7ff, 0x80000001, 0x4, 0x4a, 0xc9cc, 0x6, 0x10000, 0x2, 0x3, 0x0, 0x1, 0x7, 0x8000, 0x5, 0x8, 0x6b1, 0x1, 0x2, 0x8, 0xc, 0x1, 0x9, 0x6, 0x1, 0x7, 0x158, 0x8, 0x10000, 0x1, 0x101, 0x3d59, 0x8620, 0x0, 0x4, 0x80000001, 0x2, 0x1, 0x1, 0xb4e, 0x8d5d, 0x7, 0x52a3, 0xb810, 0x1, 0x4, 0x7ff, 0x10001, 0x1, 0x7, 0x8, 0x24d, 0x0, 0x6, 0x0, 0x401, 0x5, 0x1, 0x1, 0xd, 0xcf24, 0x0, 0x0, 0x8, 0x3809, 0x8, 0x7f, 0x1, 0x4, 0x4, 0x4, 0x6, 0x2, 0x8, 0x6, 0x0, 0x8, 0x1, 0xfffffffa, 0x1a20, 0x2, 0x7ff, 0x9, 0x4, 0x0, 0x8, 0x8001, 0xcb6, 0x7, 0x0, 0x7fffffff, 0xd, 0x5, 0x7, 0x4, 0xffff9667, 0x81, 0xffff, 0xc3, 0x10000, 0x6, 0xd, 0x10, 0x9, 0x3, 0xfffffffe, 0xd, 0x4ee8b025, 0x4, 0x8001, 0xffff, 0xeb, 0x2, 0x0, 0x9, 0x5, 0x8, 0x2e8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x0, 0x0, 0x6, 0x0, {0x5, 0x3, 0x5, 0x4, 0x5, 0x800}, {0x80, 0x2, 0x6, 0x3, 0x101, 0x7}, 0xfffffff8, 0x4}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x4d}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6b, 0x101, 0x9, 0x2, 0x3, 0xfffffffc, 0x3ff, 0x6, 0x37acc, 0x6, 0x9, 0x5, 0x2, 0x7fff, 0x8, 0x72e, 0x7, 0x6, 0x72ed41d1, 0x9, 0xfffffffe, 0x4, 0x5, 0x8, 0x10001, 0x7507, 0x7fff, 0x5, 0x7, 0x1, 0xab08, 0x3, 0x7, 0x7a80, 0x8, 0x1, 0x6, 0x5, 0x0, 0x5, 0x80, 0xa, 0x2, 0x1000, 0x3, 0x2, 0x9, 0x1, 0xe, 0x4, 0x1, 0x8, 0x2, 0x3, 0xf1b8, 0x9, 0x3, 0x9, 0x5, 0x3, 0xd, 0x6, 0x1d, 0x6, 0xdb9c, 0x1, 0xa, 0x9ee6, 0xfffffff7, 0x0, 0xfffffffa, 0x0, 0x1, 0xfffffdc6, 0x7f, 0x3, 0x401, 0x1327, 0x6, 0xfffffffa, 0x20000000, 0x9, 0x7, 0x9, 0x2, 0x40, 0x40, 0xc38, 0x696c, 0x6, 0x5, 0x3, 0x2, 0xd, 0x4, 0xa, 0xb9, 0x2, 0x8, 0xd14, 0xfffffffb, 0x10000, 0x9, 0x5, 0x5, 0x4, 0x6, 0x6, 0xd, 0x4, 0x3, 0x0, 0x8, 0xe3, 0x2, 0x0, 0x9, 0x40, 0x7, 0x6, 0x0, 0x1, 0x36a24947, 0x4, 0x9, 0x10, 0x5, 0x0, 0xfffffffa, 0x0, 0x8, 0x9, 0x4f, 0x4, 0xffffffff, 0x2, 0x5, 0x3, 0x7, 0x8, 0x33, 0x80000000, 0x2, 0x4, 0xadd0, 0xfff, 0x3, 0x0, 0x5866, 0x400, 0x9, 0x8000, 0x7, 0x3f, 0x4, 0x6bb8, 0x9, 0x3, 0x713, 0x1, 0x2, 0x10, 0x8, 0x0, 0xffff, 0x85, 0x2, 0x5, 0x10, 0xffff, 0x7, 0x8, 0x10000, 0x33e3, 0x80000000, 0x2, 0xe6fe, 0x2, 0xb9, 0x7efe2b02, 0x59, 0x7fffffff, 0xe380, 0x7a3, 0x2, 0x0, 0x101, 0x4724e154, 0x5, 0x2, 0xfffff121, 0x6, 0xe, 0x4, 0x5, 0xb0b, 0x0, 0x58c3, 0x7, 0x2, 0x401, 0x9, 0x78, 0x100, 0xc, 0x6, 0xa9e7, 0x4, 0x7fff, 0x101, 0x10000, 0xff, 0x2, 0x4, 0x8, 0x5, 0x80, 0x8000, 0x2, 0x7, 0xfffffffb, 0x0, 0x2, 0xb3, 0x4, 0x5, 0x0, 0xfff, 0x3, 0xeb, 0x8, 0xff, 0x2, 0x9, 0x18, 0x2, 0x2, 0x0, 0x4, 0x1, 0x2, 0x3, 0x0, 0x100, 0x80, 0xd4b, 0x3ff, 0x8e, 0x4, 0x80000001, 0x2, 0x6, 0x8000, 0x85, 0xb065, 0x8]}], []]}, {0x78, 0x6, "ce1c6bb67f04cdffad8c466f00c757672a2d082aecc337e64a7f65de6e221e480cd04939596916704c90e1a9b6439d7c78ead9ded1155bbc7eb7bd6ba2dff182f011383aa776a9490ce9411e32a3a545bb16af99fe6afeba1059da05d8857e1f733824e96553ba68c073977757e51e8b2fcb26f7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0xc0, 0x4, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x56, 0x3, 0x20000000, 0x1, 0x2}, 0x29}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x10000000, 0x4, 0x37d}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x2, 0x0, 0x50101b67}, 0x7c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x56, 0x2, 0x81, 0x30000000}, 0x5c}}]}, {0x24, 0x6, "8ad961baf22c431dd97163fef7b442e294633af2a107c9b0278c8f8c3ed566d3"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_csum={0x130, 0x19, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x2, 0x7, 0x5}, 0x74}}]}, {0xe5, 0x6, "546439a30fa7fc8f35c20964077f9b616dda0c1b14f4f921b8b01f3ae61c30c3477b6241dcbe69ce1e55153b2cd8d3b5b450bf1abd6276e37c0c89aa41aa3f6b9aff2d704a79557818185e7ec729c4724db94265b7fbfc4bfe67386de35c075c566ab1ed54e1cd67623e97305d40c51fba29fe166744ec92e38b42a7d3be150073e77243c000366de11b94da229849342d02904bb0618f45b0a7009e7f5132a111394427e202c5b4ef6edad23abaf96ff4de30b67c5076bbb053ea7958b46656c9fb89fdb0bfe8e904dea4f96c5ace5d611b8ca5d244e159ba7e402226c7ed72f6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0xfc, 0x15, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x433, 0x6, 0x6, 0x7, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffff801, 0xfff, 0x4, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0xd49, 0x6, 0xffffffffffffffff, 0x7, 0x10001}}]}, {0x85, 0x6, "2fd08fdb756387c5d4ca258190ef5d2fa8c72eb09aaf6937ea023ec5755b8029f58d16ba0209056e13c1f77e7ffc3a1a06f04693cdefb8514e95695b4b32652d732509ae6f5527d4ce469fe9125d7b05e499da081e949f741b470927e6e80921b895c7475decde635b322577fbe555fb74746b39683aa702e393e0fa14530a0a4c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1db99a8d3125487c, 0x2}}}}, @m_simple={0x16c, 0x5, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x6, 0x0, 0x509, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1000, 0x6, 0x7, 0x2, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x80000001, 0x6, 0x6, 0x8}}, @TCA_DEF_DATA={0xe, 0x3, '/dev/cuse\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'hash:ip\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xb401, 0x6, 0x1, 0x9, 0xda}}, @TCA_DEF_DATA={0xc, 0x3, 'hash:ip\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'hash:ip\x00'}]}, {0xab, 0x6, "446e88d34856fd8eca3ab7b987034cb8528fbc9824135e903cbc89136576fd2ad87c362fe3b0414c0b2782005eeedde6fbe87c092bd98848935ac07ef00c480f451a83fe05c01b9af87f58a9e3325f4c47f41b44918f84d652c422de824c6257c12882cce7455b77187e73b52cc4be2de3a2aaa58bee3c1ff440d1ce2f0c583db97955e08a7cf1fd99bb46afdf8e977fb16720835ce91256395b0f54c5971213ea0770723d6d76"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xb0, 0x2, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}]}, {0x73, 0x6, "2466c8e906eaada0001cf83563cbbc3aeee8aeee0c09d4b9bb8184e0a072c862f8bce1bce9b48f8d6846c9fc1018116b2cbb99e1d519d4be8c280088c11701905438e707ed870825fd5d934af0b54311853f2463396725dd091fe5db914d026d82756f8c444a60207344988e0a524a"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0xec, 0x1c, 0x0, 0x0, {{0xb}, {0x20, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7ff}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0xa4, 0x6, "d8beff52640f39df09b49d754f1c6cee0a498f4d97919b400d04509d909144ca0949542cc7136944a69cedd2bc783a8b4c8ad93377a1c16e3f6d10877712557c396c96c98e3579179cabda084fa96f7577dceb677a72e7dc469c26dbb35fef79f757e4feea8ebf6fe7fc4c38f8d2d4742db6b963cc3e9c445c08bcdca4c7f021c3d2519f949a67f4bd1c7a5a8a406a9298888de04aa65b839b878532bf931801"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x3024}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 29.816887622s ago: executing program 2 (id=2124): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r1, &(0x7f0000000000), 0x10) io_submit(r2, 0x405a, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x4, r1, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x38}]) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x1000, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffb}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x2}, 0x3}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000440)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x3}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x2}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x1, @ANYRES64=r5], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(0x0, 0x7, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f0000000080)='\x00', 0x1}, {0x0}], 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r7) 29.636815045s ago: executing program 2 (id=2125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41000, 0x23, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800003a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r8 = fcntl$dupfd(r7, 0x406, r7) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r8, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 28.435955175s ago: executing program 2 (id=2128): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000100)=""/36, 0x24}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x445c2, 0x20) ftruncate(r2, 0x100003) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4, 0xf01b0020}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) (fail_nth: 50) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x40002}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) socket(0xa, 0x3, 0x3a) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) 27.506847582s ago: executing program 2 (id=2134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0xc0089364, &(0x7f0000000180)) r3 = eventfd2(0xe5c, 0x80000) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r4, 0x6, 0x2, r3}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x70170b405cc25fb9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x2000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r5}, 0x4) r9 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r9, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0x99f, 0x0, 0x1f, 0x5}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r10, r7}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd73, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xd5f, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) write$nbd(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000000000000000000033796594"], 0x40) 27.286543317s ago: executing program 2 (id=2135): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000040)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x4004) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000400), 0x7, 0x2) listen(0xffffffffffffffff, 0x6) 12.306313646s ago: executing program 34 (id=2135): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000040)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x4004) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000400), 0x7, 0x2) listen(0xffffffffffffffff, 0x6) 5.606381623s ago: executing program 4 (id=2216): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100039042abd70000040000000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000200012800b0001006272696467650000100002800a0014000180c20000020000"], 0x40}}, 0x40048814) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x8, 0x0, 0x0, 0xf, 0x1, [], 'I'}]}}, 0x0, 0x2a, 0x0, 0x1, 0x20000000}, 0x28) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x36, 0x301, 0x70bd2d, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000300)='befs\x00', 0x200000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x1e, 0x4, 0x0) connect$can_bcm(r3, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000001f40), 0x0, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2}, 0x40440) sendmsg(0xffffffffffffffff, 0x0, 0x4) creat(&(0x7f0000000200)='./file0/../file0\x00', 0x82) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@deltaction={0x19c, 0x31, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff0001}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x3ffe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcd2}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setrlimit(0xd, &(0x7f0000000300)={0x8, 0x4}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, 0x0) 4.937139436s ago: executing program 4 (id=2221): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x22, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x0, 0x1}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x4800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x0, &(0x7f0000000280)) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) socket$netlink(0x10, 0x3, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x22004801, &(0x7f0000b63fe4)={0xa, 0x4, 0xffffffff, @empty}, 0x1c) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000180)=@filename='./bus\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000340)='msdos\x00', 0x8080, 0x0) sendto$inet6(r4, &(0x7f0000000540)="d2643718f60bc48de06164649966d3dbcdb81e04000000000000003a85bc749d3194b38ff5ea36f6aae15f46d64a9d7ed36d943671e7437426768f5a7e3650bd26ba58ee5348c01f3c724f7eb6f6ce656b8bcb81d7015b138edec188e4699a29496f4bd1ef1154f17e94ee48254ec1e9daaf86c1e25f9a2cc51241fda8164b0a0d7720fc61ebbeb178c00f999bf9141685cac2443159e14af92767afd5cafe4ec32c4c42fd19790153b33c6584b2c9727006c8b66f3391329f40802eb0ec22533ca6bb14440de66ec55f84500856aed53c0f057ede0e73bd7b9741c06fa866092dc245537a53f607e91ce50d15f0897359fb8571ff24239285658f1450a1609daf9d36fcac46ce83c6dc2dd302ea958f2bf79ea5dcf6dd0057ce93586ba095c9a55f023a1c23b58af4473194f725de526acf0aab54e82f5b9596f504f009b12468d718b46263", 0x146, 0x4000, 0x0, 0x0) 4.706194033s ago: executing program 6 (id=2223): ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB='>\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010800000000fedbdf250b00000008000300", @ANYRESOCT=r1, @ANYBLOB="20005080050002000800030001ac0f00"/32, @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000700)={0x0, @pix={0x4349, 0x7, 0x38414262, 0x8, 0xc, 0x7, 0x0, 0x40000015, 0x1, 0x4, 0x2, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0xd, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) fsopen(&(0x7f00000000c0)='pipefs\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r7 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000004c0)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x1, 0xdc9, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff, 0x0, 0x1}}}, &(0x7f0000000540)=0x0) syz_ublk_setup_queues(r7, r11, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcba3, 0x0, 0x3, 0x81, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x130d, 0x4000, 0x1, 0x1cc, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xece3, 0x800, 0x3, 0x8e, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e19, 0x40, 0x2, 0x168}}], 0x4, 0x0, 0x0) 3.546463046s ago: executing program 6 (id=2228): userfaultfd(0x80001) (async) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socket(0x11, 0x3, 0x0) (async) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) (async) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000a6f000/0x2000)=nil, 0x2000) openat$kvm(0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0xcf, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x5251, 0x4, 0x2, 0x39d}, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup(r5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) (async) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040), 0x0) (async) pipe2(&(0x7f0000000040), 0x0) 3.444392229s ago: executing program 4 (id=2230): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100039042abd70000040000000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000200012800b0001006272696467650000100002800a0014000180c20000020000"], 0x40}}, 0x40048814) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x8, 0x0, 0x0, 0xf, 0x1, [], 'I'}]}}, 0x0, 0x2a, 0x0, 0x1, 0x20000000}, 0x28) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x36, 0x301, 0x70bd2d, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000300)='befs\x00', 0x200000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x1e, 0x4, 0x0) connect$can_bcm(r3, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000001f40), 0x0, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2}, 0x40440) sendmsg(0xffffffffffffffff, 0x0, 0x4) creat(&(0x7f0000000200)='./file0/../file0\x00', 0x82) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@deltaction={0x19c, 0x31, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff0001}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x3ffe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcd2}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setrlimit(0xd, &(0x7f0000000300)={0x8, 0x4}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, 0x0) 2.668453312s ago: executing program 1 (id=2231): ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8) listen(0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB='>\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000fedbdf250b00000008000300", @ANYRESOCT=r0, @ANYBLOB="20005080050002000800030001ac0f00"/32, @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000700)={0x0, @pix={0x4349, 0x7, 0x38414262, 0x8, 0xc, 0x7, 0x0, 0x40000015, 0x1, 0x4, 0x2, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) fsopen(&(0x7f00000000c0)='pipefs\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000004c0)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x1, 0xdc9, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff, 0x0, 0x1}}}, &(0x7f0000000540)=0x0) syz_ublk_setup_queues(r6, r10, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcba3, 0x0, 0x3, 0x81, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x130d, 0x4000, 0x1, 0x1cc, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xece3, 0x800, 0x3, 0x8e, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e19, 0x40, 0x2, 0x168}}], 0x4, 0x0, 0x0) 2.664863378s ago: executing program 5 (id=2232): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000923e19d82cea9a82c384d25de659335c2ce4b826a69869eb9340d139d2bf9493693df20d86beb917ca31ae037ac871f7d3598b02decc7dc3efff8776c99eabdc446bbc6e0840c7dbc32f455d8346ba5bd4762da3e1342189e446b1b56adcfe380b42d02636e66997e435436f47d7d4c75f1ad4067b49199fd280699582a2cf858e61c10af93171f543b65800"/158, @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf2513"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000240)={0x2710, 0x4, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x8100000000000000, r6}) syz_pidfd_open(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000340)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0x4}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@gettclass={0x24, 0x2a, 0x20, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x9, 0xc}, {0xf, 0xc}, {0x10, 0xfff1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x44099}, 0x4044014) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x2) 2.660310892s ago: executing program 6 (id=2233): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000010000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000e2ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)={'trans=virtio,', {[{@uname={'uname', 0x3d, '$$'}}, {@access_user}]}}) (async) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)={'trans=virtio,', {[{@uname={'uname', 0x3d, '$$'}}, {@access_user}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x52, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r3, 0x90000915, 0x200000000005) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x480) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x480) 2.566398462s ago: executing program 5 (id=2234): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xffffffffffffffb9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) openat(r4, &(0x7f0000000280)='./file0\x00', 0x0, 0x43) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) mknodat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') symlinkat(&(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00') setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x8040) sendto$inet(0xffffffffffffffff, &(0x7f0000000c40)="168935fadd8bde2b2f3fbe4e0e1dbe08", 0x10, 0x20000001, 0x0, 0x0) accept4(r2, &(0x7f0000000500)=@ax25={{0x3, @netrom}, [@remote, @netrom, @default, @netrom, @netrom, @bcast, @default, @netrom]}, &(0x7f0000000440)=0xdf9a1ea79108a0a3, 0x80800) 2.416203639s ago: executing program 6 (id=2235): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000100)=""/36, 0x24}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x445c2, 0x20) ftruncate(r2, 0x100003) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4, 0xf01b0020}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) (fail_nth: 61) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x40002}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) socket(0xa, 0x3, 0x3a) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) 2.192418739s ago: executing program 4 (id=2236): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x0, 0x1a, 0xda, 0xa8, 0x8}}]}}]}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0xa, 0x300, 0xfc}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.655839421s ago: executing program 5 (id=2237): memfd_create(0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_wakeup_irq', 0x80240, 0x31840384d1ba4a81) finit_module(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0x8002, 0x7}, {0xffe0, 0xa}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r5 = syz_open_dev$video4linux(&(0x7f0000000800), 0x403, 0xe0801) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f0000000040)={0x0, 0x10000019, 0x0, 0x1}) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x2000008, 0xd, 0x40000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767"], 0xa8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.355240063s ago: executing program 1 (id=2238): syz_emit_ethernet(0x66, &(0x7f0000001a40)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0xa0, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x7ff, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0x36, 0x0, &(0x7f0000000240)="63eced0000dc3f08df33c9f786dd958a31678a4ea8707a060278b42bac2f2f131ad80cfc1d6406d60c43c223046c09bf19c6813202eb", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a00118031f9e05e2f606cfc31269b62"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x84}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PORT={0x6, 0x1, 0x43e7}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x22}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x16}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24048011}, 0x1) write$sequencer(0xffffffffffffffff, &(0x7f0000000200)=[@echo=0x3, @t={0x81, 0x3, 0x3, 0xc}, @l={0x92, 0xb, 0xc0, 0xe, 0x8, 0x8, 0x2}], 0x14) syz_emit_ethernet(0x66, &(0x7f0000001a40)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0xa0, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x7ff, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000c0000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0x36, 0x0, &(0x7f0000000240)="63eced0000dc3f08df33c9f786dd958a31678a4ea8707a060278b42bac2f2f131ad80cfc1d6406d60c43c223046c09bf19c6813202eb", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a00118031f9e05e2f606cfc31269b62"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x84}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PORT={0x6, 0x1, 0x43e7}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x22}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x16}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24048011}, 0x1) (async) write$sequencer(0xffffffffffffffff, &(0x7f0000000200)=[@echo=0x3, @t={0x81, 0x3, 0x3, 0xc}, @l={0x92, 0xb, 0xc0, 0xe, 0x8, 0x8, 0x2}], 0x14) (async) 1.245633305s ago: executing program 6 (id=2239): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000500)={0x0, 0xfffd}, 0x8) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000002c0)=0x200000, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0xffffffff, 0x7d1, 0x0, 0x3, 0x10007e, 0x20000006, 0x450, 0x6, 0x10000, 0x80005, 0xffffffff, 0x8, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7fffffff, 0x3c5b, 0x1, 0x26, 0x10, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x10001, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x6, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0x9, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x1, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x5, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x6, 0x1000005, 0x5f31, 0xd, 0x101, 0x1, 0x4, 0xffff80f1, 0x1, 0x206, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0x216d, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x4, 0xfffffffe, 0x100, 0x8d2, 0x40000009, 0x5, 0x7fff, 0x0, 0x5, 0x101, 0x4, 0x6, 0x105, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x7fff, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x8001, 0xd, 0x800003, 0x200, 0x400080, 0xffffffff, 0x4, 0x2950bfad, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0xe, 0x1000ac8, 0xc1, 0x2, 0x1000003, 0x7ff, 0x129, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x800004, 0x24], [0x9, 0x100, 0xffffffff, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x200, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x3, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x4010080, 0xc, 0x7e, 0x100, 0xff, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x7fff, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x1, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0xe, 0x0, 0x29}, 0x10) 1.245330427s ago: executing program 1 (id=2240): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3c0, 0x274, 0x0, 0xfeffffff, 0x274, 0x32c, 0x32c, 0x32c, 0xffffffff, 0x32c, 0x32c, 0x5, 0x0, {[{{@uncond, 0x0, 0xb8, 0xec, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x7}, @common=@inet=@ecn={{0x24}, {0x20, 0x31, 0x1, 0x4}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x4, @private=0xa010100, @empty, @gre_key=0x6, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0xb0, 0xe4, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x6]}}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @local, @multicast2, @gre_key, @gre_key=0x8001}}}}, {{@ip={@rand_addr=0x64010101, @rand_addr, 0x0, 0xffffffff, 'lo\x00', 'ip6tnl0\x00', {0xff}}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @multicast2, @port=0x4e21}}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@dev, @port, @port=0x4e20}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x41c) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r8, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x40) (async) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd=r1, 0x8, 0x0, 0x0, 0xc}) (async) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r11) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) (async) write$tun(r9, &(0x7f0000000140)={@void, @void, @eth={@empty, @random="34243c5dca95", @void, {@llc_tr={0x11, {@snap={0x1, 0xaa, "ee", "e832ea", 0x88a2}}}}}}, 0x16) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) 1.17652139s ago: executing program 5 (id=2241): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x8000000000000000, 0x12) socket$packet(0x11, 0x2, 0x300) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x8a, 0x7fffffffffffe, 0x81, 0x105, 0xfffffffffbfffffd, 0x4002004c4, 0x1003, 0x3, 0x8, 0x1000000000000010, 0x2, 0x4, 0x0, 0x3, 0x4000000000000000], 0x10000, 0x2200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0xffffffff, 0x81, 0xfffffff9, 0x6}) ioctl$GIO_UNIMAP(r7, 0x4b66, &(0x7f0000000040)={0x0, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRESDEC=r6, @ANYBLOB="6e609b1df1c608d51098b989b444a3ab67333fcd661586a8bc652a3e1e12410781a4942ec51535bd49fdc25ed9951df514fd2ee9f954c872834482bd6ae50cba32044c342c00f06a4712f24d93585d80bbaf13081e2897146b184cd968eba6ebecbf258d4e636f5784b2c4a50c9a15e1fe9af410ee961b0e66de1e39", @ANYRES8=r6], 0x28}, 0x1, 0x0, 0x0, 0x240008d5}, 0x0) 1.175575461s ago: executing program 1 (id=2242): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000340)={[], [{@dont_measure}]}) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21) 1.115329482s ago: executing program 4 (id=2243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c000000020601010000000000000000000000006dfd05000100000005000100070000908e2492000200000009e8020073797a310000000027fe030068b5ede59be973f3ec48da8ca26173680284fcca44095a68c38656b7a0f17d1472088ac5ac5ba774d7edc932efb74b2a6dc468c7484860580cd324b11a47688cf5d729a99de8e7868abe66385ec96038434f3817e0e485a4c4ef879d57c8d35adf4e86e5d8fc9078f602860b7a448c3a7e7d5ea1876da130a2768284b015ab8adfb6082cf35b6c279cdc48d934f07a6327f4662152801f26311ec4b5d72eba24cb23b5c0b2899f97"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8880) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xb) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="1c0000005e007f029e3b470ded9b72ab25399c3683e5caa9bb22d956", 0x1c}], 0x1}, 0x4000084) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x120) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r3, 0x81, 0xa, &(0x7f0000000140)=""/4, &(0x7f0000000240)=0x4) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x4) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@polexpire={0x1cc, 0x1b, 0x2, 0x70bd25, 0x25dfdbfc, {{{@in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e21, 0x1, 0x4e23, 0x4, 0x5, 0xc0, 0x80, 0x3b, r9, 0xffffffffffffffff}, {0x3, 0x2, 0x4, 0x3ff, 0xb, 0x10001, 0xeb5, 0x9}, {0x4, 0x6, 0x10, 0x4}, 0x7ff, 0x6e6bb5, 0x2, 0x0, 0x0, 0x2}, 0xc}, [@replay_thresh={0x8, 0xb, 0x7f}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd29, 0x70bd27, 0x70bd27, 0x70bd2b, 0x5, [0x4, 0x1, 0x8, 0x3, 0x3]}}, @offload={0xc, 0x1c, {r9, 0x2}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd26, 0x70bd2d, 0x70bd2a, 0x70bd28, 0x3ff, [0x40]}}, @etimer_thresh={0x8, 0xc, 0x8}, @policy={0xa8, 0x7, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x4e24, 0x1000, 0x4e20, 0xf, 0xa, 0x80, 0x80, 0x21}, {0x80000000, 0x4, 0x101, 0x5, 0x6, 0x9, 0x14c, 0x4}, {0x1ff, 0x5, 0x7ff, 0x1}, 0x1, 0x6e6bbd, 0x0, 0x1, 0x1, 0x3}}]}, 0x1cc}}, 0x0) r10 = dup(r7) write$UHID_INPUT(r10, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000600000085000000070000009500000000000000f5265a3a88c4b31a6335dd8053a96cf994085865bbf463"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSCTTY(r1, 0x540e, 0x1) 1.055842293s ago: executing program 5 (id=2244): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xd) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r3, 0x3, &(0x7f0000000340)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r2, 0x0}, 0x0, 0x0]) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x12, 0x8c, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_setup(0x117a, 0x0, 0x0, &(0x7f0000000140), 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000000b80)={{&(0x7f0000000640)=[{0x4, 0x43ba, 0xe, {0x0, 0x3}, 0x703, 0x4, 0xffffffc0}, {0x627a, 0x5, 0x7fffffff, {0xf99, 0x81}, 0x92a, 0x9, 0x9}, {0x8000000000000001, 0x9, 0x7, {0x10001, 0xba1}, 0xb, 0x3ff, 0x5}, {0x6, 0x6, 0x8, {0xa, 0x5}, 0x1, 0x87, 0x101}, {0x77f8, 0x3, 0x80000000, {0x94, 0x4}, 0x370, 0x8, 0x100}, {0x8c1f, 0xfffffffffffffffe, 0x3, {0x7}, 0x44, 0x8, 0x9}], 0x6, 0x40, 0xfb, 0x6}, {&(0x7f00000007c0)=[{0x1cab, 0x3}, {0xd2f0, 0x3afb}, {0xffffffff, 0x9}], 0x3, 0x10, 0xe, 0xffffffff}, {&(0x7f0000000880)=[0x5, 0x8, 0x800, 0xfffffffffffffff7, 0xff, 0x9, 0x7fffffff, 0xe, 0x5, 0xfffffffffffffff9], 0xa, 0x8, 0x4, 0x4}, {&(0x7f0000000a00)=[{0x2, 0x8000, 0xffffffffffffff01, 0xfffffffffffffffd, 0x5aa}, {0x9, 0x2, 0x5, 0xf, 0x9}, {0x10000, 0x8, 0x9, 0x4, 0x8}, {0x5, 0x4, 0x7, 0x4, 0xdbba}, {0x1, 0x81, 0x36a, 0x3ff, 0x5}, {0x7886a6e, 0xffff, 0x90c, 0x3890, 0x10001}, {0x0, 0x5, 0x0, 0x80, 0x4}, {0x45, 0x6, 0x8, 0xff, 0xffff3197}], 0x8, 0x28, 0xf}, {&(0x7f0000000b40)=[0x2, 0x1, 0x0, 0x7fffffff, 0x2, 0x69ed, 0x4], 0x7, 0x8, 0x7, 0x5927}}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f00000001c0)={{0x3, 0x200, 0x85c2, 0x1, 0x0, 0x4}, 0x348, [0x1, 0x84, 0x1, 0x9, 0x3, 0x9, 0xff, 0x7, 0x7, 0x0, 0x7, 0x5, 0x9c, 0x3, 0x6, 0xb9, 0x4, 0x6, 0x6, 0x7, 0x8, 0x8, 0x9, 0x1, 0x4c1b, 0x3, 0x7, 0x9, 0x4, 0x8295, 0x80000001, 0xb5, 0x8, 0x7, 0x8, 0x6, 0x7fffffff, 0x9, 0x1, 0x2, 0x4, 0x8, 0x2, 0x5, 0x81, 0xcc88, 0x2a6f, 0x10000, 0x6a, 0x0, 0x17, 0x800, 0xfc, 0x8, 0x2, 0x400, 0x0, 0xb22, 0x6, 0xc9a, 0xfff, 0x401, 0x8, 0x9c7d, 0x5, 0x0, 0x6, 0x7fff, 0x0, 0x3, 0xffff8382, 0x7fffffff, 0x1ff, 0x6, 0x9, 0x8, 0x0, 0xfffffffa, 0x8, 0x8c, 0x7, 0x400, 0x2, 0x2, 0x10, 0x6, 0x8000, 0xd3, 0x7f, 0x16cf, 0x1, 0x8, 0x2, 0xd7b, 0x9, 0x7fff, 0xffffff5c, 0x1, 0x666, 0x0, 0x8, 0x7, 0x3, 0x3, 0x3, 0x1, 0x4, 0x368, 0x8, 0x3, 0x580, 0x2, 0x6, 0x10, 0x70955bc4, 0x1, 0x2, 0xfffffffb, 0x2, 0x2, 0x3, 0xfffff38f, 0x2, 0xa000000, 0xeb, 0x5b2, 0x4, 0x960, 0x6, 0x79, 0x3, 0x30, 0x3, 0x7, 0x1, 0x7fff, 0xf2, 0x5, 0x7, 0xff, 0x4, 0x3, 0x12e4, 0x3, 0x0, 0x101, 0x200, 0x7, 0x40, 0x0, 0x1, 0x3, 0x2, 0xffffff00, 0x702, 0x7, 0x800, 0x81, 0xfffffff7, 0x7, 0x1, 0xd, 0x40, 0x10000, 0x3, 0xffffffff, 0x23db, 0x6, 0x0, 0x5, 0x7, 0xffffffff, 0x4, 0x7, 0x6, 0x2, 0x200040, 0xb7, 0x6, 0x638, 0x0, 0x800, 0x6, 0x6, 0x0, 0x8, 0x7, 0x2, 0x8, 0x2, 0xfffffffb, 0x2, 0x80, 0xffff7fff, 0x4, 0x200, 0x7f, 0x1, 0x5, 0x8, 0x1, 0xfffffffa, 0xc, 0x50c2, 0xc1ed, 0x401, 0x3, 0x7, 0x101, 0x800, 0x5, 0x5, 0x8, 0x1, 0x1, 0xfffffff8, 0xe9, 0x1, 0x7f, 0x7ff, 0x0, 0x7, 0xac, 0x80000000, 0x81, 0x80000001, 0x2, 0x80, 0x3ff, 0xa639, 0x0, 0x53647e6f, 0x2, 0xd792, 0x14b, 0x4, 0x3, 0xb36, 0xa, 0x1, 0x4, 0x94, 0x5f, 0x1, 0x8, 0xd8, 0x7fff, 0xf, 0x400, 0x7f, 0x80000001, 0xd08, 0x2, 0x1, 0x6, 0x9, 0x7d9, 0x1, 0x3, 0x3, 0x8, 0x6, 0x400, 0x86, 0x2, 0x1000, 0xbdf6, 0x41bf, 0xc, 0x2487005d, 0x2, 0x1, 0xaa1, 0x6, 0x80000001, 0x9, 0xe, 0x2, 0x0, 0x4, 0x401, 0x5, 0x87a0, 0x54, 0x5, 0x3, 0xf, 0x7fffffff, 0x0, 0x8d, 0xe, 0x3, 0xb6, 0x5, 0x9, 0x100, 0xfff, 0x10, 0x1, 0x6, 0xb7, 0x7, 0xfffffffa, 0x4, 0x5, 0x81, 0x6, 0x5, 0xdcdf, 0x7ff, 0x9, 0xffffffe3, 0x1ff, 0x3, 0xf1c, 0x8021, 0xffffffff, 0x70, 0x10000, 0x7, 0x4, 0x1, 0x0, 0x4, 0x7aed, 0x4, 0x8, 0xe, 0xffffffc0, 0x8b7, 0x5, 0x5, 0x200, 0x40, 0x3ff, 0x4, 0x0, 0xa, 0xc, 0x7, 0xe324, 0xf, 0x7, 0x97a, 0x7fff, 0xffffffff, 0x8, 0x7, 0x40000000, 0x7, 0x6, 0x7, 0x6f007526, 0xa, 0x80000000, 0x0, 0x200, 0xaeb, 0x315c, 0x9, 0x1000, 0xd, 0x5, 0x0, 0xf0f, 0x6, 0x20, 0x2, 0x9, 0x2, 0x9, 0x4, 0x6, 0xb37, 0x8, 0x5, 0x8, 0xa6b7, 0x10001, 0x2, 0x1, 0xf, 0x8, 0x8, 0x3ff, 0x1, 0x4, 0xbe, 0x1, 0x10001, 0x7fa, 0xe7ad, 0x4, 0x6, 0x6, 0x81, 0x10000, 0x3, 0xbd7, 0x71e5119d, 0x62, 0xffd, 0x5, 0x6, 0x4, 0xc, 0x3, 0x7, 0x400, 0x4, 0x400277e, 0xe1, 0x3, 0x4, 0x3, 0x4, 0x6, 0xbf, 0x7, 0x6, 0x8, 0x5, 0x3ff, 0x9ad9, 0x8, 0x1, 0x0, 0x3, 0x400, 0x2, 0x9, 0x6, 0x40, 0x1000, 0x82, 0x4, 0x1000, 0x8, 0x3d, 0x2, 0xe, 0x4, 0x3, 0xfffffffc, 0x4, 0x8, 0x10, 0x6, 0x9, 0xffffffff, 0x10, 0x0, 0x1, 0x9225, 0x3be, 0xd, 0x401, 0x81, 0x13, 0x5, 0x3b1, 0x1, 0x9f18, 0x2, 0x8f86, 0x417db73f, 0x7, 0x1, 0x7, 0x5, 0x3, 0x6, 0x7, 0x0, 0xd, 0x0, 0x7, 0x7, 0x2, 0x8, 0x5, 0x0, 0xab, 0x5, 0x94, 0xb3ab, 0x5ae, 0x2, 0x40, 0x5, 0x0, 0x8001, 0x8, 0x800, 0xb, 0xa4, 0x50, 0x8, 0x99, 0x10, 0x5, 0x100, 0xfffff800, 0x5, 0xca, 0x3, 0x4, 0x6, 0x7ff, 0x6e15d2ec, 0x7, 0x5, 0x8, 0x7ba, 0x21c0, 0xe64, 0x6, 0x7, 0x6d4, 0x5, 0x3, 0x7fff, 0x121, 0x9, 0xe6d8, 0x1000, 0x1ff, 0x42db5dac, 0xffff, 0x6, 0xfffffff8, 0x3ff, 0xfcf, 0x1000, 0x7, 0x2, 0x2, 0x6, 0x7, 0x2, 0x7, 0x80000001, 0x7, 0x8, 0x7, 0xfffff000, 0xfffffffe, 0x5, 0x5, 0x7, 0x80000001, 0x4, 0x2, 0x53f, 0x8, 0x6, 0x0, 0xfffffff8, 0x6, 0x8, 0x9, 0x8, 0x6d, 0x48, 0x8001, 0x1, 0x1, 0x2e7a, 0x8, 0x4, 0x10000, 0x5, 0x1ff, 0x1, 0x8, 0xfffffffd, 0xc217, 0x6, 0x59a, 0x2, 0x3, 0xba7a, 0x6d9c7f55, 0x4, 0x9, 0x1000, 0x3, 0x10001, 0x2, 0x2, 0x7, 0x6, 0x2, 0x1, 0x27a, 0x9, 0x2, 0xde26, 0x99, 0xfffffffe, 0x5, 0x1, 0xdba4b27, 0x6, 0x100, 0x0, 0x9, 0x7, 0x1, 0x7ff, 0x0, 0x2, 0xffff9369, 0x4, 0xff, 0x6, 0xed1, 0x80, 0x0, 0x3, 0x80000001, 0xe, 0x9, 0x1, 0xffff, 0x6, 0x9, 0x4, 0xef3, 0x1, 0xfffffffb, 0x7, 0x40, 0x6, 0x4, 0x9, 0x7f, 0x3, 0x1, 0x3, 0x2, 0xc15e, 0x6, 0x0, 0x6, 0x8, 0xffffffff, 0x8, 0x401, 0x0, 0x10, 0x3, 0x2, 0x4, 0x50d, 0x3, 0x4b, 0x7, 0x0, 0x2, 0x75, 0x80, 0x1, 0xdb, 0x401, 0x6, 0x1, 0x3, 0x6, 0xbf0d, 0x18, 0x1, 0x5, 0x95, 0x7fff, 0xe7, 0xa, 0x4, 0x0, 0xffffff16, 0x10, 0xae25, 0x908, 0x78e, 0x6, 0x1, 0xb2b7, 0xc, 0x7, 0x0, 0x5, 0x9, 0x8, 0x73, 0x9, 0xfffffffe, 0x5df, 0x1, 0x7, 0x81, 0xffffffaa, 0x3, 0x6, 0xd, 0xffffc4e6, 0xffff0001, 0x0, 0x5, 0x10001, 0x2, 0x3, 0x0, 0x6, 0x4, 0x3, 0x8, 0x3, 0x8, 0x5, 0x3, 0xc3f, 0x0, 0x2, 0x6, 0x6, 0xaed, 0x4, 0x9, 0x7, 0x7, 0x8, 0xff, 0x8001, 0x5, 0x9, 0x4, 0xc2, 0x80000000, 0x80000000, 0x4, 0x8, 0xab84, 0xb4, 0xfffffc00, 0x908b, 0x8, 0xc9, 0xfffffffe, 0x1, 0x3, 0x8, 0xfffffffb, 0x0, 0xf8, 0xfffffff0, 0x637, 0x6, 0x4, 0xa, 0x80, 0xfffffff9, 0xfffffb6f, 0x0, 0x120e, 0x7, 0x0, 0x6, 0x2, 0x1000, 0x6, 0x6, 0x2, 0xd, 0x3ff, 0x5e18, 0xf, 0x9ebe, 0x7, 0x2, 0x1, 0x7, 0x7, 0x9e, 0x8, 0xedd3, 0x9, 0x1, 0xffffffff, 0x5, 0x1ff, 0x8, 0x1, 0x5, 0x2, 0x40, 0xe, 0x4, 0xc, 0xc65, 0x40, 0x7, 0xbb7d, 0x10, 0x2, 0x1ff, 0x8, 0x6, 0x80, 0x2, 0xf, 0x7, 0x80000000, 0x6e0, 0x1, 0x5, 0xd1, 0x9, 0x8, 0xfffffe00, 0x0, 0x1, 0x4, 0xe449, 0x4, 0x40, 0x10, 0x1000, 0x0, 0xca, 0xffff, 0x10001, 0xfffff891, 0x5, 0xfe, 0x200, 0xffffff81, 0xfffffff8, 0x4, 0x101, 0x68f0, 0xbfb, 0xdfe2, 0x0, 0x4, 0x9e74, 0x8, 0x7, 0x3ff, 0x80, 0xde7, 0x5, 0x51, 0x0, 0xb, 0x3, 0xad, 0x8, 0x2, 0x1, 0x8000, 0x4, 0x7, 0x8, 0x4, 0x10, 0x80000000, 0x6, 0x1400000, 0xf7, 0x8, 0x81, 0x4, 0x6790, 0x9, 0xfa6, 0x400, 0x7f, 0x3ff, 0x4, 0x2, 0x9, 0x6, 0x9107, 0x1, 0xcac, 0x40, 0x7, 0xc, 0x1, 0x5, 0x7, 0xb923, 0x2, 0xffff3818, 0x3, 0x1, 0x5, 0xe39, 0x4, 0x6, 0x7ff, 0xfff, 0x5, 0x5, 0x1, 0x101, 0xfffffff9, 0x3, 0x1, 0x400, 0xe59, 0x6, 0x8, 0x3ff, 0x6, 0x3ff, 0x9, 0x2, 0x6, 0x12dd, 0x0, 0x10, 0x6, 0x40, 0x0, 0xffffff80, 0x3, 0x0, 0x1, 0x7, 0x997, 0x7, 0x7fffffff, 0x81, 0x1, 0xe, 0x7e, 0x9, 0x3, 0x5, 0x7c, 0x4, 0x9, 0x3, 0x0, 0x1ff, 0x4, 0x926a, 0x9, 0x6, 0xea, 0x9, 0x9, 0xc0000, 0xf4d, 0x80000001, 0x1, 0x2, 0x1, 0x3, 0x7fff, 0x3, 0x1, 0x5851, 0x9fc, 0x0, 0x6, 0xcf4, 0x6, 0x1, 0xffb8, 0x0, 0x10001, 0x7, 0x8, 0x7b, 0x6, 0x89, 0xfffc0000, 0x9, 0x1, 0x4, 0xb, 0x9, 0x3, 0x5, 0xc2, 0x5, 0x2, 0x9, 0x3, 0x2c33, 0x5, 0x4, 0x0, 0x5, 0x9, 0x1, 0xa, 0x819, 0x5, 0x4, 0xeaa8, 0xb, 0x5, 0x8000, 0xffff, 0x8, 0x7fff, 0xe, 0x3, 0x6, 0xffffffff, 0x7, 0xba, 0x1, 0x2, 0xc7c, 0x8, 0xdc, 0x3, 0x5, 0x6, 0x1]}) r6 = openat$vicodec0(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f909, 0x8002, '\x00', @p_u16=&(0x7f00000010c0)=0xa5b}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x66) 973.888899ms ago: executing program 6 (id=2245): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x1c3001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="01000000c20100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c9}, 0x24048015) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) r9 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000180)=[r13], 0x1, r5, r6, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x58, 0xf4b, 0x1, 0x2, 0x5, 0x412e, 0xe154, 0x1000, 0x7f, 0x20, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 362.772931ms ago: executing program 5 (id=2246): ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8) listen(0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB='>\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000fedbdf250b00000008000300", @ANYRESOCT=r0, @ANYBLOB="20005080050002000800030001ac0f00"/32, @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000700)={0x0, @pix={0x4349, 0x7, 0x38414262, 0x8, 0xc, 0x7, 0x0, 0x40000015, 0x1, 0x4, 0x2, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) fsopen(&(0x7f00000000c0)='pipefs\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000004c0)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x1, 0xdc9, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff, 0x0, 0x1}}}, &(0x7f0000000540)=0x0) syz_ublk_setup_queues(r6, r10, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcba3, 0x0, 0x3, 0x81, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x130d, 0x4000, 0x1, 0x1cc, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xece3, 0x800, 0x3, 0x8e, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e19, 0x40, 0x2, 0x168}}], 0x4, 0x0, 0x0) 275.580732ms ago: executing program 1 (id=2247): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) recvmsg(0xffffffffffffffff, 0x0, 0x40020000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000", @ANYRES16, @ANYBLOB="05a32bbd7000000000000d00000008000300", @ANYRES32=r2, @ANYBLOB="1970b33f775e8b5a3292089b4a930d6db1290e019e8af7ab4657d8889f3afb121d291238b6f0f3c462415525fdb152c15ca51b1f1ced89dd9c5f686dd23d4f37f9593571d69d748c3cd7d9cc545cf07bc7ab11300714ae9fa5739e741bd62ed275e3a815197d9d4545b7085219119d681b9755444d68c981000000000000"], 0x1c}}, 0x0) r3 = syz_clone(0xd220000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r6, &(0x7f00000005c0)=""/4096, 0x1000) wait4(r3, 0x0, 0x40000000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x86) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r7, 0x101, 0x1) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000100000000000000000000009501000000000000ceae0b1ef9323f311cc5ec4ac0f74ce746799e9f88fb8913e3cd5c6b0bd6fbb89dbf86d969802ee9658bbfcb0e7a67a0f7d0f293d4bc3b84840272451c869d31827ee632aebd258fbbc5a59c1960a4928b0fcf1cb1fb0000b05a6999"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 85.706942ms ago: executing program 4 (id=2248): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000100)=""/36, 0x24}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x445c2, 0x20) ftruncate(r2, 0x100003) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4, 0xf01b0020}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) (fail_nth: 62) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x40002}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) socket(0xa, 0x3, 0x3a) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) 0s ago: executing program 1 (id=2249): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000340)) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8000000210001000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="00000000b500000008001f000000000050001100fe80000800000000000000000000000000000000000000000000002000000000ff200000000000000000000000007b8d41fa9e1c4e20880a3f69285b000164010100020000000000000000000000000000000000000000000a00bc056e557a0ac0ac"], 0xa8}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x80000, 0x28c) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000008900), 0x0, 0x1, &(0x7f0000008a80)) mkdir(0x0, 