last executing test programs: 13m41.281632935s ago: executing program 1 (id=157): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0xff, 0x1, 0xfd, 0x9}}, 0x1c}}, 0x20000001) socket$inet6(0xa, 0x3, 0xfffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x11, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x0, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) r0 = syz_open_procfs(0x0, &(0x7f0000002080)='oom_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000002400)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x2c}}, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x80000, 0x81) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0xa, 0x0, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010100, @in6=@local, 0x18, 0x14, 0x2}]}, 0x38}, 0x1, 0x7, 0x0, 0x34000}, 0x20040000) r6 = socket$inet6(0xa, 0x3, 0xff) creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmmsg$inet6(r6, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000000e00)={0xfc, {"a2e3ad09ed0d09f91b38071887f70e09d038e7ff7fc6e5539b0d9f0a8b089b3f383163030890e0879b0a71c6e70a9b336c959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074d090acd3b78130daa61d8e8040000065802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae13f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea77b5602984e4de7c6ebe8cac64f17679141d54b34bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cff7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f19880f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999b596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f203903dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efe5496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5ca00000000000000008734dd73583df292892448039ef799cf0630becdcce04579f5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebd078ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b905b6094df04df0019e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378d94dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9dec58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67948e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d66945c91b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e83d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68ce255315ab80dd349e891aef595dc4d470e8ac32a308e1500000000eac289c0006087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c2769310123cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220f702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1de51f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d4db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72932b99b380000000000000006859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec8982b6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002601e87b162dadc600", 0x1000}}, 0x1006) setpriority(0x1, r1, 0x1) r8 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r4, &(0x7f0000000300)="4fe68145cd8e03b39e3ae2f485b0f81600a2247c801d569781151a28373c81066f3b58f119dfb78187c1627972ea3997a18645d9b5a48a3e3340bf641a3d697765aec85ba159f61f5ca65a3cd982f0d1562a89e0f4454e787050e924889601d9ea4c87c2af586ecb6f5ed858f595", 0x6e, 0x40000, &(0x7f00000003c0)={0x2, 0x4e24, @remote}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x800, 0x0, 0x0) 13m40.261247709s ago: executing program 1 (id=165): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0xff, 0x1, 0xfd, 0x9}}, 0x1c}}, 0x20000001) socket$inet6(0xa, 0x3, 0xfffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x11, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x0, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x80000, 0x81) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x3, 0xff) creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) setpriority(0x1, 0x0, 0x1) r4 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r2, &(0x7f0000000300)="4fe68145cd8e03b39e3ae2f485b0f81600a2247c801d569781151a28373c81066f3b58f119dfb78187c1627972ea3997a18645d9b5a48a3e3340bf641a3d697765aec85ba159f61f5ca65a3cd982f0d1562a89e0f4454e787050e924889601d9ea4c87c2af586ecb6f5ed858f595", 0x6e, 0x40000, &(0x7f00000003c0)={0x2, 0x4e24, @remote}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x800, 0x0, 0x0) 13m39.411561532s ago: executing program 1 (id=178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a630400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) 13m39.331002536s ago: executing program 1 (id=179): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x12, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 13m39.33053947s ago: executing program 1 (id=180): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002340)=ANY=[@ANYBLOB="48000000110001002bbd7000fedbdf257f000001140000000000000000000000000004d4020032"], 0x48}}, 0xffffffff) 13m39.061767172s ago: executing program 1 (id=183): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) (rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) fchmod(0xffffffffffffffff, 0x101) (async) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) (async, rerun: 32) fdatasync(r0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmmsg(r0, &(0x7f0000003880)=[{{&(0x7f0000000140)=@nfc_llcp={0x27, r2, 0xffffffffffffffff, 0x7, 0x7, 0x80, "fea6ff75951141b2ab4db69e013819ee2b2b00a2955c59b1ee1b06f96c008c766d9a283450b1fe539656af2ae79d56f24a71d8b8ec439812d54868e63ae3b3", 0x1f}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="dadfe7ecad087c4740f693fbabe629dac50431b74d9212753f7c01ff7a06e87f48bb4153bee3", 0x26}], 0x1, &(0x7f0000001700)=[{0xc4, 0x10a, 0x6, "177f115b84794aeea4d6b1ba5e6ee516a12dc67b8f8afd476c272c6d1e56a6cb665b40d67f6b52f6a959228d26cea32ea0bab43e4e821c4b50275c8aecba7fab357c8027db6ec4582a951b52e99537213e85a5a2b12d55d021afa6ad2d6d25fe97edcdc389a3b646aba3353d77118475531903ce86f40a591ab136a85d7e28e427fc9c92176da6d71861056135cf4f6da24b78c228f168c08488885e63b96eb07377aa55401be355c7a53f6cbf717f94eb8f72cf01043c3d"}, {0xd0, 0x88, 0x5cd5, "06195a1f8ad4171e98e764bc21f12e025a6aebcbfeda59c912cbbe204cec0ac9ac8cad92bb819c820d0065eba47a11c9d302ad12f54f3af9c6f376834f6092933cc414d4653a1de364f1f08db2ccb6bbd05ba7db4037d730aa043fe4aa83601783b9b647d35c8b5f0b7b870c38219f887d392cbb031f0e6c0c97734432c2ef3fdc5945184823f98ce19632a86f3d764e713bd2c737a855263a1608d63e048b184917fa47b6f0724d1ad1c932980b213825c078c0bc07dfb31d6f724b618b540717"}, {0x100c, 0x113, 0x1, "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"}, {0x14, 0xff, 0xff, "77ae6fc21d"}, {0x18, 0x0, 0x9, "70d0015c7676de2c3e02c4"}, {0xa0, 0x108, 0x6, "65d8cc5b6fc684add07bd40bd319d9b3cfa9343b6d166c940074ea44f8574ba8884b95cc4f50990062a951111817491af3cb8af087364fef28d175c2c2144b19f1b3ba33efdc63f059436cbbb6c4e0215581fc2a442496318ea59b2997f8af5fbd4e00f25a92be5d4cfaf85f1ca88d55c6dea0b5c401f65059b8af05eb6aac71f540c512cff66b82582f934f4cacbc4455"}], 0x126c}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002980)="82837dea8016eeedbd36b0d36c22033088124c286ef414cc9d92499a62d7ec1b7419393f5b8f52ec3f70f1100a8764b3e78a9c5dc591d603ffb66d203d5c8630e3da9d6e59bc8c70ea5c72e334960245f99893a9ca1608e13efb6561ef8346ead077221c11b994a628e0586016e5945708f3782030e3acbc9cdc5f5b2d754e3f6d9f069dfcb634b7553e3d4acb47c14bf37400d971bd07f3eb940a462d33265f7a311e2fe919dd0e24b7b90af28081babade45d310f88d86c5c24c8020617106881853200f94f245d62d0452c70fb87cb88c748fd50e92387af0", 0xda}], 0x1, &(0x7f0000002ac0)=[{0x100, 0x88, 0xffff7fff, "232d1070376e5d526226d263e2df6378c005ab735268333139cb8b45e99b25da2bb27e1b235ef3a82f2753f1ba70e78452a65f4abfe7a98ae0beadc589b80fd78b145b729dadcbdf70d048323db1b7203fb4ebaffcabeb714460d809d8ec6008bcfbec40d9a316c8a89eb75b9dd3b38fa41427dd2c18feb656999598ed8a403f0ddf0846d2326a6f3e27537ca144ade841d95c86dd4fe49ea7a8c798b8dd39c69def6f6e131d1177c52e70f1d3924ffd4790f870b77f2748b1e5337635b563aeb2c849beee37d81c3d8effea76538403e3f70db7313a79c3855c0fa5ac1fec9d8fa7f0e7e51fd703ec5ef3296da61580613fbfde"}, {0x48, 0x104, 0x2, "c0c686d9b2007e51eea5829e5d1af78dfb027f14b546bf27962ec724e8e6aefcd01733f3f487d642c2769df48150250af0a7d655f7a3b254ec98"}, {0x100, 0x114, 0xe, "091c34a4823fdb5552de7eee7741d95c68ee06848e76bbb3dfaea6f8e55184e21b7e031a0493ad84c51d42ae4cbb76981a5c2794b229b4a5495b0a646211362a0eb52b4bdfc48eaa658b1c89d96fb7f561464ca3af9ab7a568e0b59ef84c61c03ac4da81fc6d3a9e9cb894a7e7da4cf59ff6f8aee51feafd61bdeec1e07b27fab5b118bbf27cfc3b5773b0c80fa14c90a8bfaefb394e4894919e34dc63fadca10e392df2e4b540bc6248fb4bf9bd1c3e2753bedda1e91528e0c2e552ca2d87812a70c17d07e8768f2145cfca0db30dd85ff8820cd46cb83a281c45b50d719436017906db01d81c766d74bf1d975454668d"}, {0x44, 0x112, 0x9, "f5f99e65b01f6be16128196751841b0a3b993529517d044dc1e985ee4f5e89d3a21c87b111cac54068aa60d99e92432666fd90c4d64b4e"}, {0x7c, 0x0, 0x2, "60cbd799f70e0456bb051a6f1630e05c0bc25bf612b83f0b098d8917627562a89e34e254a22c25bc73f8cdf4562000f453e4fc5d6c25361ee1d476138bfcc050a2d31a2598b6bfa14d9c7a88d1154d93d607585313b4686e548715e9c598b3bda818e71ec2132fed228ccbe9d83e"}, {0xe4, 0x104, 0x5, "9bac4df9999b0f993b682b305c38ca840b11dbe8ba30c02ce2c39d3e0051b973623a5eab4484f381935671fc0f3815bf9bd4562e8eac1f29ac1a28c6707b3d8b38117dc99659114ec4873c3a85646247748ad7f61aaa7c9935b87de2fd9c98581ab047c18c45e290154b36a8a36caad06046a0e5dc598c52b6d1cd713860f4078d9346889b635a5a5af2179b190dc54e3166e0fea11092cdc3586e89ede4a748af7b52bb89446665a10cb46413465cc14be5e2dcf5e163d9e977914a42a9b0b4332fabaca2fd18e646d7c618dc70403bb28e593c30"}], 0x3ec}}, {{&(0x7f0000002ec0)=@nl=@kern={0x10, 0x0, 0x0, 0x7ca75f6c29bd6c9c}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002f40)="0142c3e4db7ab0a40c3267083fff4832e2327a75e2218c2d5f0e48650eb6de87d93133ca8edc7fc21781bc7fcb73d442d64ae9b22d43f674875dcb2655e6b0a3f60e3da6a9f2a1a709be53f0180dabef5f76b61ff54d0322dfe61abbbd344e0ee368e7cdc289822389bb37009e6d224078cde01292a40a0be1c6638e4341033089b2b8b9fffc47c7bc39a752be1aa041904068065b10ef44222396a125797e3c1981c801220e99c34b07ceeb3e3cf6e0aa09b4fc5b80f1aeaf58a5fa73235cfbbbda76fad8068c6c2908", 0xca}, {&(0x7f0000003040)="45cf6216ccd7d79480009bcb5e32696008454739344066c8837f619b885b1083115a140cce3eefc96416760aae11668cad26cb8b257927273c0bd8e3b2634386160677e57059f4c43885720003451f474b09d5bcfa94efd78ac0c10fb4b0748bcb2ad654ce8853ca822f63be75ede1b6e955a9b8e9d6e5727ee6c98facf682e6f7334c1e7fe053f33cc8a9005dd2075887623304483b4ed2b2f51b0afea92deaab56dbd9cd412653383f42a544ac2ad97309ce8e72677c212bdf723711239c59c74d150c726de87a2bdf0b64fb3af9", 0xcf}, {&(0x7f0000003140)="daa03c85edfadda346b61f33cfb6e5145292480f75214bbbb4ec12784929ca74085d739f0d0ea94579eaeadd0a5cbb98e7d3b2f52077723b44e90b052b8c285f80a9d7581cb925964bd273019e1330698ce81f119af21a3a512f0cc1bc058b9fed5b956aa24a23be088ea6c71f2cdadf8dab89c68abaf50063466ca0", 0x7c}, {&(0x7f00000031c0)="c581c9a1fa9d5b2ada922664168b7b0996eeb898ef7653b17438525af75a253ffe5a820170866cb1c9072ad6515d22f19ce402f519a4907f8afe36c52eb5cd57c1358fe264bbcda4e1d5db67661106a1b944657fbe1e705fe055295263b8e4c832300d0d98cf02d2fa57c361c3779eadb5df19782495bf189f66d003387883096b4424491816da1bd3e9c9b7eb5306b621db51565b7a3bfe00832dd1daf10305f4f8bb7a15d1fea36f456f241316b74b0bedd63e8631b119b5273f4e78214c60ec22998b6bf41dbf39f77e905dc445", 0xcf}, {&(0x7f00000032c0)="c112deb42ca969b86f68142718926c820db02134a98cde8559fdf700f8fb6b49f70f92c5233cd26e6034a03b4389d69a6722849f904661296cd4606f8dba32db4ea0788e1e5bc5a5f059ce7694c151cf23f8ffb8f9d2120fc1ae6a7a6c80530b28c1f13aeb8328d3b53b3dde0a48bc27097b1c41e09b586db19909b5ccd3cfa6a6e8d628f45316e1d82086ad5c0f76763efa6e95a93121f009dac7ee840e9f87ff966163523236b9ccb1437a61f4576ec8ef5e9713a5e22f13c6851e6fb65689c4049c0c52a3c4d3479bbf44da68ea25248ca52e2d30190a81d6ffc59c5ae1cec6fca1690a3ee614891b4eec89c01a", 0xef}], 0x5, &(0x7f0000003400)=[{0x84, 0x10f, 0x9fd, "f8940674e620fdca9ef3b88a69f6c207092c4600d992d0f01fd8a237cb0d2de5ffcb1c26427f6540cb98d14720ca6d04c9bd971ca06f69b5bd583e3ffdf6db70a94c5c43fc11cc8a4b3572ffed98ec3bdbb3a7bd32b3b4a79819f2f7e2a7fd4d39ee3593f2d33324411c826b70050b6eafa093633b"}, {0xf8, 0x10b, 0x9, "d568b1d006d736e0fe9eda51e1f48491559948a0863252cee53d46eeac02b7f2fe2e0f2e71c1471d69744a0034ed2d826821886f1cce141b3a60901e0e656bfdd85963e294ee179ea418f4427c527631ece56c28bf6ab13378a03aadadc5e594ad50a4e3ab168e0d86435de58fe38ece8aeedb5ecca43b0496aa764d93ed9a3fa0331284d27ac0fdf85cf071db6eda54df9941ad1d4f01f3e79456df0b9020179e586087c03bd792531df1b2933ad10126a07ae1ee25e5efaab0efabe7ff6cd65ada0744c9ceb92490f50bd05f8b5de2fe0a35b85160bb4bc408dc9336451a01dcfcee925ceadc1c6d16"}, {0x1c, 0x112, 0x0, "693d7fb2b97d3f1482646c705565bf32"}, {0xa4, 0xd, 0xffff, "1d980a6a733ac16eafb76da439c02fa48e1873d696156541c409c222270ee76a945a2d2a23b57aa16d818e91e279aa07513ceff09bcefd19ae2725e2d58023748a6f0c55b2fdf7482645d893ce4351b3bdc71551c1c15b09d55c0aec4a13785447b0fe8f1e24d313f12d558a843cc11fd672be635bb9c7f4e1f1ad6823711be61fa32c0c22768f4b2530dea39ddeba6ff2c6c62e3015"}, {0xfc, 0x102, 0x2, "6cf19cd5f4f0772f94b2d0ec9d1c4af864cc0333cb3e9771c08670ba17c1ec27604512c958f6a24925d3da9211a99e715e85eab7c166fc2d07210b0843ee6beebacc3c45b938f9263d59144c771152e9a2bf7d524f87344dd1703913fddcd3c7f02ded702b2a18af7a6439d19acd318163a8e33fdc7328595bea92214bf7f2e25835b08cc88ef70c3f1243b157bb00ba9eb99c4aad8e257facdb312e2546b508b1ddf3696df638b6038390d6b2db575955880ee6a694f17cda7cde20345575a381a3055b3f6ec412fcd48a191abbd5c072b124488f531101965a4fdef9a10bd63a10d24e826a1f32f2ba4b114ab7"}, {0x24, 0x10a, 0xfffffff8, "4acc5d486ba36b6701dbdddb0a79a65ae2a6901c45fc"}, {0x58, 0x113, 0x8000, "69c086fdfa767a805e2b31b060b9833fe93bad2459a2033a34647c9d056c1c402ef8a06546194096ccf61c45a57a6b90042943800ee92df74d72cb2863f98f2d663638d84d6f6cfd3686a0"}, {0x8c, 0x109, 0x6, "23f9418bb67592786e6e8aeb2eedcc27b1bfd213b8425b38e781b3a7e1cfffc54cb1bae19f6b21c06d2dc1c1f87f6c5836dc5e2ff291f00240f0617dcd2d38c9cadf8427952c4688c11b0b217274f15ff381216803a033482018e063f903bcf57a9c70a4af881cbff6b1280226691a9fdc47fd0af47f8324ec3158a4a95c122a"}, {0x38, 0x112, 0x325, "eaa190196e1e46e6ef4b55a5e58d1d100633b9bc28c336e7b1668492a5f61ee563f5fa81531e8e96c53354aa"}], 0x478}}], 0x3, 0x4008001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0) (async, rerun: 32) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, 0x1, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x5800) (async, rerun: 32) r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "000000000000040400", "00f638000000007c0300", "00d703500200"]}) (async) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) (async, rerun: 64) r5 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x50) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) (rerun: 32) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000001280)={'filter\x00', 0x7, 0x4, 0x404, 0x0, 0x0, 0x218, 0x324, 0x324, 0x324, 0x4, &(0x7f0000000280), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0xff000330, 0xffffffff, 0x4, 0x0, {@mac, {[0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xfff2, 0x101, 0x79, 0x1, 0x7ff, 0x8, '\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8, 0x1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @broadcast, 0x8}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x4d) (async, rerun: 32) dup2(r6, r0) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80104132, &(0x7f0000000000)) 13m39.019698489s ago: executing program 32 (id=183): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) (rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) fchmod(0xffffffffffffffff, 0x101) (async) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) (async, rerun: 32) fdatasync(r0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmmsg(r0, &(0x7f0000003880)=[{{&(0x7f0000000140)=@nfc_llcp={0x27, r2, 0xffffffffffffffff, 0x7, 0x7, 0x80, "fea6ff75951141b2ab4db69e013819ee2b2b00a2955c59b1ee1b06f96c008c766d9a283450b1fe539656af2ae79d56f24a71d8b8ec439812d54868e63ae3b3", 0x1f}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="dadfe7ecad087c4740f693fbabe629dac50431b74d9212753f7c01ff7a06e87f48bb4153bee3", 0x26}], 0x1, &(0x7f0000001700)=[{0xc4, 0x10a, 0x6, "177f115b84794aeea4d6b1ba5e6ee516a12dc67b8f8afd476c272c6d1e56a6cb665b40d67f6b52f6a959228d26cea32ea0bab43e4e821c4b50275c8aecba7fab357c8027db6ec4582a951b52e99537213e85a5a2b12d55d021afa6ad2d6d25fe97edcdc389a3b646aba3353d77118475531903ce86f40a591ab136a85d7e28e427fc9c92176da6d71861056135cf4f6da24b78c228f168c08488885e63b96eb07377aa55401be355c7a53f6cbf717f94eb8f72cf01043c3d"}, {0xd0, 0x88, 0x5cd5, "06195a1f8ad4171e98e764bc21f12e025a6aebcbfeda59c912cbbe204cec0ac9ac8cad92bb819c820d0065eba47a11c9d302ad12f54f3af9c6f376834f6092933cc414d4653a1de364f1f08db2ccb6bbd05ba7db4037d730aa043fe4aa83601783b9b647d35c8b5f0b7b870c38219f887d392cbb031f0e6c0c97734432c2ef3fdc5945184823f98ce19632a86f3d764e713bd2c737a855263a1608d63e048b184917fa47b6f0724d1ad1c932980b213825c078c0bc07dfb31d6f724b618b540717"}, {0x100c, 0x113, 0x1, "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"}, {0x14, 0xff, 0xff, "77ae6fc21d"}, {0x18, 0x0, 0x9, "70d0015c7676de2c3e02c4"}, {0xa0, 0x108, 0x6, "65d8cc5b6fc684add07bd40bd319d9b3cfa9343b6d166c940074ea44f8574ba8884b95cc4f50990062a951111817491af3cb8af087364fef28d175c2c2144b19f1b3ba33efdc63f059436cbbb6c4e0215581fc2a442496318ea59b2997f8af5fbd4e00f25a92be5d4cfaf85f1ca88d55c6dea0b5c401f65059b8af05eb6aac71f540c512cff66b82582f934f4cacbc4455"}], 0x126c}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002980)="82837dea8016eeedbd36b0d36c22033088124c286ef414cc9d92499a62d7ec1b7419393f5b8f52ec3f70f1100a8764b3e78a9c5dc591d603ffb66d203d5c8630e3da9d6e59bc8c70ea5c72e334960245f99893a9ca1608e13efb6561ef8346ead077221c11b994a628e0586016e5945708f3782030e3acbc9cdc5f5b2d754e3f6d9f069dfcb634b7553e3d4acb47c14bf37400d971bd07f3eb940a462d33265f7a311e2fe919dd0e24b7b90af28081babade45d310f88d86c5c24c8020617106881853200f94f245d62d0452c70fb87cb88c748fd50e92387af0", 0xda}], 0x1, &(0x7f0000002ac0)=[{0x100, 0x88, 0xffff7fff, "232d1070376e5d526226d263e2df6378c005ab735268333139cb8b45e99b25da2bb27e1b235ef3a82f2753f1ba70e78452a65f4abfe7a98ae0beadc589b80fd78b145b729dadcbdf70d048323db1b7203fb4ebaffcabeb714460d809d8ec6008bcfbec40d9a316c8a89eb75b9dd3b38fa41427dd2c18feb656999598ed8a403f0ddf0846d2326a6f3e27537ca144ade841d95c86dd4fe49ea7a8c798b8dd39c69def6f6e131d1177c52e70f1d3924ffd4790f870b77f2748b1e5337635b563aeb2c849beee37d81c3d8effea76538403e3f70db7313a79c3855c0fa5ac1fec9d8fa7f0e7e51fd703ec5ef3296da61580613fbfde"}, {0x48, 0x104, 0x2, "c0c686d9b2007e51eea5829e5d1af78dfb027f14b546bf27962ec724e8e6aefcd01733f3f487d642c2769df48150250af0a7d655f7a3b254ec98"}, {0x100, 0x114, 0xe, "091c34a4823fdb5552de7eee7741d95c68ee06848e76bbb3dfaea6f8e55184e21b7e031a0493ad84c51d42ae4cbb76981a5c2794b229b4a5495b0a646211362a0eb52b4bdfc48eaa658b1c89d96fb7f561464ca3af9ab7a568e0b59ef84c61c03ac4da81fc6d3a9e9cb894a7e7da4cf59ff6f8aee51feafd61bdeec1e07b27fab5b118bbf27cfc3b5773b0c80fa14c90a8bfaefb394e4894919e34dc63fadca10e392df2e4b540bc6248fb4bf9bd1c3e2753bedda1e91528e0c2e552ca2d87812a70c17d07e8768f2145cfca0db30dd85ff8820cd46cb83a281c45b50d719436017906db01d81c766d74bf1d975454668d"}, {0x44, 0x112, 0x9, "f5f99e65b01f6be16128196751841b0a3b993529517d044dc1e985ee4f5e89d3a21c87b111cac54068aa60d99e92432666fd90c4d64b4e"}, {0x7c, 0x0, 0x2, "60cbd799f70e0456bb051a6f1630e05c0bc25bf612b83f0b098d8917627562a89e34e254a22c25bc73f8cdf4562000f453e4fc5d6c25361ee1d476138bfcc050a2d31a2598b6bfa14d9c7a88d1154d93d607585313b4686e548715e9c598b3bda818e71ec2132fed228ccbe9d83e"}, {0xe4, 0x104, 0x5, "9bac4df9999b0f993b682b305c38ca840b11dbe8ba30c02ce2c39d3e0051b973623a5eab4484f381935671fc0f3815bf9bd4562e8eac1f29ac1a28c6707b3d8b38117dc99659114ec4873c3a85646247748ad7f61aaa7c9935b87de2fd9c98581ab047c18c45e290154b36a8a36caad06046a0e5dc598c52b6d1cd713860f4078d9346889b635a5a5af2179b190dc54e3166e0fea11092cdc3586e89ede4a748af7b52bb89446665a10cb46413465cc14be5e2dcf5e163d9e977914a42a9b0b4332fabaca2fd18e646d7c618dc70403bb28e593c30"}], 0x3ec}}, {{&(0x7f0000002ec0)=@nl=@kern={0x10, 0x0, 0x0, 0x7ca75f6c29bd6c9c}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002f40)="0142c3e4db7ab0a40c3267083fff4832e2327a75e2218c2d5f0e48650eb6de87d93133ca8edc7fc21781bc7fcb73d442d64ae9b22d43f674875dcb2655e6b0a3f60e3da6a9f2a1a709be53f0180dabef5f76b61ff54d0322dfe61abbbd344e0ee368e7cdc289822389bb37009e6d224078cde01292a40a0be1c6638e4341033089b2b8b9fffc47c7bc39a752be1aa041904068065b10ef44222396a125797e3c1981c801220e99c34b07ceeb3e3cf6e0aa09b4fc5b80f1aeaf58a5fa73235cfbbbda76fad8068c6c2908", 0xca}, {&(0x7f0000003040)="45cf6216ccd7d79480009bcb5e32696008454739344066c8837f619b885b1083115a140cce3eefc96416760aae11668cad26cb8b257927273c0bd8e3b2634386160677e57059f4c43885720003451f474b09d5bcfa94efd78ac0c10fb4b0748bcb2ad654ce8853ca822f63be75ede1b6e955a9b8e9d6e5727ee6c98facf682e6f7334c1e7fe053f33cc8a9005dd2075887623304483b4ed2b2f51b0afea92deaab56dbd9cd412653383f42a544ac2ad97309ce8e72677c212bdf723711239c59c74d150c726de87a2bdf0b64fb3af9", 0xcf}, {&(0x7f0000003140)="daa03c85edfadda346b61f33cfb6e5145292480f75214bbbb4ec12784929ca74085d739f0d0ea94579eaeadd0a5cbb98e7d3b2f52077723b44e90b052b8c285f80a9d7581cb925964bd273019e1330698ce81f119af21a3a512f0cc1bc058b9fed5b956aa24a23be088ea6c71f2cdadf8dab89c68abaf50063466ca0", 0x7c}, {&(0x7f00000031c0)="c581c9a1fa9d5b2ada922664168b7b0996eeb898ef7653b17438525af75a253ffe5a820170866cb1c9072ad6515d22f19ce402f519a4907f8afe36c52eb5cd57c1358fe264bbcda4e1d5db67661106a1b944657fbe1e705fe055295263b8e4c832300d0d98cf02d2fa57c361c3779eadb5df19782495bf189f66d003387883096b4424491816da1bd3e9c9b7eb5306b621db51565b7a3bfe00832dd1daf10305f4f8bb7a15d1fea36f456f241316b74b0bedd63e8631b119b5273f4e78214c60ec22998b6bf41dbf39f77e905dc445", 0xcf}, {&(0x7f00000032c0)="c112deb42ca969b86f68142718926c820db02134a98cde8559fdf700f8fb6b49f70f92c5233cd26e6034a03b4389d69a6722849f904661296cd4606f8dba32db4ea0788e1e5bc5a5f059ce7694c151cf23f8ffb8f9d2120fc1ae6a7a6c80530b28c1f13aeb8328d3b53b3dde0a48bc27097b1c41e09b586db19909b5ccd3cfa6a6e8d628f45316e1d82086ad5c0f76763efa6e95a93121f009dac7ee840e9f87ff966163523236b9ccb1437a61f4576ec8ef5e9713a5e22f13c6851e6fb65689c4049c0c52a3c4d3479bbf44da68ea25248ca52e2d30190a81d6ffc59c5ae1cec6fca1690a3ee614891b4eec89c01a", 0xef}], 0x5, &(0x7f0000003400)=[{0x84, 0x10f, 0x9fd, "f8940674e620fdca9ef3b88a69f6c207092c4600d992d0f01fd8a237cb0d2de5ffcb1c26427f6540cb98d14720ca6d04c9bd971ca06f69b5bd583e3ffdf6db70a94c5c43fc11cc8a4b3572ffed98ec3bdbb3a7bd32b3b4a79819f2f7e2a7fd4d39ee3593f2d33324411c826b70050b6eafa093633b"}, {0xf8, 0x10b, 0x9, "d568b1d006d736e0fe9eda51e1f48491559948a0863252cee53d46eeac02b7f2fe2e0f2e71c1471d69744a0034ed2d826821886f1cce141b3a60901e0e656bfdd85963e294ee179ea418f4427c527631ece56c28bf6ab13378a03aadadc5e594ad50a4e3ab168e0d86435de58fe38ece8aeedb5ecca43b0496aa764d93ed9a3fa0331284d27ac0fdf85cf071db6eda54df9941ad1d4f01f3e79456df0b9020179e586087c03bd792531df1b2933ad10126a07ae1ee25e5efaab0efabe7ff6cd65ada0744c9ceb92490f50bd05f8b5de2fe0a35b85160bb4bc408dc9336451a01dcfcee925ceadc1c6d16"}, {0x1c, 0x112, 0x0, "693d7fb2b97d3f1482646c705565bf32"}, {0xa4, 0xd, 0xffff, "1d980a6a733ac16eafb76da439c02fa48e1873d696156541c409c222270ee76a945a2d2a23b57aa16d818e91e279aa07513ceff09bcefd19ae2725e2d58023748a6f0c55b2fdf7482645d893ce4351b3bdc71551c1c15b09d55c0aec4a13785447b0fe8f1e24d313f12d558a843cc11fd672be635bb9c7f4e1f1ad6823711be61fa32c0c22768f4b2530dea39ddeba6ff2c6c62e3015"}, {0xfc, 0x102, 0x2, "6cf19cd5f4f0772f94b2d0ec9d1c4af864cc0333cb3e9771c08670ba17c1ec27604512c958f6a24925d3da9211a99e715e85eab7c166fc2d07210b0843ee6beebacc3c45b938f9263d59144c771152e9a2bf7d524f87344dd1703913fddcd3c7f02ded702b2a18af7a6439d19acd318163a8e33fdc7328595bea92214bf7f2e25835b08cc88ef70c3f1243b157bb00ba9eb99c4aad8e257facdb312e2546b508b1ddf3696df638b6038390d6b2db575955880ee6a694f17cda7cde20345575a381a3055b3f6ec412fcd48a191abbd5c072b124488f531101965a4fdef9a10bd63a10d24e826a1f32f2ba4b114ab7"}, {0x24, 0x10a, 0xfffffff8, "4acc5d486ba36b6701dbdddb0a79a65ae2a6901c45fc"}, {0x58, 0x113, 0x8000, "69c086fdfa767a805e2b31b060b9833fe93bad2459a2033a34647c9d056c1c402ef8a06546194096ccf61c45a57a6b90042943800ee92df74d72cb2863f98f2d663638d84d6f6cfd3686a0"}, {0x8c, 