last executing test programs: 7m11.130594695s ago: executing program 32 (id=795): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000003840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001440)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0xa68d7c5193c827fc, 0xffbc, 0xd, 0x7, 0x32, 0x0, 0x0, 0x10, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x00\x00\x00\x00\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.mT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x00\x00\x00f\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18\x82\xff_\f\xed\xdfHb\xaazi/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq,\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J', 0x42, 0x120, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}, {{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0}}], 0x2, 0x45) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$MEMISLOCKED(r3, 0x80084d17, 0x0) 5m38.468480895s ago: executing program 33 (id=1225): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x59, &(0x7f0000001740)=ANY=[@ANYBLOB="18000000090000000000000003000000c24a0001ffffffff850000002a0000009500000000000000f37ef53f987645ff67d58ccefe84345754a8785560184e3e8b25e9c54cbf98cb120326fe6b46bb9e0425478a257521baf00b985475f01666fc14b9da27c30975377603b86b"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = creat(0x0, 0x1) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f00000001c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x1, 0x0, 0x81d, 0xf1, {{0x3e, 0x4, 0x1, 0x9, 0xf8, 0x65, 0x0, 0x3, 0x0, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp_addr={0x44, 0x2c, 0xd4, 0x1, 0xb, [{@multicast2, 0x3ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xfffff800}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x401}, {@broadcast, 0xfffffff0}]}, @cipso={0x86, 0x6a, 0x2, [{0x7, 0x4, "e4d9"}, {0x5, 0x10, "bdee870512d01952779e5ab12783"}, {0x7, 0xd, "b633c5a82851670c5f824d"}, {0x5, 0xa, "8fc621ced69bd372"}, {0x1, 0xb, "cf372495c6a6afd311"}, {0x1, 0x2}, {0x5, 0x9, "9375ca0a5b1139"}, {0x2, 0xe, "2bd9c1e858d7cc8154ccb3ea"}, {0xc6943a1488decff4, 0x8, "619663837f8d"}, {0x1, 0xd, "6c8702bcb7a2796af0823e"}]}, @timestamp_prespec={0x44, 0x14, 0x6c, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010101, 0xf}]}, @noop, @end, @cipso={0x86, 0x36, 0xffffffffffffffff, [{0x0, 0xf, "f25c8b43768a06ca64fd6ac12a"}, {0x1, 0x2}, {0x0, 0x11, "01ec702898677bc833e08f9b60caa9"}, {0x0, 0x2}, {0x7, 0x6, "b41d4ea8"}, {0x4, 0x6, "0795d443"}]}]}}}}}) fstat(r0, &(0x7f00000003c0)) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000001a00)) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)={0x1168, 0x5e, 0x1, 0x0, 0x25dfdbfc, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x114c, 0x1, 0x0, 0x1, [@nested={0x1146, 0x2, 0x0, 0x1, [@nested={0x23, 0x64, 0x0, 0x1, [@generic="37da3ae44df5de99f1f2f231543c044e5a4c453e4cb20ecbe56363ebe0dd53"]}, @nested={0x1024, 0x9b, 0x0, 0x1, [@nested={0x18, 0xff, 0x0, 0x1, [@nested={0x4, 0x5e}, @nested={0x4, 0x14e}, @nested={0x4, 0xcc}, @typed={0x8, 0xe6, 0x0, 0x0, @uid=r3}]}, @generic="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", @typed={0x8, 0x12c, 0x0, 0x0, @uid}]}, @typed={0xc, 0xde, 0x0, 0x0, @u64=0x3}, @generic="e8f726c9f5cd9243f1c0b7543f7859821fd8aa2f1eb3e6f76d088cfb27246d1cc04ddb200bb3498812c79dd00d9283e06e2e819291ca5a86df7333fcb72fe76574bacd833ca98ecf94cc7ce796757aeea1f1e6ffe35ce622fe1393e569fc27c72b054ae3e0e3b76b098eab505191c7a0fed0522ad4769ec3962b4f22396d1ce7fd0ae0ac0a02fd464eca591e348ed36814e1b1261ecec0ba1159cddafccdb066edd4ba1b8b7a16c2563314926d77b092151bf16ddf700364bdf19970d2458c996508b70bf9abab6c28372e7ac7677a166116c86632f16b1ed725581af6589ba34bd4497b1d15", @typed={0x8, 0x16, 0x0, 0x0, @ipv4=@remote}]}]}]}, 0x1168}], 0x1}, 0x0) r4 = socket(0x80000000000000a, 0x80000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x238, 0x278, 0x278, 0x238, 0x278, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @empty, [0xff000000], [0x0, 0xef72ed7253be3fc7], 'veth0_to_bond\x00', 'vlan1\x00', {}, {}, 0x88, 0x2, 0x0, 0x40}, 0x0, 0xf4, 0x114, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}, @common=@srh={{0x2c}, {0x1d, 0x3, 0x5, 0x8, 0x8, 0x10, 0x2a10}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @remote, [0x0, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'macsec0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x67, 0x8, 0x2, 0x2b}, 0x0, 0xdc, 0x124, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x3f0, 0x0, 0x1000, {0x9}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'geneve0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x35c) 