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') syz_emit_vhci(&(0x7f0000000e80)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc8, 0x14}}}, 0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)}, {&(0x7f0000000000)="44cbd04f93aac475e6636e8e71cd79a686c093a9a88c92e85c38f5337969e55a97f91c0f99df9a8b369e36fca9123311335aeefc2c6f91d710b7b527d2c714285828ac8813b9c9e8fa", 0x49}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 435.270034][ T859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.276428][ T859] usb 7-1: config 0 descriptor?? [ 435.823525][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.826463][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.594520][T13777] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 436.596696][T13777] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 436.599539][T13777] vhci_hcd vhci_hcd.0: Device attached [ 436.602129][T13781] vhci_hcd: connection closed [ 436.602363][ T13] vhci_hcd vhci_hcd.4: stop threads [ 436.609019][ T13] vhci_hcd vhci_hcd.4: release socket [ 436.612493][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 436.743783][ T5826] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 436.752459][T13788] FAULT_INJECTION: forcing a failure. [ 436.752459][T13788] name failslab, interval 1, probability 0, space 0, times 0 [ 436.762666][T13788] CPU: 0 UID: 0 PID: 13788 Comm: syz.4.1850 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.762688][T13788] Tainted: [L]=SOFTLOCKUP [ 436.762692][T13788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 436.762701][T13788] Call Trace: [ 436.762705][T13788] [ 436.762709][T13788] dump_stack_lvl+0x100/0x190 [ 436.762724][T13788] should_fail_ex.cold+0x5/0xa [ 436.762736][T13788] ? __kmalloc_noprof+0xba/0x840 [ 436.762752][T13788] ? copy_splice_read+0x1a3/0xbb0 [ 436.762767][T13788] should_failslab+0xc2/0x120 [ 436.762780][T13788] __kmalloc_noprof+0xe0/0x840 [ 436.762796][T13788] copy_splice_read+0x1a3/0xbb0 [ 436.762813][T13788] ? __pfx_copy_splice_read+0x10/0x10 [ 436.762831][T13788] ? lockdep_init_map_type+0x5c/0x250 [ 436.762850][T13788] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 436.762866][T13788] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 436.762883][T13788] do_splice_read+0x2bd/0x370 [ 436.762899][T13788] splice_direct_to_actor+0x2a1/0xa30 [ 436.762916][T13788] ? __pfx_direct_splice_actor+0x10/0x10 [ 436.762932][T13788] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 436.762948][T13788] ? get_pid_task+0xfc/0x250 [ 436.762960][T13788] ? rcu_is_watching+0x12/0xc0 [ 436.762972][T13788] do_splice_direct+0x174/0x240 [ 436.762988][T13788] ? __pfx_do_splice_direct+0x10/0x10 [ 436.763003][T13788] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 436.763018][T13788] ? bpf_lsm_file_permission+0x9/0x10 [ 436.763034][T13788] ? security_file_permission+0x76/0x210 [ 436.763050][T13788] ? rw_verify_area+0xce/0x6d0 [ 436.763062][T13788] do_sendfile+0xadc/0xe20 [ 436.763077][T13788] ? __pfx_do_sendfile+0x10/0x10 [ 436.763091][T13788] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 436.763103][T13788] ? __fget_files+0x21f/0x3d0 [ 436.763119][T13788] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 436.763136][T13788] ? fput+0x79/0x100 [ 436.763145][T13788] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 436.763168][T13788] ? ksys_write+0x1ac/0x250 [ 436.763192][T13788] ? __pfx_ksys_write+0x10/0x10 [ 436.763220][T13788] ? rcu_is_watching+0x12/0xc0 [ 436.763236][T13788] __do_fast_syscall_32+0xe7/0x970 [ 436.763284][T13788] do_fast_syscall_32+0x32/0x70 [ 436.763302][T13788] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 436.763323][T13788] RIP: 0023:0xf7fb6fec [ 436.763339][T13788] Code: Unable to access opcode bytes at 0xf7fb6fc2. [ 436.763347][T13788] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 436.763364][T13788] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000004 [ 436.763375][T13788] RDX: 0000000000000000 RSI: 00000000578410eb RDI: 0000000000000000 [ 436.763385][T13788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 436.763393][T13788] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 436.763399][T13788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 436.763409][T13788] [ 437.427304][ T859] usb 7-1: USB disconnect, device number 11 [ 437.453571][T13811] befs: (loop5): No write support. Marking filesystem read-only [ 437.457571][T13811] befs: (loop5): unable to read superblock [ 437.810506][T13831] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 437.811097][T13822] lo: entered promiscuous mode [ 437.813041][T13831] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 437.813411][T13831] vhci_hcd vhci_hcd.0: Device attached [ 437.815628][T13822] lo: entered allmulticast mode [ 437.839882][T13822] tunl0: entered promiscuous mode [ 437.841810][T13822] tunl0: entered allmulticast mode [ 437.850771][T13822] gre0: entered promiscuous mode [ 437.852751][T13822] gre0: entered allmulticast mode [ 437.856362][T13822] gretap0: entered promiscuous mode [ 437.858130][T13822] gretap0: entered allmulticast mode [ 437.860810][T13822] erspan0: entered promiscuous mode [ 437.862530][T13822] erspan0: entered allmulticast mode [ 437.866258][T13822] ip_vti0: entered promiscuous mode [ 437.868368][T13822] ip_vti0: entered allmulticast mode [ 437.874154][T13822] ip6_vti0: entered promiscuous mode [ 437.876587][T13822] ip6_vti0: entered allmulticast mode [ 437.880529][T13822] sit0: entered promiscuous mode [ 437.882757][T13822] sit0: entered allmulticast mode [ 437.886891][T13822] ip6tnl0: entered promiscuous mode [ 437.888622][T13822] ip6tnl0: entered allmulticast mode [ 437.891468][T13822] ip6gre0: entered promiscuous mode [ 437.893208][T13822] ip6gre0: entered allmulticast mode [ 437.898311][T13822] syz_tun: entered promiscuous mode [ 437.900557][T13822] syz_tun: entered allmulticast mode [ 437.905554][T13822] ip6gretap0: entered promiscuous mode [ 437.908035][T13822] ip6gretap0: entered allmulticast mode [ 437.912333][T13822] bridge0: entered promiscuous mode [ 437.915090][T13822] bridge0: entered allmulticast mode [ 437.923536][T13834] netlink: 'syz.1.1857': attribute type 12 has an invalid length. [ 437.935811][T13835] siw: device registration error -23 [ 438.113518][ T845] usb 40-1: SetAddress Request (15) to port 0 [ 438.115796][ T845] usb 40-1: new SuperSpeed USB device number 15 using vhci_hcd [ 438.594933][T13832] vhci_hcd: connection reset by peer [ 438.596996][T12188] vhci_hcd vhci_hcd.1: stop threads [ 438.598623][T12188] vhci_hcd vhci_hcd.1: release socket [ 438.600440][T12188] vhci_hcd vhci_hcd.1: disconnect device [ 439.973474][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.583484][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.586426][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.797781][ C2] hpet: Lost 1 RTC interrupts [ 443.183402][ T845] usb 40-1: device descriptor read/8, error -110 [ 443.584642][ T845] usb usb40-port1: attempt power cycle [ 444.153776][ T845] usb usb40-port1: unable to enumerate USB device [ 444.854407][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.856413][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.613554][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.616494][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.369354][T13863] befs: (loop1): No write support. Marking filesystem read-only [ 447.371866][T13863] befs: (loop1): unable to read superblock [ 447.604598][T13851] befs: (loop5): No write support. Marking filesystem read-only [ 447.607061][T13851] befs: (loop5): unable to read superblock [ 448.473661][T13896] PKCS7: Unknown OID: [4] 2.19.1.0.0.0.4.0.0.0.0 [ 448.475693][T13896] PKCS7: Only support pkcs7_signedData type [ 448.485739][T13896] random: crng reseeded on system resumption [ 448.490784][T13896] Restarting kernel threads ... [ 448.492657][T13896] Done restarting kernel threads. [ 448.529050][T13900] FAULT_INJECTION: forcing a failure. [ 448.529050][T13900] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 448.536147][T13900] CPU: 2 UID: 0 PID: 13900 Comm: syz.4.1865 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.536166][T13900] Tainted: [L]=SOFTLOCKUP [ 448.536170][T13900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 448.536177][T13900] Call Trace: [ 448.536181][T13900] [ 448.536185][T13900] dump_stack_lvl+0x100/0x190 [ 448.536200][T13900] should_fail_ex.cold+0x5/0xa [ 448.536213][T13900] should_fail_alloc_page+0xeb/0x140 [ 448.536227][T13900] prepare_alloc_pages+0x1f0/0x5f0 [ 448.536242][T13900] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 448.536261][T13900] ? unwind_get_return_address+0x59/0xa0 [ 448.536275][T13900] ? arch_stack_walk+0xa6/0xf0 [ 448.536291][T13900] ? copy_splice_read+0x1a3/0xbb0 [ 448.536306][T13900] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 448.536324][T13900] ? stack_depot_save_flags+0x27/0x9d0 [ 448.536342][T13900] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 448.536354][T13900] ? copy_splice_read+0x1a3/0xbb0 [ 448.536368][T13900] ? kasan_save_stack+0x3f/0x50 [ 448.536379][T13900] ? kasan_save_stack+0x30/0x50 [ 448.536389][T13900] ? kasan_save_track+0x14/0x30 [ 448.536399][T13900] ? __kasan_kmalloc+0xaa/0xb0 [ 448.536409][T13900] ? __kmalloc_noprof+0x302/0x840 [ 448.536424][T13900] ? copy_splice_read+0x1a3/0xbb0 [ 448.536438][T13900] ? do_splice_read+0x2bd/0x370 [ 448.536453][T13900] ? do_fast_syscall_32+0x32/0x70 [ 448.536466][T13900] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 448.536483][T13900] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 448.536503][T13900] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 448.536522][T13900] ? __kmalloc_noprof+0x321/0x840 [ 448.536538][T13900] copy_splice_read+0x1e1/0xbb0 [ 448.536560][T13900] ? __pfx_copy_splice_read+0x10/0x10 [ 448.536584][T13900] ? lockdep_init_map_type+0x5c/0x250 [ 448.536609][T13900] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 448.536631][T13900] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 448.536658][T13900] do_splice_read+0x2bd/0x370 [ 448.536681][T13900] splice_direct_to_actor+0x2a1/0xa30 [ 448.536704][T13900] ? __pfx_direct_splice_actor+0x10/0x10 [ 448.536727][T13900] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 448.536751][T13900] ? get_pid_task+0xfc/0x250 [ 448.536768][T13900] ? rcu_is_watching+0x12/0xc0 [ 448.536787][T13900] do_splice_direct+0x174/0x240 [ 448.536811][T13900] ? __pfx_do_splice_direct+0x10/0x10 [ 448.536834][T13900] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 448.536856][T13900] ? bpf_lsm_file_permission+0x9/0x10 [ 448.536879][T13900] ? security_file_permission+0x76/0x210 [ 448.536903][T13900] ? rw_verify_area+0xce/0x6d0 [ 448.536923][T13900] do_sendfile+0xadc/0xe20 [ 448.536945][T13900] ? __pfx_do_sendfile+0x10/0x10 [ 448.536966][T13900] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 448.536985][T13900] ? __fget_files+0x21f/0x3d0 [ 448.537010][T13900] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 448.537036][T13900] ? fput+0x79/0x100 [ 448.537048][T13900] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 448.537078][T13900] ? ksys_write+0x1ac/0x250 [ 448.537098][T13900] ? __pfx_ksys_write+0x10/0x10 [ 448.537117][T13900] ? rcu_is_watching+0x12/0xc0 [ 448.537135][T13900] __do_fast_syscall_32+0xe7/0x970 [ 448.537155][T13900] do_fast_syscall_32+0x32/0x70 [ 448.537173][T13900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 448.537193][T13900] RIP: 0023:0xf7fb6fec [ 448.537209][T13900] Code: Unable to access opcode bytes at 0xf7fb6fc2. [ 448.537219][T13900] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 448.537234][T13900] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000004 [ 448.537243][T13900] RDX: 0000000000000000 RSI: 00000000578410eb RDI: 0000000000000000 [ 448.537251][T13900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.537259][T13900] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 448.537267][T13900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 448.537279][T13900] [ 448.662527][ C2] hpet: Lost 6 RTC interrupts [ 448.705719][T13911] befs: (loop5): No write support. Marking filesystem read-only [ 448.711746][T13911] befs: (loop5): unable to read superblock [ 448.913863][ T845] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 449.420192][T13938] netlink: 532 bytes leftover after parsing attributes in process `syz.1.1876'. [ 449.666239][T13945] netlink: 'syz.5.1879': attribute type 9 has an invalid length. [ 449.668993][T13945] netlink: 'syz.5.1879': attribute type 1 has an invalid length. [ 449.671499][T13945] netlink: 'syz.5.1879': attribute type 8 has an invalid length. [ 449.674757][T13947] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1880'. [ 449.853335][ T61] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 450.004583][ T61] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.008110][ T61] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.011325][ T61] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 450.015423][ T61] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 450.018430][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.022202][ T61] usb 6-1: config 0 descriptor?? [ 450.429680][ T61] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 450.439693][ T61] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 450.687402][ T61] usb 6-1: USB disconnect, device number 31 [ 451.813615][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.816380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.657244][T13988] input: syz0 as /devices/virtual/input/input35 [ 455.755517][T13979] befs: (loop5): No write support. Marking filesystem read-only [ 455.758528][T13979] befs: (loop5): unable to read superblock [ 455.775976][T13984] FAULT_INJECTION: forcing a failure. [ 455.775976][T13984] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 455.780616][T13984] CPU: 2 UID: 0 PID: 13984 Comm: syz.1.1883 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.780634][T13984] Tainted: [L]=SOFTLOCKUP [ 455.780638][T13984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 455.780644][T13984] Call Trace: [ 455.780648][T13984] [ 455.780652][T13984] dump_stack_lvl+0x100/0x190 [ 455.780666][T13984] should_fail_ex.cold+0x5/0xa [ 455.780678][T13984] should_fail_alloc_page+0xeb/0x140 [ 455.780692][T13984] prepare_alloc_pages+0x1f0/0x5f0 [ 455.780708][T13984] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 455.780726][T13984] ? unwind_get_return_address+0x59/0xa0 [ 455.780741][T13984] ? arch_stack_walk+0xa6/0xf0 [ 455.780756][T13984] ? copy_splice_read+0x1a3/0xbb0 [ 455.780771][T13984] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 455.780789][T13984] ? stack_depot_save_flags+0x27/0x9d0 [ 455.780806][T13984] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 455.780818][T13984] ? copy_splice_read+0x1a3/0xbb0 [ 455.780833][T13984] ? kasan_save_stack+0x3f/0x50 [ 455.780843][T13984] ? kasan_save_stack+0x30/0x50 [ 455.780853][T13984] ? kasan_save_track+0x14/0x30 [ 455.780863][T13984] ? __kasan_kmalloc+0xaa/0xb0 [ 455.780873][T13984] ? __kmalloc_noprof+0x302/0x840 [ 455.780888][T13984] ? copy_splice_read+0x1a3/0xbb0 [ 455.780902][T13984] ? do_splice_read+0x2bd/0x370 [ 455.780918][T13984] ? do_fast_syscall_32+0x32/0x70 [ 455.780934][T13984] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.780951][T13984] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 455.780971][T13984] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 455.780991][T13984] ? __kmalloc_noprof+0x321/0x840 [ 455.781011][T13984] copy_splice_read+0x1e1/0xbb0 [ 455.781027][T13984] ? __pfx_copy_splice_read+0x10/0x10 [ 455.781045][T13984] ? lockdep_init_map_type+0x5c/0x250 [ 455.781061][T13984] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 455.781076][T13984] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 455.781093][T13984] do_splice_read+0x2bd/0x370 [ 455.781109][T13984] splice_direct_to_actor+0x2a1/0xa30 [ 455.781126][T13984] ? __pfx_direct_splice_actor+0x10/0x10 [ 455.781142][T13984] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 455.781158][T13984] ? get_pid_task+0xfc/0x250 [ 455.781170][T13984] ? rcu_is_watching+0x12/0xc0 [ 455.781182][T13984] do_splice_direct+0x174/0x240 [ 455.781198][T13984] ? __pfx_do_splice_direct+0x10/0x10 [ 455.781214][T13984] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 455.781229][T13984] ? bpf_lsm_file_permission+0x9/0x10 [ 455.781245][T13984] ? security_file_permission+0x76/0x210 [ 455.781261][T13984] ? rw_verify_area+0xce/0x6d0 [ 455.781273][T13984] do_sendfile+0xadc/0xe20 [ 455.781288][T13984] ? __pfx_do_sendfile+0x10/0x10 [ 455.781301][T13984] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 455.781314][T13984] ? __fget_files+0x21f/0x3d0 [ 455.781329][T13984] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 455.781347][T13984] ? fput+0x79/0x100 [ 455.781356][T13984] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 455.781373][T13984] ? ksys_write+0x1ac/0x250 [ 455.781387][T13984] ? __pfx_ksys_write+0x10/0x10 [ 455.781402][T13984] ? rcu_is_watching+0x12/0xc0 [ 455.781413][T13984] __do_fast_syscall_32+0xe7/0x970 [ 455.781426][T13984] do_fast_syscall_32+0x32/0x70 [ 455.781439][T13984] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.781452][T13984] RIP: 0023:0xf708efec [ 455.781464][T13984] Code: Unable to access opcode bytes at 0xf708efc2. [ 455.781469][T13984] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 455.781480][T13984] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000004 [ 455.781486][T13984] RDX: 0000000000000000 RSI: 00000000578410eb RDI: 0000000000000000 [ 455.781493][T13984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.781499][T13984] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 455.781505][T13984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.781514][T13984] [ 455.898407][ C2] hpet: Lost 6 RTC interrupts [ 456.353174][T13993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1886'. [ 456.523245][T14010] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 456.525211][T14010] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 456.527682][T14010] vhci_hcd vhci_hcd.0: Device attached [ 456.670303][T14012] vhci_hcd: connection closed [ 456.672536][T12188] vhci_hcd vhci_hcd.1: stop threads [ 456.679268][T12188] vhci_hcd vhci_hcd.1: release socket [ 456.681230][T12188] vhci_hcd vhci_hcd.1: disconnect device [ 457.003336][ T859] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 457.163346][ T859] usb 6-1: Using ep0 maxpacket: 8 [ 457.166054][ T859] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 457.168723][ T859] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 457.171670][ T859] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 457.174834][ T859] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 457.178146][ T859] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.182357][ T859] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 457.186207][ T859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.477473][ T859] usb 6-1: usb_control_msg returned -32 [ 457.479248][ T859] usbtmc 6-1:16.0: can't read capabilities [ 457.573424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.575951][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.757706][T14036] cgroup: Unknown subsys name 'dont_measure' [ 457.846064][T14023] usbtmc 6-1:16.0: INDICATOR_PULSE returned 0 [ 458.049535][ T845] usb 6-1: USB disconnect, device number 32 [ 458.547909][T14042] befs: (loop5): No write support. Marking filesystem read-only [ 458.550383][T14042] befs: (loop5): unable to read superblock [ 458.802091][T14050] FAULT_INJECTION: forcing a failure. [ 458.802091][T14050] name failslab, interval 1, probability 0, space 0, times 0 [ 458.808010][T14050] CPU: 2 UID: 0 PID: 14050 Comm: syz.1.1899 Tainted: G L syzkaller #0 PREEMPT(full) [ 458.808038][T14050] Tainted: [L]=SOFTLOCKUP [ 458.808044][T14050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 458.808053][T14050] Call Trace: [ 458.808058][T14050] [ 458.808063][T14050] dump_stack_lvl+0x100/0x190 [ 458.808082][T14050] should_fail_ex.cold+0x5/0xa [ 458.808097][T14050] ? kmem_cache_alloc_node_noprof+0x5b/0x6f0 [ 458.808116][T14050] should_failslab+0xc2/0x120 [ 458.808136][T14050] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 458.808153][T14050] ? __alloc_skb+0x140/0x710 [ 458.808173][T14050] ? __alloc_skb+0x5b7/0x710 [ 458.808194][T14050] __alloc_skb+0x140/0x710 [ 458.808211][T14050] ? __alloc_skb+0x5b7/0x710 [ 458.808227][T14050] ? __pfx___alloc_skb+0x10/0x10 [ 458.808249][T14050] ? post_alloc_hook+0xed/0x120 [ 458.808273][T14050] alloc_skb_with_frags+0xdd/0x760 [ 458.808297][T14050] sock_alloc_send_pskb+0x801/0x980 [ 458.808315][T14050] ? rcu_is_watching+0x12/0xc0 [ 458.808333][T14050] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 458.808354][T14050] ? is_bpf_text_address+0x8a/0x1a0 [ 458.808372][T14050] ? lock_release+0x24d/0x310 [ 458.808391][T14050] ? bpf_ksym_find+0x124/0x1c0 [ 458.808404][T14050] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 458.808423][T14050] ? is_bpf_text_address+0x94/0x1a0 [ 458.808445][T14050] ? kernel_text_address+0x8d/0x100 [ 458.808466][T14050] unix_stream_sendmsg+0xda4/0x1310 [ 458.808485][T14050] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 458.808503][T14050] ? stack_depot_save_flags+0x27/0x9d0 [ 458.808530][T14050] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 458.808550][T14050] sock_sendmsg+0x394/0x410 [ 458.808563][T14050] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 458.808580][T14050] ? __pfx_sock_sendmsg+0x10/0x10 [ 458.808593][T14050] ? do_sendfile+0xadc/0xe20 [ 458.808626][T14050] splice_to_socket+0xb3c/0x11a0 [ 458.808656][T14050] ? __pfx_splice_to_socket+0x10/0x10 [ 458.808690][T14050] ? lockdep_init_map_type+0x5c/0x250 [ 458.808710][T14050] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 458.808728][T14050] ? __pfx_splice_to_socket+0x10/0x10 [ 458.808752][T14050] direct_splice_actor+0x192/0x690 [ 458.808790][T14050] splice_direct_to_actor+0x345/0xa30 [ 458.808815][T14050] ? __pfx_direct_splice_actor+0x10/0x10 [ 458.808836][T14050] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 458.808856][T14050] ? get_pid_task+0xfc/0x250 [ 458.808876][T14050] ? rcu_is_watching+0x12/0xc0 [ 458.808893][T14050] do_splice_direct+0x174/0x240 [ 458.808914][T14050] ? __pfx_do_splice_direct+0x10/0x10 [ 458.808934][T14050] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 458.808956][T14050] ? bpf_lsm_file_permission+0x9/0x10 [ 458.808979][T14050] ? security_file_permission+0x76/0x210 [ 458.809004][T14050] ? rw_verify_area+0xce/0x6d0 [ 458.809022][T14050] do_sendfile+0xadc/0xe20 [ 458.809041][T14050] ? __pfx_do_sendfile+0x10/0x10 [ 458.809057][T14050] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 458.809077][T14050] ? __fget_files+0x21f/0x3d0 [ 458.809101][T14050] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 458.809123][T14050] ? fput+0x79/0x100 [ 458.809135][T14050] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 458.809157][T14050] ? ksys_write+0x1ac/0x250 [ 458.809178][T14050] ? __pfx_ksys_write+0x10/0x10 [ 458.809200][T14050] ? rcu_is_watching+0x12/0xc0 [ 458.809219][T14050] __do_fast_syscall_32+0xe7/0x970 [ 458.809238][T14050] do_fast_syscall_32+0x32/0x70 [ 458.809254][T14050] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 458.809272][T14050] RIP: 0023:0xf708efec [ 458.809290][T14050] Code: Unable to access opcode bytes at 0xf708efc2. [ 458.809300][T14050] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 458.809316][T14050] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000004 [ 458.809325][T14050] RDX: 0000000000000000 RSI: 00000000578410eb RDI: 0000000000000000 [ 458.809334][T14050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 458.809342][T14050] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 458.809351][T14050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 458.809364][T14050] [ 458.947730][ C2] hpet: Lost 8 RTC interrupts [ 460.091220][T14069] can0: slcan on ttyS3. [ 460.175405][T14069] can0 (unregistered): slcan off ttyS3. [ 460.512731][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 460.517833][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 460.521923][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 460.528750][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 460.536540][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 461.119840][T14081] cgroup: Unknown subsys name 'dont_measure' [ 462.053209][T14091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1908'. [ 462.631350][T14103] FAULT_INJECTION: forcing a failure. [ 462.631350][T14103] name failslab, interval 1, probability 0, space 0, times 0 [ 462.636783][T14103] CPU: 1 UID: 0 PID: 14103 Comm: syz.4.1911 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.636810][T14103] Tainted: [L]=SOFTLOCKUP [ 462.636815][T14103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 462.636824][T14103] Call Trace: [ 462.636829][T14103] [ 462.636836][T14103] dump_stack_lvl+0x100/0x190 [ 462.636856][T14103] should_fail_ex.cold+0x5/0xa [ 462.636874][T14103] ? __kmalloc_noprof+0xba/0x840 [ 462.636899][T14103] ? copy_splice_read+0x1a3/0xbb0 [ 462.636922][T14103] should_failslab+0xc2/0x120 [ 462.636942][T14103] __kmalloc_noprof+0xe0/0x840 [ 462.636966][T14103] copy_splice_read+0x1a3/0xbb0 [ 462.636991][T14103] ? __pfx_copy_splice_read+0x10/0x10 [ 462.637024][T14103] ? lockdep_init_map_type+0x5c/0x250 [ 462.637047][T14103] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 462.637069][T14103] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 462.637094][T14103] do_splice_read+0x2bd/0x370 [ 462.637117][T14103] splice_direct_to_actor+0x2a1/0xa30 [ 462.637140][T14103] ? __pfx_direct_splice_actor+0x10/0x10 [ 462.637166][T14103] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 462.637189][T14103] ? __schedule+0x126e/0x6730 [ 462.637215][T14103] ? rcu_is_watching+0x12/0xc0 [ 462.637235][T14103] do_splice_direct+0x174/0x240 [ 462.637259][T14103] ? __pfx_do_splice_direct+0x10/0x10 [ 462.637284][T14103] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 462.637307][T14103] ? bpf_lsm_file_permission+0x9/0x10 [ 462.637330][T14103] ? security_file_permission+0x76/0x210 [ 462.637352][T14103] ? rw_verify_area+0xce/0x6d0 [ 462.637372][T14103] do_sendfile+0xadc/0xe20 [ 462.637394][T14103] ? __pfx_do_sendfile+0x10/0x10 [ 462.637413][T14103] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 462.637435][T14103] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 462.637459][T14103] ? xfd_validate_state+0x129/0x190 [ 462.637475][T14103] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 462.637502][T14103] ? rcu_is_watching+0x12/0xc0 [ 462.637520][T14103] __do_fast_syscall_32+0xe7/0x970 [ 462.637541][T14103] do_fast_syscall_32+0x32/0x70 [ 462.637559][T14103] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 462.637579][T14103] RIP: 0023:0xf7fb6fec [ 462.637596][T14103] Code: Unable to access opcode bytes at 0xf7fb6fc2. [ 462.637604][T14103] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 462.637635][T14103] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000004 [ 462.637645][T14103] RDX: 0000000000000000 RSI: 00000000578410eb RDI: 0000000000000000 [ 462.637654][T14103] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 462.637663][T14103] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 462.637673][T14103] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 462.637688][T14103] [ 463.333456][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.336330][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.423574][T14112] befs: (loop2): No write support. Marking filesystem read-only [ 463.426782][T14112] befs: (loop2): unable to read superblock [ 464.410442][T14136] CIFS: iocharset name too long [ 464.457431][T14150] wg2 speed is unknown, defaulting to 1000 [ 464.593404][ T859] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 464.726653][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1918'. [ 464.729671][T14158] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1918'. [ 464.733417][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1918'. [ 464.736212][T14158] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1918'. [ 464.739322][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1918'. [ 464.813319][ T859] usb 6-1: device descriptor read/64, error -71 [ 465.151033][ T859] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 465.669989][ T859] usb 6-1: device descriptor read/64, error -71 [ 466.195213][ T859] usb usb6-port1: attempt power cycle [ 466.573367][ T859] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 466.669479][T14177] befs: (loop5): No write support. Marking filesystem read-only [ 466.672517][T14177] befs: (loop5): unable to read superblock [ 467.145626][ T859] usb 6-1: device descriptor read/8, error -71 [ 467.393440][ T859] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 467.543719][T14191] FAULT_INJECTION: forcing a failure. [ 467.543719][T14191] name failslab, interval 1, probability 0, space 0, times 0 [ 467.548392][T14191] CPU: 1 UID: 0 PID: 14191 Comm: syz.4.1924 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.548422][T14191] Tainted: [L]=SOFTLOCKUP [ 467.548428][T14191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 467.548435][T14191] Call Trace: [ 467.548439][T14191] [ 467.548443][T14191] dump_stack_lvl+0x100/0x190 [ 467.548457][T14191] should_fail_ex.cold+0x5/0xa [ 467.548469][T14191] ? __kmalloc_noprof+0xba/0x840 [ 467.548486][T14191] ? copy_splice_read+0x1a3/0xbb0 [ 467.548500][T14191] should_failslab+0xc2/0x120 [ 467.548513][T14191] __kmalloc_noprof+0xe0/0x840 [ 467.548530][T14191] copy_splice_read+0x1a3/0xbb0 [ 467.548547][T14191] ? __pfx_copy_splice_read+0x10/0x10 [ 467.548564][T14191] ? lockdep_init_map_type+0x5c/0x250 [ 467.548581][T14191] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 467.548596][T14191] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 467.548614][T14191] do_splice_read+0x2bd/0x370 [ 467.548630][T14191] splice_direct_to_actor+0x2a1/0xa30 [ 467.548646][T14191] ? __pfx_direct_splice_actor+0x10/0x10 [ 467.548663][T14191] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 467.548679][T14191] ? __perf_event_task_sched_in+0x27a/0xa10 [ 467.548693][T14191] ? __perf_event_task_sched_out+0x126/0x1890 [ 467.548708][T14191] do_splice_direct+0x174/0x240 [ 467.548724][T14191] ? __pfx_do_splice_direct+0x10/0x10 [ 467.548744][T14191] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 467.548767][T14191] ? bpf_lsm_file_permission+0x9/0x10 [ 467.548792][T14191] ? security_file_permission+0x76/0x210 [ 467.548813][T14191] ? rw_verify_area+0xce/0x6d0 [ 467.548826][T14191] do_sendfile+0xadc/0xe20 [ 467.548841][T14191] ? __pfx_do_sendfile+0x10/0x10 [ 467.548854][T14191] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 467.548869][T14191] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 467.548886][T14191] ? fput+0x79/0x100 [ 467.548895][T14191] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 467.548912][T14191] ? rcu_is_watching+0x12/0xc0 [ 467.548930][T14191] ? rcu_is_watching+0x12/0xc0 [ 467.548941][T14191] __do_fast_syscall_32+0xe7/0x970 [ 467.548956][T14191] do_fast_syscall_32+0x32/0x70 [ 467.548968][T14191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 467.548982][T14191] RIP: 0023:0xf7fb6fec [ 467.548993][T14191] Code: Unable to access opcode bytes at 0xf7fb6fc2. [ 467.548998][T14191] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 467.549009][T14191] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000004 [ 467.549016][T14191] RDX: 0000000000000000 RSI: 00000000578410eb RDI: 0000000000000000 [ 467.549023][T14191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 467.549029][T14191] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 467.549035][T14191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 467.549044][T14191] [ 467.613672][ T859] usb 6-1: device not accepting address 36, error -71 [ 467.655554][ T859] usb usb6-port1: unable to enumerate USB device [ 468.294408][ T234] Bluetooth: hci3: Frame reassembly failed (-84) [ 468.296022][T14237] vivid-004: disconnect [ 468.296519][T11089] Bluetooth: hci3: Frame reassembly failed (-84) [ 468.463443][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.466028][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.597549][T14246] cgroup: Unknown subsys name 'dont_measure' [ 469.209888][T14230] vivid-004: reconnect [ 469.447535][T14255] befs: (loop2): No write support. Marking filesystem read-only [ 469.450183][T14255] befs: (loop2): unable to read superblock [ 469.721536][T14261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.736810][T14261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.784345][T14261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.790894][T14261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.809614][T14261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 469.813348][T14261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 469.830963][T14261] veth1_vlan: left promiscuous mode [ 469.834461][T14261] veth0_vlan: entered promiscuous mode [ 469.839746][T14261] veth1_vlan: entered promiscuous mode [ 469.850948][T14261] veth1_macvtap: left promiscuous mode [ 469.855564][T14261] veth0_macvtap: left promiscuous mode [ 469.860203][T14261] veth0_macvtap: entered promiscuous mode [ 469.863912][T14261] veth1_macvtap: entered promiscuous mode [ 469.876381][T14261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 469.884935][T14261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 469.889151][T14261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 469.893051][T14261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 469.900046][T14261] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 469.909247][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.911544][ T60] bridge0: port 1(bridge_slave_0) entered listening state [ 469.920013][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.922290][ T60] bridge0: port 2(bridge_slave_1) entered listening state [ 470.006653][T12188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.013227][T12188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.383363][ T5099] Bluetooth: hci3: command 0x1003 tx timeout [ 470.383406][ T5744] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 470.424019][T14269] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1938'. [ 470.568863][T14280] befs: (loop2): No write support. Marking filesystem read-only [ 470.572053][T14280] befs: (loop2): unable to read superblock [ 470.753593][T14281] wg2 speed is unknown, defaulting to 1000 [ 471.203505][T12188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.215505][T12188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.299574][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1943'. [ 472.466116][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1946'. [ 472.570224][T14306] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1947'. [ 472.588469][T14306] kernel profiling enabled (shift: 0) [ 473.189017][ T61] IPVS: starting estimator thread 0... [ 473.273767][T14317] IPVS: using max 50 ests per chain, 120000 per kthread [ 473.688019][T14324] tmpfs: Unknown parameter '@' [ 474.105407][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1953'. [ 474.213468][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.216206][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.851075][T14352] bpf: Bad value for 'gid' [ 474.857125][T14352] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 476.219473][T14381] cgroup: Unknown subsys name 'dont_measure' [ 476.627086][T14386] FAULT_INJECTION: forcing a failure. [ 476.627086][T14386] name failslab, interval 1, probability 0, space 0, times 0 [ 476.683348][T14386] CPU: 3 UID: 0 PID: 14386 Comm: syz.2.1967 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.683376][T14386] Tainted: [L]=SOFTLOCKUP [ 476.683381][T14386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 476.683390][T14386] Call Trace: [ 476.683396][T14386] [ 476.683403][T14386] dump_stack_lvl+0x100/0x190 [ 476.683444][T14386] should_fail_ex.cold+0x5/0xa [ 476.683463][T14386] ? __kmalloc_noprof+0xba/0x840 [ 476.683484][T14386] ? copy_splice_read+0x1a3/0xbb0 [ 476.683504][T14386] should_failslab+0xc2/0x120 [ 476.683521][T14386] __kmalloc_noprof+0xe0/0x840 [ 476.683543][T14386] copy_splice_read+0x1a3/0xbb0 [ 476.683565][T14386] ? __pfx_copy_splice_read+0x10/0x10 [ 476.683593][T14386] ? lockdep_init_map_type+0x5c/0x250 [ 476.683618][T14386] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 476.683641][T14386] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 476.683673][T14386] do_splice_read+0x2bd/0x370 [ 476.683699][T14386] splice_direct_to_actor+0x2a1/0xa30 [ 476.683721][T14386] ? __pfx_direct_splice_actor+0x10/0x10 [ 476.683742][T14386] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 476.683766][T14386] do_splice_direct+0x174/0x240 [ 476.683787][T14386] ? __pfx_do_splice_direct+0x10/0x10 [ 476.683811][T14386] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 476.683835][T14386] ? bpf_lsm_file_permission+0x9/0x10 [ 476.683860][T14386] ? security_file_permission+0x76/0x210 [ 476.683892][T14386] ? rw_verify_area+0xce/0x6d0 [ 476.683911][T14386] do_sendfile+0xadc/0xe20 [ 476.683931][T14386] ? __pfx_do_sendfile+0x10/0x10 [ 476.683950][T14386] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 476.683983][T14386] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 476.684007][T14386] ? fput+0x79/0x100 [ 476.684018][T14386] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 476.684041][T14386] ? rcu_is_watching+0x12/0xc0 [ 476.684056][T14386] ? rcu_is_watching+0x12/0xc0 [ 476.684072][T14386] __do_fast_syscall_32+0xe7/0x970 [ 476.684091][T14386] do_fast_syscall_32+0x32/0x70 [ 476.684113][T14386] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 476.684135][T14386] RIP: 0023:0xf6fdefec [ 476.684152][T14386] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 476.684158][T14386] RSP: 002b:00000000f53ac50c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 476.684174][T14386] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000004 [ 476.684183][T14386] RDX: 0000000000000000 RSI: 00000000578410eb RDI: 0000000000000000 [ 476.684191][T14386] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 476.684200][T14386] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 476.684209][T14386] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 476.684223][T14386] [ 477.065171][ T5744] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 477.065937][T14401] netlink: 'syz.4.1972': attribute type 5 has an invalid length. [ 477.067649][ T5744] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 477.072309][T14401] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1972'. [ 477.077708][T14401] fuse: Invalid rootmode [ 477.162654][T14415] wg2 speed is unknown, defaulting to 1000 [ 477.384368][T14430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1980'. [ 477.750105][T14445] netlink: 'syz.5.1984': attribute type 1 has an invalid length. [ 477.805399][T14446] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1984'. [ 479.095418][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 479.213437][T14495] wg2 speed is unknown, defaulting to 1000 [ 479.693327][ T859] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 479.863346][ T859] usb 6-1: Using ep0 maxpacket: 16 [ 479.866853][ T859] usb 6-1: config 0 has no interfaces? [ 479.870118][ T859] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 479.874494][ T859] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 479.877896][ T859] usb 6-1: Manufacturer: syz [ 479.886126][ T859] usb 6-1: config 0 descriptor?? [ 479.973616][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.976546][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.166048][ T859] usb 6-1: USB disconnect, device number 37 [ 480.243481][T14517] cgroup: Unknown subsys name 'dont_measure' [ 480.714529][T14521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2003'. [ 481.030990][ T42] audit: type=1800 audit(1782064351.384:3607): pid=14531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2007" name="SYSV00000000" dev="tmpfs" ino=10 res=0 errno=0 [ 481.044554][T14531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2007'. [ 481.104177][ T5099] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 481.107131][ T5099] Bluetooth: hci1: Injecting HCI hardware error event [ 481.109290][T14539] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 481.111858][T14539] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 481.173756][ T5099] Bluetooth: hci1: command 0x0c1a tx timeout [ 481.180146][ T5744] Bluetooth: hci1: hardware error 0x00 [ 481.323367][ T859] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 481.350021][T14547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2011'. [ 481.354867][T14547] vlan2: entered allmulticast mode [ 481.356538][T14547] dummy0: entered allmulticast mode [ 481.358395][T14547] bridge0: port 3(vlan2) entered blocking state [ 481.360510][T14547] bridge0: port 3(vlan2) entered disabled state [ 481.367873][T14547] vlan2: entered promiscuous mode [ 481.369536][T14547] dummy0: entered promiscuous mode [ 481.473385][ T859] usb 6-1: device descriptor read/64, error -71 [ 481.638968][T14561] FAULT_INJECTION: forcing a failure. [ 481.638968][T14561] name failslab, interval 1, probability 0, space 0, times 0 [ 481.643097][T14561] CPU: 2 UID: 0 PID: 14561 Comm: syz.4.2012 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.643124][T14561] Tainted: [L]=SOFTLOCKUP [ 481.643129][T14561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 481.643140][T14561] Call Trace: [ 481.643146][T14561] [ 481.643151][T14561] dump_stack_lvl+0x100/0x190 [ 481.643179][T14561] should_fail_ex.cold+0x5/0xa [ 481.643197][T14561] ? kmem_cache_alloc_node_noprof+0x5b/0x6f0 [ 481.643216][T14561] should_failslab+0xc2/0x120 [ 481.643236][T14561] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 481.643269][T14561] ? __alloc_skb+0x140/0x710 [ 481.643293][T14561] ? __alloc_skb+0x5b7/0x710 [ 481.643315][T14561] __alloc_skb+0x140/0x710 [ 481.643336][T14561] ? __alloc_skb+0x5b7/0x710 [ 481.643357][T14561] ? __pfx___alloc_skb+0x10/0x10 [ 481.643378][T14561] ? post_alloc_hook+0xed/0x120 [ 481.643404][T14561] alloc_skb_with_frags+0xdd/0x760 [ 481.643429][T14561] sock_alloc_send_pskb+0x801/0x980 [ 481.643446][T14561] ? rcu_is_watching+0x12/0xc0 [ 481.643462][T14561] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 481.643481][T14561] ? is_bpf_text_address+0x8a/0x1a0 [ 481.643501][T14561] ? lock_release+0x24d/0x310 [ 481.643524][T14561] ? bpf_ksym_find+0x124/0x1c0 [ 481.643540][T14561] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 481.643560][T14561] ? is_bpf_text_address+0x94/0x1a0 [ 481.643582][T14561] ? kernel_text_address+0x8d/0x100 [ 481.643605][T14561] unix_stream_sendmsg+0xda4/0x1310 [ 481.643631][T14561] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 481.643654][T14561] ? stack_depot_save_flags+0x27/0x9d0 [ 481.643679][T14561] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 481.643701][T14561] sock_sendmsg+0x394/0x410 [ 481.643720][T14561] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 481.643740][T14561] ? __pfx_sock_sendmsg+0x10/0x10 [ 481.643756][T14561] ? do_sendfile+0xadc/0xe20 [ 481.643783][T14561] splice_to_socket+0xb3c/0x11a0 [ 481.643817][T14561] ? __pfx_splice_to_socket+0x10/0x10 [ 481.643854][T14561] ? lockdep_init_map_type+0x5c/0x250 [ 481.643878][T14561] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 481.643901][T14561] ? __pfx_splice_to_socket+0x10/0x10 [ 481.643925][T14561] direct_splice_actor+0x192/0x690 [ 481.643950][T14561] splice_direct_to_actor+0x345/0xa30 [ 481.643975][T14561] ? __pfx_direct_splice_actor+0x10/0x10 [ 481.643999][T14561] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 481.644024][T14561] ? get_pid_task+0xfc/0x250 [ 481.644041][T14561] ? rcu_is_watching+0x12/0xc0 [ 481.644060][T14561] do_splice_direct+0x174/0x240 [ 481.644085][T14561] ? __pfx_do_splice_direct+0x10/0x10 [ 481.644110][T14561] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 481.644133][T14561] ? bpf_lsm_file_permission+0x9/0x10 [ 481.644158][T14561] ? security_file_permission+0x76/0x210 [ 481.644187][T14561] ? rw_verify_area+0xce/0x6d0 [ 481.644208][T14561] do_sendfile+0xadc/0xe20 [ 481.644231][T14561] ? __pfx_do_sendfile+0x10/0x10 [ 481.644252][T14561] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 481.644273][T14561] ? __fget_files+0x21f/0x3d0 [ 481.644297][T14561] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 481.644324][T14561] ? fput+0x79/0x100 [ 481.644338][T14561] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 481.644365][T14561] ? ksys_write+0x1ac/0x250 [ 481.644387][T14561] ? __pfx_ksys_write+0x10/0x10 [ 481.644410][T14561] ? rcu_is_watching+0x12/0xc0 [ 481.644428][T14561] __do_fast_syscall_32+0xe7/0x970 [ 481.644450][T14561] do_fast_syscall_32+0x32/0x70 [ 481.644470][T14561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 481.644492][T14561] RIP: 0023:0xf7fb6fec [ 481.644511][T14561] Code: Unable to access opcode bytes at 0xf7fb6fc2. [ 481.644520][T14561] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 481.644537][T14561] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000004 [ 481.644548][T14561] RDX: 0000000000000000 RSI: 00000000578410eb RDI: 0000000000000000 [ 481.644559][T14561] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 481.644568][T14561] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 481.644580][T14561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 481.644595][T14561] [ 481.698541][T14564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2013'. [ 481.700398][ C2] hpet: Lost 3 RTC interrupts [ 481.713414][ T859] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 481.715776][T14564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2013'. [ 481.843424][ T859] usb 6-1: device descriptor read/64, error -71 [ 481.964019][ T859] usb usb6-port1: attempt power cycle [ 482.121473][T14569] cgroup: Unknown subsys name 'dont_measure' [ 482.303353][ T859] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 482.323813][ T859] usb 6-1: device descriptor read/8, error -71 [ 482.563429][ T859] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 482.583807][ T859] usb 6-1: device descriptor read/8, error -71 [ 482.693690][ T859] usb usb6-port1: unable to enumerate USB device [ 483.263540][ T5744] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 483.928145][T14606] overlayfs: missing 'lowerdir' [ 484.031031][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'. [ 484.209980][T14618] tmpfs: Bad value for 'mpol' [ 484.281701][ T42] audit: type=1326 audit(1782064354.634:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14608 comm="syz.4.2025" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 484.291316][ T42] audit: type=1326 audit(1782064354.634:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14608 comm="syz.4.2025" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 484.308046][ T42] audit: type=1326 audit(1782064354.634:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14608 comm="syz.4.2025" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 484.315096][ T42] audit: type=1326 audit(1782064354.644:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14608 comm="syz.4.2025" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 484.315222][ T42] audit: type=1326 audit(1782064354.644:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14608 comm="syz.4.2025" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 484.315357][ T42] audit: type=1326 audit(1782064354.644:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14608 comm="syz.4.2025" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 484.335918][ T42] audit: type=1326 audit(1782064354.644:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14608 comm="syz.4.2025" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 484.336503][ T42] audit: type=1326 audit(1782064354.654:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14608 comm="syz.4.2025" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 484.658640][ T5826] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 484.882906][T14637] ipt_rpfilter: unknown options [ 484.886291][T14642] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2030'. [ 484.889310][T14642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2030'. [ 485.026106][T14651] wg2 speed is unknown, defaulting to 1000 [ 485.173357][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 485.176446][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 485.179535][ T5744] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 485.182979][ T5744] Bluetooth: hci4: Injecting HCI hardware error event [ 485.185902][ T5744] Bluetooth: hci4: hardware error 0x00 [ 485.733516][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.737176][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.253363][ T5744] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 491.493465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.496034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.543466][ T61] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 494.693624][ T61] usb 9-1: Using ep0 maxpacket: 8 [ 494.699713][ T61] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 494.704562][ T61] usb 9-1: config 179 has no interface number 0 [ 494.708249][ T61] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 494.715133][ T61] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 494.719830][ T61] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 494.728253][ T61] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 494.734940][ T61] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 494.745859][ T61] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 494.749959][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.779695][T14680] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 495.225670][T14680] syzkaller1: entered promiscuous mode [ 495.229959][T14720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2040'. [ 495.247263][T14680] syzkaller1: entered allmulticast mode [ 495.271194][T14726] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 495.275097][T14726] overlayfs: failed to set xattr on upper [ 495.277424][T14680] wg2 speed is unknown, defaulting to 1000 [ 495.277598][T14726] overlayfs: ...falling back to redirect_dir=nofollow. [ 495.282282][T14726] overlayfs: ...falling back to index=off. [ 495.285990][T14726] overlayfs: ...falling back to uuid=null. [ 495.519388][T14738] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2046'. [ 495.523516][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2046'. [ 495.588935][T14741] syz.2.2047 (14741): drop_caches: 2 [ 495.681553][T14745] syzkaller0: entered promiscuous mode [ 495.686012][T14745] syzkaller0: entered allmulticast mode [ 495.691811][T14745] tipc: Enabled bearer , priority 0 [ 495.700839][T14745] tipc: Resetting bearer [ 495.715761][ T5826] usb 9-1: USB disconnect, device number 12 [ 495.715881][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 495.721110][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 495.778572][T14744] tipc: Resetting bearer [ 495.785617][T14744] tipc: Disabling bearer [ 496.050965][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2049'. [ 496.059698][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2049'. [ 496.203418][ T5848] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 496.322989][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2051'. [ 496.374623][ T5848] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 496.378258][ T5848] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 496.382485][ T5848] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 496.386378][ T5848] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 496.391066][ T5848] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 496.397717][ T5848] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 496.401508][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 496.406264][ T5848] usb 6-1: Product: syz [ 496.408535][ T5848] usb 6-1: Manufacturer: syz [ 496.421611][ T5848] cdc_wdm 6-1:1.0: skipping garbage [ 496.423931][ T5848] cdc_wdm 6-1:1.0: skipping garbage [ 496.430221][ T5848] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 496.432934][ T5848] cdc_wdm 6-1:1.0: Unknown control protocol [ 496.994724][T14782] cgroup: Unknown subsys name 'dont_measure' [ 497.115329][ T1485] usb 6-1: USB disconnect, device number 42 [ 497.253578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.257293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.993772][T14795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2061'. [ 497.996955][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2061'. [ 498.876405][T14836] FAULT_INJECTION: forcing a failure. [ 498.876405][T14836] name failslab, interval 1, probability 0, space 0, times 0 [ 498.913668][T14836] CPU: 1 UID: 0 PID: 14836 Comm: syz.1.2065 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.913688][T14836] Tainted: [L]=SOFTLOCKUP [ 498.913692][T14836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 498.913699][T14836] Call Trace: [ 498.913703][T14836] [ 498.913708][T14836] dump_stack_lvl+0x100/0x190 [ 498.913722][T14836] should_fail_ex.cold+0x5/0xa [ 498.913734][T14836] ? kmem_cache_alloc_node_noprof+0x5b/0x6f0 [ 498.913746][T14836] should_failslab+0xc2/0x120 [ 498.913759][T14836] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 498.913769][T14836] ? copy_process+0x69a/0x7ff0 [ 498.913784][T14836] ? rcu_is_watching+0x12/0xc0 [ 498.913796][T14836] copy_process+0x69a/0x7ff0 [ 498.913808][T14836] ? kstrtouint+0xdf/0x130 [ 498.913820][T14836] ? __pfx_kstrtouint+0x10/0x10 [ 498.913833][T14836] ? __pfx_copy_process+0x10/0x10 [ 498.913844][T14836] ? rcu_is_watching+0x12/0xc0 [ 498.913855][T14836] ? get_pid_task+0xfc/0x250 [ 498.913866][T14836] ? rcu_is_watching+0x12/0xc0 [ 498.913877][T14836] ? get_pid_task+0xfc/0x250 [ 498.913887][T14836] ? lock_release+0x24d/0x310 [ 498.913903][T14836] kernel_clone+0x176/0x9d0 [ 498.913914][T14836] ? proc_fail_nth_write+0x9f/0x220 [ 498.913927][T14836] ? __pfx_kernel_clone+0x10/0x10 [ 498.913948][T14836] ? rcu_is_watching+0x12/0xc0 [ 498.913961][T14836] ? ksys_write+0x190/0x250 [ 498.913975][T14836] ? rcu_is_watching+0x12/0xc0 [ 498.913986][T14836] ? ksys_write+0x190/0x250 [ 498.913999][T14836] ? lock_release+0x24d/0x310 [ 498.914014][T14836] __do_compat_sys_ia32_clone+0xd4/0x120 [ 498.914026][T14836] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 498.914046][T14836] ? fput+0x79/0x100 [ 498.914055][T14836] ? ksys_write+0x1ac/0x250 [ 498.914068][T14836] ? __pfx_ksys_write+0x10/0x10 [ 498.914083][T14836] ? rcu_is_watching+0x12/0xc0 [ 498.914094][T14836] __do_fast_syscall_32+0xe7/0x970 [ 498.914107][T14836] do_fast_syscall_32+0x32/0x70 [ 498.914120][T14836] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 498.914133][T14836] RIP: 0023:0xf708efec [ 498.914146][T14836] Code: Unable to access opcode bytes at 0xf708efc2. [ 498.914151][T14836] RSP: 002b:00000000f54104bc EFLAGS: 00000202 ORIG_RAX: 0000000000000078 [ 498.914161][T14836] RAX: ffffffffffffffda RBX: 0000000000000400 RCX: 0000000000000000 [ 498.914168][T14836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 498.914174][T14836] RBP: 00000000f7485018 R08: 0000000000000000 R09: 0000000000000000 [ 498.914180][T14836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.914187][T14836] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 498.914196][T14836] [ 500.307966][T14863] netlink: 'syz.1.2072': attribute type 8 has an invalid length. [ 500.506374][T14866] FAULT_INJECTION: forcing a failure. [ 500.506374][T14866] name failslab, interval 1, probability 0, space 0, times 0 [ 500.510182][T14866] CPU: 3 UID: 0 PID: 14866 Comm: syz.2.2075 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.510200][T14866] Tainted: [L]=SOFTLOCKUP [ 500.510203][T14866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 500.510209][T14866] Call Trace: [ 500.510213][T14866] [ 500.510217][T14866] dump_stack_lvl+0x100/0x190 [ 500.510232][T14866] should_fail_ex.cold+0x5/0xa [ 500.510243][T14866] ? __kmalloc_cache_node_noprof+0x57/0x760 [ 500.510256][T14866] should_failslab+0xc2/0x120 [ 500.510268][T14866] __kmalloc_cache_node_noprof+0x7d/0x760 [ 500.510279][T14866] ? __pfx___css_rstat_updated+0x10/0x10 [ 500.510295][T14866] ? __get_vm_area_node+0x101/0x330 [ 500.510309][T14866] __get_vm_area_node+0x101/0x330 [ 500.510322][T14866] __vmalloc_node_range_noprof+0x228/0x1630 [ 500.510337][T14866] ? kernel_clone+0x176/0x9d0 [ 500.510364][T14866] ? rcu_is_watching+0x12/0xc0 [ 500.510377][T14866] ? rcu_read_unlock+0x17/0x60 [ 500.510390][T14866] ? rcu_read_unlock+0x17/0x60 [ 500.510404][T14866] ? rcu_is_watching+0x12/0xc0 [ 500.510414][T14866] ? rcu_read_unlock+0x17/0x60 [ 500.510428][T14866] ? kernel_clone+0x176/0x9d0 [ 500.510440][T14866] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 500.510455][T14866] ? __memcg_slab_post_alloc_hook+0x752/0x1170 [ 500.510470][T14866] ? rcu_is_watching+0x12/0xc0 [ 500.510481][T14866] ? trace_kmem_cache_alloc+0xdd/0x100 [ 500.510495][T14866] ? kernel_clone+0x176/0x9d0 [ 500.510508][T14866] __vmalloc_node_noprof+0xad/0xf0 [ 500.510522][T14866] ? kernel_clone+0x176/0x9d0 [ 500.510533][T14866] copy_process+0x7fb/0x7ff0 [ 500.510544][T14866] ? kstrtouint+0xdf/0x130 [ 500.510556][T14866] ? __pfx_kstrtouint+0x10/0x10 [ 500.510569][T14866] ? __pfx_copy_process+0x10/0x10 [ 500.510580][T14866] ? rcu_is_watching+0x12/0xc0 [ 500.510590][T14866] ? get_pid_task+0xfc/0x250 [ 500.510602][T14866] ? rcu_is_watching+0x12/0xc0 [ 500.510612][T14866] ? get_pid_task+0xfc/0x250 [ 500.510623][T14866] ? lock_release+0x24d/0x310 [ 500.510639][T14866] kernel_clone+0x176/0x9d0 [ 500.510649][T14866] ? proc_fail_nth_write+0x9f/0x220 [ 500.510662][T14866] ? __pfx_kernel_clone+0x10/0x10 [ 500.510672][T14866] ? rcu_is_watching+0x12/0xc0 [ 500.510684][T14866] ? ksys_write+0x190/0x250 [ 500.510698][T14866] ? rcu_is_watching+0x12/0xc0 [ 500.510708][T14866] ? ksys_write+0x190/0x250 [ 500.510722][T14866] ? lock_release+0x24d/0x310 [ 500.510737][T14866] __do_compat_sys_ia32_clone+0xd4/0x120 [ 500.510748][T14866] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 500.510769][T14866] ? fput+0x79/0x100 [ 500.510778][T14866] ? ksys_write+0x1ac/0x250 [ 500.510791][T14866] ? __pfx_ksys_write+0x10/0x10 [ 500.510806][T14866] ? rcu_is_watching+0x12/0xc0 [ 500.510817][T14866] __do_fast_syscall_32+0xe7/0x970 [ 500.510830][T14866] do_fast_syscall_32+0x32/0x70 [ 500.510843][T14866] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 500.510857][T14866] RIP: 0023:0xf6fdefec [ 500.510868][T14866] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 500.510873][T14866] RSP: 002b:00000000f53cd4bc EFLAGS: 00000202 ORIG_RAX: 0000000000000078 [ 500.510887][T14866] RAX: ffffffffffffffda RBX: 0000000000000400 RCX: 0000000000000000 [ 500.510894][T14866] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.510900][T14866] RBP: 00000000f73d4f80 R08: 0000000000000000 R09: 0000000000000000 [ 500.510906][T14866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.510913][T14866] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 500.510922][T14866] [ 500.510927][T14866] syz.2.2075: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 500.533428][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.536425][T14866] ,cpuset= [ 500.536497][ C0] bridge0: topology change detected, propagating [ 500.537998][T14866] /,mems_allowed=0-1 [ 500.538018][T14866] CPU: 3 UID: 0 PID: 14866 Comm: syz.2.2075 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.538033][T14866] Tainted: [L]=SOFTLOCKUP [ 500.538037][T14866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 500.538044][T14866] Call Trace: [ 500.538048][T14866] [ 500.538051][T14866] dump_stack_lvl+0x100/0x190 [ 500.538066][T14866] warn_alloc.cold+0x94/0xa8 [ 500.538076][T14866] ? __pfx_warn_alloc+0x10/0x10 [ 500.538093][T14866] ? trace_kmalloc+0xeb/0x110 [ 500.538106][T14866] ? __kmalloc_cache_node_noprof+0x2d9/0x760 [ 500.538119][T14866] ? __kasan_kmalloc+0x8a/0xb0 [ 500.538130][T14866] ? __get_vm_area_node+0x208/0x330 [ 500.538144][T14866] __vmalloc_node_range_noprof+0xccd/0x1630 [ 500.538159][T14866] ? rcu_is_watching+0x12/0xc0 [ 500.538170][T14866] ? rcu_read_unlock+0x17/0x60 [ 500.538184][T14866] ? rcu_read_unlock+0x17/0x60 [ 500.538197][T14866] ? rcu_is_watching+0x12/0xc0 [ 500.538207][T14866] ? rcu_read_unlock+0x17/0x60 [ 500.538221][T14866] ? kernel_clone+0x176/0x9d0 [ 500.538234][T14866] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 500.538248][T14866] ? __memcg_slab_post_alloc_hook+0x752/0x1170 [ 500.538264][T14866] ? rcu_is_watching+0x12/0xc0 [ 500.538274][T14866] ? trace_kmem_cache_alloc+0xdd/0x100 [ 500.538287][T14866] ? kernel_clone+0x176/0x9d0 [ 500.538297][T14866] __vmalloc_node_noprof+0xad/0xf0 [ 500.538311][T14866] ? kernel_clone+0x176/0x9d0 [ 500.538322][T14866] copy_process+0x7fb/0x7ff0 [ 500.538333][T14866] ? kstrtouint+0xdf/0x130 [ 500.538345][T14866] ? __pfx_kstrtouint+0x10/0x10 [ 500.538376][T14866] ? __pfx_copy_process+0x10/0x10 [ 500.538387][T14866] ? rcu_is_watching+0x12/0xc0 [ 500.538398][T14866] ? get_pid_task+0xfc/0x250 [ 500.538409][T14866] ? rcu_is_watching+0x12/0xc0 [ 500.538419][T14866] ? get_pid_task+0xfc/0x250 [ 500.538430][T14866] ? lock_release+0x24d/0x310 [ 500.538445][T14866] kernel_clone+0x176/0x9d0 [ 500.538456][T14866] ? proc_fail_nth_write+0x9f/0x220 [ 500.538468][T14866] ? __pfx_kernel_clone+0x10/0x10 [ 500.538478][T14866] ? rcu_is_watching+0x12/0xc0 [ 500.538490][T14866] ? ksys_write+0x190/0x250 [ 500.538504][T14866] ? rcu_is_watching+0x12/0xc0 [ 500.538514][T14866] ? ksys_write+0x190/0x250 [ 