0x109, 0x6, "23f9418bb67592786e6e8aeb2eedcc27b1bfd213b8425b38e781b3a7e1cfffc54cb1bae19f6b21c06d2dc1c1f87f6c5836dc5e2ff291f00240f0617dcd2d38c9cadf8427952c4688c11b0b217274f15ff381216803a033482018e063f903bcf57a9c70a4af881cbff6b1280226691a9fdc47fd0af47f8324ec3158a4a95c122a"}, {0x38, 0x112, 0x325, "eaa190196e1e46e6ef4b55a5e58d1d100633b9bc28c336e7b1668492a5f61ee563f5fa81531e8e96c53354aa"}], 0x478}}], 0x3, 0x4008001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0) (async, rerun: 32) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, 0x1, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x5800) (async, rerun: 32) r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "000000000000040400", "00f638000000007c0300", "00d703500200"]}) (async) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) (async, rerun: 64) r5 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x50) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) (rerun: 32) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000001280)={'filter\x00', 0x7, 0x4, 0x404, 0x0, 0x0, 0x218, 0x324, 0x324, 0x324, 0x4, &(0x7f0000000280), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0xff000330, 0xffffffff, 0x4, 0x0, {@mac, {[0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xfff2, 0x101, 0x79, 0x1, 0x7ff, 0x8, '\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8, 0x1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @broadcast, 0x8}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x4d) (async, rerun: 32) dup2(r6, r0) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80104132, &(0x7f0000000000)) 4m12.233720478s ago: executing program 0 (id=4765): r0 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000008400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008002c00ff070000"], 0x3c}}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa4000960) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, r4, 0x26, 0x0, @void}, 0x10) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000280)='./control\x00') read$ptp(r1, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x15, 0x101000) socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x41, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x72}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0x400001}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000004, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x0, 0x2000000000000003, 0x1], 0x80a0000}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480), &(0x7f0000000700)=0x8) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3c4, 0x10, 0x2, 0x3, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x8000009, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_SUBDINFO(r8, 0x80486402, 0x0) 4m10.433539163s ago: executing program 0 (id=4778): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0xff80}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x81}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m8.035984605s ago: executing program 0 (id=4790): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0xb4, 0x19, 0xfd3649826d894c67, 0x70bd28, 0x0, {{@in6=@mcast1, @in=@multicast1, 0xfffe, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff80}}}, 0xb4}}, 0x0) 4m7.953526168s ago: executing program 0 (id=4791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x20, r1, 0x813, 0x70bd23, 0x25dfdc01, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048011}, 0x20008000) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=virtio,debug=0x00000000000024a7,debug=0x000000000000000f,directio,mmap,cache=none,posixacl,access=user,']) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, &(0x7f0000004000)) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRES16=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r4, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000000)={r7, 0x3, 0x8}, 0x8) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0x4080520, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x10, 0xfffffffe}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) r9 = openat$fuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0xfffffda2) 4m7.072995097s ago: executing program 0 (id=4796): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0x2b, 0x801, 0xf35) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @broadcast}, 0x1, 0x3, 0x2, 0x3}}, 0x2e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x9, 0x56, 0x12, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x80, 0x8000, 0x8, 0x4}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@ipv4_getnexthop={0x54, 0x6a, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}, @NHA_MASTER={0x8}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, r3}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 4m6.683722864s ago: executing program 0 (id=4806): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0xa1, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000100001040000a4000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x24483) 4m6.683496924s ago: executing program 33 (id=4806): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0xa1, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000100001040000a4000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x24483) 3m0.045376838s ago: executing program 3 (id=5337): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x7, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe4}, 0x2, 0x6000000}, 0x0) 3m0.045075249s ago: executing program 3 (id=5338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd704001000800030200008c0c25080c7059c411a49a7947d52e8d96e119446d20a67d2659d770f268a6e2d523a3173d23b7f25a9a62fb09b3d20e68f3bcf4f44d14963328aff921017be461ff83a43a4de491a2e175967d2117429ea13dbc698288259044d13435116e242454e7a2540922a317e66e012126623fe68080231c322675434ad11567dc0dfddf09c5896c38c629df4c2068e54bf08890373ac882f0fe837495ab35f8df1219f8fb4276f614c949bf263d286beec471ca57394ecdfb520abb46da8220545f5a026f2609ae9afb9cbf3353ab012d429e", @ANYRES32=r2, @ANYBLOB="0500370001000000"], 0x24}}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f00000002c0), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') accept4$inet6(r3, 0x0, &(0x7f00000001c0), 0x100000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'caif0\x00', {}, 0x8}) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x1, 0x0}, 0x8) r6 = openat$btrfs_control(0xffffff9c, &(0x7f0000000480), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x6, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000240)='GPL\x00', 0xd, 0xdd, &(0x7f00000002c0)=""/221, 0x40f00, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x1f, r4, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, r5, r6, 0x2, &(0x7f0000000580)=[r7], &(0x7f00000005c0)=[{0x5, 0x3, 0x9, 0x8}, {0x3, 0x2, 0x9, 0x7}], 0x10, 0x5}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800a0001006c696d69740000002c0002800c0001400000000000000002080003400000000608000440000000000c00024000000002000000350900010073797a30000000000900020073797a32"], 0x94}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r9 = fsopen(&(0x7f0000000340)='adfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000844298ce2fbb70100000000", @ANYRES32=0x1, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000300"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0x1}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)='%pK \x00'}, 0x1c) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fcntl$setown(r10, 0x8, 0xffffffffffffffff) fcntl$lock(r10, 0x11, &(0x7f00000048c0)={0x2, 0x0, 0xd0e, 0xa2}) r11 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$qrtr(r11, &(0x7f00000001c0)={0x2a, 0xffffffff, 0x7fff}, 0xc) openat$sr(0xffffff9c, &(0x7f00000008c0), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{}, &(0x7f0000000900), &(0x7f0000000940)}, 0x1c) 2m59.981941537s ago: executing program 3 (id=5339): keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 2m59.891798627s ago: executing program 3 (id=5340): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xc}, 0x94) r1 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x84801}, 0x4c840) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1000009f, 0x0, [{0xf88e470f, 0xed}]}) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102397, &(0x7f0000000040)=0x18ffd) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0x4080520, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x2, 0xfffffffe}}, 0x50) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r8, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x2c, 0x19, 0x1, 0x8000000, 0x25dfdbfd, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_NH_ID={0x8, 0x1e, 0xfffffffa}, @RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x14}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x75, 0x7f, 0x2, 0x3ff, 0x9, 0x8000000000000000, 0x5, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8c], 0xeeee8000, 0x284a93}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) 2m59.371503011s ago: executing program 3 (id=5344): r0 = socket(0x10, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x46, 0x0, 0x0) memfd_create(&(0x7f0000000b00)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xfb\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x83\xd2!\x97\x00\x00\x00\x01\x00\x00 \x00\x00\x00\x00@D\xd6\r\xac\v#co\xd5\xb9\xc80\x00\x00\x00\x00s7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x96\xb8{|\xdb\xf0%\xf1\a_h\x85\xcdi\xee\xa1\xed\xd3>\xeb\xc6\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj3\xfd\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4h\xaeX\xc9s\xd18\xc2e\x97\x87\xe5T\xd5\xea\xdbn%N\xc3\x05\xe0+\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xebD\xae\x88#\x8d\xe4*\xde\xf6\x99d\xb6@\xef)\xf4f\xa4\xba\x169\xcf\xac\xcc\x80D\xea\xcf\xb1=\xaag\xea\xf7\xcb$\xa3\xb4\xe0\xeb[5c:\xe8Qfs-@{ydG\xbfe\xa8\xa6b-\xc2&\x00X\xbf\xeb\xa3\x16\xfd\xa4\r\xb6\\\xa2\xb6zx\x16H\xe9\xb1k\xfc\xcd/\x8c\x91V&:\n\x19U\x14\xa9\\\xc2\x9fnq\xb4\xcf\xdf\x1bz\\\r\x8f}s\xe3\xe3\t\xb2\x90$\xb4\x98\xd4\xca;\xbd\x1d\xb7\xb2\xbe\x88\xf0\xb4\xed\x0f\x8b\xab_\vQ\x195(C)}\xe3\xac\xa1\x9f\xc5H\x04\x98\xc4Nc/\xa6\f\x95\xd3\xde\x8c\xba\'\xc54\x1b&\xd4D\xddO\xfd\xc2\b\x13s\xc0\xc0\xe7D\x9f\xcb_[\xb6jlV\xbd\a\xc4Cr\xec9U\xa3\x95', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xe, &(0x7f0000000340)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x2, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2803, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) r3 = fsopen(&(0x7f0000000040)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/keycreate\x00') write$RDMA_USER_CM_CMD_GET_EVENT(r4, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x10001) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) socket(0x21, 0x1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) write(r0, &(0x7f0000000480)="1cf0ffff00003b0400000000000000000100251400009dcad32428f69f6e64ba1ca5bdfc685cd744d8be578f6b1495cc2e45879d7403961e97a9fbf1e3348d37746f643afb046d0f2ad791b98c78c70a7f1dfecffd19885a23ed77fbfde91ce9ba024bfc140e53b7269d7fbc4684dd9d34a043fa8650351b2dc0fd8d08486f44f319e8f7e306cc6c53d10395b2539e22248a73173574cc615a246c31ed332eae339d822955501843796f747f5dfe0d82bd00"/189, 0xbd) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001000000", @ANYRESOCT=r4, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRESDEC, @ANYBLOB="db48b2c550e6471cd097c7676cedd0c54c7fa9521ca28ffd0908b2859597cc456246cf4e5731073a362e1953cf9f1bad4ecefa951f81defb9e4d6d9dc0913a5a45b39706597211ff659882bcad3a8050eeac7a7638f1a8b50c7ec1a249f243f0917d5f1c360ebfc5249593a6b8355c1f8d0b9f3ef058877a6e3d667e65ab1e4431f2847e7db0fa45a16328a5c538bbcab044c389ce89ba7e8aa0f219f16900de7aafda857827d158aa3da878cffe5850c29ada139e64b9"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=r5], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m58.882168965s ago: executing program 3 (id=5352): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000240)=0x1, 0x4) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000006000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 2m58.870819014s ago: executing program 34 (id=5352): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000240)=0x1, 0x4) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000006000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 46.340894719s ago: executing program 4 (id=6293): syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @loopback}, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1f7, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x4, 0x6, 0x7ff}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 46.280949753s ago: executing program 4 (id=6294): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xc0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000004f0c000000000000fcffffff9500000000009fdf000000000000b8868f205b67b504774a9fe38764fe6ea651cfb49faa6aad18307dad8e2de7e74613d07676e348f2d3c9ba05c4c1c0817fb3adf827bc4eea0816083aec7fdb991ff6ac7a56491a6abb3b38d216a0c8a56c59dc72a77fe7"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, r6, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x40010) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r7 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r7, &(0x7f0000000340)=[{&(0x7f0000000100)=""/37, 0x25}], 0x1, &(0x7f0000001fc0)=[{&(0x7f0000000d00)=""/241, 0xf1}], 0x1, 0x0) 44.938952963s ago: executing program 4 (id=6305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x4000000, 0x4000850}, 0x24000000) 44.859561511s ago: executing program 4 (id=6306): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000200000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 44.858309428s ago: executing program 4 (id=6308): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000039c0)=""/204) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c00b0000000bf2000000000000016001000071b48013d030100000000000402000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4890) 44.23073549s ago: executing program 4 (id=6309): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0x70bc2c, 0x25dfdbff, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010101, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x0, 0x0, 0xfc}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0x1, 0x200, 0x0, 0x2, 0xfffffffffffffffc, 0x4, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x59}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x138}}, 0x40010) 44.230559617s ago: executing program 35 (id=6309): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0x70bc2c, 0x25dfdbff, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010101, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x0, 0x0, 0xfc}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0x1, 0x200, 0x0, 0x2, 0xfffffffffffffffc, 0x4, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x59}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x138}}, 0x40010) 31.569528984s ago: executing program 2 (id=6369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a31000000000500010007000000080009400000000588000880"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x2, 0xfd8b, 0x6, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x8, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x280, 0x1000, 0x0, 0x1, 0x3e, {0x0, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) socket$netlink(0x10, 0x3, 0x10) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) syz_open_dev$evdev(&(0x7f0000000180), 0x404, 0x40000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r6, 0x8008af73, &(0x7f00000004c0)={0x0, 0x8c, ""/140}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000240)={0x81, 0x1, "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"}) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f00000000c0)={0xfff, 0x8}) 30.630213179s ago: executing program 2 (id=6379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x13000000, 0x4000850}, 0x24000000) 30.570006344s ago: executing program 2 (id=6381): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x6f) r5 = add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) keyctl$KEYCTL_MOVE(0x1e, r5, r3, r3, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x438, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8ea1}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0x3, 0x1, 0xe, 0x11, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x111}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x62, 0x2, "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"}]}}]}, 0x4b6}}, 0x0) r10 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r10}, &(0x7f0000000380)=0x0) timer_settime(r11, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r12 = gettid() tkill(r12, 0x16) accept4$tipc(r1, 0x0, 0x0, 0x0) 29.576431871s ago: executing program 2 (id=6390): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000cc0)=@mangle={'mangle\x00', 0x10, 0x6, 0x628, 0x2e8, 0x478, 0x2e8, 0x0, 0x3b0, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'virt_wifi0\x00', 'veth0_to_bond\x00', {}, {}, 0x2c}, 0x0, 0xa4, 0xc8, 0x0, {0x7a00000000000000}}, @HL={0x24}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0xffffffff], [], 'pimreg\x00', 'veth1_macvtap\x00', {}, {}, 0x73, 0x25, 0x7}, 0x0, 0x1fc, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xeca9, 0x0, 0x44, 0x9, 0x4, 0xa, 0x5, 0x1ff}, {0x3}}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x3}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffffff, 0xff], [0xffffff00, 0xffffffff, 0xff, 0xff000000], 'sit0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x5, 0x22}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0xff000000, 0xff], 'dvmrp1\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x9, 0x4, 0x13}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@private1, @loopback, [0xff, 0x0, 0x0, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xff], 'bond_slave_0\x00', 'veth1_to_team\x00', {0xff}, {}, 0x2b, 0x3, 0x0, 0x20}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@mcast1, 0xc0, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x684) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x19) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.state\x00', 0x275a, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r5, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/59, 0x3b}, {&(0x7f00000033c0)=""/91, 0x5b}, {&(0x7f0000003440)=""/236, 0xec}], 0x5, &(0x7f0000003580)=""/158, 0x9e}, 0x7}], 0x1, 0x120, &(0x7f0000003680)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff2, 0x10}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) acct(0x0) ftruncate(r2, 0x101fff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r9, 0x7, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x1c002c, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) copy_file_range(r2, 0x0, r1, 0x0, 0xe003e45c, 0x700000000000000) 28.936100023s ago: executing program 2 (id=6393): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x9000000, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) 28.599560554s ago: executing program 2 (id=6396): syz_emit_ethernet(0x7e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffff0000ffffaaaaaaaaaa000800450000700500000000019078ac1e0001ac1414aa0300907800000000450800000000000000890000ac04ae01008602440c00037f00000100000000442c000100000000000000000000000000000000ac1414aa000000000000000000000004e00000020000000900"], 0x0) r0 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) (async) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x0) (async) r2 = memfd_create(&(0x7f0000000040)='+^+\x00', 0x6) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000001000000", @ANYRES32=r2, @ANYBLOB="0000000000f0ffff00000000f0ffffffff000000"]) 28.599268318s ago: executing program 36 (id=6396): syz_emit_ethernet(0x7e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffff0000ffffaaaaaaaaaa000800450000700500000000019078ac1e0001ac1414aa0300907800000000450800000000000000890000ac04ae01008602440c00037f00000100000000442c000100000000000000000000000000000000ac1414aa000000000000000000000004e00000020000000900"], 0x0) r0 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) (async) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x0) (async) r2 = memfd_create(&(0x7f0000000040)='+^+\x00', 0x6) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000001000000", @ANYRES32=r2, @ANYBLOB="0000000000f0ffff00000000f0ffffffff000000"]) 4.484892511s ago: executing program 5 (id=6567): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911a800000400005e000000ffffffff9500000c00000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xe1, &(0x7f0000000400)=""/225, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x2}, 0x10}, 0x94) (async, rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) socket$l2tp6(0xa, 0x2, 0x73) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = dup(0xffffffffffffffff) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x7, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0xa7b, 0x7ff, 0x10, 0x9, 0x800, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x3, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) getpeername$l2tp(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, &(0x7f0000000100)) (async) listen(0xffffffffffffffff, 0x5) (async, rerun: 64) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async, rerun: 64) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDSETLED(0xffffffffffffffff, 0x4b63, 0x4) r3 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (rerun: 64) clock_settime(0xfffffffb, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, r4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x3, 0x4, 0x0, 0x10000, 0x406, 0x0, "427f4d0561864078b7f952fc7ebbfea1deee063e520cc38c6a002000"}}) (async, rerun: 32) close(r3) (async, rerun: 32) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x900, 0x12) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="03"], 0x12) 4.400044387s ago: executing program 5 (id=6568): unshare(0x6a040000) r0 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r0, &(0x7f0000000180)='q', 0x1, 0x100004) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x300cc0dd, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x85, 0x6, @random="7eb919d50b94"}, 0x14) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r0, 0x0, 0xd39a) 3.6795654s ago: executing program 5 (id=6571): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x50bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x31a, 0x100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x308}, 0x20000800) 3.517922807s ago: executing program 5 (id=6573): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x14, &(0x7f00000004c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, &(0x7f0000019280)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x6b, 0xffffffffffffffff, {0x101}}, '\x00'}) syz_open_procfs(0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e000ffb0000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056000000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.484382305s ago: executing program 6 (id=6574): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x80000000, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7c, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x2, 0x5, 0x2, 0x0, 0x0, 0x35000001) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x21) sendto$inet6(r4, 0x0, 0x0, 0x4010, 0x0, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0xc8, 0x10, 0x509, 0x0, 0x0, "", [@typed={0xa4, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f2828290a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f33363"}, @typed={0x14, 0xf9, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0xc8}], 