last executing test programs: 27m11.101223478s ago: executing program 32 (id=675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0xf0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x8, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xe19, 0x4e, 0x2}, {0x802, 0x40}}}]}}]}]}]}}]}, 0x5c}}, 0x0) 24m20.790572063s ago: executing program 33 (id=1635): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x4e22, @multicast1}, 0xa) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x9e3, 0x501000) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r2, 0x6f50, 0xa) syz_open_dev$video4linux(&(0x7f0000000000), 0x3fe, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004002100002995dfca"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000004000000000000000000008500000027000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="00000000000085006600950700"/35], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000200)=r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)='%pK \x00'}, 0x1c) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000340)={0x1, @vbi={0xffffb4fe, 0x5, 0x8, 0x3432564e, [0x3, 0x3], [0x2, 0x2f], 0x1}}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000040)={0x0, 0x0, r7}) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 23m3.445517556s ago: executing program 34 (id=2006): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000003c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x1e8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000480)={0x0, 0x0}) sched_setscheduler(r7, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r9, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x4195, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000000008116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000006180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xffffffffffffffff, 0x0, 0x0, {0x40, 0x8, 0xe, 0xfffc, 0x0, 0x1, 0x0, 0x0, 0x121, 0x2000, 0x0, r12, r13, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0300002f00100029bd7000fcdbdf250d000000906fc22f16f7c102eb3ba221df39f9fc939d7854e62f11440e27ca6f30a7a0eb51fb655da5424fe73fb1cee68b08005cd6dc09249373b2f021fb63b86265a95f49f4fdfbb16b9bb379a680de294ea215aeb48f7c814abb89cead095dbb9c8f20ae49491355ec7e8e734230d29ea389900fa8d441cf5a8f8a2ea1ba1ad0f5d17712695254f967ba36c04189c7780f32851871afaf69a1ed528feb7aa20fffd9ef38be37d22d3f20d20eaca987346fedacb4c6e96214005600ff020000000000000000000000000001ab0071800c00fa00ff070000000000000400738004009c800800b500", @ANYRES32=r12, @ANYBLOB="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"], 0x32c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r2, r3, 0x4, 0x2001, 0x4, 0x9, {0x200004, 0x5, 0x6, 0xe, 0x8000, 0x0, 0x6, 0x2, 0x9, 0x800, 0x7, 0x60b, 0x71, 0xff, "6f4f1b1330d057b30bd15586b7445443c515a97436419c2cd5ae7297dceeaabe"}}) 17m36.674534217s ago: executing program 35 (id=3526): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpgid(0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r3, 0x800000000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000180)=r7) write$cgroup_devices(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000000"], 0xffdd) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, 0x0) socket(0x10, 0x3, 0x0) syz_io_uring_submit(r9, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80003, 0xff) 16m23.55172923s ago: executing program 36 (id=3756): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r1, 0x8004af79, &(0x7f0000000040)) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r5, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) 13m50.63305385s ago: executing program 37 (id=4423): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x6, 0xffff, 0x1000, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000010f40)=0x7) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xffffffff, 0xe, 0x0, &(0x7f0000000480)="0000ffffffffa000d68e0506e095", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NLBL_CALIPSO_C_LISTALL(r5, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r6, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x14085) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xfffffffffffffe96, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}}, 0x20}, 0x1, 0x0, 0x0, 0x24040890}, 0x401f4) 13m40.858598103s ago: executing program 9 (id=4570): r0 = socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000280)={0x100, r3}, 0x0) close(r3) close(r2) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x100, r4}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) close(r1) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@local, @broadcast, @empty}, 0xc) 13m40.857680816s ago: executing program 9 (id=4572): unshare(0xc060000) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) r0 = syz_io_uring_setup(0x2433, &(0x7f0000000380)={0x0, 0xb625, 0x200, 0x2, 0x252}, &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_io_uring_setup(0x6802, &(0x7f0000000140)={0x0, 0x7a66, 0x0, 0x0, 0x3a4, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_setup(0xf5f, &(0x7f0000000000)={0x0, 0x2b1c, 0x2000, 0x3, 0x83, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r2, 0x0, 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_class_of_dev={{0x8}, {0x0, "9f38bd"}}}}, 0xa) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@local, @random="1cf800", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x66, 0x0, 0x9, 0x1, 0x0, @remote, @remote}, @info_request={0xf, 0x0, 0x0, 0x7, 0x7}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x3, 0x80000) r3 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r3], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) 13m37.732020943s ago: executing program 9 (id=4582): socket(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) (async) io_setup(0x3, &(0x7f0000000180)) (async) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003040)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffe0, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mlockall(0x7) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) 13m37.661822391s ago: executing program 9 (id=4583): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x168) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x100000, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file1\x00', 0x1000200) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000002c0)={0x5, 0xc, 0x2}) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mkdir(0x0, 0x21) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0x80109000, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) dup(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4f20, @loopback}, 0x10) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000940)=@security={'security\x00', 0xe, 0x4, 0x37c, 0xffffffff, 0x1ac, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}, 0xffffffff, 0xffffff00, 'syzkaller0\x00', 'vcan0\x00', {}, {}, 0x0, 0x1, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x5, 0x6, 0x0, 0x6], 0x0, 0x3}, {0x1, [0x6, 0x1, 0x9, 0x2, 0x0, 0x1], 0x5, 0x4}}}}, {{@ip={@rand_addr=0x64010102, @private=0xa010102, 0xffffff00, 0x0, 'veth1_macvtap\x00', 'team_slave_0\x00', {0xff}, {}, 0x2, 0x3, 0x12}, 0x0, 0x9c, 0xdc, 0x0, {}, [@common=@addrtype={{0x2c}, {0x228, 0x208}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "cdeb7f86ee41209878ddc3b68ab3d0fef1fdc4f176fdc40efb75c97c71f3"}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xffffffff, 'veth1_to_bridge\x00', 'rose0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x28}, 0x0, 0xdc, 0x13c, 0x0, {}, [@common=@addrtype={{0x2c}, {0x0, 0x800, 0x1, 0x1}}, @common=@set={{0x40}, {{0x2, [0x4, 0x0, 0x1, 0x0, 0x1, 0x2], 0x0, 0x7}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x2, 0x6, 0x0, 0x1], 0x2, 0x7}, {0xffffffffffffffff, [0x1, 0x5, 0x4, 0x2, 0x6, 0xf], 0x4}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3d8) socket$igmp6(0xa, 0x3, 0x2) 13m36.773094085s ago: executing program 9 (id=4585): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) r1 = openat$dsp(0xffffff9c, &(0x7f0000000300), 0x4080, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000340)=0x9) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) mount(&(0x7f0000000500)=@nullb, &(0x7f0000000440)='./cgroup\x00', &(0x7f00000004c0)='hfs\x00', 0x2208004, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) syz_emit_ethernet(0x55, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) connect$netlink(r3, &(0x7f0000000400)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80030000060a010300000000000000000a0000080c0006400000000000000003bc000740678a6b31f18fe3bcd736e05a6956166219702677199eb293195d394feb63dec2381de80d935cfa76447db4fe98bb2c1d69f2237acf88df480c7e5f7e31f195b273904439a2cc3cbe2dd8bd9b5a558aa46e3f83dd5d1ad39650bda639e212ec59a644d778982e2779213acffda2b397f975985297e0eb499517c8e75278b2b18b45c86c0929d7996f1cd837c670a8cba13c41221a81db02719eef3456026deaaa71148192710690c41b6ac3bc5dc0038a2be50f3c3f0172ba08000a400000000094020480840201800100696d6d656469617465000000700202800800014000000017fc000280c10001006378bc4d14906f3f6efb00b6949bcd4443e708746af75610beaad1b3da497a52fd748e79bb657ca7be7063d6db3eb2dbd2da4da69e47491e8ed6f523f1a888171e140f34f12f7c1f945fbaa144655beb28a9d4d5e27b59c0e5795e4de4e1716e263eac6acba3b11dd683445b78c0b5c4a02d1cfff04bd1213c296feb0bc70f5e18bcb1307b4f8e8bae9ea195c3f568f225e3b2f0ca4d87333312ce9c438b66733d394e3aaf5015deea8ebccd3c304c7d9464897d0533f2024cd62b3046000000040002802d000100fb2b39a53f1b3cdc7f31987699b859ef925fab0175ccf365797c9c9b7aafbe2538990a3050ad05cf650000004000028020000280080003400000000373797a31000000001c0002800900020073797a31000000000900020073797a3200000000280102804a0001008fa3afff4c94ca5da42ec4e6477c3b8a82c1e4bb716355f237065ba31afedcd1bca9aa1dd25a694e739b44dabb9776c97d1a95abfb50ab75c172a59caa625c88eeae195c151a0000a3000100b5c1603b85b7b2ca95a66b213c6105f801a6cb653165757ad62157f2682d3e42b8fecf12e1ccd1e71bd0d9d8e1e32da9574c51422422a05aa3415d291f9ebd339a3b2cbb613e1347d81ac23ed5be3f0b0304ede1e6c95fe66d6ccf39e311fd917bf74c78fe4fc8d8d7dc4d115187170c81e6d1726fa7fc72f134ee1190a96eceb0d317a226b780f0ef02492e132412456fea521591121eb3954af1f40a345e001800028008000340000000040900020073797a3000000000100002800900020073797a30000000000b000100df3c4952e56fa1000c000180080001006669620008000b40000000046c000000000a01010000000000000000030000010900010073797a30000000000c000440000000000000000208000240000000020c00044000000000000000020c0004400000000000000005090001007379300000000008000240000000050c0004400000000000000001f4000000080a00000000000000000000070000050c000640000000000000000308000940000000010c0003400000000000000002080009400000000108000b400000000360000480100001800b0001006c6f6f6b75700000280001800e000100636f6e6e6c696d69740000001400028008000240000000000800014000000005140001800c0001006e6f747261636b0004000280100001800a0001006c696d697400000008000a40000000020900010073797a300000000034000580080001400000002f0800014000000089080002400000000108000140000000880800014000000000080001400000007308000a400000000028000000030a05000000000000000000050000070c00048008000240413daba408000b4000000001e4000000180a01030000000000000000070000029400038008000140000000000400038008000140000000007c000380140001006272696467655f736c6176655f3000001400010076657468305f766972745f77696669001400010076657468315f746f5f626f6e6400000014000100687372300000000000000000000000001400010064756d6d793000000000000000000000140001006272696467655f736c6176655f300000080007400000000108000740000000020900020073797a310000000008000740000000010c00054000000000000000010c000540000000000000000428000000140a010100000000000000000a0000060c00064000000000000000040800034000000009540000000b0a030000000000000000000100000a08000440000000010c001040000000000000000408000540000000120c00104000000000000000050c00104000000000000000050900010073797a310000000074000000180a01010000000000000000050000090c00054000000000000000030900010073797a31000000000900020073797aad8aa82eecaaa58230000000000900010073797a31000000000900020073797a32000000000900020073797a30000000000c00054000000000000000030900020073797a310000000014000000110001000000000000000000ac00000a0048f2fd5fbd178135038aa8478003892d19c9931b637498b75f3144cb72090d0b05ca829635a0325579edd027239e40ea861b13e56c3654c3f962a97a5933ee9b7201118700"/1872], 0x704}, 0x1, 0x0, 0x0, 0x4800}, 0x48065) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x304000000) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, 0x0, &(0x7f0000000780)=""/218, 0x0, 0x25000}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000a0200"], 0x10}}, 0x0) r6 = dup2(r4, r4) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r6, &(0x7f0000004d80)={0x2020}, 0x2020) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) syz_io_uring_setup(0x4055, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, &(0x7f0000000000), &(0x7f00000000c0)) close(0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=@gettaction={0x18, 0x32, 0x301, 0x70bd2c, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f00000003c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00004000000000", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 13m36.431582063s ago: executing program 9 (id=4586): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x98) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)=ANY=[], 0x0) r4 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x101002, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f0000000080)=0xd2) 13m36.048645736s ago: executing program 38 (id=4586): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x98) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)=ANY=[], 0x0) r4 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x101002, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f0000000080)=0xd2) 11m37.310474436s ago: executing program 2 (id=4843): socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vmci(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[], 0x0, 0x96}, 0x28) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00o\a', @ANYRES16=r2, @ANYBLOB="232c28bd7000fcdbdf2501000000000000000841000000140018000000037564703a73797a32000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)={{}, {0x77359400}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x63, 0xc080) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000040)=0x312) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0x5, 0x1, 0x1, 0x8}) r7 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast2}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newtaction={0x2174, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x200, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}, {0x4}, {0x4}, {0x20e0, 0x1, [@m_bpf={0xa8, 0x5, 0x0, 0x0, {{0x8}, {0x4}, {0x80, 0x6, "893bb621b85ef093847831f23b8a6510f1c8165a20657213b2a7aae66b2236803278e5d71cd897889e7ff73f4c9f22f69414f2398e042cdb96cd5350e4b540efff88353de7043cde937973108f389e72016bd80670349da7b342af76b0c5764cb6932512aa131ec4692e3053be17a3bbb78a4cd64b3868343d42aecb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_skbedit={0x1034, 0x19, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0xffe, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0xa0, 0x1f, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x101, 0x6, 0x4, 0x7ff, 0x5}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x1d5, 0x20000000, 0x7, 0x4000002}, 0x1b}}]}, {0x3b, 0x6, "4424ba401ace8b6fdc22b3fffd61c76af8f695ffd4f2f54e4f8c5efb7c728778a3d5907533bcf3e17005473ad35c2befb78ce7331864b2"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x1b8, 0x10, 0x0, 0x0, {{0x7}, {0x88, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x81, 0xffff, 0x8, 0xf9, 0x8}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "c555b2299dc5febf303724611773e781"}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast2}, @TCA_CT_MARK={0x8, 0x5, 0x3}, @TCA_CT_ZONE={0x6, 0x4, 0x8001}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x109, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0xc6c, 0x1d, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7, 0x3, 0x81, 0x200}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x12f6, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x219f, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x4c3, 0x10000000}}]}, {0xc04, 0x6, "03917db1048d399f7f9ba7ff8f88386f83fe4d8912dfdf9cb585f8c62d827b24a27234e9775bc132a6779639049159c2677773900b5079436c3df03ca48b3fe91d7018505921558487dc1167b675158507401f2ae73de830bd61ce290c281ed0433345107f9eadec74897cddfb60a3fbd96103c764d7763339b6904fb21f3b1668dda489caeaa0aaa73bcee4744f7a7546bfd1fa505e65c3682fd7b87b00215363dd9a81b807a8396b70293b20439924cdaa23d2261fdf7557c840890de2b240edfc20f27cb51379ed1243cddf369b2656461708786f2a7b5843f329d6f3354ee36438af148dc426cf53b8c26e7a18edb3a7ec89d76d8b15988c8424d5ff8f841f1b156bd63674b596355160ec46be25fe07cac2cecfe314497ec954003f8ddad3e461add71b4f447969e266cad580e6c732e0446bc963e9a4a26e1213ed5fdfc8b041857b755c9589eba984f40fd4904c00e936add6edf02e25a42ea72f6314fe9f5db0baf79472ab1007d8015b3b1bd170b7c061acfdeaaf50621d7f31e0e75605bad4fb337a69fbea0661277d84bcbece4713880b5299d5241e01fe058bad94ed8ccdc85711ac691376745ba503c27aaf4e1a53ae69ff960db61d196e7293aedb2f40f4795ee334f979d7a8b50637d0f1daa29122aa2c8e84a597a8668e56b18f3e0c2b90515152708b2790267230ab8ed0b262c4188919be469fb6a7e68a9e67c2fa7cc53c9b9dec5cac23ab381bfc2a51a49e80b3fafa1921cf728020ce105f7d77d12d292cc954865c9f71708922072d49615124979ecef3a03555b7cebfd06758487f560ad2a6897ab165e9740b9c534889b1d2ecb090061b4fef9fd721cab2edc3e6766c8cd52533b6df9ee7124c296f8f9a934af8a3d7345a7c80de8d065a2e1b22dea461468967afd8f3485fc996c5257576e6a7ec27abec6766a12dd61fa034dd8fd975e68bd477148a93eeb417740ab188ce0e383d829c797546f6c0c0cdb9009bdd8912ebb27dbd694bf5b2a294186aac9799c5482cf6e3cb6f14747aa58c31cc51685c681ae722dcd516828a8e6b9053b9812a280727b179d60e460f89ba0afe83f943fa66e24fccb435c23ae8195b3a9364de766a8fd5ec26171d1dce5ab2f9a00c3ee701060da776152768f5e6fca98270bd7e5c4fd4bf54ee5bb642d62577f4ea5691611b4d426b75ab5a3ec6d494ef9757ca5f7940e9088f20082a7efd66692102f1f2610e159edfec8d80bda7fbbfea552a257244ba72cc73f9008bdfde0db4da0aa20adb6247106e4ac5f87e0c8347d0599d550eb8bbf9a14e113b810b00d250701bbac0f7b3a2160dcd7721cebeff1a153203db2989324b65d26b9f2333df15103eddd89447b6ad802179b7ea4b2eec306ae35ea5bf51b0869ec792d4a882a02670a97aa08a3e5c8703b0decaa276865d661f73cf70c2a24f53e67c3cbdcdf79e84ad2a74f3855c616237240a9491b06114d555e37a8f65032e61773e6f8cdeb51e1f950dbc17f2bfaef004de8724b2d58f689564580653349385384efbf3fce50e83c1056be2bf0d1907eeae90b231f6470902d7e1d237a5d603027032dbf304ee0ab15ce633e1c5a6aa31f7618342d2637282dc25fd5c635eaee7d3c51470b2ca97e3cedc79f9bd5b51af777ddba77b3ff7c2a9221878c793444e89de29d04a0b023e82c3584de9d7c30e6dbb91d86cc00a5998197e5404d1b4ed8d5a94244dcc12a1c23bd55bbaf46cffe91bd7b64a6aba5eb6224d10dc9b44575c4c92b854e043d7a60589e875ab133e797c94a94b13d8101ccd605dfcbbe03fb84088015ad57ba906be25da165a046e4a4bf50a7a3bfd23716bb4452a1a63d30294a77c63ded13ea1d82d32f91b990e0fd834d50aab01eb05223092974bdfbc5646e48ccdbcb1446a7ada90e19f23d9f2cf251c040cc0fc9714b1f248c8230572a8d4ac98d996d6b60da40d1fbf323e96d410515e93c4f7d7740450af1f59a3d2049f6a44d87119f9f14d65514a5b576a448392cd029e5737bc38303c9380c8a361d36d09968c392d1ecd72b68d67d93e2036f42fc44cec4712e3607768d52a778fbd82cacece20f777050bd5c278afad78b0bf4abf10cc148eafcf5b45d44b0d9ef5e15855461da5c79098d6d41a50daa31cec55a9eefb93a0a6d8fab12d1e3f4ccd05c505d4cfc3bfe46e2a74ddaefeb75a9e345eb0a43239098aac82f927a12a6105485813926a28193467a3d24e1e3080d8e6473d77fef388b3d0c1ad6eb692785b46b326a175437eb795472aaa5fcccd42f3ec3081b52d1d2ae4c81c6097bfc6c4a0b13735f01d70125580ec2e9a035935c16d2e79514672a73b813671ad22b2c66f7e29d1b3ef66c3ff9f24372bf6b774faac6ed672ff4582f9d782a9535d4168a050c3a4c21a7b464943822f595693c9b41398641a00557348ba90d70c19143ae23a76a8d37bf3a807219acc8bfad28fe63d50ab45f5d3696a84aa4c75c1e86289e1a2dfa98e886c2aadf54bc8e94570205017ef3fbd3f572c1b22a42f047467f758e871bfebed8fb0bdbf9adad0243ac5d05f6ce94113e93fde616a0992dba76a460072e00894c37f1882e24279e1ab7003b6c9b5b838f5d0acfb2e9ab1e9d4b8291ee47c88dbfe5fe40027ea4b3cc46e1ec4436fd6a07b737587e2ebe8ce28176e96363fda083484e83667ab8cca41ff9ed4a8a0a4639a2cb853eec24180bc1492abd0527e796cc2d48f4649e2f8bd7271692ef3e381fd0fde5c7a7e0f828431acf1d8504c9026211cb1747879794575614d5bb8730dc40e6d48f4d82d032ba24ae94f71be0d74337bf826ac1d6b73cda6314e1cd7cba2c860c56cd12a6516685757499d935b25b3c5db1490f853b6642838da9be1bec500ab7599ad9b564e07ac8a450e0d2ff5e593f460c566f8a32c43443083a24b64f785e7362a9852ef0894f057e4ee4de9abb78e0ee2b95225677b1214018fd8f00953638f80385a3901b7205b9045510fc9eafdd5d1b79d3e7ea725b1842260d6af8c033f73b85001ca43ee87025344cbef5024859a45860386c713c96f4965b4b67d0fd8910c92129912303fd0b9d8cb3eff06721f421a6604520aaac4db324a2d704245d8c23d3e709812df71729b16453a89bb474c527671612da7066d7774ee3e7d48343f3d1af7ad963d7929856244fb9be2f83263c498d1c43a96e46648f569eca6495ee3dbf1f678e53d839aca42ec98f062889f5fc3d62dc949e21554fd356e2f71d161f40628ccfaf41727080882dbceef40650a61a011a445638178af756a007adaa0dbdea3eb17ab774b528691517331fc27382d5940364db758b76d550304cfcb1cdb07095abba28afc039dff9e2c78c6a97b8a19a65f19cf9d7d2aec8f2dda451f95966618e49d72b110936e27dd0f98f216d12aafd7c9153c83aa50bb2d1875edf149863af4d2040de4cd3960525172b8031550dbe6f709aea977392da1230817d39023368632a0da912e2d982d911487ac5d34db82b512ee0f8bcc1c74a3157469e508986d820ea2fc5c25a529d5fe813cb8cc5636e2ddc3b21b98ea5d2478ef775744a217b80f50291d85b03589411b554c5b256cc9be81aaa99f661600e50dd00bb4af7e16d9093771aeaae7a8eb17d7565484846e01db35755177b3fcf36c07554bef836352d8b4f3a89b161ee54d6e8210f108ee771a13b24cfd239d9613909084a3ddc9a8dd0b7c496994fc2381800340e3f69d614ffdae13984cc7ce14b028145eb46c49c582101e4d5493d3e94cd8db979c87e8d7a9957ba552756288faabc28193c617fee83b385f9de76a9b546d5c9b3c83aaf5163731c8e18bacacbaba36ac6c2c49187893750fff59c147967ab6d5bba89376891e326c0be5e21551ef4cbcddd5fadddd5fb052b7ba2a18fa31f8d108b6e7c359796cfd373567101a4ee90b27f0bba802b1220a0aa03fdff3c961ef66f2eb597e9a5fcb88f8c7808cee5f3a96de64d4c7e4335bad63535b7e32395bb5ec8d4df875eef6de27e5060e84ec92feadf3641f31103470e55fb704d919858667ca9bce1ee04ee47501c13e65fbf52e8c89425cff4b3d60ab3cf5d767be4eecbfdefcda41eb78db665e1888a9cf3bd80dc469588089e1888c2dd9765139b9a418edc275f87b1fc72e33afc8efc4f24213d23b5d3be7efd64f9d9ab554ebf8ce4b1ece6b3d3f3c2f690346a35ec8183ec680ad9315d65d41a7342836d36095c53bc9c6436422a2e9457956defd939a722d5aa30af8460f7ca4d7f8e77b9f2386f3127d872e1ade6b2ca81b62816beca30dc3cb9092dabe4faaee6a266a2acf03319e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ctinfo={0x13c, 0x9, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x233}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3ce3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x2, 0x7, 0x2, 0x1c}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x0, 0x6, 0xbc, 0x1}}]}, {0xcd, 0x6, "7d451a6520d5cc70894479ed6df970fd9d8ce0604864220238490b45a6732e3a1928cb605b1e2945d566ea9423fd8edf63ef3eac79fc6354d1175d965a22a2b937c7f1c3954310c0601b30195eaa64f4fe1ca89631ab37cb44a63096d4c474a5317d50a0560dd8538d56c3f42808abd74af6ca99ec3aee7cee48e0a5d4d03639fd036464227f720b0a5c7df0e6b455c7a97ba5ac1fb5a28ee2a9f07de53430ae3fb729eb21dac29a48e4a9efdfcc44ef89951430a55f2ba0829a76810f5918f051a1a74995b793ae32"}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0x2174}}, 0x0) 11m35.559972543s ago: executing program 2 (id=4852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) dup(r0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000040000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000140)={0x3, 0x2, 0x0, 0x0, 0x237, 0x1, 0x0, &(0x7f0000000100)=[{0x14, 0x1ff, 0x313e196b}]}) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) mmap(&(0x7f000097b000/0x2000)=nil, 0x2000, 0xb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="249e238cf67caaaaaaaaaa2981000e0086dd67000000004006fffc020000000000000000000000000000fe8000000000000000000000000000aa4e1e4e64", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x7a) 11m32.909834579s ago: executing program 2 (id=4860): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0x4, "650000006e0000000100", 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0xfdf9, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 11m32.830920438s ago: executing program 2 (id=4861): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@uuid_on}, {@xino_auto}, {@redirect_dir_off}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x103841, 0x186) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000080)={r0, 0xef9}) pread64(r0, &(0x7f0000000140)=""/155, 0x9b, 0x335) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) lseek(r0, 0x100, 0x4) 11m32.830697925s ago: executing program 2 (id=4862): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00'}) sendmsg$nl_route(r3, 0x0, 0x400c0c0) 11m32.569769061s ago: executing program 2 (id=4864): socket$xdp(0x2c, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capget(0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x892, &(0x7f00000003c0)={0x0, 0x80aee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 11m32.47663671s ago: executing program 39 (id=4864): socket$xdp(0x2c, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capget(0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x892, &(0x7f00000003c0)={0x0, 0x80aee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 7m56.598524662s ago: executing program 0 (id=5533): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xf0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xa0, 0x7f, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x7fff, 0x4, 0x1, {0x22, 0x739}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xd, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x310, 0x3, 0x2, 0x9, 0x20, 0x7}, 0xc0, &(0x7f0000000740)={0x5, 0xf, 0xc0, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "623fbb723f382963747d45a62ab97466"}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x1, 0xf00, 0x0, [0xc0, 0xff00cf, 0xff618f, 0xff, 0x0]}, @ptm_cap={0x3}, @generic={0x69, 0x10, 0x0, "e98600145e8325e64170b7b754b794aa31a628cfba5bba2967f8750af96fc42f8115258f40daf5cf93110da408b27bc17be7bc9004c59b8ee193b878c0a8676d9f1da0f064825e6b15169610ecae595a42e378cffe711f9721a46fa2f42c8d62494e37f690f3"}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "af4ca133992c1f073476e5efe84dd64c"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0x9, 0xc5b0}]}, 0x8, [{0xab, &(0x7f0000000800)=@string={0xab, 0x3, "0fbe1aef65fadf2bab01a208228caab0200b84a6436f683e1bb2de363d37395a645791c97042b811495d479d3956c7d96179f7ecc511ac1dc61063a5b9d078aeea9c86d8266cd549c5c048b66bca40c3c06d4392be710fa815f9638bd32e5a2f05bef181b54971f0d061b97481a84f9cca1081eafd868c5cdab300e3042ca7172c910641ba6c8560959e0d83d9b0654f021bbb6692ff7474e64f474c4a632887b7c6014652ee7be88f"}}, {0xa, &(0x7f00000008c0)=@string={0xa, 0x3, "40d7eed1ddab7526"}}, {0xb3, &(0x7f0000000900)=@string={0xb3, 0x3, "5c980b7f5d04309eaa5d18d54accd684f64f77cae5a6daf8abdd56e165bc556a019931ed0fcc3d671786dc6496321d00c76d11914c7d3e5ca277bed05566b19ab011193ca771ee647f1937eb947643bbf04edc6cc34e4f17674d15cfcad46e7e327bd7e552b9972355b9ce4bc6894753f3082bb4f74a73c1bb1b7ffcf192d5df2bb9c04c05141eb113077a0f7a90551b4f1620cf752841c234b7e9e7fd1901e070792250af7d161e3e66676d2ec441936f"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x240a}}, {0xe0, &(0x7f0000000a00)=@string={0xe0, 