500.538528][T14866] ? lock_release+0x24d/0x310 [ 500.538543][T14866] __do_compat_sys_ia32_clone+0xd4/0x120 [ 500.538565][T14866] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 500.538587][T14866] ? fput+0x79/0x100 [ 500.538596][T14866] ? ksys_write+0x1ac/0x250 [ 500.538610][T14866] ? __pfx_ksys_write+0x10/0x10 [ 500.538624][T14866] ? rcu_is_watching+0x12/0xc0 [ 500.538635][T14866] __do_fast_syscall_32+0xe7/0x970 [ 500.538648][T14866] do_fast_syscall_32+0x32/0x70 [ 500.538661][T14866] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 500.538674][T14866] RIP: 0023:0xf6fdefec [ 500.538687][T14866] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 500.538692][T14866] RSP: 002b:00000000f53cd4bc EFLAGS: 00000202 ORIG_RAX: 0000000000000078 [ 500.538702][T14866] RAX: ffffffffffffffda RBX: 0000000000000400 RCX: 0000000000000000 [ 500.538709][T14866] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.538715][T14866] RBP: 00000000f73d4f80 R08: 0000000000000000 R09: 0000000000000000 [ 500.538721][T14866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.538727][T14866] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 500.538736][T14866] [ 500.538765][T14866] Mem-Info: [ 500.540105][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.541437][T14866] active_anon:2859 inactive_anon:7133 isolated_anon:0 [ 500.541437][T14866] active_file:1907 inactive_file:22673 isolated_file:0 [ 500.541437][T14866] unevictable:3816 dirty:385 writeback:0 [ 500.541437][T14866] slab_reclaimable:6681 slab_unreclaimable:66651 [ 500.541437][T14866] mapped:23244 shmem:6761 pagetables:1425 [ 500.541437][T14866] sec_pagetables:305 bounce:0 [ 500.541437][T14866] kernel_misc_reclaimable:0 [ 500.541437][T14866] free:41322 free_pcp:16070 free_cma:0 [ 500.543523][ C0] bridge0: topology change detected, propagating [ 500.547691][T14866] Node 0 active_anon:8kB inactive_anon:8kB active_file:8kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8468kB pagetables:1204kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 500.770846][T14866] Node 1 active_anon:13336kB inactive_anon:28524kB active_file:7620kB inactive_file:90692kB unevictable:11728kB isolated(anon):0kB isolated(file):0kB mapped:92868kB dirty:1540kB writeback:0kB shmem:25568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB kernel_stack:7544kB pagetables:4564kB sec_pagetables:84kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 500.782843][T14866] Node 0 DMA free:2560kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:32kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:0kB free_cma:0kB [ 500.792055][T14866] lowmem_reserve[]: 0 284 284 284 284 [ 500.798499][T14866] Node 0 DMA32 free:22600kB boost:8192kB min:21264kB low:24532kB high:27800kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:8kB active_file:8kB inactive_file:0kB unevictable:3536kB writepending:0kB zspages:2256kB present:1032196kB managed:291428kB mlocked:0kB bounce:0kB free_pcp:2948kB local_pcp:2072kB free_cma:0kB [ 500.807855][T14866] lowmem_reserve[]: 0 0 0 0 0 [ 500.809351][T14866] Node 1 DMA32 free:136628kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13436kB inactive_anon:28524kB active_file:7620kB inactive_file:90692kB unevictable:11728kB writepending:1540kB zspages:3252kB present:1048432kB managed:948212kB mlocked:8192kB bounce:0kB free_pcp:59992kB local_pcp:10340kB free_cma:0kB [ 500.819296][T14866] lowmem_reserve[]: 0 0 0 0 0 [ 500.821098][T14866] Node 0 DMA: 128*4kB (U) 12*8kB (U) 6*16kB (U) 10*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2560kB [ 500.825489][T14866] Node 0 DMA32: 374*4kB (UE) 112*8kB (UME) 85*16kB (UME) 187*32kB (UME) 73*64kB (UME) 26*128kB (UME) 9*256kB (UME) 5*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 22600kB [ 500.830951][T14866] Node 1 DMA32: 214*4kB (UME) 284*8kB (UME) 422*16kB (UME) 125*32kB (UME) 273*64kB (UME) 194*128kB (UME) 94*256kB (UME) 62*512kB (UME) 22*1024kB (UM) 1*2048kB (U) 0*4096kB = 136568kB [ 500.844359][T14866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.852243][T14866] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 500.856801][T14866] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.861909][T14866] Node 1 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 500.866253][T14866] 32482 total pagecache pages [ 500.868068][T14866] 628 pages in swap cache [ 500.869406][T14866] Free swap = 59968kB [ 500.870860][T14866] Total swap = 124996kB [ 500.872278][T14866] 524155 pages RAM [ 500.873649][T14866] 0 pages HighMem/MovableOnly [ 500.875150][T14866] 210405 pages reserved [ 500.876464][T14866] 0 pages cma reserved [ 501.008872][T14941] befs: (loop5): No write support. Marking filesystem read-only [ 501.011577][T14941] befs: (loop5): unable to read superblock [ 501.334994][T14948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2081'. [ 501.966442][ T42] kauditd_printk_skb: 279 callbacks suppressed [ 501.966454][ T42] audit: type=1326 audit(1782064372.324:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14967 comm="syz.1.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 501.993766][ T42] audit: type=1326 audit(1782064372.324:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14967 comm="syz.1.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708efec code=0x7ffc0000 [ 502.001897][T14972] binder: 14967:14972 ioctl 541b 0 returned -22 [ 502.017058][ T42] audit: type=1326 audit(1782064372.324:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14967 comm="syz.1.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 502.042352][ T42] audit: type=1326 audit(1782064372.334:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14967 comm="syz.1.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708efec code=0x7ffc0000 [ 502.063465][ T42] audit: type=1326 audit(1782064372.334:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14967 comm="syz.1.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 502.081327][ T42] audit: type=1326 audit(1782064372.334:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14967 comm="syz.1.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708efec code=0x7ffc0000 [ 502.097782][ T42] audit: type=1326 audit(1782064372.334:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14967 comm="syz.1.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 502.116893][ T42] audit: type=1326 audit(1782064372.334:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14967 comm="syz.1.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf708efec code=0x7ffc0000 [ 502.124265][T14975] befs: (loop2): No write support. Marking filesystem read-only [ 502.126762][T14975] befs: (loop2): unable to read superblock [ 502.135983][ T42] audit: type=1326 audit(1782064372.334:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14967 comm="syz.1.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 502.152548][ T42] audit: type=1326 audit(1782064372.334:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14967 comm="syz.1.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf708efec code=0x7ffc0000 [ 502.237380][T14982] binder: 14981:14982 ioctl 4018620d 0 returned -22 [ 503.013727][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.017195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.333404][T15005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.646824][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2100'. [ 504.868511][T15070] loop4: detected capacity change from 0 to 7 [ 504.872528][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.875592][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 504.878398][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.881138][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 504.883627][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.886371][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 504.888869][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.892028][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 504.894948][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.897838][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 504.900679][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.903488][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 504.906967][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.909819][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 504.912094][T15070] ldm_validate_partition_table(): Disk read failed. [ 504.914404][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.917689][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 504.920387][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.923718][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 504.926830][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 504.929929][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 504.932857][T15070] Dev loop4: unable to read RDB block 0 [ 504.935364][T15070] loop4: unable to read partition table [ 504.937987][T15070] loop4: partition table beyond EOD, truncated [ 504.940169][T15070] loop_reread_partitions: partition scan of loop4 (Cj̖P= ) failed (rc=-5) [ 504.983519][T15070] can0: slcan on ttyS3. [ 505.073871][T15069] can0 (unregistered): slcan off ttyS3. [ 505.103357][ T859] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 505.253367][ T859] usb 10-1: Using ep0 maxpacket: 8 [ 505.257749][ T859] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 505.261407][ T859] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 505.266452][ T859] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 505.270593][ T859] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 505.276071][ T859] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.281368][ T859] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 505.284340][ T859] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.506651][ T859] usb 10-1: usb_control_msg returned -32 [ 505.515879][ T859] usbtmc 10-1:16.0: can't read capabilities [ 505.574410][T15087] FAULT_INJECTION: forcing a failure. [ 505.574410][T15087] name failslab, interval 1, probability 0, space 0, times 0 [ 505.578395][T15087] CPU: 3 UID: 0 PID: 15087 Comm: syz.2.2107 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.578413][T15087] Tainted: [L]=SOFTLOCKUP [ 505.578417][T15087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 505.578423][T15087] Call Trace: [ 505.578427][T15087] [ 505.578431][T15087] dump_stack_lvl+0x100/0x190 [ 505.578445][T15087] should_fail_ex.cold+0x5/0xa [ 505.578459][T15087] should_failslab+0xc2/0x120 [ 505.578472][T15087] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 505.578482][T15087] ? skb_clone+0x190/0x400 [ 505.578498][T15087] skb_clone+0x190/0x400 [ 505.578513][T15087] netlink_deliver_tap+0xaed/0xcc0 [ 505.578525][T15087] netlink_unicast+0x62b/0x850 [ 505.578537][T15087] ? __pfx_netlink_unicast+0x10/0x10 [ 505.578550][T15087] netlink_sendmsg+0x8b0/0xda0 [ 505.578562][T15087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.578574][T15087] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 505.578587][T15087] ____sys_sendmsg+0xa4d/0xbe0 [ 505.578597][T15087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.578609][T15087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 505.578621][T15087] ? kstrtouint_from_user+0x13c/0x1d0 [ 505.578634][T15087] ___sys_sendmsg+0x190/0x1e0 [ 505.578645][T15087] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.578659][T15087] ? rcu_is_watching+0x12/0xc0 [ 505.578674][T15087] __sys_sendmsg+0x160/0x210 [ 505.578689][T15087] ? __pfx___sys_sendmsg+0x10/0x10 [ 505.578705][T15087] ? __pfx_ksys_write+0x10/0x10 [ 505.578720][T15087] ? rcu_is_watching+0x12/0xc0 [ 505.578731][T15087] __do_fast_syscall_32+0xe7/0x970 [ 505.578746][T15087] do_fast_syscall_32+0x32/0x70 [ 505.578758][T15087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 505.578772][T15087] RIP: 0023:0xf6fdefec [ 505.578783][T15087] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 505.578788][T15087] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 505.578799][T15087] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 505.578806][T15087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 505.578812][T15087] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 505.578822][T15087] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 505.578829][T15087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 505.578839][T15087] [ 505.773431][ T5848] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 505.860508][T15071] usbtmc 10-1:16.0: INDICATOR_PULSE returned 0 [ 505.925322][ T5848] usb 6-1: unable to get BOS descriptor or descriptor too short [ 505.935314][ T5848] usb 6-1: no configurations [ 505.937324][ T5848] usb 6-1: can't read configurations, error -22 [ 505.979131][T15097] Mount JFS Failure: -5 [ 506.061628][ T859] usb 10-1: USB disconnect, device number 13 [ 506.073350][ T5848] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 506.225338][ T5848] usb 6-1: unable to get BOS descriptor or descriptor too short [ 506.232666][ T5848] usb 6-1: no configurations [ 506.237404][ T5848] usb 6-1: can't read configurations, error -22 [ 506.242569][ T5848] usb usb6-port1: attempt power cycle [ 506.294857][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.297708][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.306814][T15123] pim6reg: entered allmulticast mode [ 506.313398][T15123] team0: entered allmulticast mode [ 506.315025][T15123] team_slave_0: entered allmulticast mode [ 506.316774][T15123] team_slave_1: entered allmulticast mode [ 506.320155][T15123] team0: left allmulticast mode [ 506.321666][T15123] team_slave_0: left allmulticast mode [ 506.323461][T15123] team_slave_1: left allmulticast mode [ 506.325118][T15123] pim6reg: left allmulticast mode [ 506.583328][ T5848] usb 6-1: new low-speed USB device number 45 using dummy_hcd [ 506.586109][T15136] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 506.588336][T15136] overlayfs: failed to set xattr on upper [ 506.590075][T15136] overlayfs: ...falling back to redirect_dir=nofollow. [ 506.592155][T15136] overlayfs: ...falling back to index=off. [ 506.595841][T15136] overlayfs: ...falling back to uuid=null. [ 506.605211][ T5848] usb 6-1: unable to get BOS descriptor or descriptor too short [ 506.607737][ T5848] usb 6-1: no configurations [ 506.609226][ T5848] usb 6-1: can't read configurations, error -22 [ 506.663488][T15141] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2116'. [ 506.733328][ T5848] usb 6-1: new low-speed USB device number 46 using dummy_hcd [ 506.755490][ T5848] usb 6-1: unable to get BOS descriptor or descriptor too short [ 506.758600][ T5848] usb 6-1: no configurations [ 506.762480][ T5848] usb 6-1: can't read configurations, error -22 [ 506.764667][ T5848] usb usb6-port1: unable to enumerate USB device [ 506.793752][T15143] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.845730][T15143] batman_adv: batadv0: Interface deactivated: dummy0 [ 506.952623][T15143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.976427][T15143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.120194][T15143] batman_adv: batadv0: Interface deactivated: gretap1 [ 507.130407][ T5817] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.136032][ T5817] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 507.143341][ T5817] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 507.148150][ T5817] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.152008][ T5817] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 507.156637][ T5817] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 507.163030][ T5817] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.169107][ T5817] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 507.179081][ T5817] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 507.182407][ T5817] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.187122][ T5817] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 507.191094][ T5817] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 507.268054][ T42] kauditd_printk_skb: 39 callbacks suppressed [ 507.268066][ T42] audit: type=1800 audit(1782064377.624:3944): pid=15185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2121" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 507.299489][T15186] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2120'. [ 507.302316][T15186] openvswitch: netlink: Message has 512 unknown bytes. [ 507.493538][ T941] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 507.653356][ T941] usb 9-1: Using ep0 maxpacket: 32 [ 507.657296][ T941] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.661880][ T941] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.667506][ T941] usb 9-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 507.671579][ T941] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.675063][ T941] usb 9-1: Product: syz [ 507.676941][ T941] usb 9-1: Manufacturer: syz [ 507.679094][ T941] usb 9-1: SerialNumber: syz [ 507.885556][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2122'. [ 508.053588][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.056804][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.065017][T15194] batman_adv: batadv0: Removing interface: dummy0 [ 508.067485][T15194] bridge_slave_0: left allmulticast mode [ 508.069232][T15194] bridge_slave_0: left promiscuous mode [ 508.071116][T15194] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.076129][T15194] bridge_slave_1: left allmulticast mode [ 508.078789][T15194] bridge_slave_1: left promiscuous mode [ 508.080554][T15194] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.085319][T15194] bond0: (slave bond_slave_0): Releasing backup interface [ 508.088734][T15194] bond0: (slave bond_slave_1): Releasing backup interface [ 508.092180][ T941] usb 9-1: USB disconnect, device number 13 [ 508.092386][T15194] team0: Port device team_slave_0 removed [ 508.102133][T15194] team0: Port device team_slave_1 removed [ 508.104838][T15194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.107537][T15194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.110367][T15194] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 508.120038][T15194] tipc: Can't bind to reserved service type 1 [ 508.133980][ T40] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 508.283361][ T40] usb 10-1: Using ep0 maxpacket: 8 [ 508.286116][ T40] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 508.288723][ T40] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 508.292439][ T40] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 508.295615][ T40] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 508.299455][ T40] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.303766][ T40] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 508.306628][ T40] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.524647][ T40] usb 10-1: usb_control_msg returned -32 [ 508.526425][ T40] usbtmc 10-1:16.0: can't read capabilities [ 508.876860][T15189] usbtmc 10-1:16.0: INDICATOR_PULSE returned 0 [ 509.077627][T10308] usb 10-1: USB disconnect, device number 14 [ 509.143875][ T859] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 509.283481][ T859] usb 9-1: device descriptor read/64, error -71 [ 509.536893][ T859] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 509.700992][T15251] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 509.744838][T15251] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 509.749006][T15251] overlayfs: failed to look up (tracing) for ino (-66) [ 510.136875][T15256] FAULT_INJECTION: forcing a failure. [ 510.136875][T15256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.141339][T15256] CPU: 0 UID: 0 PID: 15256 Comm: syz.5.2132 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.141356][T15256] Tainted: [L]=SOFTLOCKUP [ 510.141360][T15256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 510.141367][T15256] Call Trace: [ 510.141371][T15256] [ 510.141375][T15256] dump_stack_lvl+0x100/0x190 [ 510.141389][T15256] should_fail_ex.cold+0x5/0xa [ 510.141402][T15256] _copy_to_user+0x32/0xd0 [ 510.141419][T15256] simple_read_from_buffer+0xcb/0x170 [ 510.141434][T15256] proc_fail_nth_read+0x1af/0x230 [ 510.141446][T15256] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 510.141456][T15256] ? security_file_permission+0x76/0x210 [ 510.141472][T15256] ? rw_verify_area+0xce/0x6d0 [ 510.141485][T15256] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 510.141496][T15256] vfs_read+0x1e4/0xb40 [ 510.141511][T15256] ? __pfx_vfs_read+0x10/0x10 [ 510.141524][T15256] ? rcu_is_watching+0x12/0xc0 [ 510.141537][T15256] ? __fget_files+0x21f/0x3d0 [ 