0x1}, 0x40040) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000200200"}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 2.480186708s ago: executing program 5 (id=6576): r0 = fsopen(&(0x7f0000000000)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='@]\x00', &(0x7f0000000080)='\x00', 0x0) (async) r1 = openat$ndctl0(0xffffff9c, &(0x7f00000000c0), 0x180, 0x0) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x8001, @none, 0xb, 0x2}, 0xe) (async) r2 = openat$random(0xffffff9c, &(0x7f0000000140), 0x4040, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000180)=0x1c3f) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f00000001c0)=0x2) (async) prctl$PR_SET_THP_DISABLE(0x29, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x1, 0xf12, 0x0, 0x1, 0x1, 0x2, '\x00', r3, r1, 0x1, 0x0, 0x1, 0x8}, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) read$msr(r1, &(0x7f00000002c0)=""/237, 0xed) (async) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x90013, r1, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000003c0)=0x4) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000400)={0xa, [0x7fff, 0x2, 0x1000, 0xff, 0x6, 0x6, 0x8000, 0xdca, 0x8, 0x1000]}, &(0x7f0000000440)=0x18) (async) getdents64(r1, &(0x7f0000000480)=""/15, 0xf) r5 = socket$netlink(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000640)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000740)=0xe4) sendmsg$netlink(r5, &(0x7f0000001800)={&(0x7f00000004c0)=@kern={0x10, 0x0, 0x0, 0x90001000}, 0xc, &(0x7f00000017c0)=[{&(0x7f0000000780)={0x1024, 0x37, 0x110, 0x70bd29, 0x25dfdbfd, "", [@generic="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", @typed={0x8, 0x136, 0x0, 0x0, @uid=r6}, @nested={0xc, 0x106, 0x0, 0x1, [@typed={0x8, 0x9c, 0x0, 0x0, @uid=r7}]}]}, 0x1024}], 0x1, 0x0, 0x0, 0x11}, 0x20008004) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000001840)={0x38be, "eb7a09"}, 0x6) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) (async) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000001880)=0x4) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000018c0)=""/80) (async) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000001940)={'lo\x00', {0x2, 0x4e22, @local}}) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000001980)={0x1, [0x8]}, &(0x7f00000019c0)=0x6) openat$dlm_control(0xffffff9c, &(0x7f0000001a00), 0x204d02, 0x0) (async) mount$fuse(0x0, &(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80), 0x20000, &(0x7f0000003b00)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {}, 0x2c, {[], [{@smackfsroot={'smackfsroot', 0x3d, 'x\\'}}, {@permit_directio}, {@dont_hash}]}}) 2.468865283s ago: executing program 5 (id=6577): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0xff, 0x1, 0xfd, 0x9}}, 0x1c}}, 0x20000001) socket$inet6(0xa, 0x3, 0xfffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x11, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x0, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) 1.390089373s ago: executing program 8 (id=6581): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0xfe90, 0x10, &(0x7f00000000c0)={0x1}, 0xfffffffffffffd27}, 0x48) 1.389898342s ago: executing program 6 (id=6582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000060a010400000000000000000a0000020900020073797a31000000000900020073797a320000000034000000080a010200000000000000000a0000060900010073797a31000000010900020073797a3000000000080009"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 1.388163536s ago: executing program 8 (id=6583): socketpair(0x1f, 0x2, 0x0, &(0x7f0000000000)) socketpair(0x1f, 0x2, 0x0, &(0x7f0000000000)) (async) 1.319829142s ago: executing program 6 (id=6584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xb000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, &(0x7f0000000140)=0x61) (async) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) (async) ioctl$BSG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000440)=0x7) close(0xffffffffffffffff) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x480, 0x0) (async) r6 = getpid() (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f000000ac80)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002940)=[{&(0x7f0000000480)="513b101c4a4d10bb7b8a6804a560cfb2fa2c62da1368aac77a36d94333fee36f9940180c03550e81ccd3d695df5ec0394b55131e5e7450fefb692f2bd01fa0085cf1159fa7e715ebc73c0339a8ee95c7aa8f56f28fc5c24e3052f565ffee48ab730790a4b10bacb4db42936494c76aef982f85c6258494516517d6be9caa2b0637a4388cfa15e0cfac9c1216ee1b22ccf0c28209f7335936ba012beae5d6b28a9955342e9023bd65928e4718bd0cfce79f24a3883fc192a28cd39ec9c68ce498fb0faff1f56b1da0a6c22a1f159fe43283ab9d4ca45d6e88898a855e4f1c032cde70db3a20ecf42bd4cf74781fab96efa4260382", 0xf4}, {&(0x7f0000000580)="3992f734ba2c4a01a22b2e77420ea390ae7ebe829cc39df1333d843cd42305a1c83eef90a06d8b8198ead5fa539ca293edcc62b0b9e9d4350e21129186309230f4a8938dcfbc776bb12f3ad92fd24de6ad859caebf7dc19d1f15bfa8a9e9f27d35ccc73019789405a6214e154c504153e9be545604f4dfbadc83e2cefb6baae7d3ad3d6919e61ec525d1f5b765c65f841a2bd7ea8274d83e21898afb0fff17e2a75c1ba894c14fee951c3202cb9cdd85010a84fcbb6ae9cd4ad6e53c6dce", 0xbe}, {&(0x7f0000000640)="d759dbedfb70bd566e72a97f3b1e70bb17dce1f32afe27264a238bc2d077434d56431c21d12d5fdb8d830157942a5426ccdcfbc2724f57b8dda1c7e34a68efa8240264ede43e7d8835e23302c8cb5b2188a2bbae4b5b7a856bde8376a09eeb21958ee43e5059a29c5ab71401e3368002d3bbf81ea19794d938247318376f54bc14206dfa5f76c2447f3315b2e0340181420ed88b181219a76f3e255d9eb16e9bbed5af1ae94ab6ef5a25dcf3f6f9aef8bf35cb", 0xb3}, {&(0x7f0000000700)="47ffd2842928b5fa08ce2097988902d74e531d9befd250792cb3a783d34978a758117be51316da175d7f845a03bba214e19b129f29a3f71503a9e46054508257179824732591905e2cb553ffeafbaab39540516789ee797b5155f66abe70b5665f5685f339ce04d070d6d3ed9a7d9d55045eca82af85d8b146efe9695a0a3df3fa4f9e108cf98aee600f28f7c6e09925daf00e11d0570708cd81366b1a21fae0261cadd86b72c35a6de8f5276c823b30f476941bcf79e1be3e91e4c0adf9dd348c2647f804b85f51be098c5819473ba5c3734a135e93042c9a288b88998da5f665666b83b6ed6f9e6e937977c805d51ab444d5e68134012f60ed5a417172b8da7df37497fa00f998c2ece850d63961fce131d5cdd7c5ca48e8d531d051815e38e67065ae222064816ed54735528fc0e458874c5414e563c1c5e31c321a817c3f33f65abb481395744bd071157acde488fd39e739c075d2e448ea0aa904dedb649019232062f598604ffe935f84a48f7b8c304b3d59ff2e88eb9badbe6f0f55db778de9c691af9dbb59a30a91fd1c5a2b881782a0db29d60fef6b9324b331ca666fb0d64a7f9ff481bca5db11591691b836958f5758a691341685c4d61a968062563f9920dda0f0250b95d500e17e273d1019a9495099e2b3788ae5881b8c97925da01511f7a9fbf4d4bf2af0767dcc237e9a499e857fb8cac0f63534251461509f2022595c22d3ed51f57b3e7fc2cb5b77d8ab8898dd36799b96a8e06f77d1f6d51a5548e50f341f05fcf59ecbb0f7207d66a37b6102546503b0e31fc06ba1d98bc7c672b2b397d25c84b9cb4d03cb332e8e1c36af3f0d436d0a053cebf4152b87d0bd10627570dbb36982a23306b629b8adb513f2b36ec513f68166a8fc4be78d07165f5334178c086ff6b079112337768a2c136989c5a1653e035fe2807372c4ac8aa7326b8803c5426a7e205de560a7c1176038f81a45d7b21099820f7cf10ebc89c8265c76010ae9725f54b7ec84c021c149a5b5523715f4ff2f0b1f71218dae293542da8743c3a082ac68b5b271836bb2e569ffb1c9750b2b4511705df23f2c73b41049da26b3b61da1b6604455c6333bf2d23ee0127f35b529375df75781bed1af41f72ff48227efc228aa1c9569202eb4dce93bcf4790858e2b71a65d87e8e95a68d0a1c2f97c27ab249685561e61ae48a7b4e2f7c0b6c52b3d05dd4826a2251736a8d8cf30565bdb754cf1f75d5d9d94d62dbd58b0e439d423913f9c9a1d5cd7335734dc9a5a2cd4f569e1a46fda5c2a45b7f5dc6f24a21031f651572dd1467526fffe1071d6537d2cc70871abace64a1c0450d0edcfec6e5dfbc27579cbe27a55d15969436a12943d118b08225af9e2c854e5619db7a8e26eaa936312aae753f94370acda2086fc4c664afa380f4f055f18ea76ae57c535dd331c22225ab632845e816d6f501d855ba3289487cf83cc5aa27df1ab778c383836c29b9560531892c364eba7543697a75f9a07712a07214924aba77f68af0a4fbf3d7a367f31265dd8dd108e7280fb0cf79425f8d0866fd9209a61b92fb14dc085e6247740bb0a6a7aa133ed3bf444ed09605520d12abef56d227366d836ca534742c711b2a583a40b4cc255a68205851bb2bc023d99bdda87bd388d7d7aed4097436d6b364d0ededc8a516028efef13fc297fe54a08f5b433426b1b76123e7242f3904169bc49bf8de0033970711f7513257a222eded52dc4966d60c5d1bb9189f9191038b94d17dfe0edd1936821f392e109ed3fbd51ddbee4d6ebde7f687dbfd90fa6c3b78170e71cafb919d5e593c293c3e33abaef2b9fa459207fea9f95d89437511097a928d1a388da1dd7e1ef24bb83bc56a9f9cee5fa79e0a68442b6198128b69b604afbd0676e48011418bf0131c1e5e8659b250ea2531bb9b8926c69ead4516b8497b8b4464d17d7d067ad04dbad58b2338d494b8c2069a2642ca1e461e113f1816cb52461a49a559b5f7570dcace73f66826de0da9453da34ae762c7939a4ec98018d7b4ab6b4b5299e83c5ee61ce1a7ff4c3c0d44a0826532df5f14450210b613f9e8c0372c17652888b633950eddffe93767de691e7734495b1b4afbf987f06112c62a031c78d9ac625722d69f36c63ff050cbc501273a4991845e90edb34b4e350dbcf56ac3f5cac30853084bb8d0dd486c1b8097ea58733e055380d8ec6b410c08408e8c3321427b020e0b7924bf35ffd0e32414083ff468b8288cd2da4aaa33d3f91d59967a3d0a80113b93706a0bf63e54716c50d37f24cdc23531c9b1be9faa67c11a4383f143595fe72a3d537df3936a5f2c5a40f099e70a0700daccbc651ad3634759f390c8c3cecd30c1b12ca9061cce10d4a5fea1eb3ea122b1865c45a4bf06907d4d640a60a5171092b5b722228dc03e66602e9246aea65a28a25e96e64f4c186fd6b4137564665224cc956acc0ff694bf840a6cfcd2a4b039362a29ec3403b376a79cab06371b2fd313ce199ea9a2eae427ada5d69df99a0407b41db905e1d790162b89641c4ce59e32968179347eaccbf7dcfee231572ee78d7cd6166c4f27af0c5fd4606d05a3c6c9be2d457f169ad95eea6b0a939f1ef4b990a3edefc04d4a8a4f3d96c8c760cebf5876121157db418d020908110ba7dee8711a77f95012f9bf3cbb5e09f068ed68a46899eff9c918ed8d4eccacc50833a7e60b0ddbf800f9d85ff2e59f35cc7b7a59aab4b2617dbf9e1f0260d64a36e6c650e9bf8d014e221631feb4f74cffb90b48bd3fc9e0c23bf6642aa91dea3dd8ec314266976f4dab6cdb0eeff184317d6176e34fb845d63eb2a0d2698385a56a4b97f7b0e659abee658b516ab79118a6a15d082785794166b19eff6299c159e9533ca5ce3a14fe3d7e0fea04ccbaeb31f353e01b0db6643cd2f58a9db92e6dabb23c8f41a0609601f47093228730251ec0b4d4b47f7ab66bf8576b1f6c568d9427ec8457588b9f6485b1318de132d5d524b9f17fb2f0e777842bc38c27b68aac0ce46633077c2bc10c500a6c106cb488bc30ed25f8913a7b7ced421eded2ecd43e74bcb9186c3cfa5b688f4cd815e9b76997c6fe31eff030fe41081b6262100715ae2da3d21c07e7eca8af13ac79ca90f2cc9f3e30e95221a14affb0ea3906b167aae314f0e434462d39cd8a9038178156dfd4bcc5b3b98eac06c208e6f25efe39c691c6b2ff9fd9df7b649136c4476696f49e047ef72e41ed1766800bea42af02e701b72e15f68ecacc0f9489ba641f90856f239e687b5e6c004688bb16d38d808a4a3f6716164ae0e66aef040b433a312cf88f4835102a0c517d65d737696b48ea9118b832f16df8936d923a8c299162317b3e0a337fb7022b97cf877b36ed994272f7518a810d930d8fefd91d44bd429e5d9aa1b44813adfb423bb34f4431f582475965203046cb414daf147299b6926bba3bcfb3458be4b67322ebe71aa3581d85b6be7f3a8a803bd7c0e2c330cf6f9bc04efbad5d84e9f5b0b01f5448b3021d34888e43e3115e5c98f9b153267f55d034d31ec9fd21c36c066a4f987bcf7761ddb0a4c6bd91de9eec514ea36dd947d47b543820bf3de8e1ec3aeb6dab0dc770a42b05cd294483ebcc6ddd0b935df7b016dba7e041ece2f5751d8ec7834050e2ebf682dc13e8396af0481cec94350473d9f2754d44c8ebb35ffe64b9759ec228ddeee8e42385a56dbc3506ffee0ab841122681f999b2fce806076394758cde080fa5430870edc6ec20548a72ad2a31896d70bdb5b754031dab391e36b8f6e9c1e00dfb37b64c84312dc96be86e14f6da36c6d42b8c38ae2660b9f59216c19316b312c76f17cb4d16445455c1cc4f6d498d38a7a5e6cea653c80f776d6f4db3c5ced7cb177e69e4e451d12cd3dcf4e3ff333d19c8bf5ffe906b67dc9e2754f412895d4f5bb4488a52a8de80395fe5673e500f90a507abd2e6ba4ec36eba837775785d6030189be697f588a4a5feadda56bed50467feda8f739cb696e3bcfaf8ead507bfdc366f26a0701555a658da20259fb1ba4c6acfeefb73d73a7bdace0b964a9cf215172444405486b2ac101c83603d5cd6073600ad0bfdc81f49aef0e1c9f8404c7878647efc8c8fb1d7a416023d2bae1dce56ecfe1d74db7b5e003db48bb8c486c3f0a84a6e0cbf346170fa23e25128431b51c29e01970500d543a6ff87e2fef9c59984cc0bc89b462f2379030e44bd46371629f6d4e5dbcf8caf5581d040dec328b389dc2643911ccc2ab1dc1160608c032b1c55272015107115c2873b48a86d5a1f7a914c4f8fea6644b9b0be4e590094d7a90f0d8594b5aaeca7f2fcf51e8edb2f87e7bab79d11f42e1a1f37c4740abdc50291a75814dced6900bb0eef4d28e7794d27287d5e09cd6302db3dcdf3d1ad0e09db3d1acfbdc165c03bfdd6447867de495edb5cb28aa84522a276ea72cda1530006207b3ff46db9e79d278b332a0f5bb9ec6979dac3b2a796b10895a0309e656b69f41a1b573527f4f8fe23be8a21a69057ee5591b80f9304b19e7e2e01db9cdc6b9a6c6168b9f04312f1c13a1c66a0f7305a469df4fee00bf811be74f89378867cc2033c2fbbbbf17102b397b5c724dd061739604e7cb6e0deef40fe947a8cb6a7875f51d7d5c31473cc2f5ba8324fbf4d82e09bfd7e860caccdf21cd3e982bda101f645120137e7d073c105b8286024bf5351db5681ea49f180359cb46599c5dbafba2f0a8141e1efee0f8f9b7917a9f6f37874e8b9e24cfffe4bf915d84777ed929049ec31125725548b0d4f95f5986c740bab090da6dd0e9c0d76e97013b120191a2011352bcca81ad45ab2d64d49980bb91fe5e31b843e4c0c9fab18d9eb3d892010be70ada0818610557c770d9c0bda097fb1a01f482a88afedfae4e1959bcbc5800d92dd9eaafc2b7043290fd12cb0212f1d88c673a3405ea74142774e032e1255e793efd1c5f051faed70f7f782f951c503d3c1be3eacb0c1561cb412ea8af2a4ce5eaa6b6c87b3d7b29522c724a43693b348cfe6f6d4e46276fa04edc0e487f161412585948fccebd26d7e5ec979ad4c64458a3ae62531173cde425709a52f116805e77c2a326ef8c577ff75ec1f30c6fb25332e03405e9b82c6857cc1170898e60e8c697838a6a9533552e8b42d228ab030fad30563ad9ba2273f0495e218c145e5b5a9c9f3aa8c420907fb6bd7b63c244f5f4b046c9edf1877d8eee0e010960d4ef3c6931d99257724560103aad739de218378de4f89e2028a70d8c926a9b73127604b45f0dd2845d92e4060e88e402842c57015956ee921a629160197f0158cc76053ab3e8378b69cfc53b77cf8d6089f3a90da6b90828952dc51ebad04a8fa2bd8cabc625b3af30cbd0c01401cbab461535bf9eab5c5a35f718e618105af5da39bd2e8c80f00d917f1353807828ce0414d2d9742f4b58f4af3eb20cca5ccf810470b4da9bce6ee61bb587e33157d9e1ef6c66b6b210373422e96fd4b61189cce39b6ea22abf6ddd285d2ffb1a306177c0b29277a457a92d5e2f3eaba62348be818db46d66965b4024bfe57e7cd7f43303fa739ff906ef1ebded39b1606b0bd66314f2903ec2a483011cfd26965094fef9bf3c4df16bf0dce9c43a3a3f4c37ae088a8dd694cc977f812ed5cd4d1a2c4e7f47ed74377b6a8699a5e598b08af85540f6d9ae9e011cf7eefc111bab7d608a85b9eafb7ce2e81808829ecd78db756b63fbc26eab11cf996fee83bf51cc6590973f3536c40561fd49248d7d6c02a5d820", 0x1000}, {&(0x7f0000001700)="56b08eea3309e4e82a0132814273f23377f5043405604535a6d7a20d013131df94de226773286d47291b9a0c9de75a7fe6b13039284a5e370e7e3cc388a634e2f32e3989619434b23ef24616ca5308bde8512f0d2c046b787b304474cf1afa8e46627e80124ac7d87f6d68a06230ef077eda63406694593870935853abc59e998e86", 0x82}, {&(0x7f00000017c0)="1baf2dbed01e5e084348f77af7ee0ddace2e6db025", 0x15}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)="c43d122f421aaeea90b8dc88", 0xc}, {&(0x7f0000002840)="20d966eaecfc7fabb039d1a36a2fce85a5275cec51879c2910e34c9381cb4177164579602cb4d34281193aa5325a179690e2d0e30836a56d62ffb5c3fbfcf7c9e52e047235a3d27c733702385b107af8e4497969fd26a34508cc4c4dd0e36892d995b933b8669938614409b4ee37efdb448f5741488289c4712abb53573f15826b8285071055c6f7427d765226389d1031797863ef2c1a91393a398dd60ef74f1cd7a93098d6c90339d1e18c89c59e1133b3f5c87c4c985919ce0cbae20a7dc84d62893720e53622e9df3bd6ae", 0xcd}], 0x9, 0x0, 0x0, 0x4005}}, {{&(0x7f00000029c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000002a40)="3543a8304c5cc4e4f4b3ff5893d4cb35720b0045090c096bee91963c37c2ae00ab8f96f42bfbbdcd8bf8ab952139adfb57aba800f7a017b10c4c5e43d492b6470d88ce8aa28da1d65457b443098b85b285ea412921045754d3a7ceb734285826b8cb924f4d483e93d73afa7ce83851d4919bce5013edac0027050986b16f5d085f6c2dafbe6c12f9c0a9f9be63a505fde16ac3e366f1a298c4e28d88fdaa29fa6e7f09b4ddd53a5e183fd1cf2c6840dbde3b0397256e4d3d60c8b6dedd460ef4e95551890b5953", 0xc7}, {&(0x7f0000002b40)="e17ecd484600358e52c586a88943c1ba9abd7a8a658deef21b6d3760078d5db32921b8ca83ee962f", 0x28}, {&(0x7f0000002b80)="bd2999188a09ab52bbf8f6d098d3446458fe38cdb51c54c6eacc233ca6e8d606f3e5d6ad1d04a2941a77c76e07cd671314673035ed78ee6d64aee031a62d51da60fe8973b55e8aa4dd7636a7e9eabae272015d60fad84ac2bd9e2bb6c559818e661543e292cc6186f1f4132279f6056633339a6e82915f7011b115ef86ec6bb638353b1383eb334d8ca280a31741f6acff3e339c", 0x94}, {&(0x7f0000002c40)="d245f0284ad68372281f99c7cc022a12f909d7601478faa5b34afad83d32448c3dc1a525f1376538b94f0bde3195b309d265c35156d6204c108f6c74e1a5d0822b2a17f25c7b2ee6423f11baaa4f89258882367def10d3e11cc7f00bcc852bc479cee2a5a2705d9df23e715c5355f5a7980af0bb8ba6619954f7ad55b3aac343e4df9106ed20b5abee95f1d501d0efee36527392c24dd99bcbcf70326e0736d2ae4ffd8144375530f14b354d6758d6582943126fad6efdd851eb7bc7c60d8eec950c7b8d82955ceb3030a3d453323f54010285d36e5ef6a6dd534a0af6e1eb5f355226671f23bf00116f9f222c", 0xed}, {&(0x7f0000002d40)="211e115ca5867b17677305c034be180c6dfb87fa2c4c173896c4b14b7ffb93ea80898dfdb118602600caf5ed1e8045339d7fbc5d4a55a11caa0b9fce800cea79b596e75ef08487b280f8e3e2182b119b41233955ec25263339bc8f9379eb2b82f18833765f892bec535539d263a30eedcb8e8018e7b3f33ad3bf60b4ee5a0e296fa2c95024ac253a732d9d8a9c2525220fd9e6cef68f3e8707a2340d1d6a89a18af3d37b5b3ea9c10541a608fde34ebd367d53a82114136044551231ec08c5b15d14dceb7460a48c91", 0xc9}, {&(0x7f0000002e40)="00917a8e22ac31a99fcd4a91967a849451cfb9e1a88d024c2656dac1442e69708a7087053ece26c27a5735fc99c329f727fb847f7aad1a956fed8bd21579a0d50fa4f32b2ecfff4302d3d7557866fd79759249bce9e4322ee31606faaa97211145574656a81eb443c30b99ef8c150ed780ebe2cc249292ded6415b0750dda60d50126b5a8a66acd7e4dcf03deab634f76603", 0x92}, {&(0x7f0000002f00)="e4a4dd6c2e1bd33278f02ce490d9fec7e1b17d4de2fc540cec1c06d48eb507f7a3ee9590e259a7", 0x27}, {&(0x7f0000002f40)="9de632e74ceb14c8bb8889e5df8a7e0bce1f4f2ef787d32a3da517dc4e16741616b3edecb4cba1e530f78a25ec0117fb50578709d73f6dfa42b8f4f630283460dfb718cd3e7f3fb97f5bd1fd97cb02552ce7f63813991267bd5001669e8843cf383e14129ec13a94f06ddb02c85735036b40795ebd58b260e81054f301cb09f598ff5dce32ce772f5eccc41d7c1e4ac7082de5fc1d6f413f", 0x98}, {&(0x7f0000003000)}], 0x9, &(0x7f0000005240)=[@cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {r6, 0xee00}}}], 0x30, 0x40}}, {{&(0x7f000000a3c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f000000a5c0)=[{&(0x7f000000a440)="8de87431ee067e9ff0d7b3ee536e88af3872141732b12cc7af11d114629e6b891c4302cfb044dee835979050cf54f92110851aef7d76ca6cec34796a06b22560e5cc54a75456ca3edecfaa859a72a6e524aa809a66cbff0c38601fae4dc49a59c430ca96e9d751a1cd2bae05a7c89d71bd7c6394d745b524b9fe4ba4e1", 0x7d}, {&(0x7f000000a4c0)="0aa37b40ec390785c029d195cb56da9314325bd4a02411d3ad41065e29486401157afe1f59c4e606022ed377c8d319c61db7814d4ceaee80ba3bd518717044fc87044d23387c726eaf5256174fc6705d52a993f3f040a7a0b544eb007bb1f9af923f9b335065f3277ad0d0ac86da8880058dae92517e89ae776d92b4ba904dfb78448e5440480a409e8702d58eb2697579e03ec3307a9947f2e2fea0da51adbf3ff620c35b9f063b483f4935be5c1baaf69c4133f06a6f465089a8fa5f5c1ab28b22304afeb90281a753e05d5594db4c20f37a815002662fbe5d9367e5", 0xdd}], 0x2, &(0x7f000000a700)=[@rights={{0x14, 0x1, 0x1, [r7, r5]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r3, r5]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r8, r0, r5, r3, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r5]}}], 0xc0, 0x880}}, {{&(0x7f000000a7c0)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f000000ab80)=[{&(0x7f000000a840)="769ab825fc2d0cb74c41c73d656bfae6722af4557321d3da59da4a25c0e654c23e99", 0x22}, {&(0x7f000000a880)="f54e62b92b226a", 0x7}, {&(0x7f000000a8c0)="93d8f0c54aa7b7ecd43eba972f47a1ffc1a0f79d68a314cd", 0x18}, {&(0x7f000000a900)="f9768e924c9d8ed2d3a7a0a53ec26200a73a13a0d6ab83a41fc72034e993a033be92bf330f4453e7a257f7d0d2c25cbbf8901e63c703902b99af450fe8d42705a3cab29f4ca2efabaab9ef1faa13118ba639f1d1e3a3156f12923778487efcd38a88871e054c89ae3a10cb8383341b26f80de984b6e9a3c5265ee2410cf646b1dfa56b47", 0x84}, {&(0x7f000000a9c0)="807c03fdcdd95f26b549e9d645e7a923086c1f702a3868a4e85ab064ee0d51813c9f1de140eb31ef4c356f43e25a37c2764d5a724d596379d5cdd3676fb8d55fc734de7a3f8abca805a7f346d8bc3288c4efe4b11ca3ca2594aa829010a0399f6d2bd716fc2d202f2d5647c56b06cddaa0ead2fbff7662eb45decc7eb9b38ee78d15c274b558dd146dad2c4b0ea6500b07dfa8f6a34ab49b13a73c3f8df8eef15802dce0caf66ce1193a456625b1d5633bb63a43ecb5d34fe9b81ea1f4b1e04035194020d6f275ffda45c0958642", 0xce}, {&(0x7f000000aac0)="e6bedddb997c1aafd230411987c6dc4c75b51731e8103159969991bd6524be9e34cbfd527f45f3699659293f6f9d2554c9333a46b257bdb1fff5db76be1feec817e0ee17522d688fa506ef55f03ba951c08737cb56533401773a26fbf0558f6c95f1429151eeb1675c15caf4503ae084eba343cbb5b24ea00cca9d4f7c4409b31a8c213c71352465279d1f9f263fa9abf9e91be4415e27d6b889db811891dcc98093e7ccdf3ad8", 0xa7}], 0x6, &(0x7f000000abc0)=[@cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [r7, 0xffffffffffffffff, r3, r3, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x8c, 0x20000000}}], 0x4, 0x8840) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sched_setattr(r6, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0xffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) gettid() (async) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) (async) recvmmsg(r9, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0x1, 0x4000, 0x7, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x0, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1ff, 0x2, 0x0, 0x10000008, 0x927, 0xeb96, 0x8401, 0x40f, 0xe69, 0x4, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) (async) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r10, r10, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 1.319687576s ago: executing program 8 (id=6585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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"], 0x22c}}, 0x0) 1.319179719s ago: executing program 8 (id=6586): chdir(0x0) 1.318828145s ago: executing program 8 (id=6587): setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000200)={0x0, 0x1460, 0x1, 0xfffff001, 0xb6}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e1e, 0x60, 0x2, 0x2ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x4, 0x2009, 0x101, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x8, 0x3, 0x102c4, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e84, 0x400, 0x2, 0x21b, 0x0, r2}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x100081, 0x0, {0x6}, 0x0, r6, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r8 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r8, 0x0, 0x0) sendmmsg(r8, 0x0, 0x0, 0xb00) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) 1.12845789s ago: executing program 6 (id=6588): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x400c000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000005}, 0x24040884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 867.337599ms ago: executing program 7 (id=6591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000f5ff00010000010900010073797a30000000000900020073797a30000000001c0003800800014000000000080002400000000000000140000000004c0200001a0a0101000b00000000000001000000090001"], 0x2dc}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) 797.848036ms ago: executing program 7 (id=6592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01ffe9000000f5000000010000010c00010073797a30000000000900020073797a300000000014000380080001400000000008000240000000062c000000180a0101000b000000000000010000000900010073797a30000000000c0005"], 0xb4}}, 0x0) 680.294967ms ago: executing program 7 (id=6593): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$char_usb(r0, &(0x7f0000000000)='-', 0x1) r1 = msgget$private(0x0, 0x480) msgrcv(r1, 0x0, 0x0, 0xfffffffffffffff9, 0x1000) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000340)={'\x00\f\x00', 0x0, 0x5, 0x1, 0x200000, 0x9, "00000000020000f50800", '\x00', '\x00', '\x00', ["fdffffff84a438dfc4d5c010", "d78cb8b0211a83be12ff0bff"]}) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000440)={0x5, @sliced={0x100, [0x3, 0x4, 0x5, 0x1003, 0xfff1, 0x3, 0x0, 0xe8ac, 0x8, 0x5, 0x0, 0x1e, 0xa82f, 0xffff, 0x6, 0x8, 0x8, 0x3, 0x9, 0x3, 0xfffd, 0x4, 0x1, 0x3, 0x83d9, 0x8, 0x87e, 0xf, 0x4, 0x200, 0x2, 0x6, 0x1b67, 0x4, 0x3ff, 0xc15e, 0x3, 0x0, 0x9, 0xaa, 0xfffc, 0x6, 0x7, 0x3, 0xfffb, 0xfff, 0x8, 0x15c6], 0x3}}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000140)={"cc22cf93", 0xd2, 0xf7, 0x4, 0x2, 