0x3, "6b5668a7d1118924694905bd25e8a39c7db411c16dfd1e94804f156066cd0da97fffa0b879a315edcb27b6a3e9dface8b02cff03e59eb7d702e8a38d1e69daacb08ea62595401f57859e1177af86216ee04493c3da21c88c9582937078a02dace75870df367110f3b2a137dfbe466b38751d3516126806d10aafbda2ea75f2f27b2d420aaf21c75374c44d3dcec10edf74c409a6c73e73628bdf677f57c74aabea85aad2f14c778bb96582e94486554a46afc357cc09c8bc77f2bcb276da8bdbe7f15b9f8a7d4e6b310630139a88827ff982f731f944e77b91ead4b96dcb"}}, {0xe8, &(0x7f0000000b00)=@string={0xe8, 0x3, "45814af54b7b77ca4ae5c0619908089ea723dfe1606b615c4c5c769fc1d185550a03b289c6554ca4c7db2902288ee54d556de3bda7eb7aacaa76f66152871a3ae9e8dad368594097cbcc310dd169ec433377ebb2bd03c58a4176173adced6f1d81b82f0fa7a863a1180fc7b97677c10f90231ccd7c32399ff57cdb2d399b724ad57e47a629223390174a29057cae0313d77135e684d901e8842a226ff3ef3b1f7b6800e3ee60394b029655b6c9e14c0bee80d5ff3e9530181936d4aadd693e2f653ed2bdd067bb7d12dc709d9577c00aa02269165d32945d2dc69b67ba069b1ac5f0fdf6d789"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x440a}}]}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr$security_capability(r1, &(0x7f0000000080), 0x0, 0x0, 0x1) fsetxattr(r1, &(0x7f0000000680)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) flistxattr(r1, &(0x7f0000000140)=""/28, 0x1c) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @loopback, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8003}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000300000010b804020240000102030109021b0001014180fe0b040006020701ff0f00000102ff0306020f"], &(0x7f0000000600)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x1, 0x1, 0x0, 0xbf, 0x8}, 0x5f, &(0x7f00000001c0)={0x5, 0xf, 0x5f, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x7, 0x90, 0x5, 0x40}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x5, 0xf00, 0x7, [0x3f30]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "54a776a04d77b4f43a6e5bbb8b956762"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "2381e23530e7a2dba79777a83684ab5e"}, @ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x6, 0xf, 0x4, [0xc0, 0xf]}]}, 0x7, [{0x7c, &(0x7f0000000240)=@string={0x7c, 0x3, "4bbbd0e5adcc74ec71c1f2d4c3b9da1bc7804b766eae63f1901f2364bd4c4ff36163b321f33ceec5c509651e338acf8800c20fff853ae4f9a14aa6ee4f8c31efb56903246097824743eadf0cb566017ccffc7d7abae662c8e9a89e130790013b2caafda945c56e16a78900ed2f51b5ba64f2cd3df6a626b63e6f"}}, {0xb8, &(0x7f0000000340)=ANY=[@ANYBLOB="b803b1d6aae10755d1d66d1459f15770d8aa1eb9ffe0ad5f0e5c62dae9ef6226fda2835988be69b8b9e90774eba4a96b4f097ead04ee44ebdbc9dfd6c095ca7f71d76703b3aa626d0383ed5a6c14999d71d500000000000000005666ce199f7aa458b52222d33044b1d6817766b53ff0c165b448a1a4fc521c96f875a79ce3e37e939014f4d3314f3a20b7927b6d579f7f87fbaa61a6144472d8a7aa6eb5859b97f4e12d382e2d1c85511d77a7479757c2f9bd33a78a057c"]}, {0xe4, &(0x7f00000004c0)=@string={0xe4, 0x3, "57b7f2fbaaeda3f62575d8dbacd5010cb207286647f34439bd68b68ec3472145075c7fa9e84704e42c7fd2f3096bc23477ef6ea3487de2304cbb1a1eb9c9fb9ae0ef0a9fc1c790e89e378208b0e99e616ff8efe3f1b8995d3e7a3d318f096d8c858492cd92adebace2b3530f2846d408b7752ed58911f1a8565b43738820440abb95070ebb11a45bdd5ef8dc4ce79f8b32fa769721933f7eab1dccdbd6b91658908eed5d54820432d097c12c6bdbe099d88f8bb158f78ca9f03195554ed297b4fb27243e8e1430400bf31fab41ea5fec48e95a9873ceff70b05ec6b69d9f246716e6"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc09}}]}) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000480), 0x8, 0x0) r6 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f0000000440)=r5, 0x1) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}]}, 0x5c}}, 0x4840) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffc) syz_usb_disconnect(r0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) 7m52.327835974s ago: executing program 0 (id=5544): socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vmci(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, &(0x7f0000000100)={{@local, 0x4}, 0xc, 0xfffefffb}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00o\a', @ANYRES16=r2, @ANYBLOB="232c28bd7000fcdbdf2501000000000000000841000000140018000000037564703a73797a320000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)={{}, {0x77359400}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x63, 0xc080) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000040)=0x312) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0x5, 0x1, 0x1, 0x8}) r7 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast2}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newtaction={0x2174, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x200, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}, {0x4}, {0x4}, {0x20e0, 0x1, [@m_bpf={0xa8, 0x5, 0x0, 0x0, {{0x8}, {0x4}, {0x80, 0x6, "893bb621b85ef093847831f23b8a6510f1c8165a20657213b2a7aae66b2236803278e5d71cd897889e7ff73f4c9f22f69414f2398e042cdb96cd5350e4b540efff88353de7043cde937973108f389e72016bd80670349da7b342af76b0c5764cb6932512aa131ec4692e3053be17a3bbb78a4cd64b3868343d42aecb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_skbedit={0x1034, 0x19, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0xffe, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0xa0, 0x1f, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x101, 0x6, 0x4, 0x7ff, 0x5}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x1d5, 0x20000000, 0x7, 0x4000002}, 0x1b}}]}, {0x3b, 0x6, "4424ba401ace8b6fdc22b3fffd61c76af8f695ffd4f2f54e4f8c5efb7c728778a3d5907533bcf3e17005473ad35c2befb78ce7331864b2"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x1b8, 0x10, 0x0, 0x0, {{0x7}, {0x88, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x81, 0xffff, 0x8, 0xf9, 0x8}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "c555b2299dc5febf303724611773e781"}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast2}, @TCA_CT_MARK={0x8, 0x5, 0x3}, @TCA_CT_ZONE={0x6, 0x4, 0x8001}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x109, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0xc6c, 0x1d, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7, 0x3, 0x81, 0x200}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x12f6, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x219f, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x4c3, 0x10000000}}]}, {0xc04, 0x6, "03917db1048d399f7f9ba7ff8f88386f83fe4d8912dfdf9cb585f8c62d827b24a27234e9775bc132a6779639049159c2677773900b5079436c3df03ca48b3fe91d7018505921558487dc1167b675158507401f2ae73de830bd61ce290c281ed0433345107f9eadec74897cddfb60a3fbd96103c764d7763339b6904fb21f3b1668dda489caeaa0aaa73bcee4744f7a7546bfd1fa505e65c3682fd7b87b00215363dd9a81b807a8396b70293b20439924cdaa23d2261fdf7557c840890de2b240edfc20f27cb51379ed1243cddf369b2656461708786f2a7b5843f329d6f3354ee36438af148dc426cf53b8c26e7a18edb3a7ec89d76d8b15988c8424d5ff8f841f1b156bd63674b596355160ec46be25fe07cac2cecfe314497ec954003f8ddad3e461add71b4f447969e266cad580e6c732e0446bc963e9a4a26e1213ed5fdfc8b041857b755c9589eba984f40fd4904c00e936add6edf02e25a42ea72f6314fe9f5db0baf79472ab1007d8015b3b1bd170b7c061acfdeaaf50621d7f31e0e75605bad4fb337a69fbea0661277d84bcbece4713880b5299d5241e01fe058bad94ed8ccdc85711ac691376745ba503c27aaf4e1a53ae69ff960db61d196e7293aedb2f40f4795ee334f979d7a8b50637d0f1daa29122aa2c8e84a597a8668e56b18f3e0c2b90515152708b2790267230ab8ed0b262c4188919be469fb6a7e68a9e67c2fa7cc53c9b9dec5cac23ab381bfc2a51a49e80b3fafa1921cf728020ce105f7d77d12d292cc954865c9f71708922072d49615124979ecef3a03555b7cebfd06758487f560ad2a6897ab165e9740b9c534889b1d2ecb090061b4fef9fd721cab2edc3e6766c8cd52533b6df9ee7124c296f8f9a934af8a3d7345a7c80de8d065a2e1b22dea461468967afd8f3485fc996c5257576e6a7ec27abec6766a12dd61fa034dd8fd975e68bd477148a93eeb417740ab188ce0e383d829c797546f6c0c0cdb9009bdd8912ebb27dbd694bf5b2a294186aac9799c5482cf6e3cb6f14747aa58c31cc51685c681ae722dcd516828a8e6b9053b9812a280727b179d60e460f89ba0afe83f943fa66e24fccb435c23ae8195b3a9364de766a8fd5ec26171d1dce5ab2f9a00c3ee701060da776152768f5e6fca98270bd7e5c4fd4bf54ee5bb642d62577f4ea5691611b4d426b75ab5a3ec6d494ef9757ca5f7940e9088f20082a7efd66692102f1f2610e159edfec8d80bda7fbbfea552a257244ba72cc73f9008bdfde0db4da0aa20adb6247106e4ac5f87e0c8347d0599d550eb8bbf9a14e113b810b00d250701bbac0f7b3a2160dcd7721cebeff1a153203db2989324b65d26b9f2333df15103eddd89447b6ad802179b7ea4b2eec306ae35ea5bf51b0869ec792d4a882a02670a97aa08a3e5c8703b0decaa276865d661f73cf70c2a24f53e67c3cbdcdf79e84ad2a74f3855c616237240a9491b06114d555e37a8f65032e61773e6f8cdeb51e1f950dbc17f2bfaef004de8724b2d58f689564580653349385384efbf3fce50e83c1056be2bf0d1907eeae90b231f6470902d7e1d237a5d603027032dbf304ee0ab15ce633e1c5a6aa31f7618342d2637282dc25fd5c635eaee7d3c51470b2ca97e3cedc79f9bd5b51af777ddba77b3ff7c2a9221878c793444e89de29d04a0b023e82c3584de9d7c30e6dbb91d86cc00a5998197e5404d1b4ed8d5a94244dcc12a1c23bd55bbaf46cffe91bd7b64a6aba5eb6224d10dc9b44575c4c92b854e043d7a60589e875ab133e797c94a94b13d8101ccd605dfcbbe03fb84088015ad57ba906be25da165a046e4a4bf50a7a3bfd23716bb4452a1a63d30294a77c63ded13ea1d82d32f91b990e0fd834d50aab01eb05223092974bdfbc5646e48ccdbcb1446a7ada90e19f23d9f2cf251c040cc0fc9714b1f248c8230572a8d4ac98d996d6b60da40d1fbf323e96d410515e93c4f7d7740450af1f59a3d2049f6a44d87119f9f14d65514a5b576a448392cd029e5737bc38303c9380c8a361d36d09968c392d1ecd72b68d67d93e2036f42fc44cec4712e3607768d52a778fbd82cacece20f777050bd5c278afad78b0bf4abf10cc148eafcf5b45d44b0d9ef5e15855461da5c79098d6d41a50daa31cec55a9eefb93a0a6d8fab12d1e3f4ccd05c505d4cfc3bfe46e2a74ddaefeb75a9e345eb0a43239098aac82f927a12a6105485813926a28193467a3d24e1e3080d8e6473d77fef388b3d0c1ad6eb692785b46b326a175437eb795472aaa5fcccd42f3ec3081b52d1d2ae4c81c6097bfc6c4a0b13735f01d70125580ec2e9a035935c16d2e79514672a73b813671ad22b2c66f7e29d1b3ef66c3ff9f24372bf6b774faac6ed672ff4582f9d782a9535d4168a050c3a4c21a7b464943822f595693c9b41398641a00557348ba90d70c19143ae23a76a8d37bf3a807219acc8bfad28fe63d50ab45f5d3696a84aa4c75c1e86289e1a2dfa98e886c2aadf54bc8e94570205017ef3fbd3f572c1b22a42f047467f758e871bfebed8fb0bdbf9adad0243ac5d05f6ce94113e93fde616a0992dba76a460072e00894c37f1882e24279e1ab7003b6c9b5b838f5d0acfb2e9ab1e9d4b8291ee47c88dbfe5fe40027ea4b3cc46e1ec4436fd6a07b737587e2ebe8ce28176e96363fda083484e83667ab8cca41ff9ed4a8a0a4639a2cb853eec24180bc1492abd0527e796cc2d48f4649e2f8bd7271692ef3e381fd0fde5c7a7e0f828431acf1d8504c9026211cb1747879794575614d5bb8730dc40e6d48f4d82d032ba24ae94f71be0d74337bf826ac1d6b73cda6314e1cd7cba2c860c56cd12a6516685757499d935b25b3c5db1490f853b6642838da9be1bec500ab7599ad9b564e07ac8a450e0d2ff5e593f460c566f8a32c43443083a24b64f785e7362a9852ef0894f057e4ee4de9abb78e0ee2b95225677b1214018fd8f00953638f80385a3901b7205b9045510fc9eafdd5d1b79d3e7ea725b1842260d6af8c033f73b85001ca43ee87025344cbef5024859a45860386c713c96f4965b4b67d0fd8910c92129912303fd0b9d8cb3eff06721f421a6604520aaac4db324a2d704245d8c23d3e709812df71729b16453a89bb474c527671612da7066d7774ee3e7d48343f3d1af7ad963d7929856244fb9be2f83263c498d1c43a96e46648f569eca6495ee3dbf1f678e53d839aca42ec98f062889f5fc3d62dc949e21554fd356e2f71d161f40628ccfaf41727080882dbceef40650a61a011a445638178af756a007adaa0dbdea3eb17ab774b528691517331fc27382d5940364db758b76d550304cfcb1cdb07095abba28afc039dff9e2c78c6a97b8a19a65f19cf9d7d2aec8f2dda451f95966618e49d72b110936e27dd0f98f216d12aafd7c9153c83aa50bb2d1875edf149863af4d2040de4cd3960525172b8031550dbe6f709aea977392da1230817d39023368632a0da912e2d982d911487ac5d34db82b512ee0f8bcc1c74a3157469e508986d820ea2fc5c25a529d5fe813cb8cc5636e2ddc3b21b98ea5d2478ef775744a217b80f50291d85b03589411b554c5b256cc9be81aaa99f661600e50dd00bb4af7e16d9093771aeaae7a8eb17d7565484846e01db35755177b3fcf36c07554bef836352d8b4f3a89b161ee54d6e8210f108ee771a13b24cfd239d9613909084a3ddc9a8dd0b7c496994fc2381800340e3f69d614ffdae13984cc7ce14b028145eb46c49c582101e4d5493d3e94cd8db979c87e8d7a9957ba552756288faabc28193c617fee83b385f9de76a9b546d5c9b3c83aaf5163731c8e18bacacbaba36ac6c2c49187893750fff59c147967ab6d5bba89376891e326c0be5e21551ef4cbcddd5fadddd5fb052b7ba2a18fa31f8d108b6e7c359796cfd373567101a4ee90b27f0bba802b1220a0aa03fdff3c961ef66f2eb597e9a5fcb88f8c7808cee5f3a96de64d4c7e4335bad63535b7e32395bb5ec8d4df875eef6de27e5060e84ec92feadf3641f31103470e55fb704d919858667ca9bce1ee04ee47501c13e65fbf52e8c89425cff4b3d60ab3cf5d767be4eecbfdefcda41eb78db665e1888a9cf3bd80dc469588089e1888c2dd9765139b9a418edc275f87b1fc72e33afc8efc4f24213d23b5d3be7efd64f9d9ab554ebf8ce4b1ece6b3d3f3c2f690346a35ec8183ec680ad9315d65d41a7342836d36095c53bc9c6436422a2e9457956defd939a722d5aa30af8460f7ca4d7f8e77b9f2386f3127d872e1ade6b2ca81b62816beca30dc3cb9092dabe4faaee6a266a2acf03319e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ctinfo={0x13c, 0x9, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x233}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3ce3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x2, 0x7, 0x2, 0x1c}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x0, 0x6, 0xbc, 0x1}}]}, {0xcd, 0x6, "7d451a6520d5cc70894479ed6df970fd9d8ce0604864220238490b45a6732e3a1928cb605b1e2945d566ea9423fd8edf63ef3eac79fc6354d1175d965a22a2b937c7f1c3954310c0601b30195eaa64f4fe1ca89631ab37cb44a63096d4c474a5317d50a0560dd8538d56c3f42808abd74af6ca99ec3aee7cee48e0a5d4d03639fd036464227f720b0a5c7df0e6b455c7a97ba5ac1fb5a28ee2a9f07de53430ae3fb729eb21dac29a48e4a9efdfcc44ef89951430a55f2ba0829a76810f5918f051a1a74995b793ae32"}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0x2174}}, 0x0) 7m50.536746719s ago: executing program 0 (id=5552): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xf0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xa0, 0x7f, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x7fff, 0x4, 0x1, {0x22, 0x739}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xd, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x310, 0x3, 0x2, 0x9, 0x20, 0x7}, 0xc0, &(0x7f0000000740)={0x5, 0xf, 0xc0, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "623fbb723f382963747d45a62ab97466"}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x1, 0xf00, 0x0, [0xc0, 0xff00cf, 0xff618f, 0xff, 0x0]}, @ptm_cap={0x3}, @generic={0x69, 0x10, 0x0, "e98600145e8325e64170b7b754b794aa31a628cfba5bba2967f8750af96fc42f8115258f40daf5cf93110da408b27bc17be7bc9004c59b8ee193b878c0a8676d9f1da0f064825e6b15169610ecae595a42e378cffe711f9721a46fa2f42c8d62494e37f690f3"}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "af4ca133992c1f073476e5efe84dd64c"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0x9, 0xc5b0}]}, 0x8, [{0xab, &(0x7f0000000800)=@string={0xab, 0x3, "0fbe1aef65fadf2bab01a208228caab0200b84a6436f683e1bb2de363d37395a645791c97042b811495d479d3956c7d96179f7ecc511ac1dc61063a5b9d078aeea9c86d8266cd549c5c048b66bca40c3c06d4392be710fa815f9638bd32e5a2f05bef181b54971f0d061b97481a84f9cca1081eafd868c5cdab300e3042ca7172c910641ba6c8560959e0d83d9b0654f021bbb6692ff7474e64f474c4a632887b7c6014652ee7be88f"}}, {0xe, &(0x7f00000008c0)=@string={0xe, 0x3, "40d7eed1ddab7526de7641bc"}}, {0xb3, &(0x7f0000000900)=@string={0xb3, 0x3, "5c980b7f5d04309eaa5d18d54accd684f64f77cae5a6daf8abdd56e165bc556a019931ed0fcc3d671786dc6496321d00c76d11914c7d3e5ca277bed05566b19ab011193ca771ee647f1937eb947643bbf04edc6cc34e4f17674d15cfcad46e7e327bd7e552b9972355b9ce4bc6894753f3082bb4f74a73c1bb1b7ffcf192d5df2bb9c04c05141eb113077a0f7a90551b4f1620cf752841c234b7e9e7fd1901e070792250af7d161e3e66676d2ec441936f"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x240a}}, {0xe0, &(0x7f0000000a00)=@string={0xe0, 0x3, "6b5668a7d1118924694905bd25e8a39c7db411c16dfd1e94804f156066cd0da97fffa0b879a315edcb27b6a3e9dface8b02cff03e59eb7d702e8a38d1e69daacb08ea62595401f57859e1177af86216ee04493c3da21c88c9582937078a02dace75870df367110f3b2a137dfbe466b38751d3516126806d10aafbda2ea75f2f27b2d420aaf21c75374c44d3dcec10edf74c409a6c73e73628bdf677f57c74aabea85aad2f14c778bb96582e94486554a46afc357cc09c8bc77f2bcb276da8bdbe7f15b9f8a7d4e6b310630139a88827ff982f731f944e77b91ead4b96dcb"}}, {0xe8, &(0x7f0000000b00)=@string={0xe8, 0x3, "45814af54b7b77ca4ae5c0619908089ea723dfe1606b615c4c5c769fc1d185550a03b289c6554ca4c7db2902288ee54d556de3bda7eb7aacaa76f66152871a3ae9e8dad368594097cbcc310dd169ec433377ebb2bd03c58a4176173adced6f1d81b82f0fa7a863a1180fc7b97677c10f90231ccd7c32399ff57cdb2d399b724ad57e47a629223390174a29057cae0313d77135e684d901e8842a226ff3ef3b1f7b6800e3ee60394b029655b6c9e14c0bee80d5ff3e9530181936d4aadd693e2f653ed2bdd067bb7d12dc709d9577c00aa02269165d32945d2dc69b67ba069b1ac5f0fdf6d789"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x440a}}]}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr$security_capability(r1, &(0x7f0000000080), 0x0, 0x0, 0x1) fsetxattr(r1, &(0x7f0000000680)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) flistxattr(r1, &(0x7f0000000140)=""/28, 0x1c) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @loopback, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8003}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000300000010b804020240000102030109021b0001014180fe0b040006020701ff0f00000102ff0306020f"], &(0x7f0000000600)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x1, 0x1, 0x0, 0xbf, 0x8}, 0x5f, &(0x7f00000001c0)={0x5, 0xf, 0x5f, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x7, 0x90, 0x5, 0x40}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x5, 0xf00, 0x7, [0x3f30]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "54a776a04d77b4f43a6e5bbb8b956762"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "2381e23530e7a2dba79777a83684ab5e"}, @ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x6, 0xf, 0x4, [0xc0, 0xf]}]}, 0x7, [{0x7c, &(0x7f0000000240)=@string={0x7c, 0x3, "4bbbd0e5adcc74ec71c1f2d4c3b9da1bc7804b766eae63f1901f2364bd4c4ff36163b321f33ceec5c509651e338acf8800c20fff853ae4f9a14aa6ee4f8c31efb56903246097824743eadf0cb566017ccffc7d7abae662c8e9a89e130790013b2caafda945c56e16a78900ed2f51b5ba64f2cd3df6a626b63e6f"}}, {0xb8, &(0x7f0000000340)=ANY=[@ANYBLOB="b803b1d6aae10755d1d66d1459f15770d8aa1eb9ffe0ad5f0e5c62dae9ef6226fda2835988be69b8b9e90774eba4a96b4f097ead04ee44ebdbc9dfd6c095ca7f71d76703b3aa626d0383ed5a6c14999d71d500000000000000005666ce199f7aa458b52222d33044b1d6817766b53ff0c165b448a1a4fc521c96f875a79ce3e37e939014f4d3314f3a20b7927b6d579f7f87fbaa61a6144472d8a7aa6eb5859b97f4e12d382e2d1c85511d77a7479757c2f9bd33a78a057c"]}, {0xe4, &(0x7f00000004c0)=@string={0xe4, 0x3, "57b7f2fbaaeda3f62575d8dbacd5010cb207286647f34439bd68b68ec3472145075c7fa9e84704e42c7fd2f3096bc23477ef6ea3487de2304cbb1a1eb9c9fb9ae0ef0a9fc1c790e89e378208b0e99e616ff8efe3f1b8995d3e7a3d318f096d8c858492cd92adebace2b3530f2846d408b7752ed58911f1a8565b43738820440abb95070ebb11a45bdd5ef8dc4ce79f8b32fa769721933f7eab1dccdbd6b91658908eed5d54820432d097c12c6bdbe099d88f8bb158f78ca9f03195554ed297b4fb27243e8e1430400bf31fab41ea5fec48e95a9873ceff70b05ec6b69d9f246716e6"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc09}}]}) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000480), 0x8, 0x0) r6 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f0000000440)=r5, 0x1) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}]}, 0x5c}}, 0x4840) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffc) syz_usb_disconnect(r0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) 7m47.538710542s ago: executing program 0 (id=5561): syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000080)=0xa, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$netlink(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) r2 = socket$kcm(0x18, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x40047452, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, 0x0, 0x20000098) mount$9p_fd(0xfffff000, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) umount2(0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x8401) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0x8000000000000000}}, 0x28) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x80}}, 0x50) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) socket$inet6(0xa, 0x3, 0xa) openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) 7m47.436963446s ago: executing program 0 (id=5562): syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000080)=0xa, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$netlink(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) r2 = socket$kcm(0x18, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x40047452, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, 0x0, 0x20000098) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) umount2(0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000100)={0x2c, 0x4, 0x0, {0x1, 0x8000000000000000, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x80}}, 0x50) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) socket$inet6(0xa, 0x3, 0xa) openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) 7m47.108712821s ago: executing program 0 (id=5564): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000fee000)=0x3fa, 0x4) 7m47.018419868s ago: executing program 40 (id=5564): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000fee000)=0x3fa, 0x4) 4m14.896490006s ago: executing program 3 (id=6271): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/226, 0xe2}, {&(0x7f0000000300)=""/33, 0x21}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f00000005c0)=""/83, 0x53}], 0x4, &(0x7f0000000640)=""/79, 0x4f}, 0x7fb7}, {{&(0x7f0000000700)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)=""/87, 0x57}, {0x0}, {&(0x7f0000000a00)=""/76, 0x4c}, {&(0x7f0000000b00)=""/245, 0xf5}, {&(0x7f0000000c00)=""/67, 0x43}, {&(0x7f0000000c80)=""/87, 0x57}], 0x6, &(0x7f0000000d00)=""/152, 0x98}, 0x3}, {{&(0x7f0000000dc0)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/135, 0x87}, {&(0x7f0000000a80)=""/60, 0x3c}, {&(0x7f0000000f80)=""/221, 0xdd}, {&(0x7f0000000f00)=""/34, 0x22}, {&(0x7f0000001080)=""/236, 0xec}], 0x5}, 0xeaff}, {{&(0x7f00000011c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001240)}, 0xfd32}], 0x4, 0x122, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x85, 0x4}, {0x5}}}}, 0x11) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) close(0x3) (fail_nth: 1) 4m13.62571064s ago: executing program 3 (id=6277): socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vmci(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, &(0x7f0000000100)={{@local, 0x4}, 0xc, 0xfffefffb}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00o\a', @ANYRES16=r2, @ANYBLOB="232c28bd7000fcdbdf2501000000000000000841000000140018000000037564703a73797a32000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)={{}, {0x77359400}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0xc080) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000040)=0x312) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0x5, 0x1, 0x1, 0x8}) r7 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast2}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newtaction={0x2174, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x200, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}, {0x4}, {0x4}, {0x20e0, 0x1, [@m_bpf={0xa8, 0x5, 0x0, 0x0, {{0x8}, {0x4}, {0x80, 0x6, "893bb621b85ef093847831f23b8a6510f1c8165a20657213b2a7aae66b2236803278e5d71cd897889e7ff73f4c9f22f69414f2398e042cdb96cd5350e4b540efff88353de7043cde937973108f389e72016bd80670349da7b342af76b0c5764cb6932512aa131ec4692e3053be17a3bbb78a4cd64b3868343d42aecb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_skbedit={0x1034, 0x19, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0xffe, 0x6, "68d68d933bee9d5c0b9b541d5cdbcc7f695e7b5023c6fea1c2ab48bc21cde274d47084987e586b34c77a622ce9c17a14f3d3f34f9a00b6bb712b519ccecdd5b0a6fe1a33e69d5860a1898f2b7ad816e4bc34310366086d1c093d8222d7b8de62fe5df9513ca06337b5694cec56714a23f9a4bac874ec238886d61ba3ff7ca3a9a69fcc89e3859aae19e5c613c47a85375670912bc5a2cee4e9106f14298d754b3b4624782b7f2b31468a2a2cd0ec7ea6a6f758ab67bc9c7468275554c2625b3abf8645748e73b205425052cab0b1a204e6514d5d193219156dc653544efd8198e36a059917bfd9b7f4468d052c5896bb919d8badfdf66c447c8e1cea9e3c20150fb7013f6b5d7ecb9b13ba0e7798b8a5f73767ee7d4eaaad7eec0e3577bc047853d66c67e7dac73261bd3b9f5a43c38d643a7bd9bea75480ae186c4dfc5c88b4587a3f82eda1f2e110e5ac88cd183dddb6dfa065b4024c93ba5df9c67389101d4ca30f0c3b3a919c229e3fe6ff229c5d61eae49475beb1e2c18851305e194f57830a7e9b3185fa4c051012d2c5b8da933d2a17fd7b1f1000be0baedc6ee5dff84a08183c1231c504651c8954eb45660cd3dac61cb8781f4e28da9f1d665ff0ab823cc4acfc4b72dc6367af8a92a96698185200b9851dab507744bc2ad021e540ab9993fdd4caf79061245a7867f810a05c4c9836edd6d77c72abd1dadc7891feefcee03a7871aaad97d7e03fe450b54ce20c4de17bcb6f5555788b9761c7f4a4081d54182948da8babf0cc1529354b1bb345e3abc3605003dfe71e2802c0a8ca890ca5cdfea9c0d535c55267f9911abc07b7754dbeffba1fc93fe3cb0f6c90a5b34473db53525e582e0f7b55a23f087a7cc7f332d23adc54476b5a60b4e29671cde58262ede0f3785d23b53af1d92e432a765a199ce7406c7856ade09f9a688192585efd9bd47fb1894e3629b584c99b2c7c0c7e447f4dce41e73e610dcaa76469cd2c03bc1bafd4b875c6f58fb082ea4f3c0539981fd4f9b37e0aaf0635520d37e4dce33f20cbc5363e5880a455583cb13dc5589fa2afe1a1d0388305dc434ce781c5c4b518081d079cd8a1c65b1f37f5487947f715e512d4ec2ba2a13f8a75d22781db542ed1b2a6a7423c4804cbdaf6557b6e4a435d4752ff441a12abce2e85b9dffb6a9c1744496dec4b80997c396815baa2c46bed3c6452b0f0a41aa6297309f6e1ab3ccb5633844d5b63c81187dc1a33f029fe00dd443d44f212a6b85c50e82fdb0c996c3d11830ab5a37770faab49be41094161a190c971b2977a8d86be69f848bb8fc9515124df7bf9dc781f6133bd1200e767390f8315a9b2c5a2163f3b8848b9d61b6f6d81ce3e83a927094f4d61a1c26dfe715d09a5250ede0805f4ced837be936bda09c551d067e1c990374ee257024f208ad0e51bc665844da345c979d78964a715fd2a2524c96ce91726ae9d7d3cd46730f8a6ba3e01b706a173baf576936af149798476be4c08d8a2c8d2e106f9007f49f662d1125e2e44777489534f3941d4bf6bac77ab12234b2a7b1eefccd1421989f01a48c9c311976c08495032136e188413449194415a678836c1ea71ad1b9120cebf1baf22576d1aa531325d38048aaccd10526d285ec26ba23494f33b5d9c4c242fab0d764b42f9075016bceaca179666e3306a43b136953d34b7b74775ae929035efefe78a812b64d40f11645e3f96488ad9b7e8ba3f1fde336e5b82962a63dac8e183211a1af5eed2b04f82b5e55b94124497fe3c21337c4fe7741fffffe430b7a6f16bd0625be8954b7d2c8201aad9070ed04b2f20791f5248bd57d633e8fc3c8b32ee70d153e453b15999eca920a6bf9c49ef83a156de79f38d956763a5c884347cf39f150f87a4b62026c4c5b5874ee37668b66af5b439e2f2f2e8237690a4307d88566f33ab41e3a5e4d9602026c8bc0f24e2498db582904748f980ed703fe633d4cbcf39b0b79c3fa07ecd38c711fb64b3ee326370209f7da0964bdcab122a6519f68c4724812ffe8f53a1e6ba117a2ca6f385ab0ec1f2da28d7077be817d4d585e9dbaa9e331563f312cce117de9053b7f9125e4697c5390f643c83d48d7dec5ea0178f070d0e7bf4efd33ce6e57e84fa9115c53ead13ba90e356762505c5db118cc3df9d7597a203e85051081032a0cde3f0c48fa5a84b6593bc112eeeb0c095ee455fb5a89a02947346a069cb7b0fdb167920a146f474c7985d06294be5ab27f7899624b6b0b12001416d6b19559b5dbc2f4d5d69fcb970474f959ba21549fbb659b0bf2d116b5799fd20a0b5c8f9e9726e96e149bf1f794c0a58c6e107bdc62a84bd47aaf824b13942fa72e6fd323bac6e970c91bd953f1fc8c49a99245992f865a7ecc370d8bf7555b78922be3d8864210866144d0041a8dd920102da3e3e3e5f8ef45ef40648405c1bbf7aac152fec72116b89a5c27e85329ba0338db3aa2513b78f79f4fe3d9910099427faa64a200cb9c49b004ad8913cf86b92f2f4d03d8a1d16556afd84a87abd5a5670088d47210113542cde18b17be186f8001a2a4f0f54989eb60caaa52a049c07a6997bd40d239223031d98bed621694b4e9c29f60b68f251957629adf3f2196ee2e3e8482b05e60c2acfb120e57224110ac06cc01817e2a9e7283b72f1299da97360781b2f790208eb68428a82fa5c2ce7b76abac552ea92a3590c226cb018622af641688062363a388e8b15de0b7ea663f1d250bbf53cc2b2e35a05d54f137e108c10fdee1ae1ceb563c1e2ebe55cb99f4693f898cd4949b932daa1c8045abd11ff2187cb141085a63cffc92ecc5ba6ad80e1ff2623c808c845414bbefaac9c9741a1dd8884d82ff695948976bb1bbe8c149cd768303af39a909d7977f60ae6bf99e756e899df082f92d58b2362d52f2bf6f268f2c03429b720f1e49392bf164bb8133cad55ec5ed7c671e629ff9119f3043a92641431a19ef80d6cfbbd06e7d0492d3fbc4a15060c265a802318f8de4af470ab28c87a7dae2eb80271ee8357b2d8a45d84a8bd8af54dbcf7831f174d69084ebe7be5229d0a7fdb892becc5d73bc3cde4db6799de066af16a2996fbfd0d51eecbffa519e7ec598fcd824924d342c1ae019d195f387b222aaa9a70f228c70b426aaead47f23a0cfdbe028c9b24b389b9018f79160869337ee4fa8fe5627bd82aa54412bf09a9587642c3a0b359d9e82d4f9633b4869e076509105893d0f62a3a078475474808b50aea40ffded9fc1578bedfce4588f4db387a0c78f9e525fdd747e4ddf8d40e78d231a7e3dc81455ae3647a5e49daeb35a5247f34c54dc9f6dd27f43ccfe15c156082f0bd268cbf3d25464c28b032eb77894965674ff9dca086b75cd29f7f0490ced43e7e6e69e6d73c91ac3c1da75cc7e033e3f7e78371dc27b3b11d467497a0f2e7fc1f27bde7e5dd5be20d0925bba23eb2aa9438147365bad94cceb92f553017e55c4204dee1f59a19d0e5b144b69d79753fa75b2f94ae81c61980c34761b7941cd3371a6589402772e4b1b5325b7d9780b95fb882db1e437f54790cba617555eb9412f20f58bd41aa087b4df797346e554d4247164aab39e845d3f66769f90c3b5923d7a35d062828216644fcacc998f6cf9cb87e208f0e118b2917febace7d017e66360be44685a35cf5629e110e4101fe02898a0226590a87426612202d81631e2cd05d8f6bd465abcc6cc676f19ed63e0b7cb3a05c148d77861c4bc289f1003f704d0e92c4f76f503cdbcf11d91cf23713ad9a5fd8402e52e165d4c74dac74c5a30e323b8519d5099e7c1e3b09871be68e391ac22178417014afa71dc80f396fb17c085da1a5762462d4c556b0b13bfd55204ed251a1c3e14b6260726e9fea63c2ff0e07380c066ed60bb9941eaf173ceb85846ed8ffa258064fbfb23607c26d7e37f446a9021fe6ee58132553e07f828f0fff6147884050216239502602f09f721689d8f8acd702a40c728994a4a7ac4b4b9eafa070d6d569587e09a9889b826bc16c07d9919e8aa232803139b2779064c9b2e40eebcab61bff0bf7875005a2b15b63732f75f03d3cc90519863691bcb2fdc788c97259dbf314747c81dbdfd51ce578c9191af45bbc0e1027fb04fd793955720c6a0bdc4c4910e947e40bc3d61495f2f4423dba8c9bbb500a6c722ca88bf1d72918ad0d12d87fd9349b8b77d80d1bf958e868c46a21469a1fa61174a0bfaa58a9e4580249c3e2d8562484efba6cbe07260ee34dfffef2bf2852a283e24a4671ea2fecbe24b54aa35a8605ab3763a96d694b34e1b0612b0a62f1e9b157a593ab5a01834fed9f1dae433d383dc1866ef0f5fb615926026519d7c99c4298fba1aa385abfc558c6ec6d291eb178dfc6b1d5dfd61354888b9bb4fca12941fa3bee9d8a4b58e518965c93f68724478a8373216f25b9f3450313964065dd9d48e9c8a60eac18bbc433a333fe26c18fb494555acdb0f194bf1ff0c03e1477ab7b8e9b0507d82aa61d73bbc9dfa4fc8364af443ab9910e68d1afe821f789e609c55f9e97184e4cc5fdf3addc7e8cd0905879e98043fd7e59d97e9ef5cad272c98354c1bc556d75e04b866c082410a751e4eece3d1ca054a93e2493f3b17217bb0367061de0673c352f64d3b90dd4c66726f07d81f60404f55ca0d485ace1a1ec39707d6c8fe28da4f65f0949d3722b5862d3adf04cff78a7b1c165735ef5783692e2d5404297bf43a48963d78777b4ff059709a9e344602e9c637f808cd836ed63654a1faddf796b5ad74a4eea036396c0312f34468c6a3fd471aa81e7d606a6d69982d469f7660a15a83d63bd43567c0f5e73a09ebb841b60d0a52dc7a3ce6ddb003205fb3e87c7fd189ef96ac7aff9163dfba3df9976b5484ff3ec02911c8de72d612849a55bc483d0bbdfa9488f88ba21c311c78e3f8a01c6f8c762b41e8d425640714ab556594ceef21b76a6b148e668cc8ad57062d19d5a969304280d208b3a61daa7287ca1f24e0edbd8bc36edcf995afb601d21c9d1eab5de267f016ff317c8a69aa41116cedb790821385979f95469d654f8a6f8c63cfa28f0e5e7cc170c2c57d5a501c16b9499bb98e3e433a250eafc4e25e5be4297488b2a29fa964a4b08f4d8cf0285e3e707d90691836d500dd2b46be1c12acc86e2ad40d4b5bb3c54dd8a36cadc58dff11fedbe1f13c82d448a78d0ca508c0c7ac1142d5985ef77b109acfa5e81dce14c3ece4c791bae348dd512dc0e93105299cc9a9b9309a93404da85ef387f8e4ca5e3e97326d8a6105b4fd14e0299a1c79667fc4586e5d77282c7d1bedf4903bda5f9f7ee2344d32198b00e223b4a16793caf312fee522dd7816ed46200167f445823763801ab71d0cf741a6cb6914e50da700565bec6fc4d6e30734aade21fbc7fc6336af7105ae8dd980ba418feeb946dd144db9301ddceba11bf44c9d8f27e32451f389837ccbbe54a49f7294e3fe5fe874b2eaf9fe89ba96eca638b5b142215505560f1912186c7ccfff8ddc45e26b86db3bba87ebdddce796196f986b78ad5d0b5206b2c178ee9452989ae718e1944657ee33755a5ab0385cc108f0df5157052488ce1598a87815aedf05b8c1d4061cccaa782667f147eac83f15679eee79de7b79eff2ac9db643921125a7753fff626cac07acdaf409330b8c9b40dae4905fa243f9c03f536e623668d42faaad462d3c19abd9120d3549dac4caa03472e173619f8dee7696ad2254e6dd9b65fcf38452607558f939f32f8be"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0xa0, 