510.141552][T15256] ksys_read+0x12a/0x250 [ 510.141566][T15256] ? __pfx_ksys_read+0x10/0x10 [ 510.141580][T15256] ? rcu_is_watching+0x12/0xc0 [ 510.141591][T15256] ? rcu_is_watching+0x12/0xc0 [ 510.141602][T15256] do_int80_emulation+0x14b/0x720 [ 510.141616][T15256] asm_int80_emulation+0x1a/0x20 [ 510.141631][T15256] RIP: 0023:0xf71b71eb [ 510.141639][T15256] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 510.141670][T15256] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 510.141698][T15256] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54765d0 [ 510.141705][T15256] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 510.141711][T15256] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 510.141718][T15256] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 510.141724][T15256] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 510.141737][T15256] [ 510.576071][ T859] usb 9-1: device descriptor read/64, error -71 [ 510.693716][ T859] usb usb9-port1: attempt power cycle [ 511.053384][ T859] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 511.086523][ T859] usb 9-1: device descriptor read/8, error -71 [ 511.333438][ T859] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 511.360385][ T859] usb 9-1: device descriptor read/8, error -71 [ 511.485161][ T859] usb usb9-port1: unable to enumerate USB device [ 511.766566][T15313] cgroup: Unknown subsys name 'dont_measure' [ 512.050553][T15315] vlan0: entered allmulticast mode [ 512.052227][T15315] veth0_vlan: entered allmulticast mode [ 512.356676][T15322] FAULT_INJECTION: forcing a failure. [ 512.356676][T15322] name failslab, interval 1, probability 0, space 0, times 0 [ 512.362920][T15322] CPU: 2 UID: 0 PID: 15322 Comm: syz.1.2142 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.362949][T15322] Tainted: [L]=SOFTLOCKUP [ 512.362956][T15322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 512.362966][T15322] Call Trace: [ 512.362972][T15322] [ 512.362978][T15322] dump_stack_lvl+0x100/0x190 [ 512.363001][T15322] should_fail_ex.cold+0x5/0xa [ 512.363020][T15322] ? __kmalloc_noprof+0xba/0x840 [ 512.363046][T15322] ? copy_splice_read+0x1a3/0xbb0 [ 512.363069][T15322] should_failslab+0xc2/0x120 [ 512.363090][T15322] __kmalloc_noprof+0xe0/0x840 [ 512.363115][T15322] copy_splice_read+0x1a3/0xbb0 [ 512.363142][T15322] ? __pfx_copy_splice_read+0x10/0x10 [ 512.363168][T15322] ? lockdep_init_map_type+0x5c/0x250 [ 512.363194][T15322] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 512.363219][T15322] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 512.363248][T15322] do_splice_read+0x2bd/0x370 [ 512.363291][T15322] splice_direct_to_actor+0x2a1/0xa30 [ 512.363317][T15322] ? __pfx_direct_splice_actor+0x10/0x10 [ 512.363343][T15322] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 512.363368][T15322] ? get_pid_task+0xfc/0x250 [ 512.363387][T15322] ? rcu_is_watching+0x12/0xc0 [ 512.363408][T15322] do_splice_direct+0x174/0x240 [ 512.363434][T15322] ? __pfx_do_splice_direct+0x10/0x10 [ 512.363459][T15322] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 512.363484][T15322] ? bpf_lsm_file_permission+0x9/0x10 [ 512.363508][T15322] ? security_file_permission+0x76/0x210 [ 512.363533][T15322] ? rw_verify_area+0xce/0x6d0 [ 512.363555][T15322] do_sendfile+0xadc/0xe20 [ 512.363577][T15322] ? __pfx_do_sendfile+0x10/0x10 [ 512.363599][T15322] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 512.363620][T15322] ? __fget_files+0x21f/0x3d0 [ 512.363646][T15322] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 512.363674][T15322] ? fput+0x79/0x100 [ 512.363695][T15322] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 512.363723][T15322] ? ksys_write+0x1ac/0x250 [ 512.363746][T15322] ? __pfx_ksys_write+0x10/0x10 [ 512.363769][T15322] ? rcu_is_watching+0x12/0xc0 [ 512.363787][T15322] __do_fast_syscall_32+0xe7/0x970 [ 512.363811][T15322] do_fast_syscall_32+0x32/0x70 [ 512.363830][T15322] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 512.363852][T15322] RIP: 0023:0xf708efec [ 512.363872][T15322] Code: Unable to access opcode bytes at 0xf708efc2. [ 512.363879][T15322] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 512.363897][T15322] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000004 [ 512.363908][T15322] RDX: 0000000000000000 RSI: 00000000578410eb RDI: 0000000000000000 [ 512.363919][T15322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 512.363928][T15322] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 512.363937][T15322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 512.363954][T15322] [ 512.476610][ C2] hpet: Lost 6 RTC interrupts [ 512.624372][T15331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2144'. [ 512.628828][T15331] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2144'. [ 512.631669][T15331] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2144'. [ 512.636538][T15331] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2144'. [ 512.655562][T15331] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2144'. [ 513.893528][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.896909][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.171575][T15351] cgroup: Unknown subsys name 'dont_measure' [ 514.498951][T15356] cgroup: Unknown subsys name 'dont_measure' [ 516.306192][T15370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2155'. [ 516.310722][T15370] binder: 15369:15370 unknown command 71 [ 516.312577][T15370] binder: 15369:15370 ioctl c0306201 80000080 returned -22 [ 517.335831][T15387] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 517.337944][T15387] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 517.340923][T15387] vhci_hcd vhci_hcd.0: Device attached [ 517.413405][ T5848] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 517.450598][T15390] rdma_rxe: rxe_newlink: failed to add wg2 [ 517.563398][ T5848] usb 6-1: Using ep0 maxpacket: 8 [ 517.566745][ T5848] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 517.573632][ T5848] usb 6-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 517.581425][ T5848] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 517.591609][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.603357][ T941] usb 48-1: SetAddress Request (3) to port 0 [ 517.605285][ T941] usb 48-1: new SuperSpeed USB device number 3 using vhci_hcd [ 517.998455][T15388] vhci_hcd: connection reset by peer [ 518.002020][ T5817] vhci_hcd vhci_hcd.5: stop threads [ 518.004368][ T5817] vhci_hcd vhci_hcd.5: release socket [ 518.006730][ T5817] vhci_hcd vhci_hcd.5: disconnect device [ 519.013508][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.017154][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.193133][T15400] cgroup: Unknown subsys name 'dont_measure' [ 519.643364][ T5848] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 519.804589][ T5848] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 519.808027][ T5848] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 519.811394][ T5848] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 519.815197][ T5848] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 519.818994][ T5848] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 519.822259][ T5848] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 519.826393][ T5848] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 519.829209][ T5848] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.832605][ T5848] usb 9-1: config 0 descriptor?? [ 519.837604][T15386] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 520.081970][ T5848] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 520.206614][ T5826] usb 6-1: USB disconnect, device number 47 [ 520.250492][T15408] FAULT_INJECTION: forcing a failure. [ 520.250492][T15408] name failslab, interval 1, probability 0, space 0, times 0 [ 520.255323][T15408] CPU: 3 UID: 0 PID: 15408 Comm: syz.1.2164 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.255341][T15408] Tainted: [L]=SOFTLOCKUP [ 520.255345][T15408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 520.255352][T15408] Call Trace: [ 520.255356][T15408] [ 520.255361][T15408] dump_stack_lvl+0x100/0x190 [ 520.255376][T15408] should_fail_ex.cold+0x5/0xa [ 520.255388][T15408] ? __kmalloc_noprof+0xba/0x840 [ 520.255405][T15408] ? lsm_blob_alloc+0x68/0x90 [ 520.255423][T15408] should_failslab+0xc2/0x120 [ 520.255436][T15408] __kmalloc_noprof+0xe0/0x840 [ 520.255452][T15408] ? trace_kmem_cache_alloc+0xdd/0x100 [ 520.255467][T15408] lsm_blob_alloc+0x68/0x90 [ 520.255485][T15408] security_prepare_creds+0x2d/0x290 [ 520.255502][T15408] prepare_creds+0x5d6/0x950 [ 520.255519][T15408] copy_creds+0xa7/0xa50 [ 520.255535][T15408] copy_process+0x13c6/0x7ff0 [ 520.255548][T15408] ? kstrtouint+0xdf/0x130 [ 520.255560][T15408] ? __pfx_kstrtouint+0x10/0x10 [ 520.255575][T15408] ? __pfx_copy_process+0x10/0x10 [ 520.255586][T15408] ? rcu_is_watching+0x12/0xc0 [ 520.255598][T15408] ? get_pid_task+0xfc/0x250 [ 520.255610][T15408] ? rcu_is_watching+0x12/0xc0 [ 520.255621][T15408] ? get_pid_task+0xfc/0x250 [ 520.255633][T15408] ? lock_release+0x24d/0x310 [ 520.255649][T15408] kernel_clone+0x176/0x9d0 [ 520.255660][T15408] ? proc_fail_nth_write+0x9f/0x220 [ 520.255673][T15408] ? __pfx_kernel_clone+0x10/0x10 [ 520.255690][T15408] ? rcu_is_watching+0x12/0xc0 [ 520.255703][T15408] ? ksys_write+0x190/0x250 [ 520.255724][T15408] ? rcu_is_watching+0x12/0xc0 [ 520.255739][T15408] ? ksys_write+0x190/0x250 [ 520.255758][T15408] ? lock_release+0x24d/0x310 [ 520.255783][T15408] __do_compat_sys_ia32_clone+0xd4/0x120 [ 520.255800][T15408] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 520.255833][T15408] ? fput+0x79/0x100 [ 520.255844][T15408] ? ksys_write+0x1ac/0x250 [ 520.255864][T15408] ? __pfx_ksys_write+0x10/0x10 [ 520.255879][T15408] ? rcu_is_watching+0x12/0xc0 [ 520.255891][T15408] __do_fast_syscall_32+0xe7/0x970 [ 520.255906][T15408] do_fast_syscall_32+0x32/0x70 [ 520.255919][T15408] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 520.255934][T15408] RIP: 0023:0xf708efec [ 520.255947][T15408] Code: Unable to access opcode bytes at 0xf708efc2. [ 520.255952][T15408] RSP: 002b:00000000f547d4bc EFLAGS: 00000202 ORIG_RAX: 0000000000000078 [ 520.255964][T15408] RAX: ffffffffffffffda RBX: 0000000000000400 RCX: 0000000000000000 [ 520.255971][T15408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 520.255978][T15408] RBP: 00000000f7484f80 R08: 0000000000000000 R09: 0000000000000000 [ 520.255984][T15408] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 520.255991][T15408] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 520.256000][T15408] [ 520.350596][ C3] usblp0: nonzero read bulk status received: -71 [ 520.653388][ T9821] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 520.804675][ T9821] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 204, changing to 11 [ 520.809275][ T9821] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 520.813196][ T9821] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 520.819242][ T9821] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 520.822385][ T9821] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 520.824931][ T9821] usb 10-1: SerialNumber: syz [ 520.827733][T15440] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 521.450679][T15440] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 521.460720][ T9821] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 521.467939][ T9821] usb 10-1: USB disconnect, device number 15 [ 521.523245][ T845] usb 9-1: USB disconnect, device number 18 [ 521.528230][ T845] usblp0: removed [ 521.532507][T15483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2168'. [ 521.536413][T15483] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2168'. [ 521.889979][ T5817] bridge_slave_1: left allmulticast mode [ 521.891752][ T5817] bridge_slave_1: left promiscuous mode [ 521.893933][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.896915][ T5817] bridge_slave_0: left allmulticast mode [ 521.898690][ T5817] bridge_slave_0: left promiscuous mode [ 521.900457][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.928259][ T5817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.931856][ T5817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.935937][ T5817] bond0 (unregistering): Released all slaves [ 521.941214][ T5817] bond1 (unregistering): Released all slaves [ 521.955502][ T5817] bond2 (unregistering): Released all slaves [ 522.039035][ T5817] tipc: Left network mode [ 522.050544][T15491] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 522.053277][T15491] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 522.057084][T15491] vhci_hcd vhci_hcd.0: Device attached [ 522.066241][T15491] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2169'. [ 522.069952][T15491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2169'. [ 522.107493][ T5451] 8021q: adding VLAN 0 to HW filter on device eth6 [ 522.144425][T15492] vhci_hcd: connection closed [ 522.145638][ T13] vhci_hcd vhci_hcd.5: stop threads [ 522.149913][ T13] vhci_hcd vhci_hcd.5: release socket [ 522.152818][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 522.264473][ T5451] 8021q: adding VLAN 0 to HW filter on device eth7 [ 522.386932][ T5817] hsr_slave_0: left promiscuous mode [ 522.389694][ T5817] hsr_slave_1: left promiscuous mode [ 522.392209][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.403723][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.411039][ T5817] batman_adv: batadv0: Removing interface: dummy0 [ 522.480684][ T5817] team0 (unregistering): Port device team_slave_1 removed [ 522.490654][ T5817] team0 (unregistering): Port device team_slave_0 removed [ 522.882432][T15540] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2172'. [ 522.895983][T15540] xt_CT: You must specify a L4 protocol and not use inversions on it [ 523.038416][ T941] usb 48-1: device descriptor read/8, error -110 [ 523.176051][ T5451] 8021q: adding VLAN 0 to HW filter on device eth8 [ 523.347255][ T5451] 8021q: adding VLAN 0 to HW filter on device eth9 [ 523.539136][ T5817] IPVS: stop unused estimator thread 0... [ 523.973631][ T941] usb usb48-port1: attempt power cycle [ 524.087440][T15577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2178'. [ 524.311488][T15583] wg2 speed is unknown, defaulting to 1000 [ 524.553634][ T941] usb usb48-port1: unable to enumerate USB device [ 524.773430][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.776049][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.822099][T15590] cgroup: Unknown subsys name 'dont_measure' [ 525.553909][T15604] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 525.556045][T15604] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 525.558644][T15604] vhci_hcd vhci_hcd.0: Device attached [ 525.698453][T14539] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 525.700853][T14539] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 525.703185][T14539] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 525.703350][ T61] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 525.708253][T14539] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 525.712454][T14539] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 525.715313][T15610] bond0: (slave batadv0): Releasing backup interface [ 525.804380][ T5827] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 525.806945][ T1485] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 525.900111][T15610] bond4: (slave veth0_to_bond): Releasing backup interface [ 525.915855][T15610] bond0: (slave 30): Releasing backup interface [ 525.919866][T15610] bond0: (slave bond_slave_1): Releasing backup interface [ 525.927518][ T61] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 525.927551][T15610] team0: Port device team_slave_0 removed [ 525.933165][ T61] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 525.937441][ T61] usb 10-1: Product: syz [ 525.939578][ T61] usb 10-1: Manufacturer: syz [ 525.941484][ T61] usb 10-1: SerialNumber: syz [ 525.948250][ T61] usb 10-1: config 0 descriptor?? [ 525.948678][T15610] team0: Port device team_slave_1 removed [ 525.955205][T15610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.958508][T15610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.964458][T15610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.967007][T15610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.985003][ T5827] usb 9-1: Using ep0 maxpacket: 16 [ 526.144114][T15610] bond2: (slave bridge5): Releasing backup interface [ 526.146348][T15610] bridge5: left promiscuous mode [ 526.184670][T15610] bond5: (slave veth7): Releasing active interface [ 526.300893][T15611] wg2 speed is unknown, defaulting to 1000 [ 526.367403][ T1485] usb 45-1: device descriptor read/64, error -71 [ 526.449911][ T5827] usb 9-1: unable to get BOS descriptor or descriptor too short [ 526.451461][T15605] vhci_hcd: connection closed [ 526.452923][ T5827] usb 9-1: no configurations [ 526.453035][ T5817] vhci_hcd vhci_hcd.4: stop threads [ 526.455019][ T5827] usb 9-1: can't read configurations, error -22 [ 526.459310][ T5817] vhci_hcd vhci_hcd.4: release socket [ 526.464015][ T5817] vhci_hcd vhci_hcd.4: disconnect device [ 526.532528][T15611] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.535903][T15611] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.538852][T15611] bridge_slave_0: entered allmulticast mode [ 526.541691][T15611] bridge_slave_0: entered promiscuous mode [ 526.543372][ T1485] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 526.545281][T15611] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.548172][T15611] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.550527][T15611] bridge_slave_1: entered allmulticast mode [ 526.558799][T15611] bridge_slave_1: entered promiscuous mode [ 526.583993][T15611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.591121][T15611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.607178][T15611] team0: Port device team_slave_0 added [ 526.611113][T15611] team0: Port device team_slave_1 added [ 526.625575][T15611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.628147][T15611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.637688][T15611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.641503][T15611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.643688][T15611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.651353][T15611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.664428][T15611] hsr_slave_0: entered promiscuous mode [ 526.666502][T15611] hsr_slave_1: entered promiscuous mode [ 526.708099][T15611] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 526.711821][T15611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 526.714723][T15611] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 526.717785][T15611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 526.720463][T15611] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 526.723862][T15611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 526.726449][T15611] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 526.729592][T15611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 526.739584][T15611] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.741818][T15611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.744163][T15611] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.746351][T15611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.767217][T15611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.773024][T11085] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.776893][T11085] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.782427][T15611] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.788850][T11085] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.791552][T11085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.795829][T11085] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.798075][T11085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.961366][T15611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.108843][T15611] veth0_vlan: entered promiscuous mode [ 527.115958][T15611] veth1_vlan: entered promiscuous mode [ 527.139719][T15611] veth0_macvtap: entered promiscuous mode [ 527.148482][T15611] veth1_macvtap: entered promiscuous mode [ 527.162149][T15611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.168153][T15611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.173876][T12188] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.176925][T12188] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.180251][T12188] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.183546][T12188] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.208636][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.215954][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.237254][ T1197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.240470][ T1197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.743341][T14539] Bluetooth: hci3: command tx timeout [ 528.476741][ T941] usb 10-1: USB disconnect, device number 16 [ 528.806434][T15714] cgroup: Unknown subsys name 'dont_measure' [ 529.444938][T15722] netlink: 'syz.5.2196': attribute type 1 has an invalid length. [ 529.525666][T15719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2195'. [ 529.533015][T15724] macvlan2: entered promiscuous mode [ 529.535358][T15724] macvlan2: entered allmulticast mode [ 529.537462][T15724] bond2: entered promiscuous mode [ 529.539474][T15724] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 529.554296][T15726] cgroup: fork rejected by pids controller in /syz6 [ 529.587183][T15724] bond2: left promiscuous mode [ 529.644985][T15781] netlink: 'syz.4.2201': attribute type 9 has an invalid length. [ 529.715273][T15816] befs: (loop1): No write support. Marking filesystem read-only [ 529.718489][T15816] befs: (loop1): unable to read superblock [ 529.813459][T14539] Bluetooth: hci3: command tx timeout [ 529.936427][T15872] netlink: 'syz.6.2204': attribute type 1 has an invalid length. [ 529.943594][T15872] bond1: entered promiscuous mode [ 529.945199][T15872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.013320][T15872] bond1: (slave bridge1): making interface the new active one [ 530.019613][T15872] bridge1: entered promiscuous mode [ 530.026646][T15872] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 530.478252][T15884] cgroup: Unknown subsys name 'dont_measure' [ 530.533443][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.536051][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.649182][T15893] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 531.734857][ T42] audit: type=1326 audit(1782064402.094:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.4.2212" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb6fec code=0x0 [ 531.904822][T14539] Bluetooth: hci3: command tx timeout [ 532.553917][T15921] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 532.558634][T15921] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 532.565260][T15921] tipc: Resetting bearer [ 532.982352][T15933] syzkaller0: entered promiscuous mode [ 532.984475][T15933] syzkaller0: entered allmulticast mode [ 533.103579][T15935] FAULT_INJECTION: forcing a failure. [ 533.103579][T15935] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 533.108923][T15935] CPU: 3 UID: 0 PID: 15935 Comm: syz.1.2218 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.108949][T15935] Tainted: [L]=SOFTLOCKUP [ 533.108955][T15935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 533.108965][T15935] Call Trace: [ 533.108971][T15935] [ 533.108977][T15935] dump_stack_lvl+0x100/0x190 [ 533.108997][T15935] should_fail_ex.cold+0x5/0xa [ 533.109017][T15935] should_fail_alloc_page+0xeb/0x140 [ 533.109038][T15935] prepare_alloc_pages+0x1f0/0x5f0 [ 533.109059][T15935] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 533.109087][T15935] ? unwind_get_return_address+0x59/0xa0 [ 533.109111][T15935] ? arch_stack_walk+0xa6/0xf0 [ 533.109136][T15935] ? copy_splice_read+0x1a3/0xbb0 [ 533.109160][T15935] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 533.109188][T15935] ? stack_depot_save_flags+0x27/0x9d0 [ 533.109215][T15935] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 533.109235][T15935] ? copy_splice_read+0x1a3/0xbb0 [ 533.109257][T15935] ? kasan_save_stack+0x3f/0x50 [ 533.109274][T15935] ? kasan_save_stack+0x30/0x50 [ 533.109291][T15935] ? kasan_save_track+0x14/0x30 [ 533.109308][T15935] ? __kasan_kmalloc+0xaa/0xb0 [ 533.109325][T15935] ? __kmalloc_noprof+0x302/0x840 [ 533.109349][T15935] ? copy_splice_read+0x1a3/0xbb0 [ 533.109372][T15935] ? do_splice_read+0x2bd/0x370 [ 533.109397][T15935] ? do_fast_syscall_32+0x32/0x70 [ 533.109415][T15935] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.109443][T15935] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 533.109474][T15935] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 533.109505][T15935] ? __kmalloc_noprof+0x321/0x840 [ 533.109531][T15935] copy_splice_read+0x1e1/0xbb0 [ 533.109558][T15935] ? __pfx_copy_splice_read+0x10/0x10 [ 533.109585][T15935] ? lockdep_init_map_type+0x5c/0x250 [ 533.109612][T15935] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 533.109636][T15935] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 533.109664][T15935] do_splice_read+0x2bd/0x370 [ 533.109689][T15935] splice_direct_to_actor+0x2a1/0xa30 [ 533.109715][T15935] ? __pfx_direct_splice_actor+0x10/0x10 [ 533.109742][T15935] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 533.109767][T15935] ? get_pid_task+0xfc/0x250 [ 533.109786][T15935] ? rcu_is_watching+0x12/0xc0 [ 533.109806][T15935] do_splice_direct+0x174/0x240 [ 533.109831][T15935] ? __pfx_do_splice_direct+0x10/0x10 [ 533.109856][T15935] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 533.109880][T15935] ? bpf_lsm_file_permission+0x9/0x10 [ 533.109930][T15935] ? security_file_permission+0x76/0x210 [ 533.109954][T15935] ? rw_verify_area+0xce/0x6d0 [ 533.109976][T15935] do_sendfile+0xadc/0xe20 [ 533.109999][T15935] ? __pfx_do_sendfile+0x10/0x10 [ 533.110021][T15935] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 533.110042][T15935] ? __fget_files+0x21f/0x3d0 [ 533.110067][T15935] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 533.110094][T15935] ? fput+0x79/0x100 [ 533.110108][T15935] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 533.110135][T15935] ? ksys_write+0x1ac/0x250 [ 533.110157][T15935] ? __pfx_ksys_write+0x10/0x10 [ 533.110179][T15935] ? rcu_is_watching+0x12/0xc0 [ 533.110203][T15935] __do_fast_syscall_32+0xe7/0x970 [ 533.110221][T15935] do_fast_syscall_32+0x32/0x70 [ 533.110237][T15935] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.110254][T15935] RIP: 0023:0xf708efec [ 533.110270][T15935] Code: Unable to access opcode bytes at 0xf708efc2. [ 533.110276][T15935] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 533.110293][T15935] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000004 [ 533.110303][T15935] RDX: 0000000000000000 RSI: 00000000578410eb RDI: 0000000000000000 [ 533.110314][T15935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.110324][T15935] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 533.110333][T15935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.110345][T15935] [ 533.192606][T15940] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 533.245301][T15940] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 533.253804][T15940] vhci_hcd vhci_hcd.0: Device attached [ 533.289596][ T40] IPVS: starting estimator thread 0... [ 533.291734][T15946] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 533.373413][T15951] IPVS: using max 52 ests per chain, 124800 per kthread [ 533.381099][T15940] ./bus: Can't lookup blockdev [ 533.473698][ T5847] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 533.540083][ T5847] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 533.644301][T10308] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 533.803323][T10308] usb 10-1: Using ep0 maxpacket: 8 [ 533.808204][T10308] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 533.810830][T10308] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 533.814188][T10308] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 533.817146][T10308] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 533.820212][T10308] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.824562][T10308] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 533.827416][T10308] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.894826][T15941] vhci_hcd: connection reset by peer [ 533.896874][ T13] vhci_hcd vhci_hcd.4: stop threads [ 533.898500][ T13] vhci_hcd vhci_hcd.4: release socket [ 533.900184][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 533.973457][T14539] Bluetooth: hci3: command tx timeout [ 534.106575][T10308] usb 10-1: usb_control_msg returned -32 [ 534.108387][T10308] usbtmc 10-1:16.0: can't read capabilities [ 534.510629][T15960] usbtmc 10-1:16.0: INDICATOR_PULSE returned 0 [ 534.713981][T10308] usb 10-1: USB disconnect, device number 17 [ 535.264492][T16003] 9pnet_virtio: no channels available for device syz [ 535.291813][T16006] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2234'. [ 535.823560][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.826224][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.903419][T10308] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 536.024052][T16019] FAULT_INJECTION: forcing a failure. [ 536.024052][T16019] name failslab, interval 1, probability 0, space 0, times 0 [ 536.028569][T16019] CPU: 0 UID: 0 PID: 16019 Comm: syz.6.2235 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.028588][T16019] Tainted: [L]=SOFTLOCKUP [ 536.028593][T16019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 536.028599][T16019] Call Trace: [ 536.028603][T16019] [ 536.028607][T16019] dump_stack_lvl+0x100/0x190 [ 536.028633][T16019] should_fail_ex.cold+0x5/0xa [ 536.028646][T16019] ? kmem_cache_alloc_node_noprof+0x5b/0x6f0 [ 536.028659][T16019] should_failslab+0xc2/0x120 [ 536.028672][T16019] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 536.028683][T16019] ? __alloc_skb+0x140/0x710 [ 536.028699][T16019] ? __alloc_skb+0x5b7/0x710 [ 536.028719][T16019] __alloc_skb+0x140/0x710 [ 536.028738][T16019] ? __alloc_skb+0x5b7/0x710 [ 536.028759][T16019] ? __pfx___alloc_skb+0x10/0x10 [ 536.028784][T16019] ? post_alloc_hook+0xed/0x120 [ 536.028810][T16019] alloc_skb_with_frags+0xdd/0x760 [ 536.028840][T16019] sock_alloc_send_pskb+0x801/0x980 [ 536.028860][T16019] ? rcu_is_watching+0x12/0xc0 [ 536.028874][T16019] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 536.028887][T16019] ? is_bpf_text_address+0x8a/0x1a0 [ 536.028901][T16019] ? lock_release+0x24d/0x310 [ 536.028915][T16019] ? bpf_ksym_find+0x124/0x1c0 [ 536.028930][T16019] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 536.028945][T16019] ? is_bpf_text_address+0x94/0x1a0 [ 536.028959][T16019] ? kernel_text_address+0x8d/0x100 [ 536.028974][T16019] unix_stream_sendmsg+0xda4/0x1310 [ 536.028990][T16019] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 536.029005][T16019] ? stack_depot_save_flags+0x27/0x9d0 [ 536.029022][T16019] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 536.029035][T16019] sock_sendmsg+0x394/0x410 [ 536.029046][T16019] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 536.029060][T16019] ? __pfx_sock_sendmsg+0x10/0x10 [ 536.029070][T16019] ? do_sendfile+0xadc/0xe20 [ 536.029088][T16019] splice_to_socket+0xb3c/0x11a0 [ 536.029107][T16019] ? __pfx_splice_to_socket+0x10/0x10 [ 536.029130][T16019] ? lockdep_init_map_type+0x5c/0x250 [ 536.029146][T16019] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 536.029162][T16019] ? __pfx_splice_to_socket+0x10/0x10 [ 536.029178][T16019] direct_splice_actor+0x192/0x690 [ 536.029195][T16019] splice_direct_to_actor+0x345/0xa30 [ 536.029224][T16019] ? __pfx_direct_splice_actor+0x10/0x10 [ 536.029241][T16019] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 536.029258][T16019] ? get_pid_task+0xfc/0x250 [ 536.029269][T16019] ? rcu_is_watching+0x12/0xc0 [ 536.029281][T16019] do_splice_direct+0x174/0x240 [ 536.029297][T16019] ? __pfx_do_splice_direct+0x10/0x10 [ 536.029314][T16019] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 536.029330][T16019] ? bpf_lsm_file_permission+0x9/0x10 [ 536.029346][T16019] ? security_file_permission+0x76/0x210 [ 536.029361][T16019] ? rw_verify_area+0xce/0x6d0 [ 536.029375][T16019] do_sendfile+0xadc/0xe20 [ 536.029389][T16019] ? __pfx_do_sendfile+0x10/0x10 [ 536.029403][T16019] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 536.029416][T16019] ? __fget_files+0x21f/0x3d0 [ 536.029434][T16019] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 536.029451][T16019] ? fput+0x79/0x100 [ 536.029460][T16019] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 536.029478][T16019] ? ksys_write+0x1ac/0x250 [ 536.029492][T16019] ? __pfx_ksys_write+0x10/0x10 [ 536.029506][T16019] ? rcu_is_watching+0x12/0xc0 [ 536.029518][T16019] __do_fast_syscall_32+0xe7/0x970 [ 536.029532][T16019] do_fast_syscall_32+0x32/0x70 [ 536.029545][T16019] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.029559][T16019] RIP: 0023:0xf7fd7fec [ 536.029572][T16019] Code: Unable to access opcode bytes at 0xf7fd7fc2. [ 536.029577][T16019] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 536.029588][T16019] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000004 [ 536.029595][T16019] RDX: 0000000000000000 RSI: 00000000578410eb RDI: 0000000000000000 [ 536.029601][T16019] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 536.029608][T16019] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 536.029615][T16019] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 536.029624][T16019] [ 536.103509][T10308] usb 9-1: Using ep0 maxpacket: 32 [ 536.220045][T10308] usb 9-1: unable to get BOS descriptor or descriptor too short [ 536.224673][T10308] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 536.226987][T10308] usb 9-1: can't read configurations, error -71 [ 536.686040][T16036] blkio.reset_stats is deprecated [ 536.753570][T16042] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2243'. [ 536.788431][T16042] can0: slcan on ttyS3. [ 536.861677][T16047] cgroup: Unknown subsys name 'dont_measure' [ 537.148678][T16046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2244'. [ 537.753860][T16041] can0 (unregistered): slcan off ttyS3. [ 537.973495][ T5826] ------------[ cut here ]------------ [ 537.975792][ T5826] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 537.978627][ T5826] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x322/0x590, CPU#2: kworker/2:3/5826 [ 537.984225][ T5826] Modules linked in: [ 537.985896][ T5826] CPU: 2 UID: 0 PID: 5826 Comm: kworker/2:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.990599][ T5826] Tainted: [L]=SOFTLOCKUP [ 537.992201][ T5826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 537.995535][ T5826] Workqueue: events drm_fb_helper_damage_work [ 537.997892][ T5826] RIP: 0010:drm_crtc_wait_one_vblank+0x328/0x590 [ 538.000477][ T5826] Code: 48 8b 6b 50 48 85 ed 0f 84 dc 01 00 00 e8 10 46 5f fc 48 89 df e8 a8 70 92 00 48 89 c6 48 8d 3d be 61 3c 0b 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 52 f7 ff ff [ 538.006480][ T5826] RSP: 0018:ffffc90004fdfa70 EFLAGS: 00010293 [ 538.008430][ T5826] RAX: ffffffff8c4fa3a0 RBX: ffff888026102000 RCX: 0000000000000000 [ 538.010934][ T5826] RDX: ffffffff8c4d7920 RSI: ffffffff8c4fa3a0 RDI: ffffffff90e5d740 [ 538.013528][ T5826] RBP: ffffffff8c4d7920 R08: 0000000000000005 R09: 0000000000000000 [ 538.016433][ T5826] R10: 0000000000000000 R11: ffffffff81d4786c R12: ffff88802613e000 [ 538.019619][ T5826] R13: 0000000000000000 R14: 0000000000000000 R15: 000000007a7388e8 [ 538.022385][ T5826] FS: 0000000000000000(0000) GS:ffff888097321000(0000) knlGS:0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 538.025247][ T5826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 538.028561][ T5826] CR2: 00000000f7486288 CR3: 000000000e592000 CR4: 0000000000352ef0 [ 538.032451][ T5826] Call Trace: [ 538.034014][ T5826] [ 538.035246][ T5826] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 538.037346][ T5826] ? rcu_is_watching+0x12/0xc0 [ 538.038995][ T5826] ? __pfx_autoremove_wake_function+0x10/0x10 [ 538.040864][ T5826] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 538.042671][ T5826] ? drm_vblank_get+0x14f/0x2d0 [ 538.044286][ T5826] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 538.046736][ T5826] drm_fb_helper_damage_work+0x164/0x690 [ 538.048415][ T5826] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 538.050377][ T5826] ? lock_acquire+0x301/0x370 [ 538.051858][ T5826] ? rcu_is_watching+0x12/0xc0 [ 538.053408][ T5826] process_one_work+0xa23/0x1940 [ 538.054985][ T5826] ? __pfx_process_one_work+0x10/0x10 [ 538.056744][ T5826] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 538.058723][ T5826] worker_thread+0x5ef/0xe50 [ 538.060170][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 538.062181][ T5826] ? kthread+0x13a/0x450 [ 538.063576][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 538.065142][ T5826] kthread+0x370/0x450 [ 538.066556][ T5826] ? __pfx_kthread+0x10/0x10 [ 538.068510][ T5826] ret_from_fork+0x72b/0xd50 [ 538.070322][ T5826] ? __pfx_ret_from_fork+0x10/0x10 [ 538.072223][ T5826] ? __switch_to+0x800/0x10f0 [ 538.074253][ T5826] ? __pfx_kthread+0x10/0x10 [ 538.076170][ T5826] ret_from_fork_asm+0x1a/0x30 [ 538.078699][ T5826] [ 538.080015][ T5826] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 538.083072][ T5826] CPU: 2 UID: 0 PID: 5826 Comm: kworker/2:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.087409][ T5826] Tainted: [L]=SOFTLOCKUP [ 538.088749][ T5826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 538.091805][ T5826] Workqueue: events drm_fb_helper_damage_work [ 538.093691][ T5826] Call Trace: [ 538.094736][ T5826] [ 538.095676][ T5826] dump_stack_lvl+0x100/0x190 [ 538.097381][ T5826] vpanic+0x552/0x970 [ 538.098793][ T5826] ? __pfx_vpanic+0x10/0x10 [ 538.100182][ T5826] ? lock_release+0x24d/0x310 [ 538.101634][ T5826] panic+0xd1/0xe0 [ 538.102830][ T5826] ? __pfx_panic+0x10/0x10 [ 538.104230][ T5826] ? check_panic_on_warn+0x1f/0x90 [ 538.106316][ T5826] check_panic_on_warn.cold+0x19/0x34 [ 538.108203][ T5826] ? drm_crtc_wait_one_vblank+0x322/0x590 [ 538.109942][ T5826] __warn.cold+0x191/0x318 [ 538.111346][ T5826] __report_bug+0x30f/0x440 [ 538.112793][ T5826] ? drm_crtc_wait_one_vblank+0x322/0x590 [ 538.114750][ T5826] ? __pfx___report_bug+0x10/0x10 [ 538.116803][ T5826] ? rcu_is_watching+0x12/0xc0 [ 538.118353][ T5826] report_bug_entry+0xe1/0x290 [ 538.119692][ T5826] ? drm_crtc_wait_one_vblank+0x328/0x590 [ 538.121346][ T5826] handle_bug+0x1cd/0x2a0 [ 538.122715][ T5826] exc_invalid_op+0x17/0x50 [ 538.124115][ T5826] asm_exc_invalid_op+0x1a/0x20 [ 538.125614][ T5826] RIP: 0010:drm_crtc_wait_one_vblank+0x328/0x590 [ 538.127584][ T5826] Code: 48 8b 6b 50 48 85 ed 0f 84 dc 01 00 00 e8 10 46 5f fc 48 89 df e8 a8 70 92 00 48 89 c6 48 8d 3d be 61 3c 0b 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 52 f7 ff ff [ 538.134613][ T5826] RSP: 0018:ffffc90004fdfa70 EFLAGS: 00010293 [ 538.137083][ T5826] RAX: ffffffff8c4fa3a0 RBX: ffff888026102000 RCX: 0000000000000000 [ 538.140283][ T5826] RDX: ffffffff8c4d7920 RSI: ffffffff8c4fa3a0 RDI: ffffffff90e5d740 [ 538.143458][ T5826] RBP: ffffffff8c4d7920 R08: 0000000000000005 R09: 0000000000000000 [ 538.146384][ T5826] R10: 0000000000000000 R11: ffffffff81d4786c R12: ffff88802613e000 [ 538.148847][ T5826] R13: 0000000000000000 R14: 0000000000000000 R15: 000000007a7388e8 [ 538.151264][ T5826] ? finish_task_switch.isra.0+0x14c/0x1010 [ 538.153093][ T5826] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 538.154984][ T5826] ? rcu_is_watching+0x12/0xc0 [ 538.156458][ T5826] ? __pfx_autoremove_wake_function+0x10/0x10 [ 538.158337][ T5826] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 538.160117][ T5826] ? drm_vblank_get+0x14f/0x2d0 [ 538.161610][ T5826] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 538.163571][ T5826] drm_fb_helper_damage_work+0x164/0x690 [ 538.165278][ T5826] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 538.167409][ T5826] ? lock_acquire+0x301/0x370 [ 538.169101][ T5826] ? rcu_is_watching+0x12/0xc0 [ 538.170577][ T5826] process_one_work+0xa23/0x1940 [ 538.172130][ T5826] ? __pfx_process_one_work+0x10/0x10 [ 538.173765][ T5826] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 538.175639][ T5826] worker_thread+0x5ef/0xe50 [ 538.177193][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 538.178766][ T5826] ? kthread+0x13a/0x450 [ 538.180093][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 538.181657][ T5826] kthread+0x370/0x450 [ 538.182933][ T5826] ? __pfx_kthread+0x10/0x10 [ 538.184352][ T5826] ret_from_fork+0x72b/0xd50 [ 538.185767][ T5826] ? __pfx_ret_from_fork+0x10/0x10 [ 538.187558][ T5826] ? __switch_to+0x800/0x10f0 [ 538.189491][ T5826] ? __pfx_kthread+0x10/0x10 [ 538.191416][ T5826] ret_from_fork_asm+0x1a/0x30 [ 538.193420][ T5826] [ 538.195485][ T5826] Kernel Offset: disabled [ 538.197236][ T5826] Rebooting in 86400 seconds..