0x9, "6dfc24f9545c95885fb7b16c3b03e5", "8ec47751", "a3936be9", "3913d0d6", ["23e6c032ad6d290a1944a37a", "25d498636bbf481a70ee1b67", "f88eef954322a921ee8f2011", "194b6ad0f4288bc9e8d6d91b"]}) msgsnd(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="03"], 0xbb, 0x0) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000300)=""/182) gettid() semget$private(0x0, 0x4, 0x102) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x401, 0x40) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) getsockname$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @remote}, &(0x7f00000003c0)=0x10) r7 = socket(0x2, 0x3, 0x100000001) setsockopt(r7, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa018153f2cc003000650000000190780a0100ffac1414aa030090780300183f45000000ff1d0100006c0000ac1414aa0a010100"], 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000240)='\x00', 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r6, {0xe, 0x1}}}, 0x24}}, 0x4) 481.696035ms ago: executing program 8 (id=6594): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000c0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d66736361"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) sendfile(r4, r4, 0x0, 0x23) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000380)={0x1, 0x2, @start={0x5, 0x1}}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 92.320028ms ago: executing program 6 (id=6595): chdir(0x0) 88.805975ms ago: executing program 6 (id=6596): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0xff, 0x1, 0xfd, 0x9}}, 0x1c}}, 0x20000001) r1 = socket$inet6(0xa, 0x3, 0xfffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x11, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x0, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000180)=0x28a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) 373.656µs ago: executing program 7 (id=6597): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0xb4, 0x19, 0xfd3649826d894c67, 0x70bd28, 0x0, {{@in6=@mcast1, @in=@multicast1, 0xfffe, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}}}, 0xb4}}, 0x0) 114.987µs ago: executing program 7 (id=6598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780062004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 0s ago: executing program 7 (id=6599): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x842cc0, 0x0) flock(r1, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r2, 0x1) flock(r2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x13, r2, 0xd8c17000) kernel console output (not intermixed with test programs): 6ffefec code=0x7ffc0000 [ 810.140130][ T41] audit: type=1326 audit(1781582793.735:27113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26396 comm="syz.6.6015" exe="/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 810.151270][ T41] audit: type=1326 audit(1781582793.735:27114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26396 comm="syz.6.6015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 810.160080][ T41] audit: type=1326 audit(1781582793.735:27115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26396 comm="syz.6.6015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 810.168296][ T41] audit: type=1326 audit(1781582793.735:27116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26396 comm="syz.6.6015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 810.175280][ T41] audit: type=1326 audit(1781582793.735:27117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26396 comm="syz.6.6015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 810.182096][ T41] audit: type=1326 audit(1781582793.735:27118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26396 comm="syz.6.6015" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 810.574101][ T50] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 810.714200][ T50] usb 11-1: device descriptor read/64, error -71 [ 810.821042][T26402] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 810.823119][T26402] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 810.825703][T26402] vhci_hcd vhci_hcd.0: Device attached [ 810.964238][ T50] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 811.001986][T26412] FAULT_INJECTION: forcing a failure. [ 811.001986][T26412] name failslab, interval 1, probability 0, space 0, times 0 [ 811.006876][T26412] CPU: 2 UID: 0 PID: 26412 Comm: syz.5.6021 Tainted: G L syzkaller #0 PREEMPT(full) [ 811.006893][T26412] Tainted: [L]=SOFTLOCKUP [ 811.006898][T26412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 811.006904][T26412] Call Trace: [ 811.006908][T26412] [ 811.006912][T26412] dump_stack_lvl+0x100/0x190 [ 811.006931][T26412] should_fail_ex.cold+0x5/0xa [ 811.006943][T26412] ? __kmalloc_node_track_caller_noprof+0xbd/0x850 [ 811.006961][T26412] should_failslab+0xc2/0x120 [ 811.006970][T26412] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 811.006986][T26412] ? key_alloc+0x423/0x1310 [ 811.006998][T26412] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 811.007013][T26412] kmemdup_noprof+0x29/0x60 [ 811.007029][T26412] key_alloc+0x423/0x1310 [ 811.007042][T26412] ? __pfx_key_alloc+0x10/0x10 [ 811.007056][T26412] keyring_alloc+0x44/0xc0 [ 811.007069][T26412] lookup_user_key+0xcfe/0x1300 [ 811.007080][T26412] ? __pfx_lookup_user_key+0x10/0x10 [ 811.007093][T26412] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 811.007106][T26412] __do_sys_add_key+0x2a6/0x460 [ 811.007121][T26412] ? __pfx___do_sys_add_key+0x10/0x10 [ 811.007136][T26412] ? fput+0x79/0x100 [ 811.007147][T26412] ? __pfx_ksys_write+0x10/0x10 [ 811.007157][T26412] ? rcu_is_watching+0x12/0xc0 [ 811.007167][T26412] __do_fast_syscall_32+0xe7/0x970 [ 811.007179][T26412] do_fast_syscall_32+0x32/0x70 [ 811.007189][T26412] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 811.007203][T26412] RIP: 0023:0xf700efec [ 811.007215][T26412] Code: Unable to access opcode bytes at 0xf700efc2. [ 811.007222][T26412] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 811.007238][T26412] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000080000180 [ 811.007249][T26412] RDX: 0000000080000100 RSI: 00000000000000ca RDI: 00000000fffffffe [ 811.007257][T26412] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 811.007263][T26412] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 811.007270][T26412] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 811.007279][T26412] [ 811.136056][ T2326] usb 46-1: SetAddress Request (10) to port 0 [ 811.138101][ T2326] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd [ 811.141228][ T50] usb 11-1: device descriptor read/64, error -71 [ 811.195038][T22317] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 811.244413][ T50] usb usb11-port1: attempt power cycle [ 811.354610][T22317] usb 7-1: Using ep0 maxpacket: 8 [ 811.358276][T22317] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 811.361877][T22317] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 811.365939][T22317] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 811.369817][T22317] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 811.373755][T22317] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 811.378933][T22317] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 811.382469][T22317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.576019][T26403] vhci_hcd: connection reset by peer [ 811.578518][ T5829] vhci_hcd vhci_hcd.4: stop threads [ 811.580223][ T5829] vhci_hcd vhci_hcd.4: release socket [ 811.581946][ T5829] vhci_hcd vhci_hcd.4: disconnect device [ 811.590891][T22317] usb 7-1: GET_CAPABILITIES returned 0 [ 811.592631][T22317] usbtmc 7-1:16.0: can't read capabilities [ 811.604340][ T50] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 811.634591][ T50] usb 11-1: device descriptor read/8, error -71 [ 811.792227][T22317] usb 7-1: USB disconnect, device number 42 [ 811.884983][ T50] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 811.915593][ T50] usb 11-1: device descriptor read/8, error -71 [ 812.024527][ T50] usb usb11-port1: unable to enumerate USB device [ 812.095201][T26426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6026'. [ 812.107641][T26429] netlink: 656 bytes leftover after parsing attributes in process `syz.5.6027'. [ 812.110458][T26429] netlink: 656 bytes leftover after parsing attributes in process `syz.5.6027'. [ 812.690787][ T10] IPVS: starting estimator thread 0... [ 812.774202][T26456] IPVS: using max 54 ests per chain, 129600 per kthread [ 813.001626][T26468] binder: 26467:26468 ioctl 8901 0 returned -22 [ 813.103700][T26476] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6045'. [ 813.107841][T26476] netlink: 'syz.2.6045': attribute type 1 has an invalid length. [ 813.135804][T26478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6046'. [ 813.231376][T26479] ptrace attach of "/syz-executor exec"[26481] was attempted by "/syz-executor exec"[26479] [ 813.355146][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.357085][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.537494][T26510] netlink: 'syz.2.6053': attribute type 8 has an invalid length. [ 815.467365][T26532] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 815.478558][T26533] lo: left promiscuous mode [ 815.481521][T26533] lo: left allmulticast mode [ 815.485867][T26533] tunl0: left promiscuous mode [ 815.487650][T26533] tunl0: left allmulticast mode [ 815.489553][T26533] gre0: left promiscuous mode [ 815.491178][T26533] gre0: left allmulticast mode [ 815.493032][T26533] gretap0: left promiscuous mode [ 815.495927][T26533] gretap0: left allmulticast mode [ 815.497824][T26533] erspan0: left promiscuous mode [ 815.499541][T26533] erspan0: left allmulticast mode [ 815.501362][T26533] ip_vti0: left promiscuous mode [ 815.503320][T26533] ip_vti0: left allmulticast mode [ 815.505805][T26533] ip6_vti0: left promiscuous mode [ 815.507585][T26533] ip6_vti0: left allmulticast mode [ 815.509287][T26533] sit0: left promiscuous mode [ 815.511733][T26533] sit0: left allmulticast mode [ 815.515672][T26533] ip6tnl0: left promiscuous mode [ 815.519120][T26533] ip6tnl0: left allmulticast mode [ 815.523134][T26533] ip6gre0: left promiscuous mode [ 815.525222][T26533] ip6gre0: left allmulticast mode [ 815.528726][T26533] syz_tun: left promiscuous mode [ 815.533321][T26533] syz_tun: left allmulticast mode [ 815.541559][T26533] ip6gretap0: left promiscuous mode [ 815.545773][T26533] ip6gretap0: left allmulticast mode [ 815.549804][T26533] bridge0: left promiscuous mode [ 815.551428][T26533] bridge0: left allmulticast mode [ 815.751454][T26533] dummy0: left promiscuous mode [ 815.791376][T26533] macvlan0: left promiscuous mode [ 815.793029][T26533] bond1: left promiscuous mode [ 815.795612][T26533] bond1: left allmulticast mode [ 815.805392][T23617] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.808828][T23617] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.820081][T26537] ip6erspan0: entered allmulticast mode [ 815.822566][T23617] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.825341][T23617] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.983271][T26541] futex_wake_op: syz.6.6062 tries to shift op by -1; fix this program [ 816.220058][T26559] loop2: detected capacity change from 0 to 7 [ 816.230051][T26559] Dev loop2: unable to read RDB block 7 [ 816.231807][T26559] loop2: unable to read partition table [ 816.233635][T26559] loop2: partition table beyond EOD, truncated [ 816.236131][ T2326] usb 46-1: device descriptor read/8, error -110 [ 816.238972][T26559] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 816.308154][T26565] lo: entered promiscuous mode [ 816.309738][T26565] lo: entered allmulticast mode [ 816.311349][T26565] tunl0: entered promiscuous mode [ 816.312928][T26565] tunl0: entered allmulticast mode [ 816.315076][T26565] gre0: entered promiscuous mode [ 816.316623][T26565] gre0: entered allmulticast mode [ 816.318256][T26565] gretap0: entered promiscuous mode [ 816.319898][T26565] gretap0: entered allmulticast mode [ 816.321568][T26565] erspan0: entered promiscuous mode [ 816.323177][T26565] erspan0: entered allmulticast mode [ 816.324891][T26565] ip_vti0: entered promiscuous mode [ 816.326698][T26565] ip_vti0: entered allmulticast mode [ 816.328431][T26565] ip6_vti0: entered promiscuous mode [ 816.330251][T26565] ip6_vti0: entered allmulticast mode [ 816.331939][T26565] sit0: entered promiscuous mode [ 816.333528][T26565] sit0: entered allmulticast mode [ 816.335551][T26565] ip6tnl0: entered promiscuous mode [ 816.337320][T26565] ip6tnl0: entered allmulticast mode [ 816.339020][T26565] ip6gre0: entered promiscuous mode [ 816.340658][T26565] ip6gre0: entered allmulticast mode [ 816.342324][T26565] syz_tun: entered promiscuous mode [ 816.343942][T26565] syz_tun: entered allmulticast mode [ 816.346360][T26565] ip6gretap0: entered promiscuous mode [ 816.349410][T26565] ip6gretap0: entered allmulticast mode [ 816.356303][T26565] bridge0: entered promiscuous mode [ 816.357987][T26565] bridge0: entered allmulticast mode [ 816.364486][T26565] vcan0: entered promiscuous mode [ 816.366141][T26565] vcan0: entered allmulticast mode [ 816.379640][T26565] bond0: entered promiscuous mode [ 816.391510][T26565] bond_slave_0: entered promiscuous mode [ 816.393406][T26565] bond_slave_1: entered promiscuous mode [ 816.399741][T26565] bond0: entered allmulticast mode [ 816.401700][T26565] bond_slave_0: entered allmulticast mode [ 816.403702][T26565] bond_slave_1: entered allmulticast mode [ 816.404148][T26565] team0: entered promiscuous mode [ 816.407210][T26565] team_slave_0: entered promiscuous mode [ 816.409069][T26565] team_slave_1: entered promiscuous mode [ 816.410903][T26565] team0: entered allmulticast mode [ 816.412663][T26565] team_slave_0: entered allmulticast mode [ 816.414870][T26565] team_slave_1: entered allmulticast mode [ 816.416839][T26565] dummy0: entered promiscuous mode [ 816.418496][T26565] dummy0: entered allmulticast mode [ 816.421442][T26565] nlmon0: entered promiscuous mode [ 816.423363][T26565] nlmon0: entered allmulticast mode [ 816.425857][T26565] vxcan0: entered promiscuous mode [ 816.427919][T26565] vxcan0: entered allmulticast mode [ 816.430269][T26565] vxcan1: entered promiscuous mode [ 816.432393][T26565] vxcan1: entered allmulticast mode [ 816.435323][T26565] veth0: entered promiscuous mode [ 816.437366][T26565] veth0: entered allmulticast mode [ 816.439221][T26565] veth1: entered promiscuous mode [ 816.440864][T26565] veth1: entered allmulticast mode [ 816.442791][T26565] wg0: entered promiscuous mode [ 816.444977][T26565] wg0: entered allmulticast mode [ 816.446827][T26565] wg1: entered promiscuous mode [ 816.448467][T26565] wg1: entered allmulticast mode [ 816.450655][T26565] wg2: entered promiscuous mode [ 816.452330][T26565] wg2: entered allmulticast mode [ 816.454222][T26565] veth0_to_bridge: entered promiscuous mode [ 816.464688][T26565] veth0_to_bridge: entered allmulticast mode [ 816.468055][T26565] veth1_to_bridge: entered promiscuous mode [ 816.470468][T26565] veth1_to_bridge: entered allmulticast mode [ 816.473171][T26565] veth0_to_bond: entered promiscuous mode [ 816.476092][T26565] veth0_to_bond: entered allmulticast mode [ 816.478617][T26565] veth1_to_bond: entered promiscuous mode [ 816.480740][T26565] veth1_to_bond: entered allmulticast mode [ 816.483208][T26565] veth0_to_team: entered promiscuous mode [ 816.485736][T26565] veth0_to_team: entered allmulticast mode [ 816.488213][T26565] veth1_to_team: entered promiscuous mode [ 816.490546][T26565] veth1_to_team: entered allmulticast mode [ 816.493085][T26565] veth0_to_batadv: entered promiscuous mode [ 816.497484][T26565] veth0_to_batadv: entered allmulticast mode [ 816.503303][T26565] batadv_slave_0: entered promiscuous mode [ 816.503337][T26568] futex_wake_op: syz.2.6071 tries to shift op by -1; fix this program [ 816.506230][T26565] batadv_slave_0: entered allmulticast mode [ 816.514453][T26565] veth1_to_batadv: entered promiscuous mode [ 816.517043][T26565] veth1_to_batadv: entered allmulticast mode [ 816.519524][T26565] batadv_slave_1: entered promiscuous mode [ 816.522061][T26565] batadv_slave_1: entered allmulticast mode [ 816.525024][T26565] xfrm0: entered promiscuous mode [ 816.527100][T26565] xfrm0: entered allmulticast mode [ 816.529231][T26565] veth0_to_hsr: entered promiscuous mode [ 816.531378][T26565] veth0_to_hsr: entered allmulticast mode [ 816.534233][T26565] hsr_slave_0: entered allmulticast mode [ 816.536677][T26565] veth1_to_hsr: entered promiscuous mode [ 816.538947][T26565] veth1_to_hsr: entered allmulticast mode [ 816.541296][T26565] hsr_slave_1: entered allmulticast mode [ 816.634776][ T2326] usb usb46-port1: attempt power cycle [ 817.348503][ T2326] usb usb46-port1: unable to enumerate USB device [ 818.265568][T26612] lo: left allmulticast mode [ 818.267164][T26612] tunl0: left allmulticast mode [ 818.268803][T26612] gre0: left allmulticast mode [ 818.270395][T26612] gretap0: left allmulticast mode [ 818.272060][T26612] erspan0: left allmulticast mode [ 818.273753][T26612] ip_vti0: left allmulticast mode [ 818.275981][T26612] ip6_vti0: left allmulticast mode [ 818.277732][T26612] sit0: left allmulticast mode [ 818.279377][T26612] ip6tnl0: left allmulticast mode [ 818.281033][T26612] ip6gre0: left allmulticast mode [ 818.282701][T26612] syz_tun: left allmulticast mode [ 818.284829][T26612] ip6gretap0: left allmulticast mode [ 818.286590][T26612] bridge0: left allmulticast mode [ 818.404994][T26612] futex_wake_op: syz.5.6083 tries to shift op by -1; fix this program [ 818.438179][T26621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6087'. [ 818.443324][T26623] netlink: 'syz.2.6088': attribute type 1 has an invalid length. [ 818.447833][T26623] netlink: 'syz.2.6088': attribute type 1 has an invalid length. [ 818.483673][T26626] overlayfs: failed lookup in lower (newroot/297, name='file0', err=-40): overlapping layers [ 818.495446][T26627] Bluetooth: MGMT ver 1.23 [ 818.592354][T26634] netlink: 'syz.6.6092': attribute type 9 has an invalid length. [ 818.785328][T26644] syzkaller1: entered promiscuous mode [ 818.787458][T26644] syzkaller1: entered allmulticast mode [ 818.879839][T26647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6096'. [ 819.765348][ T10] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 819.924230][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 820.195462][T26681] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.200049][T26681] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.957387][T26695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6113'. [ 820.960956][T26695] netlink: 556 bytes leftover after parsing attributes in process `syz.6.6113'. [ 821.010301][T26697] netlink: 'syz.6.6114': attribute type 1 has an invalid length. [ 821.014469][T26697] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6114'. [ 821.017711][T26697] netlink: 658 bytes leftover after parsing attributes in process `syz.6.6114'. [ 821.020658][T26697] netlink: 1 bytes leftover after parsing attributes in process `syz.6.6114'. [ 821.460232][T26699] netlink: 'syz.5.6115': attribute type 1 has an invalid length. [ 821.462836][T26699] netlink: 112 bytes leftover after parsing attributes in process `syz.5.6115'. [ 821.466634][T26699] netlink: 200 bytes leftover after parsing attributes in process `syz.5.6115'. [ 821.581425][T26705] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6118'. [ 822.931162][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 823.155095][ T10] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 823.246434][ T10] usb 9-1: can't read configurations, error -71 [ 823.517552][T26758] binder: 26757:26758 ioctl ae60 0 returned -22 [ 823.589722][T26765] binder: 26757:26765 ioctl 40946400 80000500 returned -22 [ 823.988616][T26793] loop6: detected capacity change from 0 to 8 [ 824.026005][ T5759] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 824.049060][T26798] Cannot find map_set index 2 as target [ 824.054377][T26793] loop6: detected capacity change from 8 to 7 [ 824.056551][ C0] blk_print_req_error: 45 callbacks suppressed [ 824.056562][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 824.094399][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 824.098002][ C0] buffer_io_error: 45 callbacks suppressed [ 824.098014][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 824.104002][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 824.107674][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 824.110379][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 824.113230][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 824.116905][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 824.119762][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 824.123406][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 824.127103][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 824.130696][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 824.133854][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 824.136732][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 824.139637][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 824.142962][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 824.146033][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 824.149174][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 824.152127][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 824.155032][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 824.158129][T26793] ldm_validate_partition_table(): Disk read failed. [ 824.160971][T26793] Dev loop6: unable to read RDB block 0 [ 824.163578][T26793] loop6: unable to read partition table [ 824.165653][T26793] loop6: partition table beyond EOD, truncated [ 824.169701][T26793] loop_reread_partitions: partition scan of loop6 (uG ܱ.:0 [ 824.169701][T26793] 咁 [ 825.255474][T26844] dump_stack_lvl+0x100/0x190 [ 825.255503][T26844] should_fail_ex.cold+0x5/0xa [ 825.255526][T26844] _copy_from_user+0x2e/0xd0 [ 825.255550][T26844] get_compat_msghdr+0xb3/0x4b0 [ 825.255575][T26844] ? kstrtouint+0xdf/0x130 [ 825.255600][T26844] ? __pfx_get_compat_msghdr+0x10/0x10 [ 825.255629][T26844] ___sys_sendmsg+0x1b6/0x1e0 [ 825.255655][T26844] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.255673][T26844] ? lock_release+0x24d/0x310 [ 825.255699][T26844] ? rcu_is_watching+0x12/0xc0 [ 825.255723][T26844] __sys_sendmsg+0x170/0x220 [ 825.255747][T26844] ? __pfx___sys_sendmsg+0x10/0x10 [ 825.255770][T26844] ? __fget_files+0x21f/0x3d0 [ 825.255790][T26844] ? ksys_write+0x1ac/0x250 [ 825.255807][T26844] ? __pfx_ksys_write+0x10/0x10 [ 825.255823][T26844] ? rcu_is_watching+0x12/0xc0 [ 825.255840][T26844] __do_fast_syscall_32+0xe7/0x970 [ 825.255861][T26844] do_fast_syscall_32+0x32/0x70 [ 825.255880][T26844] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 825.255903][T26844] RIP: 0023:0xf700efec [ 825.255922][T26844] Code: Unable to access opcode bytes at 0xf700efc2. [ 825.255931][T26844] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 825.255951][T26844] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000b80 [ 825.255962][T26844] RDX: 0000000004008010 RSI: 0000000000000000 RDI: 0000000000000000 [ 825.255974][T26844] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 825.255985][T26844] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 825.255996][T26844] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 825.256013][T26844] [ 826.325800][T26860] lo: left promiscuous mode [ 826.327380][T26860] tunl0: left promiscuous mode [ 826.329253][T26860] gre0: left promiscuous mode [ 826.330839][T26860] gretap0: left promiscuous mode [ 826.332411][T26860] erspan0: left promiscuous mode [ 826.334122][T26860] ip_vti0: left promiscuous mode [ 