0x1f, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x101, 0x6, 0x4, 0x7ff, 0x5}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x1d5, 0x20000000, 0x7, 0x4000002}, 0x1b}}]}, {0x3b, 0x6, "4424ba401ace8b6fdc22b3fffd61c76af8f695ffd4f2f54e4f8c5efb7c728778a3d5907533bcf3e17005473ad35c2befb78ce7331864b2"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x1b8, 0x10, 0x0, 0x0, {{0x7}, {0x88, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x81, 0xffff, 0x8, 0xf9, 0x8}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "c555b2299dc5febf303724611773e781"}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast2}, @TCA_CT_MARK={0x8, 0x5, 0x3}, @TCA_CT_ZONE={0x6, 0x4, 0x8001}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x109, 0x6, "fa3e1fce60eaddb269f07bcba410acc60b5e6ee5bc4962d159127fa2f588000be49b22edf2f0322306e997332fd3e9aac66c64c8707e39a43759d2d3f22a6e0338441dcb55dbaaff2ead01b005a26460635f4d097065ddb35c6e04a8fe6ba28f6e108152072872fbf67cdae9cd860649c912ea690b1c457f6b93b76b485063e2781e5c7dcb9ba99dc71d3f79edfe79971c90900f578a7b53a60ad74f12fc012d837a512c5f3cc3dcd9a1a13580445a2c58d033cea2f2c8b150d0d8cb6481a8656a6efe4068f82b7de2331a903c331ea7cdfbce07b247a6ab479ca32903a1274b707fd1f661575da246f3dd4d2ffa890d841c21523f03bea2b1961ea724858f03dd819ea5f4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0xc6c, 0x1d, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7, 0x3, 0x81, 0x200}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x12f6, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x219f, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x4c3, 0x10000000}}]}, {0xc04, 0x6, "03917db1048d399f7f9ba7ff8f88386f83fe4d8912dfdf9cb585f8c62d827b24a27234e9775bc132a6779639049159c2677773900b5079436c3df03ca48b3fe91d7018505921558487dc1167b675158507401f2ae73de830bd61ce290c281ed0433345107f9eadec74897cddfb60a3fbd96103c764d7763339b6904fb21f3b1668dda489caeaa0aaa73bcee4744f7a7546bfd1fa505e65c3682fd7b87b00215363dd9a81b807a8396b70293b20439924cdaa23d2261fdf7557c840890de2b240edfc20f27cb51379ed1243cddf369b2656461708786f2a7b5843f329d6f3354ee36438af148dc426cf53b8c26e7a18edb3a7ec89d76d8b15988c8424d5ff8f841f1b156bd63674b596355160ec46be25fe07cac2cecfe314497ec954003f8ddad3e461add71b4f447969e266cad580e6c732e0446bc963e9a4a26e1213ed5fdfc8b041857b755c9589eba984f40fd4904c00e936add6edf02e25a42ea72f6314fe9f5db0baf79472ab1007d8015b3b1bd170b7c061acfdeaaf50621d7f31e0e75605bad4fb337a69fbea0661277d84bcbece4713880b5299d5241e01fe058bad94ed8ccdc85711ac691376745ba503c27aaf4e1a53ae69ff960db61d196e7293aedb2f40f4795ee334f979d7a8b50637d0f1daa29122aa2c8e84a597a8668e56b18f3e0c2b90515152708b2790267230ab8ed0b262c4188919be469fb6a7e68a9e67c2fa7cc53c9b9dec5cac23ab381bfc2a51a49e80b3fafa1921cf728020ce105f7d77d12d292cc954865c9f71708922072d49615124979ecef3a03555b7cebfd06758487f560ad2a6897ab165e9740b9c534889b1d2ecb090061b4fef9fd721cab2edc3e6766c8cd52533b6df9ee7124c296f8f9a934af8a3d7345a7c80de8d065a2e1b22dea461468967afd8f3485fc996c5257576e6a7ec27abec6766a12dd61fa034dd8fd975e68bd477148a93eeb417740ab188ce0e383d829c797546f6c0c0cdb9009bdd8912ebb27dbd694bf5b2a294186aac9799c5482cf6e3cb6f14747aa58c31cc51685c681ae722dcd516828a8e6b9053b9812a280727b179d60e460f89ba0afe83f943fa66e24fccb435c23ae8195b3a9364de766a8fd5ec26171d1dce5ab2f9a00c3ee701060da776152768f5e6fca98270bd7e5c4fd4bf54ee5bb642d62577f4ea5691611b4d426b75ab5a3ec6d494ef9757ca5f7940e9088f20082a7efd66692102f1f2610e159edfec8d80bda7fbbfea552a257244ba72cc73f9008bdfde0db4da0aa20adb6247106e4ac5f87e0c8347d0599d550eb8bbf9a14e113b810b00d250701bbac0f7b3a2160dcd7721cebeff1a153203db2989324b65d26b9f2333df15103eddd89447b6ad802179b7ea4b2eec306ae35ea5bf51b0869ec792d4a882a02670a97aa08a3e5c8703b0decaa276865d661f73cf70c2a24f53e67c3cbdcdf79e84ad2a74f3855c616237240a9491b06114d555e37a8f65032e61773e6f8cdeb51e1f950dbc17f2bfaef004de8724b2d58f689564580653349385384efbf3fce50e83c1056be2bf0d1907eeae90b231f6470902d7e1d237a5d603027032dbf304ee0ab15ce633e1c5a6aa31f7618342d2637282dc25fd5c635eaee7d3c51470b2ca97e3cedc79f9bd5b51af777ddba77b3ff7c2a9221878c793444e89de29d04a0b023e82c3584de9d7c30e6dbb91d86cc00a5998197e5404d1b4ed8d5a94244dcc12a1c23bd55bbaf46cffe91bd7b64a6aba5eb6224d10dc9b44575c4c92b854e043d7a60589e875ab133e797c94a94b13d8101ccd605dfcbbe03fb84088015ad57ba906be25da165a046e4a4bf50a7a3bfd23716bb4452a1a63d30294a77c63ded13ea1d82d32f91b990e0fd834d50aab01eb05223092974bdfbc5646e48ccdbcb1446a7ada90e19f23d9f2cf251c040cc0fc9714b1f248c8230572a8d4ac98d996d6b60da40d1fbf323e96d410515e93c4f7d7740450af1f59a3d2049f6a44d87119f9f14d65514a5b576a448392cd029e5737bc38303c9380c8a361d36d09968c392d1ecd72b68d67d93e2036f42fc44cec4712e3607768d52a778fbd82cacece20f777050bd5c278afad78b0bf4abf10cc148eafcf5b45d44b0d9ef5e15855461da5c79098d6d41a50daa31cec55a9eefb93a0a6d8fab12d1e3f4ccd05c505d4cfc3bfe46e2a74ddaefeb75a9e345eb0a43239098aac82f927a12a6105485813926a28193467a3d24e1e3080d8e6473d77fef388b3d0c1ad6eb692785b46b326a175437eb795472aaa5fcccd42f3ec3081b52d1d2ae4c81c6097bfc6c4a0b13735f01d70125580ec2e9a035935c16d2e79514672a73b813671ad22b2c66f7e29d1b3ef66c3ff9f24372bf6b774faac6ed672ff4582f9d782a9535d4168a050c3a4c21a7b464943822f595693c9b41398641a00557348ba90d70c19143ae23a76a8d37bf3a807219acc8bfad28fe63d50ab45f5d3696a84aa4c75c1e86289e1a2dfa98e886c2aadf54bc8e94570205017ef3fbd3f572c1b22a42f047467f758e871bfebed8fb0bdbf9adad0243ac5d05f6ce94113e93fde616a0992dba76a460072e00894c37f1882e24279e1ab7003b6c9b5b838f5d0acfb2e9ab1e9d4b8291ee47c88dbfe5fe40027ea4b3cc46e1ec4436fd6a07b737587e2ebe8ce28176e96363fda083484e83667ab8cca41ff9ed4a8a0a4639a2cb853eec24180bc1492abd0527e796cc2d48f4649e2f8bd7271692ef3e381fd0fde5c7a7e0f828431acf1d8504c9026211cb1747879794575614d5bb8730dc40e6d48f4d82d032ba24ae94f71be0d74337bf826ac1d6b73cda6314e1cd7cba2c860c56cd12a6516685757499d935b25b3c5db1490f853b6642838da9be1bec500ab7599ad9b564e07ac8a450e0d2ff5e593f460c566f8a32c43443083a24b64f785e7362a9852ef0894f057e4ee4de9abb78e0ee2b95225677b1214018fd8f00953638f80385a3901b7205b9045510fc9eafdd5d1b79d3e7ea725b1842260d6af8c033f73b85001ca43ee87025344cbef5024859a45860386c713c96f4965b4b67d0fd8910c92129912303fd0b9d8cb3eff06721f421a6604520aaac4db324a2d704245d8c23d3e709812df71729b16453a89bb474c527671612da7066d7774ee3e7d48343f3d1af7ad963d7929856244fb9be2f83263c498d1c43a96e46648f569eca6495ee3dbf1f678e53d839aca42ec98f062889f5fc3d62dc949e21554fd356e2f71d161f40628ccfaf41727080882dbceef40650a61a011a445638178af756a007adaa0dbdea3eb17ab774b528691517331fc27382d5940364db758b76d550304cfcb1cdb07095abba28afc039dff9e2c78c6a97b8a19a65f19cf9d7d2aec8f2dda451f95966618e49d72b110936e27dd0f98f216d12aafd7c9153c83aa50bb2d1875edf149863af4d2040de4cd3960525172b8031550dbe6f709aea977392da1230817d39023368632a0da912e2d982d911487ac5d34db82b512ee0f8bcc1c74a3157469e508986d820ea2fc5c25a529d5fe813cb8cc5636e2ddc3b21b98ea5d2478ef775744a217b80f50291d85b03589411b554c5b256cc9be81aaa99f661600e50dd00bb4af7e16d9093771aeaae7a8eb17d7565484846e01db35755177b3fcf36c07554bef836352d8b4f3a89b161ee54d6e8210f108ee771a13b24cfd239d9613909084a3ddc9a8dd0b7c496994fc2381800340e3f69d614ffdae13984cc7ce14b028145eb46c49c582101e4d5493d3e94cd8db979c87e8d7a9957ba552756288faabc28193c617fee83b385f9de76a9b546d5c9b3c83aaf5163731c8e18bacacbaba36ac6c2c49187893750fff59c147967ab6d5bba89376891e326c0be5e21551ef4cbcddd5fadddd5fb052b7ba2a18fa31f8d108b6e7c359796cfd373567101a4ee90b27f0bba802b1220a0aa03fdff3c961ef66f2eb597e9a5fcb88f8c7808cee5f3a96de64d4c7e4335bad63535b7e32395bb5ec8d4df875eef6de27e5060e84ec92feadf3641f31103470e55fb704d919858667ca9bce1ee04ee47501c13e65fbf52e8c89425cff4b3d60ab3cf5d767be4eecbfdefcda41eb78db665e1888a9cf3bd80dc469588089e1888c2dd9765139b9a418edc275f87b1fc72e33afc8efc4f24213d23b5d3be7efd64f9d9ab554ebf8ce4b1ece6b3d3f3c2f690346a35ec8183ec680ad9315d65d41a7342836d36095c53bc9c6436422a2e9457956defd939a722d5aa30af8460f7ca4d7f8e77b9f2386f3127d872e1ade6b2ca81b62816beca30dc3cb9092dabe4faaee6a266a2acf03319e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ctinfo={0x13c, 0x9, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x233}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3ce3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x2, 0x7, 0x2, 0x1c}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x0, 0x6, 0xbc, 0x1}}]}, {0xcd, 0x6, "7d451a6520d5cc70894479ed6df970fd9d8ce0604864220238490b45a6732e3a1928cb605b1e2945d566ea9423fd8edf63ef3eac79fc6354d1175d965a22a2b937c7f1c3954310c0601b30195eaa64f4fe1ca89631ab37cb44a63096d4c474a5317d50a0560dd8538d56c3f42808abd74af6ca99ec3aee7cee48e0a5d4d03639fd036464227f720b0a5c7df0e6b455c7a97ba5ac1fb5a28ee2a9f07de53430ae3fb729eb21dac29a48e4a9efdfcc44ef89951430a55f2ba0829a76810f5918f051a1a74995b793ae32"}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0x2174}}, 0x0) 4m12.190618713s ago: executing program 3 (id=6283): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4d0916cb7a186d2a2e55ba48ad3f796547502777ff87f76b395c692150689bb4a628a9f3aa873e97ebd2a2089456afed727eaa0e6eaaad8669a20c12065b35a5", 0x39}, 0x48, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0x7000, 0x10000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xe6ee2000, 0x3000, 0xc, 0x0, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x8, 0x51}, {0xeeef0000, 0xeee96000, 0xa, 0x0, 0x7, 0xa6, 0x9, 0x0, 0x8, 0xfe, 0x4, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0xdddd0000, 0x0, 0xb, 0x78, 0x5, 0x80, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x81a0002, 0x6000, 0xb, 0x0, 0x0, 0x5, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0x8d545fb8c34b4370, 0x0, 0xac35311bf7b5d8ca, 0x31c, 0x0, 0xf801, 0x0, [0x80000005, 0x0, 0x1]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f"], 0x0, 0x26}, 0x28) r5 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x541b, &(0x7f0000000040)={r5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r8 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r6, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000000)={@multicast, @random="110e78bef847", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xfbba, 0xfeea}}}}}}, 0x0) 4m11.623610532s ago: executing program 3 (id=6285): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bb", 0x48}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x10161) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000280)={0x7, 0x1, 0x0, 0x0, 0xb, "6218251a2b7e03f9"}) 4m10.686489692s ago: executing program 3 (id=6288): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000a80)={&(0x7f0000000440)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10}, 0x1c, 0x0, 0x0, &(0x7f0000000a40)=[@pktinfo={{0x20, 0x29, 0x32, {@loopback}}}], 0x20}, 0x10) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffff00}}]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x20000090) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x4008000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r2}, './file0\x00'}) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f00000002c0)={0x6, 0x8, 0x1ff, 0x2, 0x9}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m10.159172738s ago: executing program 3 (id=6290): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000200)=ANY=[@ANYBLOB="66696c7465fefa615ba27200004008db6ce0000000002000"/34], &(0x7f0000000080)=0x24) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004680)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8847}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0x3}]}, 0x5c}}, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) socket(0x22, 0x2, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x3c, r9, 0x1, 0x0, 0x0, {0x2d}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) socket$kcm(0x29, 0x2, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r10 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3000, 0x2}) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r11, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x0, 0x8}, {0xb, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x400009, 0x6, 0x0, 0x17, 0x0, 0x1, 0x6}) clock_adjtime(0x2, 0x0) 3m55.058370972s ago: executing program 41 (id=6290): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000200)=ANY=[@ANYBLOB="66696c7465fefa615ba27200004008db6ce0000000002000"/34], &(0x7f0000000080)=0x24) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004680)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8847}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0x3}]}, 0x5c}}, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) socket(0x22, 0x2, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x3c, r9, 0x1, 0x0, 0x0, {0x2d}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) socket$kcm(0x29, 0x2, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r10 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3000, 0x2}) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r11, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x0, 0x8}, {0xb, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x400009, 0x6, 0x0, 0x17, 0x0, 0x1, 0x6}) clock_adjtime(0x2, 0x0) 2m13.011899189s ago: executing program 7 (id=6838): syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2m11.872464287s ago: executing program 7 (id=6840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xe69, 0x298d}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x2000c004) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0xe4ff, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000080) 2m11.806573656s ago: executing program 7 (id=6841): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x18, 0x140a, 0x1f95844b79e8a54d, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x24000890) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x204c, &(0x7f0000000180)={0x0, 0x679a, 0x20000, 0x4, 0x3cb}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m11.362683989s ago: executing program 7 (id=6843): mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 2m11.275792417s ago: executing program 7 (id=6844): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x8, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x5, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0x81, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x88, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x6, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0x9, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x80, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfa4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x802}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc00}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x74}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004840}, 0xcc00) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2m11.049988605s ago: executing program 7 (id=6845): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x2, 0x2946, 0x3000, 0x8246, 0x14, "00000008f4553a00"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r3, 0xe, 0x3, r3}) 1m56.042852697s ago: executing program 42 (id=6845): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x2, 0x2946, 0x3000, 0x8246, 0x14, "00000008f4553a00"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r3, 0xe, 0x3, r3}) 1m0.032568543s ago: executing program 5 (id=7118): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000033000701fefffffffedbdf25037c00000c00018008000100", @ANYRES32, @ANYBLOB="8f7107"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioperm(0x3, 0x9, 0x80) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_ethernet(0xda, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @empty, @multicast2]}, @cipso={0x86, 0x58, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0x12, "2100505c09a000"/16}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x6, 0x9, "02a20948fd7406"}, {0x7, 0x12, "ccf0301f78d89b5d6afffb2a29a7b56d"}]}]}}, "a815a23d"}}}}}, 0x0) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="1e", 0x1}], 0x1) shutdown(r2, 0x1) timer_create(0x7, 0x0, &(0x7f0000000100)=0x0) timer_settime(r3, 0x0, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) timer_settime(r3, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000200)) timer_settime(r3, 0x1, &(0x7f0000000200)={{0x77359400}, {0x77359400}}, &(0x7f0000000240)) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r4 = socket$kcm(0x10, 0x5, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "408b7c", 0x3}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@private=0xa010101, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002800000129487a71fe2c251244961f2a74ac35ff5", 0x3d}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="2e00000011008108090f9b70c34cb92e0a4831371800000069bd6efb25095102eaf60d000300020400bf050005001206", 0x30}], 0x1}, 0x48000) 58.942321114s ago: executing program 5 (id=7121): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x615e, 0x0, 0x0, 0x1000034f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x200047bc, 0x0, 0x0, 0x0, 0x5e) 58.574286041s ago: executing program 5 (id=7123): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x40015b0b, &(0x7f0000000040)) 58.573668606s ago: executing program 5 (id=7124): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r1, 0x30b}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x20000004) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES8=r1], 0x0, 0x7, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3, r2}, 0xfed7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x40, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYRES8=r0], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$pokeuser(0x6, r8, 0x118, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r10 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x141cc0) ioctl$FE_GET_PROPERTY(r10, 0x80086f53, &(0x7f0000000000)={0x3, &(0x7f0000000640)=[{0x11, '\x00', @buffer={"4c6a1ac5f3c9a32a12af1db4bed7f691125fa51f75144ee20cfe18bb790a03eb", 0x20}, 0xffdf16c8}, {0xc, '\x00', @buffer={"26f1c53bc54b657856d77d02993a8b9b686955056cbaa3d7942b40814776f84f", 0x20}, 0x7f}, {0x14, '\x00', @data=0xd8f, 0x7}]}) close(r9) r11 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 58.469255704s ago: executing program 5 (id=7125): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xbc242, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="11000000140025000307f4f9002304000a", 0x11) (async) write(0xffffffffffffffff, &(0x7f0000000080)="11000000140025000307f4f9002304000a", 0x11) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000900)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r0, @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffd) (async) r4 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140)={r4}, &(0x7f0000000180)={'enc=', 'oaep', ' hash=', {'xcbc(aes)\x00'}}, 0x0, 0x0) (async) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140)={r4}, &(0x7f0000000180)={'enc=', 'oaep', ' hash=', {'xcbc(aes)\x00'}}, 0x0, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f00000003c0)) fchownat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x0, r8, 0x400) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x2, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x200ce8c4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x2, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x200ce8c4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x4040000) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 57.975046313s ago: executing program 5 (id=7129): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='tracefs\x00', 0x1214040, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x15, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x44, 0x66, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x4, 0xfff1}, {0xf, 0x10}, {0xc, 0xd}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x24044001) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0xa04423, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='tracefs\x00', 0x1214040, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x15, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x44, 0x66, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x4, 0xfff1}, {0xf, 0x10}, {0xc, 0xd}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x24044001) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0xa04423, 0x0) (async) 57.814375793s ago: executing program 43 (id=7129): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='tracefs\x00', 0x1214040, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x15, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x44, 0x66, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x4, 0xfff1}, {0xf, 0x10}, {0xc, 0xd}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x24044001) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0xa04423, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='tracefs\x00', 0x1214040, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x15, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x44, 0x66, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x4, 0xfff1}, {0xf, 0x10}, {0xc, 0xd}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x24044001) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0xa04423, 0x0) (async) 7.484406863s ago: executing program 8 (id=7326): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket(0x2a, 0x2, 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000000)={0x6, {"e512864f2c63b42b1e937260904ce544", "b80b00", "98fed86df169f801002f69ff0008e800"}, 0x3ff, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r7, 0x6f2d, 0x1) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x53, 0x80000001, 0x6, 0x0, 0x6]}) openat$nullb(0xffffff9c, &(0x7f00000000c0), 0x40000, 0x0) io_uring_enter(r3, 0x498d, 0x3, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x24}, 0x4, 0x700000000000000}, 0x40014) 6.632143816s ago: executing program 8 (id=7327): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x6) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xffffffc2, 0x0, 0xcf, 0x2, 0x5, "0c411be01fbcd2b7cb366b00", 0x1004, 0xffffffff}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$sock(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)='zn', 0x2}], 0x1}, 0x4804) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x6) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xffffffc2, 0x0, 0xcf, 0x2, 0x5, "0c411be01fbcd2b7cb366b00", 0x1004, 0xffffffff}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async) sendmsg$sock(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)='zn', 0x2}], 0x1}, 0x4804) (async) 6.325624133s ago: executing program 8 (id=7329): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b0b, &(0x7f0000000040)) 5.256208589s ago: executing program 1 (id=7330): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x3000002, 0x6031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000400)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x24, 0xfffd, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ssrr={0x89, 0x3, 0xe2}, @lsrr={0x83, 0x3, 0x78}]}}, {0x2001, 0x880b, 0x8}}}}}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 4.984384392s ago: executing program 4 (id=7332): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r2, 0x5457, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x0, 0x19, "a9872c1672d92f052f98a1aa41eda503d2bcf2"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, "5f730000a9003f00"}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x1, 0x0, {0xa}}, 0x14}}, 0x804) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) read$FUSE(r4, &(0x7f0000000680)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) umount2(&(0x7f0000000040)='./file0\x00', 0xd) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$BLKRRPART(r5, 0x125f, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, r0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}}, 0x20800) 4.969726318s ago: executing program 4 (id=7333): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0xffffffff}, 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8103}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}}, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={@empty, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x9, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r6}) ftruncate(r4, 0x0) recvmsg$unix(r1, &(0x7f00000013c0)={&(0x7f0000000000), 0x6e, &(0x7f00000000c0), 0x4, 0x0, 0xfffffffffffffd80}, 0x40000042) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) 4.882267296s ago: executing program 4 (id=7334): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff0000000003000000040042800c00018006000600894f"], 0xc0}, 0x1, 0x0, 0x0, 0x24060855}, 0xc000) sendmsg$nl_route_sched_retired(r0, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000000080)=@newtaction={0x80, 0x32, 0x103, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ipt={0xab, 0x10, 0x0, 0x0, {{0x8}, {0x4}, {0x3d, 0x6, "7cc8b54e3a61d8b731bbd1f0738751df4a2328a7239a0158a06b35092fa371dfd03c483fb7367ffb5e64337ea6d2481cf3f9dcdc168ad00d4a"}, {0xc}, {0x45, 0x8, {0x0, 0x2}}}}]}]}, 0x80}}, 0x4000000) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f028, 0x1}) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20980, 0x0) r3 = syz_io_uring_setup(0x894, &(0x7f0000000380)={0x0, 0x9c9f, 0x400, 0x0, 0x317}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6076db4000442f00fe800000000000000000000000000021ff0200000000000000000000000054e7fd24cf6022bb000000000800000086dd08008803", @ANYRES16=r0], 0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x4, 0x9dc7, 0x0, 0x0, 0xf}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) 4.713871758s ago: executing program 1 (id=7335): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, &(0x7f0000000100)=0x98) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_dev$vim2m(0x0, 0x5, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x10000}}}, 0xd) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r7, r7, 0x0, 0x200000) 4.193777406s ago: executing program 6 (id=7342): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc01c5868, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x81, &(0x7f0000000140)={@align=0x9c0, {0x4, 0x0, 0x5, 0x8}}, 0xfffffffd, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x7}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000003c0)={0x28, 0x2, r2, 0x0, &(0x7f00000c4000/0x4000)=nil, 0x4000, 0x6}) timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000000)="1d8c3db13004ba124fbe5cabf3cfa7edb528252af3baa8138befd2663a474cb6c45a22dfc3ad4c1acb88d9bfaa61af7e0ec3ccd7143af62f6dedd51dc3dcfb4176d82f4b106c28677ef3bdcbea06cbf02f4c57dbb4abc9016d68dfec1a28e3eb9f8a69fcc7788c2454292435a2850081972c7afd7eac2fedf94862b3c524238f7c0ec273f4b2f39d12dcc00114c4b35eca1c95318346ee9e19", &(0x7f00000000c0)}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000b80), &(0x7f0000000bc0)=""/4096, 0x1000, &(0x7f0000001d00)={0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@dev}, {@in6=@loopback, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'crc32c-generic\x00'}}}]}, 0x138}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x28, 0x6, 0xff, 0xfffff020}, {0x6, 0x0, 0x0, 0x8000000}]}, 0x8) eventfd(0xffff8408) 4.133993142s ago: executing program 6 (id=7343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0xc2}, {0x6000, 0xffff1000, 0x3, 0xfd, 0x0, 0x4, 0x0, 0x6, 0x0, 0x3c}, {0xffff1000, 0x0, 0x0, 0x78, 0x1, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x15}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0xe}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000, 0xfffd}, 0xfdf8fffb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0xe000, 0x10b000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x6c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.723636663s ago: executing program 6 (id=7344): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, &(0x7f0000000100)=0x98) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_dev$vim2m(0x0, 0x5, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x10000}}}, 0xd) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000180)=0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r7, r7, 0x0, 0x200000) 3.624230536s ago: executing program 4 (id=7345): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x2, 0x0, 0x9, 0x8, 0xffffffffffffffff}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) r4 = add_key$keyring(&(0x7f0000002e00), &(0x7f0000002e40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000600)="9ca7133a9c3009ed283f3892bb6abe3551b8bce30c2a3897f7f6cbc7e5c843256d3e8294699a92829bf745f7ea6b18c4c90d05d1a4a7563e5151c0c3e246967fe2f536990b59070051", 0x49, r4) r6 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e23, 0x80000000, @mcast1, 0x7}, {0xa, 0x4e20, 0x1000a, @local, 0x12}, r8, 0x1d}}, 0x48) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYRES16=r3, @ANYBLOB="0100ffffffff030000002f0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800"], 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000081c) stat(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000040)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.545749096s ago: executing program 1 (id=7346): r0 = openat$ndctl0(0xffffff9c, &(0x7f0000000000), 0x10800, 0x0) pwrite64(r0, &(0x7f0000000040)="26fb809f21c32f55b27fc0e76a43830fa8d569c9bb0372a9f61a9755963b4fa175f3182d656b05fb8519ef774659260d4f597d45872a4b76a5d08fb62e84ca81f56a774e62c2f07f4d00", 0x4a, 0x1000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$setlease(r0, 0x400, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r3, 0x800000000000) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x6, &(0x7f0000bdd000/0x2000)=nil) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x10a, 0x0, &(0x7f0000000340)=0x0, 0x0) socket(0x10, 0x3, 0x0) syz_io_uring_submit(r5, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r8 = socket$inet6(0xa, 0x80000, 0xff) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000fcb000), 0x4) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, 0x0) unshare(0x6a040000) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 3.290843928s ago: executing program 8 (id=7347): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000010c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESDEC], 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000001100)='iso9660\x00', 0x208000, 0x0) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f0000000000)={{0x6, @rose}, [@default, @bcast, @netrom, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendto(r6, 0x0, 0x0, 0x20000000, &(0x7f00000000c0)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x80) r7 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x20846}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYBLOB="50000000100001042596e1ad600027842cf52300759d2f45a72b7ae818a0f62b2bf5e875c49f6065803f581d040e942587", @ANYRES32=0x0, @ANYRES16=r2], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x40088c0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffb, @local, 0xffffffff}, 0x19) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r8 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x210242, 0x8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000200)={0x100, r9}, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000280)={0x100, r10}, 0x0) 3.044224986s ago: executing program 4 (id=7348): r0 = fsopen(&(0x7f0000000040)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='iocharset', &(0x7f00000002c0)='\xd0\xde\x16\x05y\x8b_\x8d8;it\x00\x00\x80\x00\x00\x00\x00\x00\x00uv/', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dir(0xffffff9c, &(0x7f00000004c0)='./file0\x00', 0x40000, 0x81) r3 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) recvmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f00000001c0)=""/80, 0x50}, {&(0x7f0000000240)=""/5, 0x5}, {&(0x7f0000000280)=""/110, 0x6e}, {&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/23, 0x17}], 0x6, &(0x7f00000003c0)=""/130, 0x82}, 0x1) 2.869850152s ago: executing program 6 (id=7349): socket$packet(0x11, 0x3, 0x300) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x4a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='+\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) set_mempolicy(0x2, 0x0, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) close_range(r4, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @broadcast}, @address_reply}}}}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000001580)={0x2020}, 0x2020) 2.08830494s ago: executing program 1 (id=7350): syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/269], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xc, &(0x7f0000000100)={0x40, 0x5}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0x6de6, 0x800, 0xfffffffe, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000100)={"6739669f274d13b691eb645b00e4f5b53e0ca34dd02ac6cdc67c5e3126628168", r8}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) 2.024334372s ago: executing program 4 (id=7351): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0300f2eb5c1f058f", @ANYRES64=r0, @ANYRES8=r0], 0x80}, 0x1, 0x0, 0x0, 0x20004840}, 0x4004c90) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000200)=""/172, 0xac}], 0x1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="090100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r3, 0x6f50, 0x8) syz_open_dev$hidraw(&(0x7f0000000040), 0x6, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x40900, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) write$6lowpan_control(r4, 0x0, 0x300) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0x202, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x282200, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) semget(0x2, 0x3, 0x20) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$I2C(&(0x7f00000003c0), 0x101, 0x20403) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000080)={&(0x7f0000000140)=[{0xc, 0x3001, 0x42, &(0x7f0000000180)="299a23b6b5b57a7f57a4bc74faa85e388aee747f6b2f9ce5d766d53cc4c326010412cdfeea08e1923786983567f333f4778fb9268cc82b45652521d83a610bb16dfb"}], 0x1}) 1.06180847s ago: executing program 6 (id=7352): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socket$kcm(0xa, 0x3, 0x73) ioctl$SIOCSIFHWADDR(r1, 0x8b2d, &(0x7f0000000040)={'wlan1\x00', @random="86ffb7b8252c"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x4000055}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r2, 0x1) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xe, 0x3, 0x0, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x14c}}, 0x4c0c8) tkill(r7, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.038010842s ago: executing program 1 (id=7353): syz_io_uring_setup(0x895, 0x0, 0x0, 0x0) r0 = getpgid(0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x1af243, 0x0) write$dsp(r1, &(0x7f0000000000)="81", 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r4 = syz_io_uring_setup(0x800088f, &(0x7f0000000300)={0x0, 0xaee1, 0x0, 0x2, 0xbfdffff8}, 0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x75fa, 0xe475, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e6}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$pptp(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x44}}}, 0x1e) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) 212.680579ms ago: executing program 8 (id=7354): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x615e, 0x0, 0x0, 0x1000034f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x200047bc, 0x0, 0x0, 0x0, 0x5e) 130.258835ms ago: executing program 8 (id=7355): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x200, 0x395, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000180)={{0xb, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 'syz1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x3) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000400)=0x55f) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) r6 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002700)=""/4085, 0xff5}], 0x1) statx(r0, &(0x7f0000000180)='\x00', 0x1000, 0x310, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES32=r9, @ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40000000) ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) 9.288534ms ago: executing program 6 (id=7356): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, &(0x7f0000000100)=0x98) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_dev$vim2m(0x0, 0x5, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x10000}}}, 0xd) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000180)=0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r7, r7, 0x0, 0x200000) 0s ago: executing program 1 (id=7357): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, &(0x7f0000000100)=0x98) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_dev$vim2m(0x0, 0x5, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x10000}}}, 0xd) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000180)=0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r8, r8, 0x0, 0x200000) kernel console output (not intermixed with test programs): x790 [ 1768.628858][T31760] ? do_getname+0x191/0x390 [ 1768.628880][T31760] do_sys_openat2+0x10d/0x1e0 [ 1768.628900][T31760] ? __pfx_do_sys_openat2+0x10/0x10 [ 1768.628916][T31760] ? __fget_files+0x215/0x3d0 [ 1768.628944][T31760] ? __fget_files+0x21f/0x3d0 [ 1768.628972][T31760] __ia32_compat_sys_openat+0x12d/0x210 [ 1768.628995][T31760] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1768.629016][T31760] ? __pfx_ksys_write+0x10/0x10 [ 1768.629046][T31760] __do_fast_syscall_32+0xe3/0x8c0 [ 1768.629069][T31760] do_fast_syscall_32+0x32/0x70 [ 1768.629090][T31760] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1768.629105][T31760] RIP: 0023:0xf70aef6c [ 1768.629120][T31760] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 1768.629135][T31760] RSP: 002b:00000000f545b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 1768.629152][T31760] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800013c0 [ 1768.629162][T31760] RDX: 0000000000060841 RSI: 00000000d7a15f29 RDI: 0000000000000000 [ 1768.629172][T31760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1768.629180][T31760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1768.629186][T31760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1768.629209][T31760] [ 1768.631503][T31759] syz.6.6973: page allocation failure: order:9, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1768.749956][T31759] CPU: 0 UID: 0 PID: 31759 Comm: syz.6.6973 Tainted: G L syzkaller #0 PREEMPT(full) [ 1768.749978][T31759] Tainted: [L]=SOFTLOCKUP [ 1768.749982][T31759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1768.749990][T31759] Call Trace: [ 1768.749996][T31759] [ 1768.750003][T31759] dump_stack_lvl+0x100/0x190 [ 1768.750024][T31759] warn_alloc.cold+0x95/0x1c1 [ 1768.750045][T31759] ? __pfx_warn_alloc+0x10/0x10 [ 1768.750062][T31759] ? psi_memstall_leave+0x19c/0x2e0 [ 1768.750081][T31759] ? __pfx___might_resched+0x10/0x10 [ 1768.750101][T31759] __alloc_frozen_pages_noprof+0xf36/0x2ba0 [ 1768.750123][T31759] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 1768.750142][T31759] ? tc_new_tfilter+0x978/0x23b0 [ 1768.750157][T31759] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 1768.750170][T31759] ? netlink_rcv_skb+0x159/0x420 [ 1768.750189][T31759] ? netlink_unicast+0x5aa/0x870 [ 1768.750204][T31759] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1768.750221][T31759] ? __sys_sendmsg+0x170/0x220 [ 1768.750234][T31759] ? __do_fast_syscall_32+0xe3/0x8c0 [ 1768.750247][T31759] ? do_fast_syscall_32+0x32/0x70 [ 1768.750263][T31759] ? __lock_acquire+0x4a5/0x2630 [ 1768.750283][T31759] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1768.750303][T31759] ? policy_nodemask+0xed/0x4f0 [ 1768.750317][T31759] alloc_pages_mpol+0x1fb/0x550 [ 1768.750329][T31759] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1768.750344][T31759] ? tcf_em_tree_validate+0x1d1/0xd60 [ 1768.750356][T31759] ___kmalloc_large_node+0x104/0x150 [ 1768.750371][T31759] __kmalloc_large_node_noprof+0x1c/0x70 [ 1768.750385][T31759] __kmalloc_noprof+0x5be/0x850 [ 1768.750400][T31759] ? __nla_parse+0x40/0x60 [ 1768.750416][T31759] tcf_em_tree_validate+0x1d1/0xd60 [ 1768.750455][T31759] ? __pfx_tcf_em_tree_validate+0x10/0x10 [ 1768.750473][T31759] ? tcf_exts_validate+0x42/0x60 [ 1768.750494][T31759] basic_change+0x3a5/0x1200 [ 1768.750511][T31759] ? __pfx_basic_change+0x10/0x10 [ 1768.750534][T31759] ? __pfx_basic_change+0x10/0x10 [ 1768.750547][T31759] tc_new_tfilter+0x978/0x23b0 [ 1768.750572][T31759] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1768.750589][T31759] ? kmem_cache_free+0x124/0x6a0 [ 1768.750604][T31759] ? skb_release_data+0x7a0/0x9d0 [ 1768.750621][T31759] ? __lock_acquire+0x4a5/0x2630 [ 1768.750642][T31759] ? find_held_lock+0x2b/0x80 [ 1768.750653][T31759] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1768.750667][T31759] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1768.750682][T31759] rtnetlink_rcv_msg+0x95e/0xe90 [ 1768.750697][T31759] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1768.750714][T31759] ? ref_tracker_free+0x37e/0x6c0 [ 1768.750728][T31759] netlink_rcv_skb+0x159/0x420 [ 1768.750742][T31759] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1768.750756][T31759] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1768.750776][T31759] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1768.750792][T31759] netlink_unicast+0x5aa/0x870 [ 1768.750808][T31759] ? __pfx_netlink_unicast+0x10/0x10 [ 1768.750828][T31759] netlink_sendmsg+0x8b0/0xda0 [ 1768.750845][T31759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1768.750861][T31759] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1768.750879][T31759] ____sys_sendmsg+0xa54/0xc30 [ 1768.750897][T31759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1768.750916][T31759] ? __pfx_futex_wake_mark+0x10/0x10 [ 1768.750935][T31759] ___sys_sendmsg+0x190/0x1e0 [ 1768.750953][T31759] ? __pfx____sys_sendmsg+0x10/0x10 [ 1768.750987][T31759] __sys_sendmsg+0x170/0x220 [ 1768.751001][T31759] ? __pfx___sys_sendmsg+0x10/0x10 [ 1768.751017][T31759] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 1768.751041][T31759] __do_fast_syscall_32+0xe3/0x8c0 [ 1768.751056][T31759] do_fast_syscall_32+0x32/0x70 [ 1768.751070][T31759] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1768.751085][T31759] RIP: 0023:0xf7fa4f6c [ 1768.751095][T31759] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 1768.751107][T31759] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1768.751118][T31759] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080006040 [ 1768.751125][T31759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1768.751131][T31759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1768.751138][T31759] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1768.751144][T31759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1768.751159][T31759] [ 1768.751164][T31759] Mem-Info: [ 1768.899903][T31759] active_anon:3333 inactive_anon:1606 isolated_anon:375 [ 1768.899903][T31759] active_file:983 inactive_file:1674 isolated_file:0 [ 1768.899903][T31759] unevictable:1768 dirty:21 writeback:0 [ 1768.899903][T31759] slab_reclaimable:8588 slab_unreclaimable:91485 [ 1768.899903][T31759] mapped:30114 shmem:4639 pagetables:1751 [ 1768.899903][T31759] sec_pagetables:343 bounce:0 [ 1768.899903][T31759] kernel_misc_reclaimable:0 [ 1768.899903][T31759] free:42126 free_pcp:1090 free_cma:0 [ 1768.915366][T31759] Node 0 active_anon:0kB inactive_anon:32kB active_file:0kB inactive_file:140kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:880kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7508kB pagetables:1220kB sec_pagetables:1160kB all_unreclaimable? yes Balloon:0kB [ 1768.925548][T31759] Node 1 active_anon:15032kB inactive_anon:6392kB active_file:3932kB inactive_file:6556kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:120176kB dirty:76kB writeback:0kB shmem:15020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9224kB pagetables:5784kB sec_pagetables:212kB all_unreclaimable? no Balloon:0kB [ 1768.935871][T31759] Node 0 DMA free:3948kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1768.946117][T31759] lowmem_reserve[]: 0 285 285 285 285 [ 1768.947909][T31759] Node 0 DMA32 free:32744kB boost:20480kB min:33552kB low:36820kB high:40088kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:32kB active_file:0kB inactive_file:8kB unevictable:3536kB writepending:4kB zspages:1948kB present:1032196kB managed:292620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1768.958191][T31759] lowmem_reserve[]: 0 0 0 0 0 [ 1768.959850][T31759] Node 1 DMA32 free:124824kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15432kB inactive_anon:6392kB active_file:3932kB inactive_file:6556kB unevictable:3536kB writepending:148kB zspages:5140kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:12252kB local_pcp:988kB free_cma:0kB [ 1768.970849][T31759] lowmem_reserve[]: 0 0 0 0 0 [ 1768.972566][T31759] Node 0 DMA: 133*4kB (UM) 81*8kB (UM) 35*16kB (UM) 25*32kB (UM) 4*64kB (UM) 3*128kB (M) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3948kB [ 1768.978574][T31759] Node 0 DMA32: 859*4kB (UME) 451*8kB (UME) 158*16kB (UME) 228*32kB (UME) 87*64kB (UME) 27*128kB (UME) 9*256kB (UME) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 32804kB [ 1768.986575][T31759] Node 1 DMA32: 2996*4kB (U) 5882*8kB (UE) 3192*16kB (UE) 59*32kB (UE) 11*64kB (UE) 10*128kB (UE) 20*256kB (U) 11*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 124736kB [ 1768.993499][T31759] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1768.997929][T31759] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1769.002049][T31759] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1769.006114][T31759] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1769.010402][T31759] 8954 total pagecache pages [ 1769.012747][T31759] 1639 pages in swap cache [ 1769.014696][T31759] Free swap = 89048kB [ 1769.016551][T31759] Total swap = 124996kB [ 1769.018363][T31759] 524155 pages RAM [ 1769.019996][T31759] 0 pages HighMem/MovableOnly [ 1769.022186][T31759] 210107 pages reserved [ 1769.024082][T31759] 0 pages cma reserved [ 1769.212153][T31767] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 1769.216194][T31767] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1769.376796][T31777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6979'. [ 1769.433656][T31783] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6979'. [ 1769.951533][ T5934] Bluetooth: hci1: command 0x0c1a tx timeout [ 1770.509311][T26927] Bluetooth: hci3: command 0x0c1a tx timeout [ 1770.509420][T29407] Bluetooth: hci2: command 0x041b tx timeout [ 1770.512227][T25192] Bluetooth: hci0: command 0x040f tx timeout [ 1770.514569][T19351] usb 50-1: device descriptor read/8, error -110 [ 1770.518748][ T5934] Bluetooth: hci5: command 0x041b tx timeout [ 1770.912659][T19351] usb usb50-port1: attempt power cycle [ 1771.502192][T19351] usb usb50-port1: unable to enumerate USB device [ 1772.322822][T31786] wg2 speed is unknown, defaulting to 1000 [ 1772.444018][T31820] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6989'. [ 1772.484835][T31820] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6989'. [ 1772.487892][T31820] nbd: nbd64 already in use [ 1772.582649][ T5934] Bluetooth: hci5: command 0x041b tx timeout [ 1772.631756][T19351] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1772.641521][ T6019] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1772.792836][T19351] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1772.797187][T19351] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1772.801060][T19351] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1772.804643][T19351] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1772.808844][T19351] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1772.812197][ T6019] usb 6-1: Using ep0 maxpacket: 8 [ 1772.814102][T19351] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.818182][ T6019] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 1772.820843][ T6019] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1772.824890][ T6019] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1772.828355][ T6019] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1772.832318][ T6019] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1772.835612][ T6019] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1772.839976][ T6019] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1772.852074][ T6019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.570329][T19351] usb 10-1: config 0 descriptor?? [ 1773.945323][ T6019] usb 6-1: usb_control_msg returned -32 [ 1773.947857][ T6019] usbtmc 6-1:16.0: can't read capabilities [ 1774.027343][T19351] plantronics 0003:047F:FFFF.0014: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1774.086155][T31834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6991'. [ 1774.090129][T31834] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6991'. [ 1774.341801][T31836] lo: entered allmulticast mode [ 1774.359047][T31836] tunl0: entered allmulticast mode [ 1774.372459][T31836] gre0: entered allmulticast mode [ 1774.394697][T31836] gretap0: entered allmulticast mode [ 1774.413587][T31836] erspan0: entered allmulticast mode [ 1774.419536][T31836] ip_vti0: entered allmulticast mode [ 1774.424404][T31836] ip6_vti0: entered allmulticast mode [ 1774.429579][T31836] sit0: entered allmulticast mode [ 1774.446137][T31836] ip6tnl0: entered allmulticast mode [ 1774.450417][T31836] ip6gre0: entered allmulticast mode [ 1774.456558][T31836] syz_tun: entered allmulticast mode [ 1774.462923][T31836] ip6gretap0: entered allmulticast mode [ 1774.468523][T31836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.471620][T31836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.475688][T31836] bridge0: entered allmulticast mode [ 1774.480378][T31836] vcan0: entered allmulticast mode [ 1774.487814][T31836] .