826.335645][T26860] ip6_vti0: left promiscuous mode [ 826.337274][T26860] sit0: left promiscuous mode [ 826.338797][T26860] ip6tnl0: left promiscuous mode [ 826.340385][T26860] ip6gre0: left promiscuous mode [ 826.341953][T26860] syz_tun: left promiscuous mode [ 826.343606][T26860] ip6gretap0: left promiscuous mode [ 826.345793][T26860] bridge0: left promiscuous mode [ 826.353255][T26860] dummy0: left promiscuous mode [ 826.424505][T26860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.434991][T26860] batadv_slave_1: left promiscuous mode [ 826.508594][T26860] batman_adv: batadv0: Interface deactivated: gretap1 [ 826.521363][T26860] batman_adv: batadv0: Interface deactivated: macsec1 [ 826.531125][T26860] bond3: left allmulticast mode [ 826.532744][T26860] batadv1: left allmulticast mode [ 826.537791][T15186] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.540397][T15186] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.542944][T15186] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.545779][T15186] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.815948][T26875] 9p: Unknown Cache mode or invalid value fsca [ 826.919557][T26881] 0x0000fffffffd-0x00010000fffd : "" [ 826.921376][T26881] mtd: partition "" is out of reach -- disabled [ 826.925629][T26881] ftl_cs: FTL header not found. [ 827.064805][T26895] 8021q: adding VLAN 0 to HW filter on device bond5 [ 827.419876][T26908] __nla_validate_parse: 2 callbacks suppressed [ 827.419980][T26908] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6176'. [ 827.610900][T26913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6178'. [ 828.385209][T15529] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 828.415772][ T41] kauditd_printk_skb: 44 callbacks suppressed [ 828.415787][ T41] audit: type=1326 audit(1781582812.045:27163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26934 comm="syz.2.6182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 828.423305][T26918] Process accounting resumed [ 828.427099][ T41] audit: type=1326 audit(1781582812.045:27164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26934 comm="syz.2.6182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 828.454834][ T41] audit: type=1326 audit(1781582812.075:27165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26934 comm="syz.2.6182" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 828.531272][T26932] 8021q: adding VLAN 0 to HW filter on device bond2 [ 828.536057][T26942] lo: entered promiscuous mode [ 828.540372][T26942] lo: entered allmulticast mode [ 828.542381][T26942] tunl0: entered promiscuous mode [ 828.544028][T26942] tunl0: entered allmulticast mode [ 828.545034][T15529] usb 9-1: Using ep0 maxpacket: 16 [ 828.546416][T26942] gre0: entered promiscuous mode [ 828.549588][T26942] gre0: entered allmulticast mode [ 828.553467][T26942] gretap0: entered promiscuous mode [ 828.554817][T15529] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 828.555240][T26942] gretap0: entered allmulticast mode [ 828.560790][T15529] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 828.565701][T15529] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.565861][T26942] erspan0: entered promiscuous mode [ 828.573218][T15529] usb 9-1: Product: syz [ 828.574172][T26942] erspan0: entered allmulticast mode [ 828.575438][T15529] usb 9-1: Manufacturer: syz [ 828.576455][T26942] ip_vti0: entered promiscuous mode [ 828.579300][T15529] usb 9-1: SerialNumber: syz [ 828.579993][T26942] ip_vti0: entered allmulticast mode [ 828.580070][T26942] ip6_vti0: entered promiscuous mode [ 828.585178][T26942] ip6_vti0: entered allmulticast mode [ 828.586369][T15529] usb 9-1: config 0 descriptor?? [ 828.586900][T26942] sit0: entered promiscuous mode [ 828.590489][T26942] sit0: entered allmulticast mode [ 828.592061][T26942] ip6tnl0: entered promiscuous mode [ 828.593690][T26942] ip6tnl0: entered allmulticast mode [ 828.595484][T26942] ip6gre0: entered promiscuous mode [ 828.596090][T15529] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 828.597124][T26942] ip6gre0: entered allmulticast mode [ 828.597174][T26942] syz_tun: entered promiscuous mode [ 828.603944][T26942] syz_tun: entered allmulticast mode [ 828.605817][T26942] ip6gretap0: entered promiscuous mode [ 828.606178][T15529] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 828.607538][T26942] ip6gretap0: entered allmulticast mode [ 828.607588][T26942] bridge0: entered promiscuous mode [ 828.607596][T26942] bridge0: entered allmulticast mode [ 828.607806][T26942] vcan0: entered promiscuous mode [ 828.616753][T26942] vcan0: entered allmulticast mode [ 828.618657][T26942] bond0: entered promiscuous mode [ 828.620242][T26942] bond_slave_0: entered promiscuous mode [ 828.622072][T26942] bond_slave_1: entered promiscuous mode [ 828.623897][T26942] bond0: entered allmulticast mode [ 828.625560][T26942] bond_slave_0: entered allmulticast mode [ 828.627303][T26942] bond_slave_1: entered allmulticast mode [ 828.629528][T26942] team0: entered promiscuous mode [ 828.629656][T26945] futex_wake_op: syz.5.6185 tries to shift op by -1; fix this program [ 828.631089][T26942] team_slave_0: entered promiscuous mode [ 828.631144][T26942] team_slave_1: entered promiscuous mode [ 828.638582][T26942] team0: entered allmulticast mode [ 828.640210][T26942] team_slave_0: entered allmulticast mode [ 828.642021][T26942] team_slave_1: entered allmulticast mode [ 828.643977][T26942] dummy0: entered promiscuous mode [ 828.645768][T26942] dummy0: entered allmulticast mode [ 828.647561][T26942] nlmon0: entered promiscuous mode [ 828.649200][T26942] nlmon0: entered allmulticast mode [ 828.650963][T26942] batadv0: entered promiscuous mode [ 828.652595][T26942] batadv0: entered allmulticast mode [ 828.654871][T26942] vxcan0: entered promiscuous mode [ 828.656507][T26942] vxcan0: entered allmulticast mode [ 828.658317][T26942] vxcan1: entered promiscuous mode [ 828.659946][T26942] vxcan1: entered allmulticast mode [ 828.661655][T26942] veth0: entered promiscuous mode [ 828.663228][T26942] veth0: entered allmulticast mode [ 828.665215][T26942] veth1: entered promiscuous mode [ 828.666735][T26942] veth1: entered allmulticast mode [ 828.668458][T26942] wg0: entered promiscuous mode [ 828.669998][T26942] wg0: entered allmulticast mode [ 828.671621][T26942] wg1: entered promiscuous mode [ 828.673080][T26942] wg1: entered allmulticast mode [ 828.675075][T26942] wg2: entered promiscuous mode [ 828.676570][T26942] wg2: entered allmulticast mode [ 828.678277][T26942] veth0_to_bridge: entered promiscuous mode [ 828.680102][T26942] veth0_to_bridge: entered allmulticast mode [ 828.682626][T26942] veth1_to_bridge: entered promiscuous mode [ 828.684598][T26942] veth1_to_bridge: entered allmulticast mode [ 828.686792][T26942] veth0_to_bond: entered promiscuous mode [ 828.688547][T26942] veth0_to_bond: entered allmulticast mode [ 828.690583][T26942] veth1_to_bond: entered promiscuous mode [ 828.692334][T26942] veth1_to_bond: entered allmulticast mode [ 828.694459][T26942] veth0_to_team: entered promiscuous mode [ 828.696256][T26942] veth0_to_team: entered allmulticast mode [ 828.698228][T26942] veth1_to_team: entered promiscuous mode [ 828.700004][T26942] veth1_to_team: entered allmulticast mode [ 828.701997][T26942] veth0_to_batadv: entered promiscuous mode [ 828.703847][T26942] veth0_to_batadv: entered allmulticast mode [ 828.705882][T26942] batadv_slave_0: entered promiscuous mode [ 828.707594][T26942] batadv_slave_0: entered allmulticast mode [ 828.709551][T26942] veth1_to_batadv: entered promiscuous mode [ 828.711902][T26942] veth1_to_batadv: entered allmulticast mode [ 828.713916][T26942] batadv_slave_1: entered promiscuous mode [ 828.716059][T26942] batadv_slave_1: entered allmulticast mode [ 828.718056][T26942] xfrm0: entered promiscuous mode [ 828.719624][T26942] xfrm0: entered allmulticast mode [ 828.721368][T26942] veth0_to_hsr: entered promiscuous mode [ 828.723065][T26942] veth0_to_hsr: entered allmulticast mode [ 828.725002][T26942] hsr_slave_0: entered allmulticast mode [ 828.726872][T26942] veth1_to_hsr: entered promiscuous mode [ 828.728645][T26942] veth1_to_hsr: entered allmulticast mode [ 828.730568][T26942] hsr_slave_1: entered allmulticast mode [ 828.806352][T26951] xt_ecn: cannot match TCP bits for non-tcp packets [ 829.199676][T15529] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 829.221670][ T41] audit: type=1804 audit(1781582812.845:27166): pid=26958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.6189" name="/newroot/208/file0" dev="tmpfs" ino=1081 res=1 errno=0 [ 829.381741][T26963] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 830.155005][T26969] Cannot find map_set index 2 as target [ 830.251069][T26971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6191'. [ 830.644568][T26981] netlink: 'syz.6.6197': attribute type 9 has an invalid length. [ 830.929733][T26990] dlm: Unknown command passed to DLM device : 3 [ 830.929733][T26990] [ 831.490405][T15529] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 831.492860][T15529] em28xx 9-1:0.0: board has no eeprom [ 831.554164][T15529] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 831.556466][T15529] em28xx 9-1:0.0: dvb set to bulk mode. [ 831.558969][T15529] em28xx 9-1:0.0: Binding DVB extension [ 831.582682][T15529] em28xx 9-1:0.0: Registering input extension [ 831.724836][ T10] usb 9-1: USB disconnect, device number 51 [ 831.727043][ T10] em28xx 9-1:0.0: Disconnecting em28xx [ 831.728766][ T10] em28xx 9-1:0.0: Closing input extension [ 831.792961][ T10] em28xx 9-1:0.0: Freeing device [ 831.799770][T26999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6201'. [ 831.905228][T27008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6205'. [ 831.926064][T27010] loop6: detected capacity change from 0 to 8 [ 831.939710][T27011] dlm: Unknown command passed to DLM device : 3 [ 831.939710][T27011] [ 832.007309][T27006] futex_wake_op: syz.4.6203 tries to shift op by -1; fix this program [ 832.036079][T27010] loop6: detected capacity change from 8 to 7 [ 832.106098][ C3] blk_print_req_error: 16 callbacks suppressed [ 832.106130][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 832.112083][ C3] buffer_io_error: 15 callbacks suppressed [ 832.112092][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 832.117849][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 832.121584][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 832.125249][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 832.128780][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 832.133863][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 832.136818][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 832.142585][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 832.145462][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 832.149774][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 832.152651][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 832.156799][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 832.160618][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 832.163970][T27010] ldm_validate_partition_table(): Disk read failed. [ 832.167636][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 832.171515][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 832.175675][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 832.179431][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 832.183551][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 832.186415][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 832.191881][T27010] Dev loop6: unable to read RDB block 0 [ 832.195995][T27010] loop6: unable to read partition table [ 832.200454][T27010] loop6: partition table beyond EOD, truncated [ 832.205748][T27010] loop_reread_partitions: partition scan of loop6 (uG ܱ.:0 [ 832.205748][T27010] 咁 initial count (200000 ns). Using initial count to start timer. [ 832.744281][T15737] usb 9-1: Using ep0 maxpacket: 16 [ 832.748294][T15737] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 832.754210][T15737] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 832.758529][T15737] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.761913][T15737] usb 9-1: Product: syz [ 832.763755][T15737] usb 9-1: Manufacturer: syz [ 832.766130][T15737] usb 9-1: SerialNumber: syz [ 832.769540][T15737] usb 9-1: config 0 descriptor?? [ 832.776449][T15737] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 832.780417][T15737] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 833.002316][T27039] netlink: 'syz.6.6215': attribute type 3 has an invalid length. [ 833.005566][T27039] netlink: 'syz.6.6215': attribute type 3 has an invalid length. [ 833.011514][T27039] netlink: 'syz.6.6215': attribute type 3 has an invalid length. [ 833.014349][T27039] netlink: 'syz.6.6215': attribute type 3 has an invalid length. [ 833.017294][T27039] netlink: 'syz.6.6215': attribute type 3 has an invalid length. [ 833.023792][T27039] netlink: 'syz.6.6215': attribute type 3 has an invalid length. [ 833.027166][T27039] netlink: 'syz.6.6215': attribute type 3 has an invalid length. [ 833.034430][T27039] netlink: 'syz.6.6215': attribute type 3 has an invalid length. [ 833.036925][T27039] netlink: 'syz.6.6215': attribute type 3 has an invalid length. [ 833.392886][T15737] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 833.430019][T27047] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 833.432055][T27047] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 833.436534][T27047] vhci_hcd vhci_hcd.0: Device attached [ 833.568785][T27056] binder: 27055:27056 ioctl c0306201 800003c0 returned -22 [ 833.571561][T27056] binder: 27055:27056 ioctl c0306201 80001040 returned -14 [ 833.577530][T27056] binder: 27055:27056 ioctl c0306201 80000300 returned -14 [ 833.712622][T27060] ptrace attach of "/syz-executor exec"[27061] was attempted by "/syz-executor exec"[27060] [ 833.724101][ T9128] usb 48-1: SetAddress Request (2) to port 0 [ 833.729651][ T9128] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 833.994909][T27069] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 833.997350][T27069] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 834.001201][T27069] vhci_hcd vhci_hcd.0: Device attached [ 834.015708][T27069] rdma_rxe: rxe_newlink: failed to add wg2 [ 834.111244][T27048] vhci_hcd: connection reset by peer [ 834.113280][ T8775] vhci_hcd vhci_hcd.5: stop threads [ 834.115055][ T8775] vhci_hcd vhci_hcd.5: release socket [ 834.117049][ T8775] vhci_hcd vhci_hcd.5: disconnect device [ 834.274607][ T2326] usb 42-1: SetAddress Request (10) to port 0 [ 834.277678][ T2326] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 834.666499][T27070] vhci_hcd: connection reset by peer [ 834.668387][ T5829] vhci_hcd vhci_hcd.2: stop threads [ 834.670470][ T5829] vhci_hcd vhci_hcd.2: release socket [ 834.672637][ T5829] vhci_hcd vhci_hcd.2: disconnect device [ 834.717370][T15737] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 834.719860][T15737] em28xx 9-1:0.0: board has no eeprom [ 834.774549][T15737] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 834.853238][T27075] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 835.203265][T15737] em28xx 9-1:0.0: dvb set to bulk mode. [ 835.205507][ T6614] em28xx 9-1:0.0: Binding DVB extension [ 835.238945][ T6614] em28xx 9-1:0.0: Registering input extension [ 835.361860][ T50] usb 9-1: USB disconnect, device number 52 [ 835.364163][ T50] em28xx 9-1:0.0: Disconnecting em28xx [ 835.369205][ T50] em28xx 9-1:0.0: Closing input extension [ 835.378579][ T50] em28xx 9-1:0.0: Freeing device [ 835.611295][T27090] Bluetooth: hci0: unsupported parameter 255 [ 835.613349][T27090] Bluetooth: hci0: unsupported parameter 255 [ 835.721039][T27094] 9p: Unknown Cache mode or invalid value fsca [ 836.056946][T27097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6232'. [ 836.158359][T27098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6232'. [ 838.372630][T27119] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6238'. [ 838.479745][T27126] overlay: ./file0 is not a directory [ 838.796468][ T9128] usb 48-1: device descriptor read/8, error -110 [ 838.975798][T27149] loop6: detected capacity change from 0 to 8 [ 839.034303][T15529] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 839.045319][T27149] loop6: detected capacity change from 8 to 7 [ 839.085765][ C2] blk_print_req_error: 10 callbacks suppressed [ 839.085778][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 839.091000][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 839.093920][ C2] buffer_io_error: 10 callbacks suppressed [ 839.093931][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 839.098701][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 839.101658][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 839.104839][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 839.107665][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 839.110263][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 839.113104][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 839.115870][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 839.118676][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 839.121302][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 839.124419][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 839.127462][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 839.130317][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 839.132950][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 839.136029][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 839.140388][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 839.143483][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 839.146286][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 839.150480][T27154] binder: 27152:27154 ioctl 8901 0 returned -22 [ 839.151875][T27149] ldm_validate_partition_table(): Disk read failed. [ 839.158455][T27149] Dev loop6: unable to read RDB block 0 [ 839.161225][T27149] loop6: unable to read partition table [ 839.163493][T27149] loop6: partition table beyond EOD, truncated [ 839.166717][T27149] loop_reread_partitions: partition scan of loop6 (uG ܱ.:0 [ 839.166717][T27149] 咁 [ 843.766322][T27265] dump_stack_lvl+0x100/0x190 [ 843.766353][T27265] should_fail_ex.cold+0x5/0xa [ 843.766371][T27265] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 843.766397][T27265] should_failslab+0xc2/0x120 [ 843.766412][T27265] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 843.766436][T27265] ? sock_alloc_inode+0x26/0x2c0 [ 843.766461][T27265] ? lock_release+0x24d/0x310 [ 843.766484][T27265] ? __pfx_sock_alloc_inode+0x10/0x10 [ 843.766510][T27265] sock_alloc_inode+0x26/0x2c0 [ 843.766534][T27265] ? __pfx_sock_alloc_inode+0x10/0x10 [ 843.766559][T27265] alloc_inode+0x68/0x250 [ 843.766581][T27265] sock_alloc+0x44/0x280 [ 843.766604][T27265] do_accept+0xf9/0x530 [ 843.766622][T27265] ? do_raw_spin_lock+0x128/0x260 [ 843.766647][T27265] ? __pfx_do_accept+0x10/0x10 [ 843.766663][T27265] ? rcu_is_watching+0x12/0xc0 [ 843.766686][T27265] __sys_accept4+0x108/0x200 [ 843.766704][T27265] ? __pfx___sys_accept4+0x10/0x10 [ 843.766723][T27265] ? ksys_write+0x1ac/0x250 [ 843.766739][T27265] __ia32_sys_accept4+0x94/0x100 [ 843.766759][T27265] __do_fast_syscall_32+0xe7/0x970 [ 843.766777][T27265] do_fast_syscall_32+0x32/0x70 [ 843.766794][T27265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 843.766816][T27265] RIP: 0023:0xf700efec [ 843.766832][T27265] Code: Unable to access opcode bytes at 0xf700efc2. [ 843.766840][T27265] RSP: 002b:00000000f53dc50c EFLAGS: 00000292 ORIG_RAX: 000000000000016c [ 843.766856][T27265] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 843.766867][T27265] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 843.766877][T27265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 843.766888][T27265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 843.766898][T27265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 843.766915][T27265] [ 843.966517][T13992] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 843.970517][T13992] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 843.976348][T13992] usb 11-1: USB disconnect, device number 11 [ 844.863040][T27291] 9p: Unknown Cache mode or invalid value fsca [ 845.194690][T27293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6289'. [ 845.203002][T27293] netlink: 556 bytes leftover after parsing attributes in process `syz.4.6289'. [ 845.302614][T27300] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6291'. [ 845.321053][T27302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6292'. [ 845.709091][T27309] ptrace attach of "/syz-executor exec"[27311] was attempted by "/syz-executor exec"[27309] [ 846.027794][T27319] binder: 27318:27319 ioctl 8901 0 returned -22 [ 846.088137][T27320] loop6: detected capacity change from 0 to 8 [ 846.164216][T27320] loop6: detected capacity change from 8 to 7 [ 846.167928][ C0] blk_print_req_error: 11 callbacks suppressed [ 846.167938][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 846.204409][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 846.207290][ C0] buffer_io_error: 10 callbacks suppressed [ 846.207300][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 846.212206][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 846.215069][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 846.218066][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 846.220887][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 846.224821][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 846.227665][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 846.231211][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 846.234015][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 846.291473][T27325] xt_l2tp: v2 tid > 0xffff: 37482740 [ 846.451514][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 846.455251][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 846.458731][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 846.462509][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 846.465957][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 846.469674][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 846.473441][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 846.477150][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 846.480459][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 846.484786][T27320] ldm_validate_partition_table(): Disk read failed. [ 846.488176][T27320] Dev loop6: unable to read RDB block 0 [ 846.490485][T27320] loop6: unable to read partition table [ 846.492468][T27320] loop6: partition table beyond EOD, truncated [ 846.494840][T27320] loop_reread_partitions: partition scan of loop6 (uG ܱ.:0 [ 846.494840][T27320] 咁 1 [ 847.773641][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 847.777128][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 847.780367][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 847.782228][T27356] bond6: Removing last arp target with arp_interval on [ 847.783539][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 847.799308][T27359] bond7: Removing last arp target with arp_interval on [ 848.182912][T27362] lo speed is unknown, defaulting to 1000 [ 848.322765][T27379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6317'. [ 848.496757][T27383] loop2: detected capacity change from 0 to 7 [ 848.500318][T27383] Dev loop2: unable to read RDB block 7 [ 848.502839][T27383] loop2: unable to read partition table [ 