`: entered allmulticast mode [ 1774.489837][T31836] bond_slave_0: entered allmulticast mode [ 1774.492516][T31836] bond_slave_1: entered allmulticast mode [ 1774.494973][T31836] team0: entered allmulticast mode [ 1774.496888][T31836] team_slave_0: entered allmulticast mode [ 1774.498882][T31836] team_slave_1: entered allmulticast mode [ 1774.510004][T31836] dummy0: entered allmulticast mode [ 1774.520968][T31836] nlmon0: entered allmulticast mode [ 1774.528479][T31836] caif0: entered allmulticast mode [ 1774.530998][T31836] batadv0: entered allmulticast mode [ 1774.537057][T31836] vxcan0: entered allmulticast mode [ 1774.550367][T31836] vxcan1: entered allmulticast mode [ 1774.558229][T31836] veth0: entered allmulticast mode [ 1774.671429][ T5934] Bluetooth: hci5: command 0x041b tx timeout [ 1774.692728][T31836] veth1: entered allmulticast mode [ 1774.754508][T31836] wg0: entered allmulticast mode [ 1774.759300][T31836] wg1: entered allmulticast mode [ 1774.765131][T31836] wg2: entered allmulticast mode [ 1774.768533][T31836] veth0_to_bridge: entered allmulticast mode [ 1774.773731][T31836] veth1_to_bridge: entered allmulticast mode [ 1774.780932][T31836] veth1_to_bond: entered allmulticast mode [ 1774.785207][T31836] veth0_to_team: entered allmulticast mode [ 1774.790142][T31836] veth1_to_team: entered allmulticast mode [ 1774.794924][T31836] veth0_to_batadv: entered allmulticast mode [ 1774.798452][T31836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1774.801541][T31836] batadv_slave_0: entered allmulticast mode [ 1774.805567][T31836] veth1_to_batadv: entered allmulticast mode [ 1774.809057][T31836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1774.812317][T31836] batadv_slave_1: entered allmulticast mode [ 1774.816231][T31836] xfrm0: entered allmulticast mode [ 1774.819488][T31836] veth0_to_hsr: entered allmulticast mode [ 1774.823449][T31836] hsr_slave_0: entered allmulticast mode [ 1774.826366][T31836] veth1_to_hsr: entered allmulticast mode [ 1774.829982][T31836] hsr_slave_1: entered allmulticast mode [ 1774.834078][T31836] hsr0: entered allmulticast mode [ 1774.837546][T31836] veth1_virt_wifi: entered allmulticast mode [ 1774.840860][T31836] veth0_virt_wifi: entered allmulticast mode [ 1774.844351][T31836] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1774.847628][T31836] veth1_vlan: entered allmulticast mode [ 1774.851221][T31836] veth0_vlan: entered allmulticast mode [ 1774.858657][T31836] vlan0: entered allmulticast mode [ 1774.860462][T31836] vlan1: entered allmulticast mode [ 1774.862700][T31836] macvlan0: entered allmulticast mode [ 1774.866543][T31836] macvlan1: entered allmulticast mode [ 1774.870562][T31836] ipvlan0: entered allmulticast mode [ 1774.873034][T31836] ipvlan1: entered allmulticast mode [ 1774.875274][T31836] veth1_macvtap: entered allmulticast mode [ 1774.878787][T31836] veth0_macvtap: entered allmulticast mode [ 1774.884077][T31836] macvtap0: entered allmulticast mode [ 1774.887852][T31836] macsec0: entered allmulticast mode [ 1774.892900][T31836] geneve0: entered allmulticast mode [ 1774.897415][T31836] geneve1: entered allmulticast mode [ 1774.905321][T31836] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1774.910123][T31836] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1774.916388][T31836] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 1774.920849][T31836] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 1774.929760][T31836] mac80211_hwsim hwsim128 wlan0: entered allmulticast mode [ 1774.937928][T31836] mac80211_hwsim hwsim129 wlan1: entered allmulticast mode [ 1774.942475][T31836] sit1: entered allmulticast mode [ 1774.958261][T31836] bond1: entered allmulticast mode [ 1774.963923][T31836] veth2: entered allmulticast mode [ 1774.966929][T31836] veth3: entered allmulticast mode [ 1774.970961][T31836] bond2: entered allmulticast mode [ 1774.975429][ T47] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1774.978770][ T47] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1774.983356][ T47] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1774.986259][ T47] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1775.401572][T25792] usb 9-1: new full-speed USB device number 45 using dummy_hcd [ 1775.541432][T25792] usb 9-1: device descriptor read/64, error -71 [ 1775.597345][T21709] usb 10-1: USB disconnect, device number 66 [ 1775.722758][ T5999] kernel read not supported for file /vcs (pid: 5999 comm: kworker/1:3) [ 1775.787720][T25792] usb 9-1: new full-speed USB device number 46 using dummy_hcd [ 1775.921435][T25792] usb 9-1: device descriptor read/64, error -71 [ 1776.003447][T21709] usb 6-1: USB disconnect, device number 119 [ 1776.031651][T25792] usb usb9-port1: attempt power cycle [ 1776.157101][T31862] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7001'. [ 1776.371475][T25792] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 1776.392056][T25792] usb 9-1: device descriptor read/8, error -71 [ 1776.631411][T25792] usb 9-1: new full-speed USB device number 48 using dummy_hcd [ 1776.651878][T25792] usb 9-1: device descriptor read/8, error -71 [ 1776.741541][ T5934] Bluetooth: hci5: command 0x041b tx timeout [ 1776.761715][T25792] usb usb9-port1: unable to enumerate USB device [ 1777.565083][T31875] kernel read not supported for file /file0 (pid: 31875 comm: syz.5.7005) [ 1777.568310][ T40] audit: type=1800 audit(2000001842.767:3354): pid=31875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7005" name="file0" dev="mqueue" ino=146694 res=0 errno=0 [ 1777.570338][T31875] 9pnet_fd: Insufficient options for proto=fd [ 1778.167685][T31880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7006'. [ 1778.568310][T31889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7008'. [ 1778.660875][T31889] nbd: socks must be embedded in a SOCK_ITEM attr [ 1778.673474][T31310] block nbd64: NBD_DISCONNECT [ 1778.811604][T31310] udevd[31310]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1778.821733][ T5934] Bluetooth: hci5: command 0x041b tx timeout [ 1779.068264][T31882] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1779.071774][T31882] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1779.074047][T31882] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1779.076195][T31882] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1779.091509][T31882] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1779.402572][T31913] FAULT_INJECTION: forcing a failure. [ 1779.402572][T31913] name failslab, interval 1, probability 0, space 0, times 0 [ 1779.406959][T31913] CPU: 1 UID: 0 PID: 31913 Comm: syz.4.7015 Tainted: G L syzkaller #0 PREEMPT(full) [ 1779.406976][T31913] Tainted: [L]=SOFTLOCKUP [ 1779.406981][T31913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1779.406987][T31913] Call Trace: [ 1779.406992][T31913] [ 1779.406997][T31913] dump_stack_lvl+0x100/0x190 [ 1779.407019][T31913] should_fail_ex.cold+0x5/0xa [ 1779.407032][T31913] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1779.407045][T31913] should_failslab+0xc2/0x120 [ 1779.407057][T31913] __kmalloc_noprof+0xe0/0x850 [ 1779.407075][T31913] tomoyo_realpath_from_path+0xb6/0x690 [ 1779.407091][T31913] tomoyo_path_number_perm+0x23c/0x580 [ 1779.407107][T31913] ? tomoyo_path_number_perm+0x22e/0x580 [ 1779.407124][T31913] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1779.407155][T31913] ? find_held_lock+0x2b/0x80 [ 1779.407165][T31913] ? hook_file_ioctl_common+0x146/0x410 [ 1779.407182][T31913] ? __fget_files+0x215/0x3d0 [ 1779.407201][T31913] ? __fget_files+0x21f/0x3d0 [ 1779.407220][T31913] security_file_ioctl_compat+0xd3/0x230 [ 1779.407243][T31913] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1779.407261][T31913] __do_fast_syscall_32+0xe3/0x8c0 [ 1779.407277][T31913] do_fast_syscall_32+0x32/0x70 [ 1779.407290][T31913] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1779.407304][T31913] RIP: 0023:0xf70bef6c [ 1779.407314][T31913] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 1779.407324][T31913] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1779.407335][T31913] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004b6a [ 1779.407342][T31913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1779.407348][T31913] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1779.407354][T31913] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1779.407360][T31913] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1779.407374][T31913] [ 1779.407378][T31913] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1779.486180][T31917] netlink: 'syz.5.7016': attribute type 1 has an invalid length. [ 1779.535114][T31919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7017'. [ 1779.595295][T31919] nbd: socks must be embedded in a SOCK_ITEM attr [ 1779.605679][T31310] block nbd64: NBD_DISCONNECT [ 1779.687327][T31310] udevd[31310]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1779.751440][T19351] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 1779.903237][T19351] usb 10-1: Using ep0 maxpacket: 8 [ 1779.907034][T19351] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1779.911266][T19351] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1779.915056][T19351] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1779.917374][T19351] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1779.920763][T19351] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.925167][T19351] usb 10-1: config 0 descriptor?? [ 1779.994794][T31937] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7020'. [ 1780.345789][T19351] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 1780.349194][T19351] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 1780.364745][T19351] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 1780.368039][T19351] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 1780.371147][T19351] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 1780.402185][T19351] mcp2221 0003:04D8:00DD.0015: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1780.423249][ T5934] Bluetooth: hci1: command 0x0c1a tx timeout [ 1780.800271][ T24] usb 10-1: USB disconnect, device number 67 [ 1780.850627][T31949] 9pnet_virtio: no channels available for device syz [ 1780.871384][T31950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1780.889897][T31950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.111506][T25792] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1781.123161][T31952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7025'. [ 1781.151500][ T5934] Bluetooth: hci5: command 0x041b tx timeout [ 1781.151517][T25192] Bluetooth: hci0: command 0x040f tx timeout [ 1781.151544][T25192] Bluetooth: hci3: command 0x0c1a tx timeout [ 1781.151577][T29407] Bluetooth: hci2: command 0x041b tx timeout [ 1781.272152][T25792] usb 6-1: device descriptor read/64, error -71 [ 1781.306060][T31955] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1781.531457][T25792] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1781.592956][ T9] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 1781.661512][T25792] usb 6-1: device descriptor read/64, error -71 [ 1781.741387][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1781.745463][ T9] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1781.748352][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1781.752768][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1781.756397][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1781.759824][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1781.764349][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1781.768285][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.781921][T25792] usb usb6-port1: attempt power cycle [ 1781.801429][ T9289] usb 11-1: new high-speed USB device number 127 using dummy_hcd [ 1781.951475][ T9289] usb 11-1: Using ep0 maxpacket: 32 [ 1781.956062][ T9289] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1781.959575][ T9289] usb 11-1: config 0 has no interface number 0 [ 1781.964732][ T9289] usb 11-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1781.968546][ T9289] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.972317][ T9289] usb 11-1: Product: syz [ 1781.974338][ T9289] usb 11-1: Manufacturer: syz [ 1781.976470][ T9289] usb 11-1: SerialNumber: syz [ 1781.981402][T31957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.982455][ T9289] usb 11-1: config 0 descriptor?? [ 1781.985056][T31957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.990741][ T9289] usb 11-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1781.994216][ T9] usb 10-1: GET_CAPABILITIES returned 0 [ 1781.997168][ T9289] usb 11-1: selecting invalid altsetting 1 [ 1781.997633][ T9] usbtmc 10-1:16.0: can't read capabilities [ 1782.000160][ T9289] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1782.011784][ T9289] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1782.017038][ T9289] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1782.031505][ T9289] usb 11-1: media controller created [ 1782.049689][ T9289] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1782.121568][T25792] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1782.142256][T25792] usb 6-1: device descriptor read/8, error -71 [ 1782.392119][T25792] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1782.412135][T25792] usb 6-1: device descriptor read/8, error -71 [ 1782.521655][T25792] usb usb6-port1: unable to enumerate USB device [ 1782.920675][T31970] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1782.925810][T31970] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1782.928812][T31970] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1782.931725][T31970] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1782.935034][T31970] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1782.965193][T19351] usb 10-1: USB disconnect, device number 68 [ 1783.141682][ T9289] usb 11-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1783.147803][ T9289] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1783.147893][T31972] usb 11-1: dvb_usb_ce6230: I2C read not implemented [ 1783.780725][T31983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7034'. [ 1783.806341][T31983] nbd: socks must be embedded in a SOCK_ITEM attr [ 1783.841788][T31983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7034'. [ 1783.844904][T31983] nbd: nbd64 already in use [ 1784.007886][T31995] FAULT_INJECTION: forcing a failure. [ 1784.007886][T31995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1784.013924][T31995] CPU: 3 UID: 0 PID: 31995 Comm: syz.6.7035 Tainted: G L syzkaller #0 PREEMPT(full) [ 1784.013944][T31995] Tainted: [L]=SOFTLOCKUP [ 1784.013948][T31995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1784.013955][T31995] Call Trace: [ 1784.013959][T31995] [ 1784.013965][T31995] dump_stack_lvl+0x100/0x190 [ 1784.013987][T31995] should_fail_ex.cold+0x5/0xa [ 1784.014001][T31995] _copy_from_iter+0x1f4/0x1690 [ 1784.014022][T31995] ? __asan_memset+0x23/0x50 [ 1784.014038][T31995] ? __pfx__copy_from_iter+0x10/0x10 [ 1784.014056][T31995] ? __pfx___alloc_skb+0x10/0x10 [ 1784.014074][T31995] netlink_sendmsg+0x808/0xda0 [ 1784.014098][T31995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1784.014114][T31995] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1784.014132][T31995] ____sys_sendmsg+0xa54/0xc30 [ 1784.014150][T31995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1784.014172][T31995] ___sys_sendmsg+0x190/0x1e0 [ 1784.014190][T31995] ? __pfx____sys_sendmsg+0x10/0x10 [ 1784.014224][T31995] __sys_sendmsg+0x170/0x220 [ 1784.014238][T31995] ? __pfx___sys_sendmsg+0x10/0x10 [ 1784.014255][T31995] ? __pfx_ksys_write+0x10/0x10 [ 1784.014276][T31995] __do_fast_syscall_32+0xe3/0x8c0 [ 1784.014328][T31995] do_fast_syscall_32+0x32/0x70 [ 1784.014351][T31995] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1784.014372][T31995] RIP: 0023:0xf7fa4f6c [ 1784.014384][T31995] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 1784.014395][T31995] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1784.014407][T31995] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 1784.014414][T31995] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 1784.014421][T31995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1784.014427][T31995] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1784.014434][T31995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1784.014448][T31995] [ 1784.066576][ T9289] usb 11-1: USB disconnect, device number 127 [ 1784.077939][T31310] udevd[31310]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1784.257728][T31999] tmpfs: Bad value for 'mpol' [ 1784.262126][T25192] Bluetooth: hci1: command 0x0c1a tx timeout [ 1784.357362][ T40] audit: type=1326 audit(2000001849.557:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32001 comm="syz.6.7040" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4f6c code=0x0 [ 1784.639318][T32013] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 1784.755860][T32020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7044'. [ 1784.849350][T32020] nbd: socks must be embedded in a SOCK_ITEM attr [ 1784.876765][T32022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7044'. [ 1784.879993][T32022] nbd: nbd64 already in use [ 1784.981554][T26927] Bluetooth: hci3: command 0x0c1a tx timeout [ 1784.981591][T29407] Bluetooth: hci2: command 0x041b tx timeout [ 1784.983711][T25192] Bluetooth: hci5: command 0x041b tx timeout [ 1784.988678][ T5934] Bluetooth: hci0: command 0x040f tx timeout [ 1784.992158][T32027] fuse: Unknown parameter 'r_otmode' [ 1785.011435][T31310] udevd[31310]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1785.065816][T32030] futex_wake_op: syz.5.7045 tries to shift op by 32; fix this program [ 1785.104648][T32029] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1785.106870][T32029] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1785.139793][T32029] vhci_hcd vhci_hcd.0: Device attached [ 1785.235623][ T40] audit: type=1800 audit(2000001850.437:3356): pid=32029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7042" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1785.321570][T19351] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1785.335869][T32036] wg2 speed is unknown, defaulting to 1000 [ 1785.431815][ T8639] usb 46-1: SetAddress Request (15) to port 0 [ 1785.434789][ T8639] usb 46-1: new SuperSpeed USB device number 15 using vhci_hcd [ 1785.481486][T19351] usb 6-1: Using ep0 maxpacket: 8 [ 1785.568142][T19351] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1785.571259][T19351] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1785.575667][T19351] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1785.580325][T19351] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1785.585793][T19351] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1785.590673][T32040] 9p: Bad value for 'rfdno' [ 1785.592654][T19351] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1785.595985][T19351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.629500][T32033] vhci_hcd: connection reset by peer [ 1785.632290][T15475] vhci_hcd vhci_hcd.4: stop threads [ 1785.634423][T15475] vhci_hcd vhci_hcd.4: release socket [ 1785.636384][T15475] vhci_hcd vhci_hcd.4: disconnect device [ 1785.809160][T32032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1785.817194][T32032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1785.831809][T19351] usb 6-1: GET_CAPABILITIES returned 0 [ 1785.833698][T19351] usbtmc 6-1:16.0: can't read capabilities [ 1786.034383][T32044] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7049'. [ 1786.090905][T32046] fuse: Unknown parameter 'f›n' [ 1786.103843][ T9289] usb 6-1: USB disconnect, device number 124 [ 1786.201076][T32048] wg2 speed is unknown, defaulting to 1000 [ 1786.681442][ T9] usb 9-1: new full-speed USB device number 49 using dummy_hcd [ 1786.762085][ T1120] sr 2:0:0:0: [sr0] tag#20 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1786.766256][ T1120] sr 2:0:0:0: [sr0] tag#20 Sense Key : Illegal Request [current] [ 1786.769181][ T1120] sr 2:0:0:0: [sr0] tag#20 Add. Sense: Invalid command operation code [ 1786.772772][ T1120] sr 2:0:0:0: [sr0] tag#20 CDB: Write(10) 2a 00 00 00 00 1e 00 00 02 00 [ 1786.775770][ T1120] critical target error, dev sr0, sector 120 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 1786.779350][ T1120] buffer_io_error: 9 callbacks suppressed [ 1786.779360][ T1120] Buffer I/O error on dev sr0, logical block 15, lost async page write [ 1786.854246][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1786.858229][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1786.863509][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1786.866903][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.085915][ T9] usb 9-1: usb_control_msg returned -32 [ 1787.088392][ T9] usbtmc 9-1:16.0: can't read capabilities [ 1789.002500][T32083] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1789.005479][T32083] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1789.008337][T32083] vhci_hcd vhci_hcd.0: Device attached [ 1789.015301][T32085] vhci_hcd: connection closed [ 1789.015656][ T46] vhci_hcd vhci_hcd.1: stop threads [ 1789.019283][ T46] vhci_hcd vhci_hcd.1: release socket [ 1789.021370][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 1789.403384][T25778] usb 9-1: USB disconnect, device number 49 [ 1789.666374][T32102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7066'. [ 1790.506739][ T8639] usb 46-1: device descriptor read/8, error -110 [ 1790.877676][T32126] tmpfs: Bad value for 'mpol' [ 1790.881789][T21709] usb 10-1: new full-speed USB device number 69 using dummy_hcd [ 1790.902334][ T8639] usb usb46-port1: attempt power cycle [ 1791.043607][T21709] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1791.047287][T21709] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1791.052076][T21709] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1791.055153][T21709] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.252477][T32131] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1791.254660][T32131] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1791.257819][T32131] vhci_hcd vhci_hcd.0: Device attached [ 1791.308266][T32136] batman_adv: batadv0: Adding interface: dummy0 [ 1791.311879][T32136] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1791.323039][T32136] batman_adv: batadv0: Interface activated: dummy0 [ 1791.331863][ T8639] usb 46-1: SetAddress Request (18) to port 0 [ 1791.334535][T32136] batadv0: mtu less than device minimum [ 1791.337834][ T8639] usb 46-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1791.338383][T32136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1791.347556][T32136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1791.353473][T32136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1791.359202][T32136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1791.364074][T32136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1791.369698][T32136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1791.374752][T32136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1791.379700][T32136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1791.385612][T32136] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1791.412289][T21709] usb 10-1: usb_control_msg returned -32 [ 1791.414805][T21709] usbtmc 10-1:16.0: can't read capabilities [ 1791.672709][ T40] audit: type=1326 audit(2000001856.877:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32142 comm="syz.1.7077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65f6c code=0x7ffc0000 [ 1791.695272][ T40] audit: type=1326 audit(2000001856.877:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32142 comm="syz.1.7077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65f6c code=0x7ffc0000 [ 1791.705156][ T40] audit: type=1326 audit(2000001856.877:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32142 comm="syz.1.7077" exe="/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf7f65f6c code=0x7ffc0000 [ 1791.721652][ T40] audit: type=1326 audit(2000001856.877:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32142 comm="syz.1.7077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65f6c code=0x7ffc0000 [ 1791.728932][ T40] audit: type=1326 audit(2000001856.877:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32142 comm="syz.1.7077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65f6c code=0x7ffc0000 [ 1791.737081][ T40] audit: type=1326 audit(2000001856.877:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32142 comm="syz.1.7077" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f65f6c code=0x7ffc0000 [ 1791.744256][ T40] audit: type=1326 audit(2000001856.877:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32142 comm="syz.1.7077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65f6c code=0x7ffc0000 [ 1791.752571][ T40] audit: type=1326 audit(2000001856.877:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32142 comm="syz.1.7077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65f6c code=0x7ffc0000 [ 1791.759844][ T40] audit: type=1326 audit(2000001856.877:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32142 comm="syz.1.7077" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f65f6c code=0x7ffc0000 [ 1791.768386][ T40] audit: type=1326 audit(2000001856.877:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32142 comm="syz.1.7077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65f6c code=0x7ffc0000 [ 1792.181584][T32132] vhci_hcd: connection reset by peer [ 1792.186145][ T131] vhci_hcd vhci_hcd.4: stop threads [ 1792.188516][ T131] vhci_hcd vhci_hcd.4: release socket [ 1792.191011][ T131] vhci_hcd vhci_hcd.4: disconnect device [ 1792.366185][T32154] overlayfs: failed to resolve './file0': -2 [ 1792.746311][T32126] Process accounting resumed [ 1793.135874][T32168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7084'. [ 1793.182275][T32170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7085'. [ 1793.247792][T32170] nbd: socks must be embedded in a SOCK_ITEM attr [ 1793.291867][T32173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7085'. [ 1793.296455][T32173] nbd: device at index 64 is going down [ 1793.565819][T32000] udevd[32000]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1793.572106][T31310] udevd[31310]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1793.683579][T19351] usb 10-1: USB disconnect, device number 69 [ 1793.866111][T32188] loop5: detected capacity change from 0 to 7 [ 1793.891863][T32188] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1793.893712][T32188] loop5: partition table partially beyond EOD, truncated [ 1793.898037][T32188] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 1795.541449][ T5934] Bluetooth: hci5: command 0x041b tx timeout [ 1796.346215][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.365051][T32191] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1796.421468][ T8639] usb 46-1: device descriptor read/8, error -110 [ 1796.533259][ T8639] usb usb46-port1: unable to enumerate USB device [ 1796.653651][T32205] input: syz1 as /devices/virtual/input/input120 [ 1796.720410][T32206] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1796.722863][T32206] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1796.726641][T32206] vhci_hcd vhci_hcd.0: Device attached [ 1797.091420][T25778] usb 48-1: SetAddress Request (2) to port 0 [ 1797.093988][T25778] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1797.096156][T32217] wg2 speed is unknown, defaulting to 1000 [ 1797.142027][ T5973] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 1797.293040][ T5973] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1797.296320][ T5973] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1797.300180][ T5973] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1797.803521][ T5973] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.901625][ T8639] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 1797.916631][T32207] vhci_hcd: connection reset by peer [ 1798.043606][ T131] vhci_hcd vhci_hcd.5: stop threads [ 1798.045585][ T131] vhci_hcd vhci_hcd.5: release socket [ 1798.055952][ T8639] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1798.059968][ T131] vhci_hcd vhci_hcd.5: disconnect device [ 1798.060693][ T8639] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1798.068571][ T8639] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1798.072684][ T8639] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.102874][ T5973] usb 11-1: usb_control_msg returned -32 [ 1798.105348][ T5973] usbtmc 11-1:16.0: can't read capabilities [ 1798.305601][ T8639] usb 9-1: usb_control_msg returned -32 [ 1798.307533][ T8639] usbtmc 9-1:16.0: can't read capabilities [ 1798.449958][T32225] comedi comedi2: pcm3724: a I/O base address must be specified [ 1798.532362][T32228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7101'. [ 1798.847443][T32236] FAULT_INJECTION: forcing a failure. [ 1798.847443][T32236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1798.854010][T32236] CPU: 2 UID: 0 PID: 32236 Comm: syz.5.7103 Tainted: G L syzkaller #0 PREEMPT(full) [ 1798.854035][T32236] Tainted: [L]=SOFTLOCKUP [ 1798.854043][T32236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1798.854053][T32236] Call Trace: [ 1798.854059][T32236] [ 1798.854069][T32236] dump_stack_lvl+0x100/0x190 [ 1798.854103][T32236] should_fail_ex.cold+0x5/0xa [ 1798.854127][T32236] _copy_to_user+0x32/0xd0 [ 1798.854179][T32236] simple_read_from_buffer+0xcb/0x170 [ 1798.854208][T32236] proc_fail_nth_read+0x1af/0x230 [ 1798.854231][T32236] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1798.854255][T32236] ? rw_verify_area+0xce/0x6d0 [ 1798.854280][T32236] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1798.854302][T32236] vfs_read+0x1e4/0xb30 [ 1798.854334][T32236] ? __pfx_vfs_read+0x10/0x10 [ 1798.854360][T32236] ? find_held_lock+0x2b/0x80 [ 1798.854378][T32236] ? __fget_files+0x215/0x3d0 [ 1798.854410][T32236] ? __fget_files+0x21f/0x3d0 [ 1798.854444][T32236] ksys_read+0x12a/0x250 [ 1798.854471][T32236] ? __pfx_ksys_read+0x10/0x10 [ 1798.854507][T32236] do_int80_emulation+0x141/0x6b0 [ 1798.854534][T32236] asm_int80_emulation+0x1a/0x20 [ 1798.854568][T32236] RIP: 0023:0xf71e5cab [ 1798.854584][T32236] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1798.854603][T32236] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1798.854623][T32236] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f549d5d0 [ 1798.854636][T32236] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1798.854647][T32236] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1798.854659][T32236] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1798.854669][T32236] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1798.854694][T32236] [ 1799.835901][ T8639] usb 11-1: USB disconnect, device number 2 [ 1800.189363][T32274] 9pnet_virtio: no channels available for device syz [ 1800.249321][T32259] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1800.251943][T32259] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1800.254219][T32259] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1800.256269][T32259] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1800.258558][T32259] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1800.630676][T32283] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1800.679410][ T60] usb 9-1: USB disconnect, device number 50 [ 1801.638409][T29407] Bluetooth: hci1: command 0x0c1a tx timeout [ 1802.157239][T32309] wg2 speed is unknown, defaulting to 1000 [ 1802.191628][T25778] usb 48-1: device descriptor read/8, error -110 [ 1802.271563][ T5934] Bluetooth: hci0: command 0x040f tx timeout [ 1802.274529][T25192] Bluetooth: hci3: command 0x0c1a tx timeout [ 1802.274557][T25192] Bluetooth: hci2: command 0x041b tx timeout [ 1802.280251][T29407] Bluetooth: hci5: command 0x041b tx timeout [ 1802.461057][T32315] wg2 speed is unknown, defaulting to 1000 [ 1802.593459][T32311] netlink: 'syz.5.7118': attribute type 1 has an invalid length. [ 1802.653142][T25778] usb usb48-port1: attempt power cycle [ 1802.664821][T32317] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7118'. [ 1802.687833][T32318] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1802.691094][T32318] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1802.747346][T32318] vhci_hcd vhci_hcd.0: Device attached [ 1802.918134][T32319] vhci_hcd: connection closed [ 1802.918529][ T47] vhci_hcd vhci_hcd.1: stop threads [ 1802.922387][ T47] vhci_hcd vhci_hcd.1: release socket [ 1802.924651][ T47] vhci_hcd vhci_hcd.1: disconnect device [ 1803.159573][T32328] netlink: 'syz.5.7121': attribute type 15 has an invalid length. [ 1803.164207][T32328] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7121'. [ 1803.201497][ T8639] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 1803.222382][T25778] usb usb48-port1: unable to enumerate USB device [ 1803.273127][T32330] binder: BINDER_SET_CONTEXT_MGR already set [ 1803.275754][T32330] binder: 32329:32330 ioctl 4018620d 80004a80 returned -16 [ 1803.291420][T32330] binder: 32329:32330 ioctl c0306201 80000380 returned -14 [ 1803.376001][ T8639] usb 11-1: config 0 has no interfaces? [ 1803.377871][ T8639] usb 11-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1803.383761][ T8639] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.394219][ T8639] usb 11-1: config 0 descriptor?? [ 1803.609423][ T6019] usb 11-1: USB disconnect, device number 3 [ 1803.761334][T32341] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7128'. [ 1803.765525][T32341] net_ratelimit: 10 callbacks suppressed [ 1803.765549][T32341] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1803.776384][T32341] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7128'. [ 1803.780396][T32341] tc_dump_action: action bad kind [ 1803.967424][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 1803.967435][ T40] audit: type=1804 audit(2000001868.171:3368): pid=32343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7127" name="/newroot/167/bus/bus" dev="overlay" ino=934 res=1 errno=0 [ 1803.993480][ T40] audit: type=1804 audit(2000001868.201:3369): pid=32343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7127" name="/newroot/167/bus/bus" dev="overlay" ino=934 res=1 errno=0 [ 1804.013284][ T40] audit: type=1800 audit(2000001868.201:3370): pid=32343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7127" name="bus" dev="overlay" ino=934 res=0 errno=0 [ 1804.096321][ T131] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.135367][T32346] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1804.253779][ T131] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.399651][T32350] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1804.410632][ T131] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.542230][ T5934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1804.548321][ T5934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1804.553259][ T5934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1804.557135][ T5934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1804.561902][ T5934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1804.610972][ T131] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.722746][T32352] wg2 speed is unknown, defaulting to 1000 [ 1804.952795][ T131] bridge_slave_1: left allmulticast mode [ 1804.961355][ T131] bridge_slave_1: left promiscuous mode [ 1804.964118][ T131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.988881][ T131] bridge_slave_0: left allmulticast mode [ 1804.994791][ T131] bridge_slave_0: left promiscuous mode [ 1805.001898][ T131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.450953][ T131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1805.458926][ T131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1805.471606][ T131] bond0 (unregistering): Released all slaves [ 1806.246064][ T131] hsr_slave_0: left promiscuous mode [ 1806.255735][ T131] hsr_slave_1: left promiscuous mode [ 1806.258033][ T131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1806.270360][ T131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1806.285812][ T131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1806.292398][ T131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1806.304708][ T131] veth1_macvtap: left promiscuous mode [ 1806.311636][ T131] veth0_macvtap: left promiscuous mode [ 1806.314354][ T131] veth1_vlan: left promiscuous mode [ 1806.316624][ T131] veth0_vlan: left promiscuous mode [ 1806.581490][T29407] Bluetooth: hci0: command tx timeout [ 1806.776570][T32364] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1806.783639][T32364] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1806.791598][T32364] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1806.801397][T32364] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1806.803945][T32364] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1806.821169][T32364] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1806.824781][ T131] team0 (unregistering): Port device team_slave_1 removed [ 1806.842954][T32364] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1806.866943][ T131] team0 (unregistering): Port device team_slave_0 removed [ 1807.091497][T21709] usb 9-1: new full-speed USB device number 51 using dummy_hcd [ 1807.212272][T32406] wg2 speed is unknown, defaulting to 1000 [ 1807.242949][T21709] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1807.246375][T21709] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1807.250856][T21709] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1807.254689][T21709] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.275121][T32352] chnl_net:caif_netlink_parms(): no params data found [ 1807.484862][T32352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1807.487745][T32352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.491174][T32352] bridge_slave_0: entered allmulticast mode [ 1807.497276][T32352] bridge_slave_0: entered promiscuous mode [ 1807.500787][T32352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1807.503423][T32352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.505953][T32352] bridge_slave_1: entered allmulticast mode [ 1807.508942][T32352] bridge_slave_1: entered promiscuous mode [ 1807.530434][T32352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1807.535460][T32352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1807.537992][T21709] usb 9-1: GET_CAPABILITIES returned 0 [ 1807.542424][T21709] usbtmc 9-1:16.0: can't read capabilities [ 1807.589869][T32352] team0: Port device team_slave_0 added [ 1807.612402][T32352] team0: Port device team_slave_1 added [ 1807.635535][T32352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1807.638040][T32352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1807.648393][T32352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1807.653601][T32352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1807.656500][T32352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1807.678730][T32352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1807.701435][T29407] Bluetooth: hci1: command 0x0c1a tx timeout [ 1807.719455][T32352] hsr_slave_0: entered promiscuous mode [ 1807.725246][T32352] hsr_slave_1: entered promiscuous mode [ 1807.727614][T32352] debugfs: 'hsr0' already exists in 'hsr' [ 1807.729532][T32352] Cannot create hsr debugfs directory [ 1807.734825][T21709] usb 9-1: USB disconnect, device number 51 [ 1807.776294][T32423] wg2 speed is unknown, defaulting to 1000 [ 1808.821428][T29407] Bluetooth: hci2: command 0x041b tx timeout [ 1808.831544][ T5934] Bluetooth: hci5: command 0x041b tx timeout [ 1808.831562][T26927] Bluetooth: hci3: command 0x0c1a tx timeout [ 1808.834005][T29407] Bluetooth: hci0: command 0x040f tx timeout [ 1809.029341][T32352] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1809.055650][T32352] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1809.074658][T32352] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1809.088756][T32352] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1809.257543][T32352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1809.293894][T32352] 8021q: adding VLAN 0 to HW filter on device team0 [ 1809.314807][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1809.318331][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1809.338531][ T131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1809.341818][ T131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1809.368223][T32470] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7148'. [ 1809.410695][T32445] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1809.414421][T32445] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1809.418020][T32445] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1809.522414][T32445] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1809.530660][T32445] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1809.556567][T32467] 9pnet_virtio: no channels available for device syz [ 1809.721241][T32352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1810.484999][T32352] veth0_vlan: entered promiscuous mode [ 1810.545865][T32352] veth1_vlan: entered promiscuous mode [ 1810.623977][T32352] veth0_macvtap: entered promiscuous mode [ 1810.661817][T26927] Bluetooth: hci1: command 0x0c1a tx timeout [ 1810.663903][T32352] veth1_macvtap: entered promiscuous mode [ 1810.785846][T32352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1810.805358][T32352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1810.836629][ T131] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.842337][ T131] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.845143][ T131] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.848047][ T131] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.122192][T32533] 9p: Bad value for 'version' [ 1811.126515][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1811.129941][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1811.191178][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1811.194645][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1811.461655][T26927] Bluetooth: hci3: command 0x0c1a tx timeout [ 1811.461896][T29407] Bluetooth: hci2: command 0x041b tx timeout [ 1811.537206][T32548] mac80211_hwsim hwsim122 wlan0: entered allmulticast mode [ 1811.541795][T29407] Bluetooth: hci0: command 0x040f tx timeout [ 1811.544601][T29407] Bluetooth: hci5: command 0x041b tx timeout [ 1811.561643][T32548] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1811.628878][T32536] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1811.631515][T32536] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1811.636608][T32536] vhci_hcd vhci_hcd.0: Device attached [ 1811.674321][T32551] vhci_hcd: connection closed [ 1811.674441][ T12] vhci_hcd vhci_hcd.1: stop threads [ 1811.681997][ T12] vhci_hcd vhci_hcd.1: release socket [ 1811.689079][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 1811.741906][T32559] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1811.744660][T32559] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1811.748121][T32559] vhci_hcd vhci_hcd.0: Device attached [ 1811.759759][T32559] netlink: 'syz.6.7151': attribute type 1 has an invalid length. [ 1811.770573][T32559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7151'. [ 1811.906370][T32560] vhci_hcd: connection closed [ 1811.909502][ T47] vhci_hcd vhci_hcd.6: stop threads [ 1811.921474][ T47] vhci_hcd vhci_hcd.6: release socket [ 1811.923464][ T47] vhci_hcd vhci_hcd.6: disconnect device [ 1811.952094][ T24] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1812.471518][ T54] IPVS: starting estimator thread 0... [ 1812.474413][T32595] qnx6: unable to read the first superblock [ 1812.564178][T32597] IPVS: using max 44 ests per chain, 105600 per kthread [ 1812.586494][T32601] netlink: 'syz.8.7160': attribute type 12 has an invalid length. [ 1812.589602][T32601] netlink: 'syz.8.7160': attribute type 29 has an invalid length. [ 1812.600399][T32601] netlink: 148 bytes leftover after parsing attributes in process `syz.8.7160'. [ 1812.604526][T32601] netlink: 'syz.8.7160': attribute type 2 has an invalid length. [ 1812.607537][T32601] netlink: 23 bytes leftover after parsing attributes in process `syz.8.7160'. [ 1812.904173][ T40] audit: type=1326 audit(2000001877.111:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32609 comm="syz.6.7163" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1812.924723][T26927] Bluetooth: hci5: unexpected event for opcode 0x0c20 [ 1812.927093][ T40] audit: type=1326 audit(2000001877.121:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32609 comm="syz.6.7163" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1812.940398][ T40] audit: type=1326 audit(2000001877.121:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32609 comm="syz.6.7163" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1812.948610][T32608] 9p: Bad value for 'rfdno' [ 1812.961484][ T40] audit: type=1326 audit(2000001877.121:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32609 comm="syz.6.7163" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1812.994264][ T40] audit: type=1326 audit(2000001877.131:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32609 comm="syz.6.7163" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71a5cab code=0x7ffc0000 [ 1813.022995][ T40] audit: type=1326 audit(2000001877.131:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32609 comm="syz.6.7163" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1813.030009][ T40] audit: type=1326 audit(2000001877.131:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32609 comm="syz.6.7163" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1813.106519][ T40] audit: type=1326 audit(2000001877.151:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32609 comm="syz.6.7163" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1813.122272][ T40] audit: type=1326 audit(2000001877.161:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32609 comm="syz.6.7163" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1813.130365][ T40] audit: type=1326 audit(2000001877.161:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32609 comm="syz.6.7163" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1813.172316][T32617] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7163'. [ 1813.192419][T32617] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7163'. [ 1813.621776][T26927] Bluetooth: hci0: command 0x040f tx timeout [ 1813.743078][T21709] IPVS: starting estimator thread 0... [ 1813.832696][T32627] IPVS: using max 29 ests per chain, 69600 per kthread [ 1813.880959][T32631] qrtr: Invalid version 255 [ 1813.933602][T32631] can: request_module (can-proto-0) failed. [ 1814.233573][T32640] netlink: 'syz.6.7170': attribute type 2 has an invalid length. [ 1814.244505][T32640] ‚#{6c: entered promiscuous mode [ 1814.250641][T32640] netlink: 'syz.6.7170': attribute type 2 has an invalid length. [ 1814.253713][T32640] ‚#{6c: left promiscuous mode [ 1814.353234][T32644] 9p: Bad value for 'rfdno' [ 1814.627564][T32647] Device name not specified. [ 1814.627564][T32647] [ 1815.401455][ T5973] usb 13-1: new high-speed USB device number 31 using dummy_hcd [ 1815.551503][ T5973] usb 13-1: Using ep0 maxpacket: 8 [ 1815.555871][ T5973] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 1815.559793][ T5973] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1815.564401][ T5973] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1815.569537][ T5973] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1815.581374][ T5973] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1815.585806][ T5973] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1815.589346][ T5973] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.701462][T26927] Bluetooth: hci0: command 0x040f tx timeout [ 1815.923558][T32660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1815.931587][T32660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1815.972788][ T5973] usb 13-1: GET_CAPABILITIES returned 0 [ 1815.975122][ T5973] usbtmc 13-1:16.0: can't read capabilities [ 1816.293721][ T5992] usb 13-1: USB disconnect, device number 31 [ 1816.375097][T32670] 9p: Bad value for 'rfdno' [ 1816.775425][T32680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7180'. [ 1816.780030][T32680] batman_adv: batadv0: Removing interface: dummy0 [ 1817.332787][T32701] netlink: 'syz.8.7183': attribute type 15 has an invalid length. [ 1817.335384][T32701] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7183'. [ 1817.501655][T32697] 9p: Bad value for 'rfdno' [ 1817.801150][T26927] Bluetooth: hci0: command 0x040f tx timeout [ 1817.837962][T32694] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1817.840980][T32694] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1817.845480][T32694] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1817.848817][T32694] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1817.852329][T32694] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1817.947595][T32706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7185'. [ 1818.091533][T25792] usb 13-1: new low-speed USB device number 32 using dummy_hcd [ 1818.243105][T25792] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 1818.246663][T25792] usb 13-1: config 0 has no interface number 0 [ 1818.249676][T25792] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1818.255648][T25792] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1818.260278][T25792] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1818.270910][T25792] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1818.276250][T25792] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1818.281674][T25792] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1818.287464][T25792] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1818.292645][T25792] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.299817][T25792] usb 13-1: config 0 descriptor?? [ 1818.313658][T32704] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1818.317333][T32704] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1818.329070][T25792] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1818.545082][T32704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1818.549368][T32704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1818.553928][T25404] usb 13-1: USB disconnect, device number 32 [ 1818.559284][T25404] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 1819.231517][T26927] Bluetooth: hci1: command 0x0c1a tx timeout [ 1819.313044][T32721] comedi comedi2: pcm3724: a I/O base address must be specified [ 1819.369542][T32723] vivid-002: disconnect [ 1819.386561][T32719] vivid-002: reconnect [ 1819.548170][T32733] netlink: 'syz.8.7192': attribute type 15 has an invalid length. [ 1819.556088][T32733] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7192'. [ 1819.861690][T26927] Bluetooth: hci0: command 0x040f tx timeout [ 1819.861932][T29407] Bluetooth: hci5: command 0x041b tx timeout [ 1819.864712][T26927] Bluetooth: hci3: command 0x0c1a tx timeout [ 1819.867283][T29407] Bluetooth: hci2: command 0x041b tx timeout [ 1820.079173][ T9289] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1820.232931][ T9289] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1820.238599][ T9289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1820.244528][ T9289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1820.249449][ T9289] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1820.255338][ T9289] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1820.260112][ T9289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.271912][ T9289] usb 6-1: config 0 descriptor?? [ 1820.646915][T32747] warn_alloc: 1 callbacks suppressed [ 1820.646932][T32747] syz.4.7195: page allocation failure: order:10, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1820.656378][T32747] CPU: 3 UID: 0 PID: 32747 Comm: syz.4.7195 Tainted: G L syzkaller #0 PREEMPT(full) [ 1820.656409][T32747] Tainted: [L]=SOFTLOCKUP [ 1820.656416][T32747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1820.656426][T32747] Call Trace: [ 1820.656435][T32747] [ 1820.656442][T32747] dump_stack_lvl+0x100/0x190 [ 1820.656472][T32747] warn_alloc.cold+0x95/0x1c1 [ 1820.656503][T32747] ? __pfx_warn_alloc+0x10/0x10 [ 1820.656527][T32747] ? psi_memstall_leave+0x19c/0x2e0 [ 1820.656553][T32747] ? __pfx___might_resched+0x10/0x10 [ 1820.656582][T32747] __alloc_frozen_pages_noprof+0xf36/0x2ba0 [ 1820.656617][T32747] ? __lock_acquire+0x4a5/0x2630 [ 1820.656638][T32747] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1820.656665][T32747] ? find_held_lock+0x2b/0x80 [ 1820.656687][T32747] ? find_held_lock+0x2b/0x80 [ 1820.656707][T32747] ? aa_file_perm+0x7e4/0x14d0 [ 1820.656726][T32747] ? aa_file_perm+0x7e4/0x14d0 [ 1820.656746][T32747] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1820.656775][T32747] ? policy_nodemask+0xed/0x4f0 [ 1820.656795][T32747] alloc_pages_mpol+0x1fb/0x550 [ 1820.656814][T32747] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1820.656836][T32747] ? qrtr_tun_write_iter+0xc1/0x1b0 [ 1820.656859][T32747] ___kmalloc_large_node+0x104/0x150 [ 1820.656883][T32747] __kmalloc_large_node_noprof+0x1c/0x70 [ 1820.656903][T32747] __kmalloc_noprof+0x5be/0x850 [ 1820.656932][T32747] qrtr_tun_write_iter+0xc1/0x1b0 [ 1820.656957][T32747] aio_write+0x3ba/0x920 [ 1820.656977][T32747] ? __pfx_aio_write+0x10/0x10 [ 1820.656993][T32747] ? __lock_acquire+0x4a5/0x2630 [ 1820.657026][T32747] ? __might_fault+0xc5/0x140 [ 1820.657053][T32747] ? io_submit_one+0x1142/0x1fb0 [ 1820.657072][T32747] io_submit_one+0x1142/0x1fb0 [ 1820.657092][T32747] ? __lock_acquire+0x4a5/0x2630 [ 1820.657116][T32747] ? __pfx_io_submit_one+0x10/0x10 [ 1820.657141][T32747] ? __might_fault+0xc5/0x140 [ 1820.657168][T32747] ? __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 1820.657189][T32747] __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 1820.657211][T32747] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 1820.657229][T32747] ? xfd_validate_state+0x129/0x190 [ 1820.657264][T32747] __do_fast_syscall_32+0xe3/0x8c0 [ 1820.657289][T32747] do_fast_syscall_32+0x32/0x70 [ 1820.657310][T32747] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1820.657330][T32747] RIP: 0023:0xf70bef6c [ 1820.657344][T32747] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 1820.657361][T32747] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 00000000000000f8 [ 1820.657379][T32747] RAX: ffffffffffffffda RBX: 00000000f7feb000 RCX: 00000000000000e7 [ 1820.657389][T32747] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1820.657400][T32747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1820.657410][T32747] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1820.657420][T32747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1820.657443][T32747] [ 1820.657450][T32747] Mem-Info: [ 1820.777737][T32747] active_anon:1603 inactive_anon:2934 isolated_anon:25 [ 1820.777737][T32747] active_file:1846 inactive_file:1053 isolated_file:0 [ 1820.777737][T32747] unevictable:1743 dirty:85 writeback:0 [ 1820.777737][T32747] slab_reclaimable:8661 slab_unreclaimable:92329 [ 1820.777737][T32747] mapped:30238 shmem:4660 pagetables:1857 [ 1820.777737][T32747] sec_pagetables:344 bounce:0 [ 1820.777737][T32747] kernel_misc_reclaimable:0 [ 1820.777737][T32747] free:43391 free_pcp:467 free_cma:0 [ 1820.793337][T32747] Node 0 active_anon:0kB inactive_anon:36kB active_file:128kB inactive_file:12kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:880kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7520kB pagetables:1220kB sec_pagetables:1160kB all_unreclaimable? yes Balloon:0kB [ 1820.803686][T32747] Node 1 active_anon:6412kB inactive_anon:11700kB active_file:7256kB inactive_file:4200kB unevictable:3436kB isolated(anon):100kB isolated(file):0kB mapped:120072kB dirty:336kB writeback:0kB shmem:15104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9604kB pagetables:6208kB sec_pagetables:216kB all_unreclaimable? no Balloon:0kB [ 1820.814083][T32747] Node 0 DMA free:3948kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:128kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1820.825508][T32747] lowmem_reserve[]: 0 285 285 285 285 [ 1820.827727][T32747] Node 0 DMA32 free:30992kB boost:20480kB min:33552kB low:36820kB high:40088kB reserved_highatomic:2048KB free_highatomic:376KB active_anon:0kB inactive_anon:36kB active_file:0kB inactive_file:8kB unevictable:3536kB writepending:4kB zspages:2396kB present:1032196kB managed:292620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1820.841135][T32747] lowmem_reserve[]: 0 0 0 0 0 [ 1820.843091][T32747] Node 1 DMA32 free:138624kB boost:8192kB min:55332kB low:67116kB high:78900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6412kB inactive_anon:11700kB active_file:7256kB inactive_file:4200kB unevictable:3436kB writepending:336kB zspages:6168kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:2756kB local_pcp:688kB free_cma:0kB [ 1820.855061][T32747] lowmem_reserve[]: 0 0 0 0 0 [ 1820.857028][T32747] Node 0 DMA: 133*4kB (UM) 81*8kB (UM) 35*16kB (UM) 25*32kB (UM) 4*64kB (UM) 3*128kB (M) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3948kB [ 1820.862387][T32747] Node 0 DMA32: 720*4kB (UMEH) 456*8kB (UMEH) 153*16kB (UMEH) 206*32kB (UMEH) 81*64kB (UME) 26*128kB (UMEH) 9*256kB (UME) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 30992kB [ 1820.868618][T32747] Node 1 DMA32: 2544*4kB (UM) 5878*8kB (UME) 4534*16kB (UME) 58*32kB (UME) 24*64kB (UM) 15*128kB (UM) 5*256kB (M) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 137872kB [ 1820.875110][T32747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1820.878658][T32747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1820.882040][T32747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1820.885311][T32747] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1820.888463][T32747] 8614 total pagecache pages [ 1820.890447][T32747] 1041 pages in swap cache [ 1820.893204][T32747] Free swap = 46528kB [ 1820.895221][T32747] Total swap = 124996kB [ 1820.897105][T32747] 524155 pages RAM [ 1820.898740][T32747] 0 pages HighMem/MovableOnly [ 1820.900631][T32747] 210107 pages reserved [ 1820.902528][T32747] 0 pages cma reserved [ 1820.930187][T32743] overlayfs: failed to resolve './file1/file0': -2 [ 1820.944263][ T9289] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1821.452957][T32759] wg2 speed is unknown, defaulting to 1000 [ 1822.483729][ T305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7198'. [ 1822.487567][ T305] netlink: 200 bytes leftover after parsing attributes in process `syz.4.7198'. [ 1822.551528][ T9289] usb 6-1: reset high-speed USB device number 125 using dummy_hcd [ 1822.912373][ T310] FAULT_INJECTION: forcing a failure. [ 1822.912373][ T310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1822.916841][ T310] CPU: 3 UID: 0 PID: 310 Comm: syz.1.7201 Tainted: G L syzkaller #0 PREEMPT(full) [ 1822.916867][ T310] Tainted: [L]=SOFTLOCKUP [ 1822.916872][ T310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1822.916880][ T310] Call Trace: [ 1822.916887][ T310] [ 1822.916896][ T310] dump_stack_lvl+0x100/0x190 [ 1822.916929][ T310] should_fail_ex.cold+0x5/0xa [ 1822.916951][ T310] _copy_from_user+0x2e/0xd0 [ 1822.916975][ T310] kstrtouint_from_user+0xd6/0x1d0 [ 1822.916990][ T310] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1822.917006][ T310] ? __lock_acquire+0x4a5/0x2630 [ 1822.917032][ T310] ? lock_acquire+0x1cf/0x380 [ 1822.917061][ T310] proc_fail_nth_write+0x83/0x220 [ 1822.917080][ T310] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1822.917097][ T310] vfs_write+0x2aa/0x1070 [ 1822.917123][ T310] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1822.917145][ T310] ? __pfx_vfs_write+0x10/0x10 [ 1822.917168][ T310] ? find_held_lock+0x2b/0x80 [ 1822.917183][ T310] ? __fget_files+0x215/0x3d0 [ 1822.917203][ T310] ? __fget_files+0x21f/0x3d0 [ 1822.917228][ T310] ksys_write+0x12a/0x250 [ 1822.917253][ T310] ? __pfx_ksys_write+0x10/0x10 [ 1822.917286][ T310] do_int80_emulation+0x141/0x6b0 [ 1822.917306][ T310] asm_int80_emulation+0x1a/0x20 [ 1822.917318][ T310] RIP: 0023:0xf7165cab [ 1822.917331][ T310] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1822.917348][ T310] RSP: 002b:00000000f54264bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1822.917366][ T310] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f54265d0 [ 1822.917377][ T310] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1822.917387][ T310] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1822.917396][ T310] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1822.917404][ T310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1822.917418][ T310] [ 1823.068241][ T314] comedi comedi2: pcm3724: a I/O base address must be specified [ 1823.645997][ T330] netlink: 156 bytes leftover after parsing attributes in process `syz.6.7205'. [ 1823.649728][ T330] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1823.655404][ T54] usb 6-1: USB disconnect, device number 125 [ 1823.661768][ T330] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7205'. [ 1823.665558][ T330] tc_dump_action: action bad kind [ 1823.692689][ T332] tmpfs: Unknown parameter 'usrquk_hqrdlimit' [ 1824.324425][ T343] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1824.326702][ T343] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1824.329488][ T343] vhci_hcd vhci_hcd.0: Device attached [ 1824.354652][ T344] vhci_hcd: connection closed [ 1824.354887][ T46] vhci_hcd vhci_hcd.4: stop threads [ 1824.358563][ T46] vhci_hcd vhci_hcd.4: release socket [ 1824.360437][ T46] vhci_hcd vhci_hcd.4: disconnect device [ 1824.495676][ T327] delete_channel: no stack [ 1824.567948][ T347] 9p: Bad value for 'version' [ 1824.813352][ T352] comedi comedi2: pcm3724: a I/O base address must be specified [ 1826.367051][ T369] syzkaller0: entered promiscuous mode [ 1826.369628][ T369] syzkaller0: entered allmulticast mode [ 1826.376850][ T369] 0: reclassify loop, rule prio 0, protocol 800 [ 1826.579898][ T375] nbd: must specify a size in bytes for the device [ 1826.704872][ T379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7220'. [ 1826.961498][ T9] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1827.121562][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1827.125788][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1827.131675][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1827.136172][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1827.140567][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1827.147112][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1827.151391][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.344096][ T381] 9p: Bad value for 'version' [ 1827.360890][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 1827.363728][ T9] usbtmc 6-1:16.0: can't read capabilities [ 1827.787399][ T387] blkio.reset_stats is deprecated [ 1827.940016][ T389] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1828.531084][ T401] Bluetooth: MGMT ver 1.23 [ 1828.648923][ T404] vivid-002: disconnect [ 1828.652663][ T404] netlink: 392 bytes leftover after parsing attributes in process `syz.6.7229'. [ 1829.396029][ T404] vivid-002: reconnect [ 1829.633965][T19351] usb 6-1: USB disconnect, device number 126 [ 1829.942311][T29407] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1830.370492][ T423] 9p: Bad value for 'rfdno' [ 1830.986244][ T430] netlink: 'syz.4.7236': attribute type 15 has an invalid length. [ 1830.990109][ T430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7236'. [ 1832.105555][ T449] 9p: Bad value for 'rfdno' [ 1833.162723][ T462] 9p: Bad value for 'rfdno' [ 1833.857689][ T466] netlink: 'syz.1.7245': attribute type 15 has an invalid length. [ 1833.861217][ T466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7245'. [ 1834.085132][ T478] fuse: Bad value for 'fd' [ 1834.255775][ T473] /dev/sr0: Can't open blockdev [ 1834.469638][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 1834.469652][ T40] audit: type=1326 audit(2000001898.621:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=479 comm="syz.6.7251" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1834.479079][ T40] audit: type=1326 audit(2000001898.621:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=479 comm="syz.6.7251" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1834.486696][ T40] audit: type=1326 audit(2000001898.621:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=479 comm="syz.6.7251" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1834.496357][ T40] audit: type=1326 audit(2000001898.621:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=479 comm="syz.6.7251" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1834.509430][ T489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1834.621581][ T40] audit: type=1326 audit(2000001898.621:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=479 comm="syz.6.7251" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1834.629337][ T40] audit: type=1326 audit(2000001898.621:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=479 comm="syz.6.7251" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1834.640792][ T40] audit: type=1326 audit(2000001898.621:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=479 comm="syz.6.7251" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa4f6c code=0x7ffc0000 [ 1834.993676][ T495] 9p: Bad value for 'rfdno' [ 1835.690027][ T505] 9p: Bad value for 'rfdno' [ 1837.515223][ T517] 9p: Bad value for 'rfdno' [ 1838.958836][ T540] FAULT_INJECTION: forcing a failure. [ 1838.958836][ T540] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.965249][ T540] CPU: 3 UID: 0 PID: 540 Comm: syz.4.7266 Tainted: G L syzkaller #0 PREEMPT(full) [ 1838.965277][ T540] Tainted: [L]=SOFTLOCKUP [ 1838.965284][ T540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1838.965295][ T540] Call Trace: [ 1838.965303][ T540] [ 1838.965311][ T540] dump_stack_lvl+0x100/0x190 [ 1838.965343][ T540] should_fail_ex.cold+0x5/0xa [ 1838.965365][ T540] should_failslab+0xc2/0x120 [ 1838.965384][ T540] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1838.965412][ T540] ? __alloc_skb+0x140/0x710 [ 1838.965436][ T540] __alloc_skb+0x140/0x710 [ 1838.965454][ T540] ? __alloc_skb+0x5b7/0x710 [ 1838.965472][ T540] ? __pfx___alloc_skb+0x10/0x10 [ 1838.965498][ T540] netlink_alloc_large_skb+0x69/0x150 [ 1838.965524][ T540] netlink_sendmsg+0x680/0xda0 [ 1838.965552][ T540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1838.965578][ T540] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1838.965606][ T540] ____sys_sendmsg+0xa54/0xc30 [ 1838.965634][ T540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1838.965671][ T540] ___sys_sendmsg+0x190/0x1e0 [ 1838.965699][ T540] ? __pfx____sys_sendmsg+0x10/0x10 [ 1838.965725][ T540] ? __pte_offset_map+0x179/0x310 [ 1838.965803][ T540] __sys_sendmsg+0x170/0x220 [ 1838.965826][ T540] ? __pfx___sys_sendmsg+0x10/0x10 [ 1838.965864][ T540] __do_fast_syscall_32+0xe3/0x8c0 [ 1838.965890][ T540] do_fast_syscall_32+0x32/0x70 [ 1838.965913][ T540] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1838.965936][ T540] RIP: 0023:0xf70bef6c [ 1838.965951][ T540] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 1838.965969][ T540] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1838.965987][ T540] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1838.965998][ T540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1838.966008][ T540] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1838.966018][ T540] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1838.966029][ T540] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1838.966053][ T540] [ 1839.230984][ T546] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 1839.585762][ T528] warn_alloc: 1 callbacks suppressed [ 1839.585807][ T528] syz.6.7260: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1839.595137][ T528] CPU: 0 UID: 0 PID: 528 Comm: syz.6.7260 Tainted: G L syzkaller #0 PREEMPT(full) [ 1839.595182][ T528] Tainted: [L]=SOFTLOCKUP [ 1839.595191][ T528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1839.595203][ T528] Call Trace: [ 1839.595211][ T528] [ 1839.595221][ T528] dump_stack_lvl+0x100/0x190 [ 1839.595251][ T528] warn_alloc.cold+0x95/0x1c1 [ 1839.595285][ T528] ? __pfx_warn_alloc+0x10/0x10 [ 1839.595312][ T528] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1839.595343][ T528] ? __alloc_frozen_pages_noprof+0xd68/0x2ba0 [ 1839.595382][ T528] __alloc_frozen_pages_noprof+0xf36/0x2ba0 [ 1839.595421][ T528] ? __lock_acquire+0x4a5/0x2630 [ 1839.595449][ T528] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1839.595478][ T528] ? __pfx_css_rstat_updated+0x10/0x10 [ 1839.595506][ T528] ? lock_acquire+0x1cf/0x380 [ 1839.595545][ T528] __folio_alloc_noprof+0x13/0x2f0 [ 1839.595575][ T528] alloc_migration_target+0x1d7/0x6d0 [ 1839.595600][ T528] migrate_pages_batch+0x4f2/0x4530 [ 1839.595622][ T528] ? __pfx_alloc_migration_target+0x10/0x10 [ 1839.595649][ T528] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 1839.595682][ T528] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1839.595708][ T528] ? set_ptes+0x14c/0x1d0 [ 1839.595733][ T528] ? find_held_lock+0x2b/0x80 [ 1839.595752][ T528] ? rcu_is_watching+0x12/0xc0 [ 1839.595781][ T528] ? trace_contention_end.constprop.0+0x15b/0x1b0 [ 1839.595811][ T528] ? __pv_queued_spin_lock_slowpath+0x284/0xc00 [ 1839.595835][ T528] ? css_rstat_updated+0x1ce/0x5a0 [ 1839.595857][ T528] migrate_pages_sync+0x12c/0x880 [ 1839.595881][ T528] ? __pfx_alloc_migration_target+0x10/0x10 [ 1839.595908][ T528] ? __cgroup_account_cputime+0xd5/0x130 [ 1839.595930][ T528] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1839.595965][ T528] migrate_pages+0x1aae/0x28a0 [ 1839.595992][ T528] ? __pfx_alloc_migration_target+0x10/0x10 [ 1839.596019][ T528] ? __pfx_migrate_pages+0x10/0x10 [ 1839.596047][ T528] ? __lock_acquire+0x4a5/0x2630 [ 1839.596074][ T528] ? mtree_load+0x32d/0xa40 [ 1839.596099][ T528] move_pages_and_store_status+0xf1/0x230 [ 1839.596130][ T528] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 1839.596164][ T528] kernel_move_pages+0xc47/0x13f0 [ 1839.596197][ T528] ? __pfx_kernel_move_pages+0x10/0x10 [ 1839.596220][ T528] ? lookup_ioctx+0x18c/0x820 [ 1839.596246][ T528] ? xfd_validate_state+0x129/0x190 [ 1839.596281][ T528] __ia32_sys_move_pages+0xdd/0x1b0 [ 1839.596305][ T528] ? __do_fast_syscall_32+0x94/0x8c0 [ 1839.596330][ T528] ? lockdep_hardirqs_on+0x78/0x100 [ 1839.596351][ T528] __do_fast_syscall_32+0xe3/0x8c0 [ 1839.596377][ T528] do_fast_syscall_32+0x32/0x70 [ 1839.596402][ T528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1839.596428][ T528] RIP: 0023:0xf7fa4f6c [ 1839.596441][ T528] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 1839.596462][ T528] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 1839.596480][ T528] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 1839.596493][ T528] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 1839.596504][ T528] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1839.596516][ T528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1839.596528][ T528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1839.596554][ T528] [ 1839.741187][ T528] Mem-Info: [ 1839.770385][ T528] active_anon:4523 inactive_anon:2534 isolated_anon:1 [ 1839.770385][ T528] active_file:949 inactive_file:669 isolated_file:0 [ 1839.770385][ T528] unevictable:1768 dirty:8 writeback:0 [ 1839.770385][ T528] slab_reclaimable:8750 slab_unreclaimable:92406 [ 1839.770385][ T528] mapped:31727 shmem:4639 pagetables:1795 [ 1839.770385][ T528] sec_pagetables:346 bounce:0 [ 1839.770385][ T528] kernel_misc_reclaimable:0 [ 1839.770385][ T528] free:40301 free_pcp:1003 free_cma:0 [ 1839.827358][ T528] Node 0 active_anon:0kB inactive_anon:32kB active_file:4kB inactive_file:136kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:880kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7520kB pagetables:1220kB sec_pagetables:1160kB all_unreclaimable? yes Balloon:0kB [ 1839.845895][ T548] 9p: Bad value for 'rfdno' [ 1839.850627][ T528] Node 1 active_anon:1248kB inactive_anon:16116kB active_file:1200kB inactive_file:3824kB unevictable:3536kB isolated(anon):4kB isolated(file):0kB mapped:114328kB dirty:32kB writeback:0kB shmem:9120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9588kB pagetables:5960kB sec_pagetables:224kB all_unreclaimable? no Balloon:0kB [ 1839.862218][ T528] Node 0 DMA free:3948kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1839.875512][ T528] lowmem_reserve[]: 0 285 285 285 285 [ 1839.878011][ T528] Node 0 DMA32 free:30380kB boost:20480kB min:33552kB low:36820kB high:40088kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:32kB active_file:4kB inactive_file:4kB unevictable:3536kB writepending:0kB zspages:2332kB present:1032196kB managed:292620kB mlocked:0kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1839.892198][ T528] lowmem_reserve[]: 0 0 0 0 0 [ 1839.894060][ T528] Node 1 DMA32 free:139328kB boost:2048kB min:49188kB low:60972kB high:72756kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1248kB inactive_anon:13216kB active_file:1300kB inactive_file:3824kB unevictable:3536kB writepending:0kB zspages:5780kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:5672kB local_pcp:444kB free_cma:0kB [ 1839.905202][ T528] lowmem_reserve[]: 0 0 0 0 0 [ 1839.906896][ T528] Node 0 DMA: 133*4kB (UM) 81*8kB (UM) 35*16kB (UM) 25*32kB (UM) 4*64kB (UM) 3*128kB (M) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3948kB [ 1839.912583][ T528] Node 0 DMA32: 809*4kB (UME) 457*8kB (UME) 150*16kB (UME) 187*32kB (ME) 76*64kB (UME) 26*128kB (UME) 9*256kB (UME) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 30380kB [ 1839.918961][ T528] Node 1 DMA32: 4814*4kB (UME) 5775*8kB (UME) 4586*16kB (UME) 7*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 139120kB [ 1839.925106][ T528] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1839.928983][ T528] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1839.932979][ T528] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1839.936520][ T528] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1839.939804][ T528] 4456 total pagecache pages [ 1839.941808][ T528] 1328 pages in swap cache [ 1839.943379][ T528] Free swap = 46604kB [ 1839.945052][ T528] Total swap = 124996kB [ 1839.946665][ T528] 524155 pages RAM [ 1839.948138][ T528] 0 pages HighMem/MovableOnly [ 1839.950083][ T528] 210107 pages reserved [ 1839.952304][ T528] 0 pages cma reserved [ 1840.303838][ T562] 9p: Bad value for 'rfdno' [ 1840.651720][ T564] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1840.654216][ T564] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1840.664549][ T564] vhci_hcd vhci_hcd.0: Device attached [ 1840.901571][ T60] usb 45-1: new low-speed USB device number 7 using vhci_hcd [ 1841.163702][ T564] netlink: 'syz.4.7270': attribute type 1 has an invalid length. [ 1841.394627][ T580] fuse: Bad value for 'fd' [ 1841.600940][ T564] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1841.639759][ T565] vhci_hcd: connection reset by peer [ 1841.642564][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1841.644683][ T12] vhci_hcd vhci_hcd.4: release socket [ 1841.661894][ T576] 9p: Bad value for 'rfdno' [ 1841.662188][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1841.667216][ T579] bond3: (slave geneve2): making interface the new active one [ 1841.700013][ T579] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1841.724828][T15475] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1841.728642][T15475] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1841.738478][T15475] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1841.744989][T15475] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.231443][ T9] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 1842.383108][ T9] usb 11-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1842.387373][ T9] usb 11-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1842.390587][ T9] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1842.394625][ T9] usb 11-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1842.398010][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.408582][ T9] usb 11-1: config 0 descriptor?? [ 1842.622711][ T9289] usb 6-1: new low-speed USB device number 127 using dummy_hcd [ 1842.784131][ T9289] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1842.788344][ T9289] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1842.792897][ T9289] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1842.798172][ T9289] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1842.802137][ T9289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.818961][ T594] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1842.826696][ T9289] hub 6-1:1.0: bad descriptor, ignoring hub [ 1842.829106][ T9289] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1842.833588][ T9289] cdc_wdm 6-1:1.0: skipping garbage [ 1842.838262][ T9289] cdc_wdm 6-1:1.0: skipping garbage [ 1842.940268][ T9289] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1842.943108][ T9289] cdc_wdm 6-1:1.0: Unknown control protocol [ 1843.069878][ T600] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1843.102650][ T600] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1843.106040][ T600] overlayfs: failed to look up (tracing) for ino (-66) [ 1843.578884][ T605] wg2 speed is unknown, defaulting to 1000 [ 1843.582378][ T594] usb 6-1: reset low-speed USB device number 127 using dummy_hcd [ 1843.883150][ T594] usb 6-1: device firmware changed [ 1843.890773][ T594] cdc_wdm 6-1:1.0: Error autopm - -16 [ 1843.890943][ T9289] usb 6-1: USB disconnect, device number 127 [ 1844.031609][ T9289] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 1844.183405][ T9289] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1844.195046][ T9289] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1844.205016][ T9289] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1844.220009][ T9289] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1844.227848][ T9289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.246735][ T601] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1844.266112][ T9289] hub 6-1:1.0: bad descriptor, ignoring hub [ 1844.286036][ T9289] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1844.295485][ T9289] cdc_wdm 6-1:1.0: skipping garbage [ 1844.301455][ T9289] cdc_wdm 6-1:1.0: skipping garbage [ 1844.310239][ T9289] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1844.444468][ T614] comedi comedi2: pcm3724: a I/O base address must be specified [ 1844.472064][ T594] tipc: Started in network mode [ 1844.474335][ T594] tipc: Node identity 0e678c270c7d, cluster identity 4711 [ 1844.477940][ T594] tipc: Enabled bearer , priority 0 [ 1844.489129][ T594] syzkaller0: entered promiscuous mode [ 1844.491779][ T594] syzkaller0: entered allmulticast mode [ 1844.525613][ T594] tipc: Resetting bearer [ 1844.535798][ T593] tipc: Resetting bearer [ 1844.549807][ T593] tipc: Disabling bearer [ 1844.631967][ T6018] usb 6-1: USB disconnect, device number 2 [ 1845.719149][ T629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7287'. [ 1846.011946][ T60] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1846.475607][ T9] usbhid 11-1:0.0: can't add hid device: -71 [ 1846.478235][ T9] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 1846.493214][ T9] usb 11-1: USB disconnect, device number 4 [ 1846.659547][ T636] wg2 speed is unknown, defaulting to 1000 [ 1847.290048][ T646] 9p: Bad value for 'rfdno' [ 1847.441148][ T651] wg2 speed is unknown, defaulting to 1000 [ 1848.312350][ T665] comedi comedi2: pcm3724: a I/O base address must be specified [ 1848.852170][ T672] netfs: Couldn't get user pages (rc=-14) [ 1849.206640][ T681] 0xfffffffffffffffd-0x000000020000 : "" [ 1849.209342][ T681] mtd: partition "" is out of reach -- disabled [ 1849.223403][ T681] ftl_cs: FTL header not found. [ 1849.637883][ T696] 9p: Bad value for 'rfdno' [ 1849.825540][ T702] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7304'. [ 1849.903931][ T708] overlayfs: failed to resolve '/ÕÁ0ÙdÇC‘"‹ÚRÒúXâÊt²eƒç>': -2 [ 1849.909650][ T708] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1849.930344][ T708] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7306'. [ 1850.141856][ T721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1850.148629][ T721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1850.712034][ T710] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1850.715476][ T710] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1850.718834][ T710] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1850.721640][ T710] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1850.724362][ T710] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1851.280398][ T743] wg2 speed is unknown, defaulting to 1000 [ 1851.402907][ T743] warn_alloc: 3 callbacks suppressed [ 1851.402920][ T743] syz.4.7311: page allocation failure: order:6, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1851.541364][ T743] CPU: 2 UID: 0 PID: 743 Comm: syz.4.7311 Tainted: G L syzkaller #0 PREEMPT(full) [ 1851.541400][ T743] Tainted: [L]=SOFTLOCKUP [ 1851.541407][ T743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1851.541417][ T743] Call Trace: [ 1851.541424][ T743] [ 1851.541432][ T743] dump_stack_lvl+0x100/0x190 [ 1851.541467][ T743] warn_alloc.cold+0x95/0x1c1 [ 1851.541498][ T743] ? __pfx_warn_alloc+0x10/0x10 [ 1851.541526][ T743] ? psi_memstall_leave+0x19c/0x2e0 [ 1851.541556][ T743] ? __pfx___might_resched+0x10/0x10 [ 1851.541589][ T743] __alloc_frozen_pages_noprof+0xf36/0x2ba0 [ 1851.541630][ T743] ? sysfs_add_file_mode_ns+0x22f/0x3c0 [ 1851.541655][ T743] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1851.541703][ T743] ? kernfs_put+0x3f/0x60 [ 1851.541725][ T743] ? internal_create_group+0x915/0xf40 [ 1851.541763][ T743] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1851.541822][ T743] ? policy_nodemask+0xed/0x4f0 [ 1851.541844][ T743] alloc_pages_mpol+0x1fb/0x550 [ 1851.541864][ T743] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1851.541888][ T743] ? ib_setup_port_attrs+0x2b4/0x600 [ 1851.541914][ T743] ___kmalloc_large_node+0x104/0x150 [ 1851.541936][ T743] __kmalloc_large_node_noprof+0x1c/0x70 [ 1851.541959][ T743] __kmalloc_noprof+0x5be/0x850 [ 1851.541982][ T743] ? rdma_port_get_link_layer+0x57/0xe0 [ 1851.542005][ T743] ib_setup_port_attrs+0x2b4/0x600 [ 1851.542032][ T743] ? kobject_put+0xb9/0x640 [ 1851.542058][ T743] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 