848.508145][T27383] loop2: partition table beyond EOD, truncated [ 848.512921][T27383] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 849.322241][T27362] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.324626][T27362] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.326914][T27362] bridge_slave_0: entered allmulticast mode [ 849.329228][T27362] bridge_slave_0: entered promiscuous mode [ 849.331925][T27362] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.334769][T27362] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.337151][T27362] bridge_slave_1: entered allmulticast mode [ 849.339419][T27362] bridge_slave_1: entered promiscuous mode [ 849.431535][T27400] futex_wake_op: syz.5.6322 tries to shift op by -1; fix this program [ 849.834138][ T64] Bluetooth: hci3: command tx timeout [ 850.223871][T27362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 850.229862][T13992] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 850.237074][T27362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.256779][T27410] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6325'. [ 850.257080][T27362] team0: Port device team_slave_0 added [ 850.265135][T27362] team0: Port device team_slave_1 added [ 850.281288][T27362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.285916][T27362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.296737][T27362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.302118][T27362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.305121][T27362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.319534][T27362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.342871][T27362] hsr_slave_0: entered promiscuous mode [ 850.346233][T27362] hsr_slave_1: entered promiscuous mode [ 850.349018][T27362] debugfs: 'hsr0' already exists in 'hsr' [ 850.351566][T27362] Cannot create hsr debugfs directory [ 850.405273][T13992] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 850.410412][T13992] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.417207][T13992] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 850.425027][T13992] usb 7-1: config 0 interface 0 has no altsetting 0 [ 850.433215][T13992] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.439566][T13992] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 850.447823][T13992] usb 7-1: config 0 interface 0 has no altsetting 0 [ 850.453942][T13992] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.462565][T13992] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 850.467065][T27362] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 850.469268][T13992] usb 7-1: config 0 interface 0 has no altsetting 0 [ 850.472282][T13992] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.475530][T13992] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 850.478117][T13992] usb 7-1: config 0 interface 0 has no altsetting 0 [ 850.480871][T13992] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.484113][T13992] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 850.486870][T13992] usb 7-1: config 0 interface 0 has no altsetting 0 [ 850.490555][T27362] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 850.493640][T13992] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.498150][T27362] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 850.498257][T13992] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 850.504647][T13992] usb 7-1: config 0 interface 0 has no altsetting 0 [ 850.507929][T13992] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.509527][T27362] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 850.511294][T13992] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 850.514856][T27362] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 850.516224][T13992] usb 7-1: config 0 interface 0 has no altsetting 0 [ 850.520828][T13992] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.524236][T13992] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 850.525210][T27362] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 850.527202][T13992] usb 7-1: config 0 interface 0 has no altsetting 0 [ 850.531915][T27362] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 850.533247][T13992] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 850.537294][T13992] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 850.538310][T27362] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 850.540029][T13992] usb 7-1: Product: syz [ 850.544256][T13992] usb 7-1: Manufacturer: syz [ 850.546156][T13992] usb 7-1: SerialNumber: syz [ 850.550333][T13992] usb 7-1: config 0 descriptor?? [ 850.556503][T13992] yurex 7-1:0.0: Could not find endpoints [ 850.608543][T27362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.633476][T27362] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.645396][ T1201] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.648418][ T1201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.666212][ T1201] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.669220][ T1201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.757766][ T2326] usb 7-1: USB disconnect, device number 44 [ 850.941199][T27362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.098940][T27362] veth0_vlan: entered promiscuous mode [ 851.104873][T27362] veth1_vlan: entered promiscuous mode [ 851.119838][T27362] veth0_macvtap: entered promiscuous mode [ 851.124483][T27362] veth1_macvtap: entered promiscuous mode [ 851.134233][T27362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.140454][T27362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.146551][ T8392] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.149268][ T8392] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.160465][ T8392] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.163455][ T8392] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.296818][T27439] ptrace attach of "/syz-executor exec"[27440] was attempted by "/syz-executor exec"[27439] [ 851.604186][T19684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.914143][ T64] Bluetooth: hci3: command tx timeout [ 852.117913][T19684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.142839][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.147001][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.736382][T27450] netlink: 'syz.7.6311': attribute type 38 has an invalid length. [ 853.088564][T27443] binder: 27441:27443 ioctl 5000943a 80000880 returned -22 [ 853.551305][T27472] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6336'. [ 853.748176][T22317] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 853.894774][T22317] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 853.898005][T22317] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.901063][T22317] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 853.903725][T22317] usb 12-1: config 0 interface 0 has no altsetting 0 [ 853.906746][T22317] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.910148][T22317] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 853.912777][T22317] usb 12-1: config 0 interface 0 has no altsetting 0 [ 853.919141][T22317] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.923112][T22317] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 853.926184][T22317] usb 12-1: config 0 interface 0 has no altsetting 0 [ 853.926481][T27478] dlm: Unknown command passed to DLM device : 3 [ 853.926481][T27478] [ 853.928901][T22317] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.934253][T22317] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 853.937146][T22317] usb 12-1: config 0 interface 0 has no altsetting 0 [ 853.940297][T22317] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.943387][T22317] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 853.946216][T22317] usb 12-1: config 0 interface 0 has no altsetting 0 [ 853.949847][T22317] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.953370][T22317] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 853.959345][T22317] usb 12-1: config 0 interface 0 has no altsetting 0 [ 853.966229][T22317] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.972747][T22317] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 853.978349][T22317] usb 12-1: config 0 interface 0 has no altsetting 0 [ 853.986732][T22317] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.991116][T22317] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 853.994124][ T64] Bluetooth: hci3: command tx timeout [ 853.996221][T22317] usb 12-1: config 0 interface 0 has no altsetting 0 [ 854.006638][T22317] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 854.012307][T22317] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 854.018715][T22317] usb 12-1: Product: syz [ 854.021149][T22317] usb 12-1: Manufacturer: syz [ 854.024452][T22317] usb 12-1: SerialNumber: syz [ 854.029263][T22317] usb 12-1: config 0 descriptor?? [ 854.036068][T22317] yurex 12-1:0.0: Could not find endpoints [ 854.241864][T15529] usb 12-1: USB disconnect, device number 2 [ 854.317809][T27473] Process accounting resumed [ 854.543664][T27490] netlink: 'syz.5.6340': attribute type 1 has an invalid length. [ 854.546147][T27490] netlink: 112 bytes leftover after parsing attributes in process `syz.5.6340'. [ 854.548995][T27490] netlink: 200 bytes leftover after parsing attributes in process `syz.5.6340'. [ 854.665089][T27493] ptrace attach of "/syz-executor exec"[27494] was attempted by "/syz-executor exec"[27493] [ 855.456208][T27500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6343'. [ 855.731043][T27503] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6344'. [ 855.735687][T27503] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6344'. [ 855.791483][T27505] binder: 27504:27505 ioctl 8901 0 returned -22 [ 856.084643][ T64] Bluetooth: hci3: command tx timeout [ 856.356285][T27516] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6349'. [ 856.390334][T27518] lo: entered promiscuous mode [ 856.391989][T27518] tunl0: entered promiscuous mode [ 856.393687][T27518] gre0: entered promiscuous mode [ 856.395499][T27518] gretap0: entered promiscuous mode [ 856.397684][T27518] ip_vti0: entered promiscuous mode [ 856.402442][T27518] ip6_vti0: entered promiscuous mode [ 856.404982][T27518] sit0: entered promiscuous mode [ 856.406753][T27518] ip6tnl0: entered promiscuous mode [ 856.408675][T27518] ip6gre0: entered promiscuous mode [ 856.410603][T27518] syz_tun: entered promiscuous mode [ 856.412906][T27518] ip6gretap0: entered promiscuous mode [ 856.477061][T27521] netlink: 'syz.7.6351': attribute type 8 has an invalid length. [ 856.535699][T27518] futex_wake_op: syz.6.6350 tries to shift op by -1; fix this program [ 856.595643][T27530] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 856.598256][T27530] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 856.613329][T27530] vhci_hcd vhci_hcd.0: Device attached [ 856.616207][T27534] overlayfs: failed to resolve './cgroup': -2 [ 856.626282][T27529] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.629479][T27529] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.904203][ T2326] usb 42-1: SetAddress Request (14) to port 0 [ 856.907918][ T2326] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 856.947224][T27529] futex_wake_op: syz.7.6353 tries to shift op by -1; fix this program [ 857.241116][T27545] ptrace attach of "/syz-executor exec"[27547] was attempted by "/syz-executor exec"[27545] [ 858.245428][T27531] vhci_hcd: connection reset by peer [ 858.247695][ T8775] vhci_hcd vhci_hcd.2: stop threads [ 858.249720][ T8775] vhci_hcd vhci_hcd.2: release socket [ 858.252767][ T8775] vhci_hcd vhci_hcd.2: disconnect device [ 859.694412][T27569] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6364'. [ 859.934552][T27568] bond1: Unable to set down delay as MII monitoring is disabled [ 859.940794][T27568] bond1 (unregistering): Released all slaves [ 860.084322][T27573] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 860.086524][T27573] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 860.087952][T27582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6368'. [ 860.091530][T27582] netlink: 556 bytes leftover after parsing attributes in process `syz.5.6368'. [ 860.103988][T27584] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6369'. [ 860.107369][T27573] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 860.107406][T27573] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 860.124967][T27573] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 860.127466][T27573] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 860.130717][T27573] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 860.440149][T27598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6373'. [ 860.587228][T27604] dlm: Unknown command passed to DLM device : 3 [ 860.587228][T27604] [ 860.594173][ T50] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 860.697825][T27607] netlink: 116 bytes leftover after parsing attributes in process `syz.6.6375'. [ 860.764506][T22809] kernel write not supported for file /736/net/ip_vs_stats (pid: 22809 comm: kworker/0:0) [ 860.807316][T27614] loop6: detected capacity change from 0 to 8 [ 860.824340][ T50] usb 12-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 860.834335][ T50] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.836959][ T50] usb 12-1: Product: syz [ 860.838649][ T50] usb 12-1: Manufacturer: syz [ 860.840562][ T50] usb 12-1: SerialNumber: syz [ 860.845275][ T50] usb 12-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 860.870181][ T9128] usb 12-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 860.874285][T27614] loop6: detected capacity change from 8 to 7 [ 860.888034][ C3] blk_print_req_error: 11 callbacks suppressed [ 860.888045][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 860.893237][ C3] buffer_io_error: 10 callbacks suppressed [ 860.893246][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 860.934428][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 860.937615][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 860.940208][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 860.943201][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 860.946101][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 860.948985][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 860.951731][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 860.954623][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 860.957165][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 860.960024][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 860.962729][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 860.965545][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 860.968260][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 860.971023][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 860.973591][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 860.976462][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 860.979032][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 860.979395][T27614] ldm_validate_partition_table(): Disk read failed. [ 860.981802][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 860.988512][T27614] Dev loop6: unable to read RDB block 0 [ 860.991840][T27614] loop6: unable to read partition table [ 860.994357][T27614] loop6: partition table beyond EOD, truncated [ 860.997483][T27614] loop_reread_partitions: partition scan of loop6 (uG ܱ.:0 [ 860.997483][T27614] 咁, priority 0 [ 861.870903][T27646] lo speed is unknown, defaulting to 1000 [ 861.914508][ T9128] ath9k_htc 12-1:1.0: ath9k_htc: Target is unresponsive [ 861.917846][ T9128] ath9k_htc: Failed to initialize the device [ 861.958390][ T9128] usb 12-1: ath9k_htc: USB layer deinitialized [ 861.984229][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.996420][ T2326] usb 42-1: device descriptor read/8, error -110 [ 862.124426][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.154167][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 862.156124][ T64] Bluetooth: hci0: command 0x206a tx timeout [ 862.156740][ T5759] Bluetooth: hci1: command 0x0419 tx timeout [ 862.157980][T27650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6390'. [ 862.264456][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.400256][ T2326] usb usb42-port1: attempt power cycle [ 862.404779][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.489310][T27652] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 862.544170][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.694415][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.846321][T22317] tipc: Node number set to 4186198333 [ 862.984120][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.986775][ T2326] usb usb42-port1: unable to enumerate USB device [ 862.993750][T27648] tipc: Resetting bearer [ 862.999791][T27648] tipc: Disabling bearer [ 863.000622][T27663] netlink: 'syz.6.6395': attribute type 1 has an invalid length. [ 863.012347][T27663] 8021q: adding VLAN 0 to HW filter on device bond3 [ 863.033138][T27663] bond3: (slave dummy0): making interface the new active one [ 863.036475][T27663] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 863.048277][T27663] netlink: 'syz.6.6395': attribute type 10 has an invalid length. [ 863.051513][T27663] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6395'. [ 863.055593][T27663] dummy0: entered promiscuous mode [ 863.058907][T27663] bond3: (slave dummy0): Releasing active interface [ 863.088785][T27667] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6397'. [ 863.092274][T27667] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6397'. [ 863.117928][ T5759] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 863.120429][ T5759] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 863.122868][ T5759] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 863.125875][ T5759] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 863.128460][ T5759] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 863.302930][T22317] usb 12-1: USB disconnect, device number 3 [ 863.331081][ T8775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.334887][ T8775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 863.338078][ T8775] bond0 (unregistering): Released all slaves [ 863.341478][ T8775] bond1 (unregistering): Released all slaves [ 863.347077][ T8775] bond2 (unregistering): Released all slaves [ 863.353099][ T8775] bond3 (unregistering): (slave dummy0): Releasing active interface [ 863.357234][ T8775] bond3 (unregistering): Released all slaves [ 863.361494][ T8775] bond4 (unregistering): Released all slaves [ 863.366416][ T8775] bond5 (unregistering): Released all slaves [ 863.372688][ T8775] bond6 (unregistering): Released all slaves [ 863.381780][ T8775] bond7 (unregistering): Released all slaves [ 863.460733][T27687] ptrace attach of "/syz-executor exec"[27690] was attempted by "/syz-executor exec"[27687] [ 863.637462][T27668] lo speed is unknown, defaulting to 1000 [ 864.056882][ T5464] 8021q: adding VLAN 0 to HW filter on device eth14 [ 864.158126][T27668] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.161337][T27668] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.164261][T27668] bridge_slave_0: entered allmulticast mode [ 864.167050][T27668] bridge_slave_0: entered promiscuous mode [ 864.171070][T27668] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.234368][T27651] Bluetooth: hci3: command 0x0c1a tx timeout [ 864.234869][T27668] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.244197][T27651] Bluetooth: hci1: command 0x0419 tx timeout [ 864.244279][T27668] bridge_slave_1: entered allmulticast mode [ 864.248803][T27668] bridge_slave_1: entered promiscuous mode [ 864.364783][ T5464] 8021q: adding VLAN 0 to HW filter on device eth15 [ 864.370894][T27668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.376767][T27668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.390100][T27668] team0: Port device team_slave_0 added [ 864.393025][T27668] team0: Port device team_slave_1 added [ 864.401337][T27668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.403578][T27668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.411337][T27668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.424749][T27668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.429104][T27668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.440222][T27668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.442611][T27721] Cannot find map_set index 2 as target [ 864.505130][T27668] hsr_slave_0: entered promiscuous mode [ 864.510390][T27668] hsr_slave_1: entered promiscuous mode [ 864.519323][T27668] debugfs: 'hsr0' already exists in 'hsr' [ 864.525013][T27668] Cannot create hsr debugfs directory [ 864.655635][ T8775] team0 (unregistering): Port device team_slave_1 removed [ 864.660841][ T8775] team0 (unregistering): Port device team_slave_0 removed [ 864.797970][ T1201] smc: removing ib device sz1 [ 864.813619][ T1201] smbdirect: ib_dev[sz1] removed [ 864.815386][ T5464] 8021q: adding VLAN 0 to HW filter on device eth16 [ 865.196467][T27651] Bluetooth: hci0: command tx timeout [ 865.613673][T27668] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 865.617129][T27668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 865.621906][T27668] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 865.625788][T27668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 865.628370][T27668] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 865.632451][T27668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 865.635263][T27668] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 865.642817][T27668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 865.680336][T27668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.686988][T27668] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.695990][T19684] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.698963][T19684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.708328][ T1201] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.710582][ T1201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.730860][T27668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 865.735456][T27668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 865.917827][ T5464] 8021q: adding VLAN 0 to HW filter on device eth17 [ 866.023508][T27668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.039786][T27770] ptrace attach of "/syz-executor exec"[27776] was attempted by "/syz-executor exec"[27770] [ 866.138395][T27668] veth0_vlan: entered promiscuous mode [ 866.142463][T27668] veth1_vlan: entered promiscuous mode [ 866.155584][T27668] veth0_macvtap: entered promiscuous mode [ 866.159176][T27668] veth1_macvtap: entered promiscuous mode [ 866.168548][T27668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 866.173010][T27668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 866.191358][T24666] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.207843][T24666] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.218828][T24666] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.221709][T24666] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.256696][ T1201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.259931][ T1201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.273265][T19684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.276701][T19684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.314191][T27651] Bluetooth: hci3: command 0x0c1a tx timeout [ 866.339134][T27797] random: crng reseeded on system resumption [ 