1851.542091][ T743] ? __init_waitqueue_head+0xca/0x150 [ 1851.542127][ T743] add_one_compat_dev+0x5b3/0x820 [ 1851.542152][ T743] rdma_dev_init_net+0x30a/0x590 [ 1851.542174][ T743] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1851.542195][ T743] ? __kmalloc_noprof+0x320/0x850 [ 1851.542222][ T743] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1851.542244][ T743] ops_init+0x1e2/0x5f0 [ 1851.542271][ T743] setup_net+0x118/0x3a0 [ 1851.542294][ T743] ? __pfx_setup_net+0x10/0x10 [ 1851.542313][ T743] ? lockdep_init_map_type+0x5c/0x250 [ 1851.542338][ T743] ? mutex_init_lockep+0x110/0x150 [ 1851.542365][ T743] copy_net_ns+0x46f/0x7c0 [ 1851.542393][ T743] create_new_namespaces+0x3ea/0xac0 [ 1851.542418][ T743] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1851.542442][ T743] ksys_unshare+0x473/0xad0 [ 1851.542468][ T743] ? __pfx_ksys_unshare+0x10/0x10 [ 1851.542499][ T743] __ia32_sys_unshare+0x30/0x40 [ 1851.542521][ T743] __do_fast_syscall_32+0xe3/0x8c0 [ 1851.542547][ T743] do_fast_syscall_32+0x32/0x70 [ 1851.542571][ T743] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1851.542595][ T743] RIP: 0023:0xf70bef6c [ 1851.542611][ T743] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 1851.542629][ T743] RSP: 002b:00000000f504850c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 1851.542646][ T743] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 1851.542657][ T743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1851.542667][ T743] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1851.542677][ T743] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1851.542689][ T743] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1851.542713][ T743] [ 1851.542790][ T743] Mem-Info: [ 1851.571537][ T751] 9p: Bad value for 'rfdno' [ 1851.712796][ T743] active_anon:745 inactive_anon:2034 isolated_anon:0 [ 1851.712796][ T743] active_file:962 inactive_file:460 isolated_file:0 [ 1851.712796][ T743] unevictable:3815 dirty:132 writeback:0 [ 1851.712796][ T743] slab_reclaimable:8970 slab_unreclaimable:92503 [ 1851.712796][ T743] mapped:30990 shmem:1770 pagetables:1796 [ 1851.712796][ T743] sec_pagetables:346 bounce:0 [ 1851.712796][ T743] kernel_misc_reclaimable:0 [ 1851.712796][ T743] free:36752 free_pcp:4499 free_cma:0 [ 1851.737873][ T743] Node 0 active_anon:0kB inactive_anon:32kB active_file:12kB inactive_file:128kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:880kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7520kB pagetables:1220kB sec_pagetables:1160kB all_unreclaimable? yes Balloon:0kB [ 1851.750422][ T743] Node 1 active_anon:3072kB inactive_anon:8088kB active_file:4040kB inactive_file:1644kB unevictable:11724kB isolated(anon):0kB isolated(file):0kB mapped:127096kB dirty:528kB writeback:0kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9932kB pagetables:5972kB sec_pagetables:224kB all_unreclaimable? no Balloon:0kB [ 1851.766169][ T743] Node 0 DMA free:3948kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:120kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1851.780003][ T743] lowmem_reserve[]: 0 285 285 285 285 [ 1851.783453][ T743] Node 0 DMA32 free:28456kB boost:22528kB min:35600kB low:38868kB high:42136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:32kB active_file:0kB inactive_file:8kB unevictable:3536kB writepending:0kB zspages:2280kB present:1032196kB managed:292620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1851.799386][ T743] lowmem_reserve[]: 0 0 0 0 0 [ 1851.805816][ T743] Node 1 DMA32 free:130712kB boost:22528kB min:69668kB low:81452kB high:93236kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6852kB inactive_anon:4288kB active_file:4140kB inactive_file:1644kB unevictable:11724kB writepending:536kB zspages:5956kB present:1048432kB managed:948212kB mlocked:8188kB bounce:0kB free_pcp:1480kB local_pcp:0kB free_cma:0kB [ 1851.819200][ T743] lowmem_reserve[]: 0 0 0 0 0 [ 1851.821844][ T743] Node 0 DMA: 133*4kB (UM) 81*8kB (UM) 35*16kB (UM) 25*32kB (UM) 4*64kB (UM) 3*128kB (M) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3948kB [ 1851.828552][ T743] Node 0 DMA32: 832*4kB (UME) 459*8kB (UME) 151*16kB (UME) 187*32kB (UME) 68*64kB (UME) 22*128kB (ME) 5*256kB (ME) 5*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 28456kB [ 1851.835117][ T743] Node 1 DMA32: 3716*4kB (UE) 5655*8kB (UM) 4389*16kB (UME) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 130328kB [ 1851.841764][ T743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1851.846502][ T743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1851.851714][ T743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1851.856033][ T743] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1851.860519][ T743] 4665 total pagecache pages [ 1851.862801][ T743] 1312 pages in swap cache [ 1851.864788][ T743] Free swap = 46460kB [ 1851.866257][ T743] Total swap = 124996kB [ 1851.867747][ T743] 524155 pages RAM [ 1851.869125][ T743] 0 pages HighMem/MovableOnly [ 1851.870919][ T743] 210107 pages reserved [ 1851.873486][ T743] 0 pages cma reserved [ 1852.073463][ T752] 9p: Bad value for 'rfdno' [ 1852.261468][ T5934] Bluetooth: hci1: command 0x0c1a tx timeout [ 1852.797838][ T5934] Bluetooth: hci0: command 0x040f tx timeout [ 1852.797898][T26927] Bluetooth: hci3: command 0x0c1a tx timeout [ 1852.797939][T25192] Bluetooth: hci2: command 0x041b tx timeout [ 1852.804906][T29407] Bluetooth: hci5: command 0x041b tx timeout [ 1852.867295][ T774] wg2 speed is unknown, defaulting to 1000 [ 1853.328983][ T768] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1853.331755][ T768] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1853.333899][ T768] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1853.335959][ T768] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1853.338034][ T768] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1853.692322][ T6018] usb 9-1: new low-speed USB device number 52 using dummy_hcd [ 1853.703716][ T793] 9pnet_virtio: no channels available for device ./bus [ 1853.844299][ T6018] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.870967][ T6018] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1853.875908][ T6018] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1853.881577][ T6018] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1853.885525][ T6018] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.896171][ T788] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1853.901414][ T6018] hub 9-1:1.0: bad descriptor, ignoring hub [ 1853.904840][ T6018] hub 9-1:1.0: probe with driver hub failed with error -5 [ 1853.908994][ T6018] cdc_wdm 9-1:1.0: skipping garbage [ 1853.914859][ T6018] cdc_wdm 9-1:1.0: skipping garbage [ 1853.927917][ T6018] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1853.934782][ T6018] cdc_wdm 9-1:1.0: Unknown control protocol [ 1854.501421][ T807] fuse: Unknown parameter '00000000000000000003?À8»†n]Jƾ>5\U]Š½UÔeî' [ 1854.660237][ T810] wg2 speed is unknown, defaulting to 1000 [ 1854.741487][T26927] Bluetooth: hci1: command 0x0c1a tx timeout [ 1855.385660][ C1] wdm_int_callback: 693 callbacks suppressed [ 1855.385679][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1855.390007][ C1] wdm_int_callback: 693 callbacks suppressed [ 1855.390018][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1855.394423][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1855.396583][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1855.398683][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 1855.409193][T26927] Bluetooth: hci0: command 0x040f tx timeout [ 1855.411352][T26927] Bluetooth: hci5: command 0x041b tx timeout [ 1855.413663][T26927] Bluetooth: hci3: command 0x0c1a tx timeout [ 1855.415685][T26927] Bluetooth: hci2: command 0x041b tx timeout [ 1855.426869][ T796] 9p: Bad value for 'rfdno' [ 1855.861696][ T60] usb 13-1: new full-speed USB device number 33 using dummy_hcd [ 1856.472509][ T60] usb 13-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1856.476141][ T60] usb 13-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1856.480528][ T60] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1856.484234][ T60] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.515901][ T60] usbtmc 13-1:16.0: bulk endpoints not found [ 1856.854314][ T830] 9p: Bad value for 'rfdno' [ 1856.901652][T25792] usb 9-1: USB disconnect, device number 52 [ 1857.124294][ T844] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7334'. [ 1857.127835][ T844] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1857.131701][ T844] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7334'. [ 1857.134909][ T844] tc_dump_action: action bad kind [ 1857.486754][ T854] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7337'. [ 1857.595349][ T856] syz_tun: entered allmulticast mode [ 1857.603749][ T854] fuse: Bad value for 'user_id' [ 1857.605436][ T854] fuse: Bad value for 'user_id' [ 1857.700952][ T860] xt_hashlimit: size too large, truncated to 1048576 [ 1857.756864][ T851] 9p: Bad value for 'rfdno' [ 1857.802112][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.106823][ T868] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1858.498356][ T878] 9p: Bad value for 'rfdno' [ 1858.670817][ T24] usb 13-1: USB disconnect, device number 33 [ 1858.962988][ T882] wg2 speed is unknown, defaulting to 1000 [ 1859.141388][ T24] usb 13-1: new high-speed USB device number 34 using dummy_hcd [ 1859.280914][ T24] usb 13-1: device descriptor read/64, error -71 [ 1859.521400][ T24] usb 13-1: new high-speed USB device number 35 using dummy_hcd [ 1859.931576][ T24] usb 13-1: device descriptor read/64, error -71 [ 1860.043522][ T24] usb usb13-port1: attempt power cycle [ 1860.241542][T25792] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1860.391411][T25792] usb 9-1: Using ep0 maxpacket: 16 [ 1860.393703][ T24] usb 13-1: new high-speed USB device number 36 using dummy_hcd [ 1860.398322][T25792] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1860.404480][T25792] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1860.408447][T25792] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.412895][ T24] usb 13-1: device descriptor read/8, error -71 [ 1860.415813][T25792] usb 9-1: Product: syz [ 1860.417604][T25792] usb 9-1: Manufacturer: syz [ 1860.419752][T25792] usb 9-1: SerialNumber: syz [ 1860.425452][T25792] usb 9-1: config 0 descriptor?? [ 1860.432991][T25792] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1860.437213][T25792] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1860.643887][ T896] netlink: 233 bytes leftover after parsing attributes in process `syz.4.7351'. [ 1860.651485][ T24] usb 13-1: new high-speed USB device number 37 using dummy_hcd [ 1860.673504][ T24] usb 13-1: device descriptor read/8, error -71 [ 1860.782145][ T24] usb usb13-port1: unable to enumerate USB device [ 1861.145928][T25792] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1861.675923][ T9289] libceph: connect (1)[c::]:6789 error -101 [ 1861.679286][ T9289] libceph: mon0 (1)[c::]:6789 connect error [ 1861.699653][ T908] ceph: No mds server is up or the cluster is laggy [ 1862.386340][ T948] 9p: Bad value for 'rfdno' [ 1862.399160][ T947] 9p: Bad value for 'rfdno' [ 1862.596886][T25792] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1862.603774][T25792] em28xx 9-1:0.0: board has no eeprom [ 1862.672364][T25792] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1862.675832][T25792] em28xx 9-1:0.0: dvb set to bulk mode. [ 1862.678444][ T5992] em28xx 9-1:0.0: Binding DVB extension [ 1862.683280][ T5992] warn_alloc: 2 callbacks suppressed [ 1862.683291][ T5992] kworker/2:3: page allocation failure: order:4, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1862.702373][ T5992] CPU: 2 UID: 0 PID: 5992 Comm: kworker/2:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1862.702403][ T5992] Tainted: [L]=SOFTLOCKUP [ 1862.702410][ T5992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1862.702423][ T5992] Workqueue: events request_module_async [ 1862.702454][ T5992] Call Trace: [ 1862.702460][ T5992] [ 1862.702468][ T5992] dump_stack_lvl+0x100/0x190 [ 1862.702495][ T5992] warn_alloc.cold+0x95/0x1c1 [ 1862.702527][ T5992] ? __pfx_warn_alloc+0x10/0x10 [ 1862.702553][ T5992] ? psi_memstall_leave+0x19c/0x2e0 [ 1862.702582][ T5992] ? __pfx___might_resched+0x10/0x10 [ 1862.702613][ T5992] __alloc_frozen_pages_noprof+0xf36/0x2ba0 [ 1862.702650][ T5992] ? stack_trace_save+0x8e/0xc0 [ 1862.702668][ T5992] ? find_held_lock+0x2b/0x80 [ 1862.702684][ T5992] ? stack_depot_save_flags+0x27/0x9d0 [ 1862.702718][ T5992] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1862.702746][ T5992] ? usb_alloc_urb+0x66/0xa0 [ 1862.702890][ T5992] ? kasan_save_stack+0x30/0x50 [ 1862.702916][ T5992] ? __kasan_kmalloc+0xaa/0xb0 [ 1862.702940][ T5992] ? usb_alloc_urb+0x66/0xa0 [ 1862.702963][ T5992] ? em28xx_alloc_urbs+0x5fa/0xf60 [ 1862.702986][ T5992] ? em28xx_dvb_init.cold+0x197/0x6bc0 [ 1862.703014][ T5992] ? request_module_async+0x61/0x80 [ 1862.703038][ T5992] ? process_one_work+0x9d7/0x1920 [ 1862.703062][ T5992] ? worker_thread+0x5da/0xe40 [ 1862.703096][ T5992] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1862.703127][ T5992] ? policy_nodemask+0xed/0x4f0 [ 1862.703148][ T5992] alloc_pages_mpol+0x1fb/0x550 [ 1862.703167][ T5992] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1862.703193][ T5992] ? em28xx_alloc_urbs+0x655/0xf60 [ 1862.703216][ T5992] ___kmalloc_large_node+0x104/0x150 [ 1862.703256][ T5992] __kmalloc_large_node_noprof+0x1c/0x70 [ 1862.703279][ T5992] __kmalloc_noprof+0x5be/0x850 [ 1862.703302][ T5992] ? __asan_memset+0x23/0x50 [ 1862.703330][ T5992] em28xx_alloc_urbs+0x655/0xf60 [ 1862.703362][ T5992] ? kasan_save_track+0x14/0x30 [ 1862.703390][ T5992] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1862.703411][ T5992] em28xx_dvb_init.cold+0x197/0x6bc0 [ 1862.703445][ T5992] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1862.703468][ T5992] ? rcu_is_watching+0x12/0xc0 [ 1862.703492][ T5992] ? trace_contention_end+0x140/0x180 [ 1862.703515][ T5992] ? __mutex_lock+0x26a/0x1b90 [ 1862.703534][ T5992] ? em28xx_init_extension+0x2f/0x200 [ 1862.703555][ T5992] ? register_lock_class+0x40/0x560 [ 1862.703578][ T5992] ? do_raw_spin_lock+0x128/0x260 [ 1862.703605][ T5992] ? em28xx_audio_init+0x132/0x1a0 [ 1862.703625][ T5992] ? __pfx___mutex_lock+0x10/0x10 [ 1862.703647][ T5992] ? __lock_acquire+0x4a5/0x2630 [ 1862.703669][ T5992] ? em28xx_v4l2_init+0x89/0xb0 [ 1862.703690][ T5992] ? __pfx_em28xx_audio_init+0x10/0x10 [ 1862.703711][ T5992] ? finish_task_switch.isra.0+0x200/0xb80 [ 1862.703737][ T5992] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1862.703759][ T5992] em28xx_init_extension+0x13a/0x200 [ 1862.703787][ T5992] request_module_async+0x61/0x80 [ 1862.703819][ T5992] process_one_work+0x9d7/0x1920 [ 1862.703856][ T5992] ? __pfx_process_one_work+0x10/0x10 [ 1862.703888][ T5992] ? __pfx_request_module_async+0x10/0x10 [ 1862.703917][ T5992] worker_thread+0x5da/0xe40 [ 1862.703953][ T5992] ? kthread+0x13a/0x450 [ 1862.703973][ T5992] ? __pfx_worker_thread+0x10/0x10 [ 1862.703996][ T5992] kthread+0x370/0x450 [ 1862.704018][ T5992] ? __pfx_kthread+0x10/0x10 [ 1862.704042][ T5992] ret_from_fork+0x754/0xd80 [ 1862.704069][ T5992] ? __pfx_ret_from_fork+0x10/0x10 [ 1862.704097][ T5992] ? __switch_to+0x7b4/0x1120 [ 1862.704118][ T5992] ? __pfx_kthread+0x10/0x10 [ 1862.704141][ T5992] ret_from_fork_asm+0x1a/0x30 [ 1862.704288][ T5992] [ 1862.706145][ T5992] Mem-Info: [ 1862.854698][ T5992] active_anon:627 inactive_anon:4970 isolated_anon:0 [ 1862.854698][ T5992] active_file:1893 inactive_file:308 isolated_file:0 [ 1862.854698][ T5992] unevictable:1768 dirty:0 writeback:1 [ 1862.854698][ T5992] slab_reclaimable:9170 slab_unreclaimable:92572 [ 1862.854698][ T5992] mapped:33095 shmem:4640 pagetables:1800 [ 1862.854698][ T5992] sec_pagetables:346 bounce:0 [ 1862.854698][ T5992] kernel_misc_reclaimable:0 [ 1862.854698][ T5992] free:38408 free_pcp:603 free_cma:0 [ 1862.876187][ T5992] Node 0 active_anon:0kB inactive_anon:32kB active_file:12kB inactive_file:128kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:880kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7520kB pagetables:1220kB sec_pagetables:1160kB all_unreclaimable? yes Balloon:0kB [ 1862.889959][ T5992] Node 1 active_anon:2756kB inactive_anon:19848kB active_file:7560kB inactive_file:1104kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:131500kB dirty:0kB writeback:4kB shmem:15024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9888kB pagetables:5980kB sec_pagetables:224kB all_unreclaimable? no Balloon:0kB [ 1862.911514][ T5992] Node 0 DMA free:3948kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:120kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1862.922006][ T5992] lowmem_reserve[]: 0 285 285 285 285 [ 1862.923814][ T5992] Node 0 DMA32 free:23888kB boost:29412kB min:42484kB low:45752kB high:49020kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:32kB active_file:0kB inactive_file:8kB unevictable:3536kB writepending:0kB zspages:2276kB present:1032196kB managed:292620kB mlocked:0kB bounce:0kB free_pcp:384kB local_pcp:0kB free_cma:0kB [ 1862.934622][ T5992] lowmem_reserve[]: 0 0 0 0 0 [ 1862.944753][ T5992] Node 1 DMA32 free:125996kB boost:16384kB min:63524kB low:75308kB high:87092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4776kB inactive_anon:17812kB active_file:6080kB inactive_file:2376kB unevictable:3536kB writepending:104kB zspages:5936kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:2100kB local_pcp:576kB free_cma:0kB [ 1862.966133][ T5992] lowmem_reserve[]: 0 0 0 0 0 [ 1862.971404][ T5992] Node 0 DMA: 133*4kB (UM) 81*8kB (UM) 35*16kB (UM) 25*32kB (UM) 4*64kB (UM) 3*128kB (M) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3948kB [ 1862.976441][ T5992] Node 0 DMA32: 834*4kB (UME) 459*8kB (UME) 151*16kB (UME) 198*32kB (UME) 67*64kB (UME) 22*128kB (UME) 4*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 23888kB [ 1862.987216][ T5992] Node 1 DMA32: 2159*4kB (UM) 5696*8kB (UME) 4381*16kB (U) 93*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 127276kB [ 1862.998118][ T5992] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1863.001609][ T5992] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1863.004970][ T5992] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1863.008367][ T5992] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1863.011676][ T5992] 8218 total pagecache pages [ 1863.013294][ T5992] 1400 pages in swap cache [ 1863.014913][ T5992] Free swap = 46524kB [ 1863.016428][ T5992] Total swap = 124996kB [ 1863.017880][ T5992] 524155 pages RAM [ 1863.019237][ T5992] 0 pages HighMem/MovableOnly [ 1863.020900][ T5992] 210107 pages reserved [ 1863.022562][ T5992] 0 pages cma reserved [ 1863.024670][ T5992] ------------[ cut here ]------------ [ 1863.026531][ T5992] !PageLargeKmalloc(page) [ 1863.026539][ T5992] WARNING: mm/slub.c:6371 at free_large_kmalloc+0x96/0xd0, CPU#2: kworker/2:3/5992 [ 1863.031073][ T5992] Modules linked in: [ 1863.033602][ T5992] CPU: 2 UID: 0 PID: 5992 Comm: kworker/2:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1863.037298][ T5992] Tainted: [L]=SOFTLOCKUP [ 1863.038847][ T5992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1863.043048][ T5992] Workqueue: events request_module_async [ 1863.044937][ T5992] RIP: 0010:free_large_kmalloc+0x96/0xd0 [ 1863.046892][ T5992] Code: 28 90 0f 0b 90 80 3d 14 e3 5a 0e 00 0f 84 e5 1f bd fe 48 8b 74 24 28 48 89 ef e8 45 38 0c 00 b8 00 f0 ff ff 45 31 ed eb be 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 50 76 e6 8d 5b 5d 41 5c 41 [ 1863.053786][ T5992] RSP: 0000:ffffc9000485f818 EFLAGS: 00010293 [ 1863.056026][ T5992] RAX: 00000000000000f0 RBX: ffffea0001c79000 RCX: ffffffff81b9724e [ 1863.058788][ T5992] RDX: 0000000000000000 RSI: ffff888071e40000 RDI: ffffea0001c79000 [ 1863.062032][ T5992] RBP: ffff888071e40000 R08: 0000000000000007 R09: 0000000000000000 SYZFAIL: failed to recv rpc [ 1863.064815][ T5992] R10: 0000000000000000 R11: dffffc0000000000 R12: ffff8880738fdd58 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1863.069996][ T5992] R13: ffff888062df5400 R14: dffffc0000000000 R15: ffffed100e71fbad [ 1863.072942][ T5992] FS: 0000000000000000(0000) GS:ffff88809734c000(0000) knlGS:0000000000000000 [ 1863.076061][ T5992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1863.078392][ T5992] CR2: 00000000f54adbac CR3: 000000005ef11000 CR4: 0000000000352ef0 [ 1863.081252][ T5992] DR0: 000000006000003f DR1: 0000000000000000 DR2: 0000000000000000 [ 1863.084359][ T5992] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1863.087219][ T5992] Call Trace: [ 1863.088642][ T5992] [ 1863.089809][ T5992] usb_free_urb.part.0+0xf8/0x110 [ 1863.091736][ T5992] usb_free_urb+0x1f/0x30 [ 1863.093261][ T5992] em28xx_uninit_usb_xfer+0xf3/0x360 [ 1863.095146][ T5992] em28xx_alloc_urbs+0xb43/0xf60 [ 1863.096813][ T5992] ? kasan_save_track+0x14/0x30 [ 1863.098441][ T5992] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1863.100248][ T5992] em28xx_dvb_init.cold+0x197/0x6bc0 [ 1863.102362][ T5992] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1863.104356][ T5992] ? rcu_is_watching+0x12/0xc0 [ 1863.106259][ T5992] ? trace_contention_end+0x140/0x180 [ 1863.108681][ T5992] ? __mutex_lock+0x26a/0x1b90 [ 1863.110528][ T5992] ? em28xx_init_extension+0x2f/0x200 [ 1863.112668][ T5992] ? register_lock_class+0x40/0x560 [ 1863.114473][ T5992] ? do_raw_spin_lock+0x128/0x260 [ 1863.116163][ T5992] ? em28xx_audio_init+0x132/0x1a0 [ 1863.118030][ T5992] ? __pfx___mutex_lock+0x10/0x10 [ 1863.120599][ T5992] ? __lock_acquire+0x4a5/0x2630 [ 1863.122402][ T5992] ? em28xx_v4l2_init+0x89/0xb0 [ 1863.123991][ T5992] ? __pfx_em28xx_audio_init+0x10/0x10 [ 1863.125811][ T5992] ? finish_task_switch.isra.0+0x200/0xb80 [ 1863.127947][ T5992] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1863.129796][ T5992] em28xx_init_extension+0x13a/0x200 [ 1863.131790][ T5992] request_module_async+0x61/0x80 [ 1863.133517][ T5992] process_one_work+0x9d7/0x1920 [ 1863.135228][ T5992] ? __pfx_process_one_work+0x10/0x10 [ 1863.137018][ T5992] ? __pfx_request_module_async+0x10/0x10 [ 1863.138907][ T5992] worker_thread+0x5da/0xe40 [ 1863.140492][ T5992] ? kthread+0x13a/0x450 [ 1863.142139][ T5992] ? __pfx_worker_thread+0x10/0x10 [ 1863.144075][ T5992] kthread+0x370/0x450 [ 1863.145503][ T5992] ? __pfx_kthread+0x10/0x10 [ 1863.147070][ T5992] ret_from_fork+0x754/0xd80 [ 1863.148616][ T5992] ? __pfx_ret_from_fork+0x10/0x10 [ 1863.150609][ T5992] ? __switch_to+0x7b4/0x1120 [ 1863.152451][ T5992] ? __pfx_kthread+0x10/0x10 [ 1863.152970][ T54] usb 9-1: USB disconnect, device number 53 [ 1863.154130][ T5992] ret_from_fork_asm+0x1a/0x30 [ 1863.158254][ T5992] [ 1863.159351][ T5992] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1863.161996][ T5992] CPU: 2 UID: 0 PID: 5992 Comm: kworker/2:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1863.166224][ T5992] Tainted: [L]=SOFTLOCKUP [ 1863.167796][ T5992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1863.171329][ T5992] Workqueue: events request_module_async [ 1863.173322][ T5992] Call Trace: [ 1863.174540][ T5992] [ 1863.175578][ T5992] dump_stack_lvl+0x100/0x190 [ 1863.177220][ T5992] vpanic+0x552/0x970 [ 1863.178964][ T5992] ? __pfx_vpanic+0x10/0x10 [ 1863.180565][ T5992] panic+0xd1/0xe0 [ 1863.181916][ T5992] ? __pfx_panic+0x10/0x10 [ 1863.183441][ T5992] ? check_panic_on_warn+0x1f/0x90 [ 1863.185329][ T5992] check_panic_on_warn.cold+0x19/0x34 [ 1863.187292][ T5992] ? free_large_kmalloc+0x96/0xd0 [ 1863.189098][ T5992] __warn.cold+0x191/0x348 [ 1863.190828][ T5992] __report_bug+0x296/0x3d0 [ 1863.192437][ T5992] ? free_large_kmalloc+0x96/0xd0 [ 1863.194248][ T5992] ? __pfx___report_bug+0x10/0x10 [ 1863.196100][ T5992] ? lock_acquire+0x1cf/0x380 [ 1863.197773][ T5992] ? find_held_lock+0x2b/0x80 [ 1863.199408][ T5992] ? __free_one_page+0x109/0x1230 [ 1863.201198][ T5992] ? __free_one_page+0x109/0x1230 [ 1863.202984][ T5992] ? free_large_kmalloc+0x96/0xd0 [ 1863.204729][ T5992] report_bug+0xb2/0x220 [ 1863.206238][ T5992] ? free_large_kmalloc+0x96/0xd0 [ 1863.207976][ T5992] handle_bug+0x16a/0x2a0 [ 1863.209486][ T5992] exc_invalid_op+0x17/0x50 [ 1863.211144][ T5992] asm_exc_invalid_op+0x1a/0x20 [ 1863.212821][ T5992] RIP: 0010:free_large_kmalloc+0x96/0xd0 [ 1863.214798][ T5992] Code: 28 90 0f 0b 90 80 3d 14 e3 5a 0e 00 0f 84 e5 1f bd fe 48 8b 74 24 28 48 89 ef e8 45 38 0c 00 b8 00 f0 ff ff 45 31 ed eb be 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 50 76 e6 8d 5b 5d 41 5c 41 [ 1863.222160][ T5992] RSP: 0000:ffffc9000485f818 EFLAGS: 00010293 [ 1863.224330][ T5992] RAX: 00000000000000f0 RBX: ffffea0001c79000 RCX: ffffffff81b9724e [ 1863.226968][ T5992] RDX: 0000000000000000 RSI: ffff888071e40000 RDI: ffffea0001c79000 [ 1863.229605][ T5992] RBP: ffff888071e40000 R08: 0000000000000007 R09: 0000000000000000 [ 1863.232299][ T5992] R10: 0000000000000000 R11: dffffc0000000000 R12: ffff8880738fdd58 [ 1863.235336][ T5992] R13: ffff888062df5400 R14: dffffc0000000000 R15: ffffed100e71fbad [ 1863.238199][ T5992] ? __phys_addr+0xde/0x180 [ 1863.239873][ T5992] usb_free_urb.part.0+0xf8/0x110 [ 1863.241608][ T5992] usb_free_urb+0x1f/0x30 [ 1863.243052][ T5992] em28xx_uninit_usb_xfer+0xf3/0x360 [ 1863.244936][ T5992] em28xx_alloc_urbs+0xb43/0xf60 [ 1863.246668][ T5992] ? kasan_save_track+0x14/0x30 [ 1863.248375][ T5992] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1863.250270][ T5992] em28xx_dvb_init.cold+0x197/0x6bc0 [ 1863.252079][ T5992] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1863.253902][ T5992] ? rcu_is_watching+0x12/0xc0 [ 1863.255478][ T5992] ? trace_contention_end+0x140/0x180 [ 1863.257350][ T5992] ? __mutex_lock+0x26a/0x1b90 [ 1863.259036][ T5992] ? em28xx_init_extension+0x2f/0x200 [ 1863.260895][ T5992] ? register_lock_class+0x40/0x560 [ 1863.262664][ T5992] ? do_raw_spin_lock+0x128/0x260 [ 1863.264438][ T5992] ? em28xx_audio_init+0x132/0x1a0 [ 1863.266155][ T5992] ? __pfx___mutex_lock+0x10/0x10 [ 1863.267826][ T5992] ? __lock_acquire+0x4a5/0x2630 [ 1863.269619][ T5992] ? em28xx_v4l2_init+0x89/0xb0 [ 1863.271644][ T5992] ? __pfx_em28xx_audio_init+0x10/0x10 [ 1863.273658][ T5992] ? finish_task_switch.isra.0+0x200/0xb80 [ 1863.275663][ T5992] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 1863.277463][ T5992] em28xx_init_extension+0x13a/0x200 [ 1863.279227][ T5992] request_module_async+0x61/0x80 [ 1863.280927][ T5992] process_one_work+0x9d7/0x1920 [ 1863.282571][ T5992] ? __pfx_process_one_work+0x10/0x10 [ 1863.284427][ T5992] ? __pfx_request_module_async+0x10/0x10 [ 1863.286443][ T5992] worker_thread+0x5da/0xe40 [ 1863.288142][ T5992] ? kthread+0x13a/0x450 [ 1863.289820][ T5992] ? __pfx_worker_thread+0x10/0x10 [ 1863.291653][ T5992] kthread+0x370/0x450 [ 1863.293045][ T5992] ? __pfx_kthread+0x10/0x10 [ 1863.294830][ T5992] ret_from_fork+0x754/0xd80 [ 1863.296377][ T5992] ? __pfx_ret_from_fork+0x10/0x10 [ 1863.298078][ T5992] ? __switch_to+0x7b4/0x1120 [ 1863.299779][ T5992] ? __pfx_kthread+0x10/0x10 [ 1863.301617][ T5992] ret_from_fork_asm+0x1a/0x30 [ 1863.303654][ T5992] [ 1863.306087][ T5992] Kernel Offset: disabled [ 1863.307725][ T5992] Rebooting in 86400 seconds..