866.349395][T27797] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6414'. [ 866.364735][T27797] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6414'. [ 867.274209][T27651] Bluetooth: hci0: command tx timeout [ 867.325333][T27810] FAULT_INJECTION: forcing a failure. [ 867.325333][T27810] name failslab, interval 1, probability 0, space 0, times 0 [ 867.331600][T27810] CPU: 3 UID: 0 PID: 27810 Comm: syz.8.6416 Tainted: G L syzkaller #0 PREEMPT(full) [ 867.331618][T27810] Tainted: [L]=SOFTLOCKUP [ 867.331627][T27810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 867.331646][T27810] Call Trace: [ 867.331651][T27810] [ 867.331655][T27810] dump_stack_lvl+0x100/0x190 [ 867.331676][T27810] should_fail_ex.cold+0x5/0xa [ 867.331687][T27810] ? kmem_cache_alloc_noprof+0x54/0x6e0 [ 867.331703][T27810] should_failslab+0xc2/0x120 [ 867.331714][T27810] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 867.331728][T27810] ? alloc_empty_file+0x5b/0x1c0 [ 867.331741][T27810] ? lock_release+0x24d/0x310 [ 867.331755][T27810] alloc_empty_file+0x5b/0x1c0 [ 867.331768][T27810] alloc_file_pseudo+0x183/0x290 [ 867.331781][T27810] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 867.331793][T27810] ? inode_init_always_gfp+0xc98/0xfb0 [ 867.331805][T27810] sock_alloc_file+0x50/0x210 [ 867.331820][T27810] do_accept+0x242/0x530 [ 867.331831][T27810] ? do_raw_spin_lock+0x128/0x260 [ 867.331846][T27810] ? __pfx_do_accept+0x10/0x10 [ 867.331857][T27810] ? rcu_is_watching+0x12/0xc0 [ 867.331869][T27810] __sys_accept4+0x108/0x200 [ 867.331880][T27810] ? __pfx___sys_accept4+0x10/0x10 [ 867.331892][T27810] ? ksys_write+0x1ac/0x250 [ 867.331902][T27810] __ia32_sys_accept4+0x94/0x100 [ 867.331914][T27810] __do_fast_syscall_32+0xe7/0x970 [ 867.331926][T27810] do_fast_syscall_32+0x32/0x70 [ 867.331937][T27810] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 867.331951][T27810] RIP: 0023:0xf7fa2fec [ 867.331963][T27810] Code: Unable to access opcode bytes at 0xf7fa2fc2. [ 867.331968][T27810] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 000000000000016c [ 867.331978][T27810] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 867.331985][T27810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 867.331991][T27810] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 867.331997][T27810] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 867.332003][T27810] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 867.332012][T27810] [ 867.494027][T27818] Bluetooth: MGMT ver 1.23 [ 867.543050][T27816] ptrace attach of "/syz-executor exec"[27821] was attempted by "/syz-executor exec"[27816] [ 867.633115][T27823] xt_l2tp: unknown flags: 51 [ 867.756167][ T1479] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 867.906565][ T1479] usb 13-1: too many configurations: 9, using maximum allowed: 8 [ 867.908125][T27830] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6423'. [ 867.913268][ T1479] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 867.918274][ T1479] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 867.926781][ T1479] usb 13-1: config 0 interface 0 has no altsetting 0 [ 867.930350][ T1479] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 867.933641][ T1479] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 867.942820][ T1479] usb 13-1: config 0 interface 0 has no altsetting 0 [ 867.948872][ T1479] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 867.954274][ T1479] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 867.960127][ T1479] usb 13-1: config 0 interface 0 has no altsetting 0 [ 867.973239][T27830] bond4: Unable to set down delay as MII monitoring is disabled [ 867.977313][ T1479] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 867.981593][ T1479] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 867.985398][ T1479] usb 13-1: config 0 interface 0 has no altsetting 0 [ 867.990859][ T1479] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 867.993975][ T1479] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 867.998746][ T1479] usb 13-1: config 0 interface 0 has no altsetting 0 [ 868.004236][ T1479] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 868.006949][ T1479] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 868.009859][ T1479] usb 13-1: config 0 interface 0 has no altsetting 0 [ 868.016591][ T1479] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 868.020947][ T1479] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 868.026213][ T1479] usb 13-1: config 0 interface 0 has no altsetting 0 [ 868.029512][ T1479] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 868.033424][ T1479] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 868.040925][ T1479] usb 13-1: config 0 interface 0 has no altsetting 0 [ 868.046243][ T1479] usb 13-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 868.050209][ T1479] usb 13-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 868.053071][T27832] tracefs: Bad value for 'uid' [ 868.053771][T27830] bond4 (unregistering): Released all slaves [ 868.054736][T27832] tracefs: Bad value for 'uid' [ 868.055185][ T1479] usb 13-1: Product: syz [ 868.055196][ T1479] usb 13-1: Manufacturer: syz [ 868.055203][ T1479] usb 13-1: SerialNumber: syz [ 868.058624][ T1479] usb 13-1: config 0 descriptor?? [ 868.076330][ T1479] yurex 13-1:0.0: Could not find endpoints [ 868.918237][T27808] usb 13-1: USB disconnect, device number 2 [ 869.066593][T27836] futex_wake_op: syz.7.6424 tries to shift op by -1; fix this program [ 869.164203][T27844] netlink: 'syz.7.6427': attribute type 1 has an invalid length. [ 869.166997][T27844] netlink: 112 bytes leftover after parsing attributes in process `syz.7.6427'. [ 869.169788][T27844] netlink: 200 bytes leftover after parsing attributes in process `syz.7.6427'. [ 869.209750][T27847] /dev/sg0: Can't lookup blockdev [ 869.274803][T27854] bond1: entered allmulticast mode [ 869.277143][T27854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 869.283277][T27854] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6428'. [ 869.364197][T27651] Bluetooth: hci0: command tx timeout [ 869.535664][T27874] ptrace attach of "/syz-executor exec"[27879] was attempted by "/syz-executor exec"[27874] [ 870.110771][T27904] netlink: 'syz.6.6439': attribute type 8 has an invalid length. [ 870.609566][ T1479] libceph: connect (1)[c::]:6789 error -13 [ 870.611455][ T1479] libceph: mon0 (1)[c::]:6789 connect error [ 870.718852][T27920] ceph: No mds server is up or the cluster is laggy [ 870.865640][ T1479] libceph: connect (1)[c::]:6789 error -13 [ 870.871974][ T1479] libceph: mon0 (1)[c::]:6789 connect error [ 871.307813][T27950] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6450'. [ 871.311365][T27950] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6450'. [ 871.434401][T27651] Bluetooth: hci0: command tx timeout [ 871.521013][T27962] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6456'. [ 871.574195][ T5125] usb 12-1: new full-speed USB device number 4 using dummy_hcd [ 871.634144][ T50] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 871.729824][ T5125] usb 12-1: config index 0 descriptor too short (expected 28277, got 36) [ 871.733359][ T5125] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.737041][ T5125] usb 12-1: config 0 has no interfaces? [ 871.738908][ T5125] usb 12-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 871.743873][ T5125] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.747597][ T10] libceph: connect (1)[c::]:6789 error -101 [ 871.752968][ T5125] usb 12-1: config 0 descriptor?? [ 871.785085][ T50] usb 11-1: device descriptor read/64, error -71 [ 871.788751][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 871.826046][T27984] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6462'. [ 872.046949][ T10] libceph: connect (1)[c::]:6789 error -101 [ 872.056151][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 872.493336][T27980] ceph: No mds server is up or the cluster is laggy [ 872.644179][ T50] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 872.746609][T28001] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 872.774174][ T50] usb 11-1: device descriptor read/64, error -71 [ 872.823079][T28004] FAULT_INJECTION: forcing a failure. [ 872.823079][T28004] name failslab, interval 1, probability 0, space 0, times 0 [ 872.827059][T28004] CPU: 2 UID: 0 PID: 28004 Comm: syz.5.6468 Tainted: G L syzkaller #0 PREEMPT(full) [ 872.827076][T28004] Tainted: [L]=SOFTLOCKUP [ 872.827080][T28004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 872.827087][T28004] Call Trace: [ 872.827091][T28004] [ 872.827095][T28004] dump_stack_lvl+0x100/0x190 [ 872.827116][T28004] should_fail_ex.cold+0x5/0xa [ 872.827128][T28004] ? kmem_cache_alloc_noprof+0x54/0x6e0 [ 872.827143][T28004] should_failslab+0xc2/0x120 [ 872.827153][T28004] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 872.827167][T28004] ? security_file_alloc+0x34/0x2c0 [ 872.827180][T28004] ? trace_kmem_cache_alloc+0xdd/0x100 [ 872.827191][T28004] security_file_alloc+0x34/0x2c0 [ 872.827203][T28004] init_file+0x95/0x480 [ 872.827215][T28004] alloc_empty_file+0x79/0x1c0 [ 872.827228][T28004] alloc_file_pseudo+0x183/0x290 [ 872.827241][T28004] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 872.827253][T28004] ? inode_init_always_gfp+0xc98/0xfb0 [ 872.827265][T28004] sock_alloc_file+0x50/0x210 [ 872.827280][T28004] do_accept+0x242/0x530 [ 872.827304][T28004] ? do_raw_spin_lock+0x128/0x260 [ 872.827321][T28004] ? __pfx_do_accept+0x10/0x10 [ 872.827332][T28004] ? rcu_is_watching+0x12/0xc0 [ 872.827345][T28004] __sys_accept4+0x108/0x200 [ 872.827356][T28004] ? __pfx___sys_accept4+0x10/0x10 [ 872.827368][T28004] ? ksys_write+0x1ac/0x250 [ 872.827377][T28004] __ia32_sys_accept4+0x94/0x100 [ 872.827389][T28004] __do_fast_syscall_32+0xe7/0x970 [ 872.827401][T28004] do_fast_syscall_32+0x32/0x70 [ 872.827412][T28004] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 872.827425][T28004] RIP: 0023:0xf700efec [ 872.827437][T28004] Code: Unable to access opcode bytes at 0xf700efc2. [ 872.827442][T28004] RSP: 002b:00000000f53dc50c EFLAGS: 00000292 ORIG_RAX: 000000000000016c [ 872.827453][T28004] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 872.827459][T28004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 872.827466][T28004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 872.827473][T28004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.827479][T28004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 872.827493][T28004] [ 872.886285][ T50] usb usb11-port1: attempt power cycle [ 873.080012][T28008] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6470'. [ 873.284398][ T50] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 873.634744][ T50] usb 11-1: device descriptor read/8, error -71 [ 873.781348][T28026] loop5: detected capacity change from 0 to 7 [ 873.876504][T28026] Dev loop5: unable to read RDB block 7 [ 873.878843][T28026] loop5: unable to read partition table [ 873.881177][T28026] loop5: partition table beyond EOD, truncated [ 873.884003][T28026] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 873.934730][T28030] Invalid logical block size (-1) [ 873.955557][ T50] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 873.974665][ T50] usb 11-1: device descriptor read/8, error -71 [ 874.085312][ T50] usb usb11-port1: unable to enumerate USB device [ 874.091124][T28038] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6478'. [ 874.093964][T28038] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6478'. [ 874.182042][ T5125] usb 12-1: string descriptor 0 read error: -71 [ 874.187847][ T5125] usb 12-1: USB disconnect, device number 4 [ 874.499908][T28058] netlink: 'syz.6.6485': attribute type 1 has an invalid length. [ 874.503266][T28058] netlink: 112 bytes leftover after parsing attributes in process `syz.6.6485'. [ 874.508052][T28058] netlink: 200 bytes leftover after parsing attributes in process `syz.6.6485'. [ 874.824759][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.827299][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.386458][T28078] binder: 28074:28078 ioctl 40406f06 80000000 returned -22 [ 875.593763][T28083] loop2: detected capacity change from 0 to 7 [ 875.603820][T28083] Dev loop2: unable to read RDB block 7 [ 875.605807][T28083] loop2: unable to read partition table [ 875.607840][T28083] loop2: partition table beyond EOD, truncated [ 875.609915][T28083] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 875.893918][T28096] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6496'. [ 875.897858][T28096] openvswitch: netlink: Flow key attr not present in new flow. [ 877.702929][T28119] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6501'. [ 877.713041][T28119] vlan2: entered allmulticast mode [ 877.715311][T28119] bridge3: entered allmulticast mode [ 877.718564][T28119] erspan0: left allmulticast mode [ 877.720654][T28119] bridge3: port 1(erspan0) entered blocking state [ 877.723282][T28119] bridge3: port 1(erspan0) entered disabled state [ 877.726725][T28119] erspan0: entered allmulticast mode [ 877.741842][T28123] loop5: detected capacity change from 0 to 7 [ 877.744805][T28123] Dev loop5: unable to read RDB block 7 [ 877.747152][T28123] loop5: unable to read partition table [ 877.750536][T28123] loop5: partition table beyond EOD, truncated [ 877.755517][T28123] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 877.815409][T28131] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6505'. [ 877.833213][ T5162] Dev loop5: unable to read RDB block 7 [ 877.837003][ T5162] loop5: unable to read partition table [ 877.838900][ T5162] loop5: partition table beyond EOD, truncated [ 878.194190][ T1479] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 878.344575][ T1479] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 878.348335][ T1479] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 878.351139][ T1479] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 878.355228][ T1479] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 878.359107][ T1479] usb 12-1: config 0 interface 0 has no altsetting 0 [ 878.362192][ T1479] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 878.365469][ T1479] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 878.369328][ T1479] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 878.372489][ T1479] usb 12-1: config 0 interface 0 has no altsetting 0 [ 878.377233][ T1479] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 878.380252][ T1479] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 878.383591][ T1479] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 878.386703][ T1479] usb 12-1: config 0 interface 0 has no altsetting 0 [ 878.389989][ T1479] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 878.393025][ T1479] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 878.396591][ T1479] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 878.399704][ T1479] usb 12-1: config 0 interface 0 has no altsetting 0 [ 878.402553][ T1479] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 878.405576][ T1479] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 878.408961][ T1479] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 878.412067][ T1479] usb 12-1: config 0 interface 0 has no altsetting 0 [ 878.415480][ T1479] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 878.418356][ T1479] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 878.421743][ T1479] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 878.425185][ T1479] usb 12-1: config 0 interface 0 has no altsetting 0 [ 878.430334][ T1479] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 878.433495][ T1479] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 878.438859][ T1479] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 878.443185][ T1479] usb 12-1: config 0 interface 0 has no altsetting 0 [ 878.447537][ T1479] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 878.450367][ T1479] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 878.453824][ T1479] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 878.457252][ T1479] usb 12-1: config 0 interface 0 has no altsetting 0 [ 878.463092][ T1479] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 878.467790][ T1479] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 878.472378][ T1479] usb 12-1: Product: syz [ 878.474874][ T1479] usb 12-1: Manufacturer: syz [ 878.477574][ T1479] usb 12-1: SerialNumber: syz [ 878.485693][ T1479] usb 12-1: config 0 descriptor?? [ 878.490224][ T1479] yurex 12-1:0.0: Could not submitting URB [ 878.492454][ T1479] yurex 12-1:0.0: probe with driver yurex failed with error -5 [ 878.739466][T28169] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6512'. [ 878.762908][ T50] usb 12-1: USB disconnect, device number 5 [ 879.870465][T28191] ptrace attach of "/syz-executor exec"[28194] was attempted by "/syz-executor exec"[28191] [ 879.954701][T28198] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6520'. [ 880.031157][T28178] Process accounting resumed [ 880.069072][T28190] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6517'. [ 880.073190][T28190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6517'. [ 880.363762][T28222] netlink: 'syz.6.6527': attribute type 9 has an invalid length. [ 880.623496][T28228] netlink: 'syz.7.6530': attribute type 1 has an invalid length. [ 880.626947][T28228] netlink: 112 bytes leftover after parsing attributes in process `syz.7.6530'. [ 880.633444][T28228] netlink: 200 bytes leftover after parsing attributes in process `syz.7.6530'. [ 881.344557][T28254] ptrace attach of "/syz-executor exec"[28255] was attempted by "/syz-executor exec"[28254] [ 881.365893][T28257] lo: entered promiscuous mode [ 881.367479][T28257] lo: entered allmulticast mode [ 881.371761][T28257] tunl0: entered promiscuous mode [ 881.374449][T28257] tunl0: entered allmulticast mode [ 881.380380][T28257] gre0: entered promiscuous mode [ 881.382044][T28257] gre0: entered allmulticast mode [ 881.388411][T28257] gretap0: entered promiscuous mode [ 881.394226][T28257] gretap0: entered allmulticast mode [ 881.402758][T28257] erspan0: entered promiscuous mode [ 881.405302][T28257] erspan0: entered allmulticast mode [ 881.409194][T28257] ip_vti0: entered promiscuous mode [ 881.411439][T28257] ip_vti0: entered allmulticast mode [ 881.415521][T28257] ip6_vti0: entered promiscuous mode [ 881.417846][T28257] ip6_vti0: entered allmulticast mode [ 881.423890][T28257] sit0: entered promiscuous mode [ 881.426249][T28257] sit0: entered allmulticast mode [ 881.430857][T28257] ip6tnl0: entered promiscuous mode [ 881.432245][T28258] netlink: 'syz.6.6537': attribute type 4 has an invalid length. [ 881.433106][T28257] ip6tnl0: entered allmulticast mode [ 881.440560][T28257] ip6gre0: entered promiscuous mode [ 881.442752][T28257] ip6gre0: entered allmulticast mode [ 881.449763][T28257] syz_tun: entered promiscuous mode [ 881.451969][T28257] syz_tun: entered allmulticast mode [ 881.475444][T28257] ip6gretap0: entered promiscuous mode [ 881.477761][T28257] ip6gretap0: entered allmulticast mode [ 881.482083][T28257] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.485279][T28257] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.489326][T28257] bridge0: entered promiscuous mode [ 881.491624][T28257] bridge0: entered allmulticast mode [ 881.508914][T28261] netlink: 'syz.6.6537': attribute type 4 has an invalid length. [ 881.547764][T28257] futex_wake_op: syz.8.6539 tries to shift op by -1; fix this program [ 882.216971][T28283] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6545'. [ 882.804455][T28282] lo: entered promiscuous mode [ 882.805989][T28282] lo: entered allmulticast mode [ 882.807635][T28282] tunl0: entered promiscuous mode [ 882.809275][T28282] tunl0: entered allmulticast mode [ 882.810947][T28282] gre0: entered promiscuous mode [ 882.812524][T28282] gre0: entered allmulticast mode [ 882.814414][T28282] gretap0: entered promiscuous mode [ 882.816051][T28282] gretap0: entered allmulticast mode [ 882.817755][T28282] erspan0: entered promiscuous mode [ 882.819515][T28282] erspan0: entered allmulticast mode [ 882.821221][T28282] ip_vti0: entered promiscuous mode [ 882.822839][T28282] ip_vti0: entered allmulticast mode [ 882.824766][T28282] ip6_vti0: entered promiscuous mode [ 882.826395][T28282] ip6_vti0: entered allmulticast mode [ 882.828119][T28282] sit0: entered promiscuous mode [ 882.829692][T28282] sit0: entered allmulticast mode [ 882.831275][T28282] ip6tnl0: entered promiscuous mode [ 882.832928][T28282] ip6tnl0: entered allmulticast mode [ 882.834858][T28282] ip6gre0: entered promiscuous mode [ 882.836480][T28282] ip6gre0: entered allmulticast mode [ 882.838166][T28282] syz_tun: entered promiscuous mode [ 882.839737][T28282] syz_tun: entered allmulticast mode [ 882.841425][T28282] ip6gretap0: entered promiscuous mode [ 882.843104][T28282] ip6gretap0: entered allmulticast mode [ 882.845030][T28282] bridge0: entered promiscuous mode [ 882.846619][T28282] bridge0: entered allmulticast mode [ 882.927227][T28286] futex_wake_op: syz.7.6547 tries to shift op by -1; fix this program [ 883.257683][T28288] openvswitch: netlink: IPv4 tun info is not correct [ 883.310084][T28294] Cannot find map_set index 2 as target [ 883.415219][T28292] futex_wake_op: syz.7.6549 tries to shift op by -1; fix this program [ 883.558197][T28305] atomic_op ffff88802543e198 conn xmit_atomic 0000000000000000 [ 883.679651][T28310] dlm: Unknown command passed to DLM device : 3 [ 883.679651][T28310] [ 883.796244][T28312] batman_adv: batadv0: Adding interface: macsec1 [ 883.799010][T28312] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.809986][T28312] batman_adv: batadv0: Interface activated: macsec1 [ 884.426647][T28320] 9p: Unknown Cache mode or invalid value fsca [ 884.634663][ T5541] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 884.784452][ T5541] usb 11-1: Using ep0 maxpacket: 16 [ 884.787463][ T5541] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 884.791909][ T5541] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 884.794682][ T5541] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.797638][ T5541] usb 11-1: Product: syz [ 884.798952][ T5541] usb 11-1: Manufacturer: syz [ 884.804084][ T5541] usb 11-1: SerialNumber: syz [ 884.806984][ T5541] usb 11-1: config 0 descriptor?? [ 884.815096][ T5541] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 884.817898][ T5541] em28xx 11-1:0.0: DVB interface 0 found: bulk [ 885.783627][T28336] netlink: 'syz.5.6562': attribute type 1 has an invalid length. [ 885.793893][T28336] 8021q: adding VLAN 0 to HW filter on device bond4 [ 885.796710][T28339] netlink: 56 bytes leftover after parsing attributes in process `syz.8.6563'. [ 885.803613][T28336] dummy0: left promiscuous mode [ 885.805348][T28336] dummy0: left allmulticast mode [ 885.808629][T28336] bond4: (slave dummy0): making interface the new active one [ 885.811351][T28336] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 885.817100][T28336] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6562'. [ 885.820253][T28336] dummy0: entered promiscuous mode [ 885.965221][ T5541] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 887.260278][T28360] warn_alloc: 1 callbacks suppressed [ 887.260296][T28360] syz.5.6568: page allocation failure: order:6, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 887.268429][T28360] CPU: 2 UID: 0 PID: 28360 Comm: syz.5.6568 Tainted: G L syzkaller #0 PREEMPT(full) [ 887.268457][T28360] Tainted: [L]=SOFTLOCKUP [ 887.268464][T28360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 887.268476][T28360] Call Trace: [ 887.268482][T28360] [ 887.268489][T28360] dump_stack_lvl+0x100/0x190 [ 887.268523][T28360] warn_alloc.cold+0x95/0x1c1 [ 887.268554][T28360] ? __pfx_warn_alloc+0x10/0x10 [ 887.268581][T28360] ? psi_memstall_leave+0x19c/0x360 [ 887.268600][T28360] ? lock_release+0x24d/0x310 [ 887.268623][T28360] ? rcu_is_watching+0x12/0xc0 [ 887.268641][T28360] ? __pfx___might_resched+0x10/0x10 [ 887.268666][T28360] __alloc_frozen_pages_noprof+0xf25/0x2b60 [ 887.268697][T28360] ? sysfs_add_file_mode_ns+0x22f/0x3c0 [ 887.268724][T28360] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 887.268751][T28360] ? kernfs_put+0x3f/0x60 [ 887.268774][T28360] ? internal_create_group+0x915/0xfb0 [ 887.268797][T28360] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 887.268819][T28360] ? policy_nodemask+0xed/0x4f0 [ 887.268837][T28360] alloc_pages_mpol+0x1fb/0x540 [ 887.268854][T28360] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 887.268874][T28360] ? ib_setup_port_attrs+0x2b4/0x600 [ 887.268896][T28360] ___kmalloc_large_node+0xe5/0x120 [ 887.268917][T28360] __kmalloc_large_node_noprof+0x1c/0x70 [ 887.268937][T28360] __kmalloc_noprof+0x5be/0x850 [ 887.268979][T28360] ? rdma_port_get_link_layer+0x57/0xe0 [ 887.269006][T28360] ib_setup_port_attrs+0x2b4/0x600 [ 887.269028][T28360] ? kobject_put+0xb9/0x640 [ 887.269051][T28360] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 887.269077][T28360] ? __init_waitqueue_head+0xca/0x150 [ 887.269105][T28360] add_one_compat_dev+0x5b3/0x820 [ 887.269133][T28360] rdma_dev_init_net+0x30a/0x590 [ 887.269160][T28360] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 887.269188][T28360] ? __kmalloc_noprof+0x320/0x850 [ 887.269214][T28360] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 887.269241][T28360] ops_init+0x1e2/0x5f0 [ 887.269266][T28360] setup_net+0x118/0x3a0 [ 887.269290][T28360] ? __pfx_setup_net+0x10/0x10 [ 887.269314][T28360] ? mutex_init_lockdep+0xf1/0x120 [ 887.269340][T28360] copy_net_ns+0x46f/0x7c0 [ 887.269367][T28360] create_new_namespaces+0x3ea/0xac0 [ 887.269396][T28360] unshare_nsproxy_namespaces+0xf2/0x220 [ 887.269423][T28360] ksys_unshare+0x438/0xab0 [ 887.269441][T28360] ? kfree+0x1e5/0x6c0 [ 887.269462][T28360] ? __pfx_ksys_unshare+0x10/0x10 [ 887.269481][T28360] ? fput+0x79/0x100 [ 887.269503][T28360] __ia32_sys_unshare+0x30/0x40 [ 887.269521][T28360] __do_fast_syscall_32+0xe7/0x970 [ 887.269540][T28360] ? trace_hardirqs_on_prepare+0x1d/0x30 [ 887.269565][T28360] do_fast_syscall_32+0x32/0x70 [ 887.269583][T28360] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 887.269606][T28360] RIP: 0023:0xf700efec [ 887.269626][T28360] Code: Unable to access opcode bytes at 0xf700efc2. [ 887.269635][T28360] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 887.269653][T28360] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 887.269665][T28360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 887.269676][T28360] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 887.269687][T28360] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 887.269698][T28360] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 887.269714][T28360] [ 887.269721][T28360] Mem-Info: [ 887.352286][T28362] dvmrp8: entered allmulticast mode [ 887.355379][T28360] active_anon:3859 inactive_anon:1397 isolated_anon:0 [ 887.355379][T28360] active_file:2406 inactive_file:6951 isolated_file:0 [ 887.355379][T28360] unevictable:1768 dirty:280 writeback:0 [ 887.355379][T28360] slab_reclaimable:7705 slab_unreclaimable:87855 [ 887.355379][T28360] mapped:25023 shmem:4644 pagetables:1689 [ 887.355379][T28360] sec_pagetables:379 bounce:0 [ 887.355379][T28360] kernel_misc_reclaimable:0 [ 887.355379][T28360] free:33778 free_pcp:1711 free_cma:0 [ 887.401561][T28360] Node 0 active_anon:16kB inactive_anon:156kB active_file:92kB inactive_file:3436kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:376kB dirty:192kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8288kB pagetables:1548kB sec_pagetables:1212kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 887.421908][T28360] Node 1 active_anon:16220kB inactive_anon:5432kB active_file:9532kB inactive_file:24308kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100016kB dirty:932kB writeback:0kB shmem:15040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9352kB pagetables:5156kB sec_pagetables:304kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 887.432859][T28360] Node 0 DMA free:1900kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:16kB inactive_file:216kB unevictable:0kB writepending:0kB zspages:16kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 887.443552][T28360] lowmem_reserve[]: 0 285 285 285 285 [ 887.446027][T28360] Node 0 DMA32 free:33488kB boost:29452kB min:42544kB low:45816kB high:49088kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:156kB active_file:76kB inactive_file:3220kB unevictable:3536kB writepending:192kB zspages:1336kB present:1032196kB managed:292680kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 887.447238][ T5541] em28xx 11-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 887.460235][T28360] lowmem_reserve[]: 0 0 0 0 0 [ 887.462176][ T5541] em28xx 11-1:0.0: board has no eeprom [ 887.463779][T28360] Node 1 DMA32 free:98528kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16924kB inactive_anon:5432kB active_file:9532kB inactive_file:24308kB unevictable:3536kB writepending:932kB zspages:6232kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:6884kB local_pcp:872kB free_cma:0kB [ 887.480989][T28360] lowmem_reserve[]: 0 0 0 0 0 [ 887.483126][T28360] Node 0 DMA: 7*4kB (UM) 16*8kB (UM) 9*16kB (UM) 0*32kB 5*64kB (U) 2*128kB (UM) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1900kB [ 887.489161][T28360] Node 0 DMA32: 928*4kB (UME) 708*8kB (UME) 297*16kB (UME) 221*32kB (UME) 80*64kB (UME) 28*128kB (UME) 10*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 33488kB [ 887.496858][T28360] Node 1 DMA32: 1643*4kB (UME) 2862*8kB (UM) 3926*16kB (UME) 129*32kB (UME) 23*64kB (UM) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 98268kB [ 887.503996][T28360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 887.508788][T28360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 887.512676][T28360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 887.517170][T28360] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 887.521027][T28360] 15099 total pagecache pages [ 887.523180][T28360] 1113 pages in swap cache [ 887.525424][T28360] Free swap = 37872kB [ 887.527273][T28360] Total swap = 124996kB [ 887.529134][T28360] 524155 pages RAM [ 887.530775][T28360] 0 pages HighMem/MovableOnly [ 887.532833][T28360] 210092 pages reserved [ 887.535027][ T5541] em28xx 11-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 887.535255][T28360] 0 pages cma reserved [ 887.537307][ T5541] em28xx 11-1:0.0: dvb set to bulk mode. [ 887.537342][ T5836] em28xx 11-1:0.0: Binding DVB extension [ 887.572347][T27805] usb 11-1: USB disconnect, device number 16 [ 887.582176][T27805] em28xx 11-1:0.0: Disconnecting em28xx [ 887.582821][ T5836] em28xx 11-1:0.0: Registering input extension [ 887.588298][T27805] em28xx 11-1:0.0: Closing input extension [ 887.596779][T27805] em28xx 11-1:0.0: Freeing device [ 887.606126][T28366] netlink: 'syz.8.6569': attribute type 61 has an invalid length. [ 887.615596][ T41] audit: type=1326 audit(1781582871.245:27169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28363 comm="syz.8.6569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 887.623041][ T41] audit: type=1326 audit(1781582871.245:27170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28363 comm="syz.8.6569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 887.631171][ T41] audit: type=1326 audit(1781582871.245:27171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28363 comm="syz.8.6569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 887.638302][ T41] audit: type=1326 audit(1781582871.245:27172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28363 comm="syz.8.6569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 887.645196][ T41] audit: type=1326 audit(1781582871.245:27173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28363 comm="syz.8.6569" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 887.653168][ T41] audit: type=1326 audit(1781582871.265:27174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28363 comm="syz.8.6569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 887.662068][ T41] audit: type=1326 audit(1781582871.265:27176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28363 comm="syz.8.6569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 887.671399][ T41] audit: type=1326 audit(1781582871.265:27177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28363 comm="syz.8.6569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 887.684762][ T41] audit: type=1326 audit(1781582871.265:27175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28363 comm="syz.8.6569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 887.691470][ T5836] IPVS: starting estimator thread 0... [ 887.695605][ T41] audit: type=1326 audit(1781582871.275:27178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28363 comm="syz.8.6569" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7fa2fec code=0x7ffc0000 [ 887.804238][T28372] IPVS: using max 55 ests per chain, 132000 per kthread [ 889.444259][T27808] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 889.594208][T27808] usb 10-1: Using ep0 maxpacket: 16 [ 889.598917][T27808] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 889.604972][T27808] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 889.608814][T27808] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.612170][T27808] usb 10-1: Product: syz [ 889.614624][T27808] usb 10-1: Manufacturer: syz [ 889.616632][T27808] usb 10-1: SerialNumber: syz [ 889.622311][T27808] usb 10-1: config 0 descriptor?? [ 889.627706][T27808] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 889.631541][T27808] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 889.896251][T28404] futex_wake_op: syz.8.6579 tries to shift op by -1; fix this program [ 889.953895][T28407] netlink: 'syz.8.6580': attribute type 7 has an invalid length. [ 889.957099][T28407] netlink: 'syz.8.6580': attribute type 8 has an invalid length. [ 890.257337][T27808] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 890.578755][T28430] FAULT_INJECTION: forcing a failure. [ 890.578755][T28430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.583894][T28430] CPU: 2 UID: 0 PID: 28430 Comm: syz.7.6589 Tainted: G L syzkaller #0 PREEMPT(full) [ 890.583917][T28430] Tainted: [L]=SOFTLOCKUP [ 890.583937][T28430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 890.583945][T28430] Call Trace: [ 890.583950][T28430] [ 890.583956][T28430] dump_stack_lvl+0x100/0x190 [ 890.583981][T28430] should_fail_ex.cold+0x5/0xa [ 890.583997][T28430] _copy_to_iter+0x5a4/0x1720 [ 890.584014][T28430] ? rcu_is_watching+0x12/0xc0 [ 890.584027][T28430] ? __pfx__copy_to_iter+0x10/0x10 [ 890.584042][T28430] ? __pfx___might_resched+0x10/0x10 [ 890.584059][T28430] ? process_measurement+0x4c8/0x2350 [ 890.584079][T28430] ? rcu_is_watching+0x12/0xc0 [ 890.584090][T28430] ? process_measurement+0x4c8/0x2350 [ 890.584109][T28430] ? lock_release+0x24d/0x310 [ 890.584125][T28430] ? aa_label_sk_perm+0x194/0x5f0 [ 890.584139][T28430] ? down_write+0x146/0x1f0 [ 890.584154][T28430] simple_copy_to_iter+0x46/0x90 [ 890.584169][T28430] __skb_datagram_iter+0x5c8/0x900 [ 890.584182][T28430] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 890.584198][T28430] skb_copy_datagram_iter+0xa1/0x250 [ 890.584213][T28430] mptcp_recvmsg+0x6d7/0x1120 [ 890.584235][T28430] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 890.584253][T28430] ? unwind_next_frame+0x3be/0x2090 [ 890.584269][T28430] ? rcu_is_watching+0x12/0xc0 [ 890.584281][T28430] ? __pfx_aa_sk_perm+0x10/0x10 [ 890.584296][T28430] ? is_bpf_text_address+0x8a/0x1a0 [ 890.584312][T28430] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 890.584329][T28430] inet6_recvmsg+0x455/0x4c0 [ 890.584350][T28430] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 890.584367][T28430] ? __pfx_inet6_recvmsg+0x10/0x10 [ 890.584386][T28430] sock_recvmsg+0xfe/0x1f0 [ 890.584407][T28430] ____sys_recvmsg+0x218/0x640 [ 890.584421][T28430] ? __pfx_____sys_recvmsg+0x10/0x10 [ 890.584443][T28430] ? __pfx__kstrtoull+0x10/0x10 [ 890.584462][T28430] ? rcu_is_watching+0x12/0xc0 [ 890.584474][T28430] ? aa_file_perm+0x7e4/0x14d0 [ 890.584492][T28430] ___sys_recvmsg+0x16a/0x1a0 [ 890.584505][T28430] ? __pfx____sys_recvmsg+0x10/0x10 [ 890.584517][T28430] ? __pfx_kstrtouint+0x10/0x10 [ 890.584537][T28430] ? rcu_is_watching+0x12/0xc0 [ 890.584553][T28430] do_recvmmsg+0x563/0x760 [ 890.584567][T28430] ? __pfx_do_recvmmsg+0x10/0x10 [ 890.584579][T28430] ? ksys_write+0x12a/0x250 [ 890.584591][T28430] ? lock_release+0x24d/0x310 [ 890.584607][T28430] ? ksys_write+0x190/0x250 [ 890.584619][T28430] ? rcu_is_watching+0x12/0xc0 [ 890.584633][T28430] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 890.584647][T28430] __sys_recvmmsg+0x21f/0x270 [ 890.584666][T28430] ? __pfx___sys_recvmmsg+0x10/0x10 [ 890.584684][T28430] ? ksys_write+0x1ac/0x250 [ 890.584696][T28430] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 890.584724][T28430] ? trace_irq_enable.constprop.0+0x122/0x160 [ 890.584742][T28430] __do_fast_syscall_32+0xe7/0x970 [ 890.584756][T28430] do_fast_syscall_32+0x32/0x70 [ 890.584770][T28430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 890.584788][T28430] RIP: 0023:0xf6fdefec [ 890.584804][T28430] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 890.584811][T28430] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 890.584828][T28430] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800028c0 [ 890.584838][T28430] RDX: 0000000000000004 RSI: 0000000000000002 RDI: 0000000000000000 [ 890.584847][T28430] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 890.584857][T28430] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 890.584866][T28430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 890.584881][T28430] [ 890.742618][T28433] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6590'. [ 890.747952][T28433] netlink: 252 bytes leftover after parsing attributes in process `syz.7.6590'. [ 890.780947][T28435] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6591'. [ 890.784898][T28435] netlink: 556 bytes leftover after parsing attributes in process `syz.7.6591'. [ 891.292241][T28452] 9p: Unknown Cache mode or invalid value fsca [ 891.340208][T28445] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6593'. [ 891.347088][T28445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 891.375023][T28445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.601361][T27808] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 891.608075][T27808] em28xx 10-1:0.0: board has no eeprom [ 891.674987][T27808] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 891.680584][T27808] em28xx 10-1:0.0: dvb set to bulk mode. [ 891.685782][T27808] em28xx 10-1:0.0: Binding DVB extension [ 891.691647][T27808] ------------[ cut here ]------------ [ 891.693714][T27808] !PageLargeKmalloc(page) [ 891.693722][T27808] WARNING: mm/slub.c:6476 at free_large_kmalloc+0xbf/0x100, CPU#2: kworker/2:5/27808 [ 891.698254][T27808] Modules linked in: [ 891.699883][T27808] CPU: 2 UID: 0 PID: 27808 Comm: kworker/2:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 891.703400][T27808] Tainted: [L]=SOFTLOCKUP [ 891.705007][T27808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 891.708183][T27808] Workqueue: events request_module_async [ 891.709906][T27808] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 891.711667][T27808] Code: 28 90 0f 0b 90 80 3d 4e cf 56 0e 00 0f 84 07 ac ba fe 48 8b 74 24 28 48 89 ef e8 9c 00 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 e8 b1 f0 8d 5b 5d 41 5c 41 [ 891.717951][T27808] RSP: 0000:ffffc9000400f818 EFLAGS: 00010293 [ 891.719968][T27808] RAX: 00000000000000f0 RBX: ffffea0001a3d000 RCX: 000000000000002e [ 891.722372][T27808] RDX: 0000000000000000 RSI: ffff888068f40000 RDI: ffffea0001a3d000 [ 891.725033][T27808] RBP: ffff888068f40000 R08: 0000000000000005 R09: 0000000000000000 [ 891.727413][T27808] R10: ffffffffffffffff R11: dffffc0000000000 R12: ffff888067331e98 [ 891.729920][T27808] R13: ffff88802226c700 R14: dffffc0000000000 R15: ffffed100ce663d5 [ 891.732345][T27808] FS: 0000000000000000(0000) GS:ffff888097384000(0000) knlGS:0000000000000000 [ 891.735133][T27808] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 891.737156][T27808] CR2: 00007fc999400038 CR3: 00000000664a8000 CR4: 0000000000352ef0 [ 891.739616][T27808] Call Trace: [ 891.740904][T27808] [ 891.741926][T27808] usb_free_urb.part.0+0xf8/0x110 [ 891.743585][T27808] usb_free_urb+0x1f/0x30 [ 891.745369][T27808] em28xx_uninit_usb_xfer+0xf3/0x360 [ 891.747624][T27808] em28xx_alloc_urbs+0xb43/0xf60 [ 891.749339][T27808] ? __kasan_slab_alloc+0x69/0x90 [ 891.751054][T27808] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 891.752736][T27808] em28xx_dvb_init.cold+0x1f2/0x7391 [ 891.754565][T27808] ? rcu_is_watching+0x12/0xc0 [ 891.756382][T27808] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 891.758011][T27808] ? rcu_is_watching+0x12/0xc0 [ 891.759496][T27808] ? trace_contention_end+0x126/0x160 [ 891.761437][T27808] ? __mutex_lock+0x26d/0x1bd0 [ 891.763030][T27808] ? em28xx_init_extension+0x2f/0x200 [ 891.764805][T27808] ? do_raw_spin_lock+0x128/0x260 [ 891.766354][T27808] ? em28xx_audio_init+0x132/0x1a0 [ 891.767983][T27808] ? __pfx___mutex_lock+0x10/0x10 [ 891.769537][T27808] ? rcu_is_watching+0x12/0xc0 [ 891.771009][T27808] ? lock_release+0x24d/0x310 [ 891.772477][T27808] ? em28xx_v4l2_init+0x89/0xb0 [ 891.774264][T27808] ? do_raw_spin_unlock+0x145/0x1e0 [ 891.775906][T27808] ? __pfx_em28xx_audio_init+0x10/0x10 [ 891.777587][T27808] ? __pfx_debug_object_deactivate+0x10/0x10 [ 891.779420][T27808] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 891.781047][T27808] em28xx_init_extension+0x13a/0x200 [ 891.782693][T27808] request_module_async+0x61/0x80 [ 891.784433][T27808] process_one_work+0xa23/0x1940 [ 891.785966][T27808] ? __pfx_process_one_work+0x10/0x10 [ 891.787601][T27808] ? __pfx_request_module_async+0x10/0x10 [ 891.789372][T27808] worker_thread+0x5ef/0xe50 [ 891.790790][T27808] ? __pfx_worker_thread+0x10/0x10 [ 891.792389][T27808] ? kthread+0x13a/0x450 [ 891.793692][T27808] ? __pfx_worker_thread+0x10/0x10 [ 891.795605][T27808] kthread+0x370/0x450 [ 891.796867][T27808] ? __pfx_kthread+0x10/0x10 [ 891.798318][T27808] ret_from_fork+0x72b/0xd50 [ 891.799739][T27808] ? __pfx_ret_from_fork+0x10/0x10 [ 891.801296][T27808] ? __switch_to+0x800/0x10f0 [ 891.802725][T27808] ? __pfx_kthread+0x10/0x10 [ 891.804274][T27808] ret_from_fork_asm+0x1a/0x30 [ 891.805811][T27808] [ 891.806828][T27808] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 891.809104][T27808] CPU: 2 UID: 0 PID: 27808 Comm: kworker/2:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 891.812373][T27808] Tainted: [L]=SOFTLOCKUP [ 891.813708][T27808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 891.816775][T27808] Workqueue: events request_module_async [ 891.818485][T27808] Call Trace: [ 891.819518][T27808] [ 891.820441][T27808] dump_stack_lvl+0x100/0x190 [ 891.821894][T27808] vpanic+0x552/0x970 [ 891.823140][T27808] ? __pfx_vpanic+0x10/0x10 [ 891.824572][T27808] ? lock_release+0x24d/0x310 [ 891.826044][T27808] panic+0xd1/0xe0 [ 891.827201][T27808] ? __pfx_panic+0x10/0x10 [ 891.828605][T27808] ? check_panic_on_warn+0x1f/0x90 [ 891.830201][T27808] check_panic_on_warn.cold+0x19/0x34 [ 891.831827][T27808] ? free_large_kmalloc+0xbf/0x100 [ 891.833397][T27808] __warn.cold+0x191/0x318 [ 891.834771][T27808] __report_bug+0x296/0x3d0 [ 891.836179][T27808] ? free_large_kmalloc+0xbf/0x100 [ 891.837737][T27808] ? __pfx___report_bug+0x10/0x10 [ 891.839304][T27808] ? rcu_is_watching+0x12/0xc0 [ 891.840803][T27808] ? __free_one_page+0x109/0x1090 [ 891.842366][T27808] ? rcu_is_watching+0x12/0xc0 [ 891.843845][T27808] ? __free_one_page+0x109/0x1090 [ 891.845386][T27808] ? lock_release+0x24d/0x310 [ 891.846833][T27808] ? debug_check_no_obj_freed+0x31f/0x630 [ 891.848582][T27808] ? __get_pfnblock_flags_mask+0x128/0x240 [ 891.850362][T27808] ? free_large_kmalloc+0xbf/0x100 [ 891.851935][T27808] report_bug+0xb2/0x220 [ 891.853235][T27808] ? free_large_kmalloc+0xbf/0x100 [ 891.854945][T27808] handle_bug+0x16a/0x2a0 [ 891.856285][T27808] exc_invalid_op+0x17/0x50 [ 891.857705][T27808] asm_exc_invalid_op+0x1a/0x20 [ 891.859173][T27808] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 891.860929][T27808] Code: 28 90 0f 0b 90 80 3d 4e cf 56 0e 00 0f 84 07 ac ba fe 48 8b 74 24 28 48 89 ef e8 9c 00 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 e8 b1 f0 8d 5b 5d 41 5c 41 [ 891.866913][T27808] RSP: 0000:ffffc9000400f818 EFLAGS: 00010293 [ 891.868764][T27808] RAX: 00000000000000f0 RBX: ffffea0001a3d000 RCX: 000000000000002e [ 891.871183][T27808] RDX: 0000000000000000 RSI: ffff888068f40000 RDI: ffffea0001a3d000 [ 891.873655][T27808] RBP: ffff888068f40000 R08: 0000000000000005 R09: 0000000000000000 [ 891.876046][T27808] R10: ffffffffffffffff R11: dffffc0000000000 R12: ffff888067331e98 [ 891.878438][T27808] R13: ffff88802226c700 R14: dffffc0000000000 R15: ffffed100ce663d5 [ 891.880785][T27808] usb_free_urb.part.0+0xf8/0x110 [ 891.882323][T27808] usb_free_urb+0x1f/0x30 [ 891.883647][T27808] em28xx_uninit_usb_xfer+0xf3/0x360 [ 891.885261][T27808] em28xx_alloc_urbs+0xb43/0xf60 [ 891.886742][T27808] ? __kasan_slab_alloc+0x69/0x90 [ 891.888278][T27808] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 891.889876][T27808] em28xx_dvb_init.cold+0x1f2/0x7391 [ 891.891437][T27808] ? rcu_is_watching+0x12/0xc0 [ 891.892915][T27808] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 891.894479][T27808] ? rcu_is_watching+0x12/0xc0 [ 891.895911][T27808] ? trace_contention_end+0x126/0x160 [ 891.897545][T27808] ? __mutex_lock+0x26d/0x1bd0 [ 891.898980][T27808] ? em28xx_init_extension+0x2f/0x200 [ 891.900589][T27808] ? do_raw_spin_lock+0x128/0x260 [ 891.902172][T27808] ? em28xx_audio_init+0x132/0x1a0 [ 891.903757][T27808] ? __pfx___mutex_lock+0x10/0x10 [ 891.905295][T27808] ? rcu_is_watching+0x12/0xc0 [ 891.906734][T27808] ? lock_release+0x24d/0x310 [ 891.908236][T27808] ? em28xx_v4l2_init+0x89/0xb0 [ 891.910008][T27808] ? do_raw_spin_unlock+0x145/0x1e0 [ 891.911602][T27808] ? __pfx_em28xx_audio_init+0x10/0x10 [ 891.913298][T27808] ? __pfx_debug_object_deactivate+0x10/0x10 [ 891.915125][T27808] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 891.916745][T27808] em28xx_init_extension+0x13a/0x200 [ 891.918364][T27808] request_module_async+0x61/0x80 [ 891.919912][T27808] process_one_work+0xa23/0x1940 [ 891.921431][T27808] ? __pfx_process_one_work+0x10/0x10 [ 891.923087][T27808] ? __pfx_request_module_async+0x10/0x10 [ 891.924853][T27808] worker_thread+0x5ef/0xe50 [ 891.926276][T27808] ? __pfx_worker_thread+0x10/0x10 [ 891.927852][T27808] ? kthread+0x13a/0x450 [ 891.929174][T27808] ? __pfx_worker_thread+0x10/0x10 [ 891.930736][T27808] kthread+0x370/0x450 [ 891.932020][T27808] ? __pfx_kthread+0x10/0x10 [ 891.933467][T27808] ret_from_fork+0x72b/0xd50 [ 891.934878][T27808] ? __pfx_ret_from_fork+0x10/0x10 [ 891.936431][T27808] ? __switch_to+0x800/0x10f0 [ 891.937876][T27808] ? __pfx_kthread+0x10/0x10 [ 891.939300][T27808] ret_from_fork_asm+0x1a/0x30 [ 891.940774][T27808] [ 891.942435][T27808] Kernel Offset: disabled [ 891.943776][T27808] Rebooting in 86400 seconds..