5m16.834863164s ago: executing program 34 (id=1323): r0 = socket$inet(0x2, 0x800, 0x80000001) getsockopt$inet_buf(r0, 0x0, 0x24, &(0x7f0000000000)=""/192, &(0x7f00000000c0)=0xc0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_open_procfs$namespace(r2, &(0x7f0000000180)='ns/mnt\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f00000001c0)) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000200)=0x7, 0x4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@new_dev={0x4, 0xb1a, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x31}}}, &(0x7f0000000300)=0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) r8 = syz_io_uring_setup(0x15d2, &(0x7f0000000400)={0x0, 0xe920, 0x0, 0x3, 0x188}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) r9 = syz_open_dev$ublk_chdev(&(0x7f00000007c0), r1, 0x14001) syz_ublk_setup_queues(0xffffffffffffffff, r5, &(0x7f0000000340)={0x0, 0xd64e, 0x400, 0x3, 0x1e2}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaba8, 0x100, 0x3, 0x380}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x71d1, 0x200, 0x3, 0x11d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd9, 0x4, 0x1, 0x35b, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfe1, 0x2000, 0x3, 0x20b, 0x0, r8}}], 0x4, &(0x7f0000001800)={0x2e, 0x16, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x402, 0x0, &(0x7f0000000800)=@buf_4k="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"}}, &(0x7f0000001880)) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000018c0)={'bridge_slave_0\x00', @remote}) r10 = openat$ttyS3(0xffffff9c, &(0x7f0000001900), 0x200000, 0x0) ioctl$TCSETS(r10, 0x5402, &(0x7f0000001940)={0x6, 0x7ff, 0x5, 0x1, 0xf, "7fc4aad720b9a3aeaac7bee7f87caef9fb20dc"}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000001980)={0x3, 'veth0_virt_wifi\x00', {0xcc}, 0xca1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000019c0)) ioctl$TCSETS(r10, 0x5402, &(0x7f0000001a00)={0x0, 0xc5043cd, 0x101, 0x0, 0x7, "a0de9dfe59f0eaae0219d3d5334bde83c656ef"}) openat$pidfd(0xffffff9c, &(0x7f0000001a40), 0x4800, 0x0) r11 = openat$hwrng(0xffffff9c, &(0x7f0000001a80), 0x10000, 0x0) ioctl$UI_SET_EVBIT(r11, 0x40045564, 0xf) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r12, 0xf50f, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000001ac0)={0xe, 0x4, 0x0, 0x0, 0xf, "1c541f124d4341dd53d81cbf8559900b3cee4d", 0x1}) ioctl$TCSETSW2(r11, 0x402c542c, &(0x7f0000001b00)={0x0, 0x7, 0x1, 0x6, 0xfc, "be06230356efc901ba077a6eda9092f84707a6", 0x8, 0x6b19}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001b40)=0xffffffffffffffff, 0x4) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f0000001b80)={0x80}) socket$kcm(0x29, 0x7, 0x0) connect$netlink(r11, &(0x7f0000001c40)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc) ioctl$DVB_DVR_DMX_EXPBUF(r6, 0xc00c6f3e, &(0x7f0000001cc0)={0x4}) 4m44.740425785s ago: executing program 35 (id=1543): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5407000044000701fefffffffcdbdf25037c0000040045803c0701"], 0x754}}, 0xc000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4d, 0x0, 0x0) unlink(&(0x7f0000000180)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='o)', 0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) timer_gettime(r5, &(0x7f0000000080)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x2) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs={0x40046304, 0x4}], 0x0, 0x0, 0x0}) dup3(r9, r8, 0x80000) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000500)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) lseek(r0, 0x851, 0x0) 4m32.631109538s ago: executing program 36 (id=1610): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xa00, 0x280, 0x1ffd, 0x3e00, 0x1, 0x0, {0x0, 0x9}, {0x34e, 0xffffffff, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x2, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0xff8e, 0x4, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}) 4m31.584981055s ago: executing program 37 (id=1612): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) 4m28.951465765s ago: executing program 8 (id=1643): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getcwd(0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x6c800) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='1', 0x1) (fail_nth: 2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r4, &(0x7f0000000580)="00000000000000000000000000ba4c5975103ec48cdd60da233918ec1706a66556c2e94a99c387873189cc170dbe8cd238752665a9e5626b0881e5b9ec990b381274e83a65c26824cfc2b7daae42c5b72dc260560e260372b3f1a75fd58b290288e1d15b6fd3a6a826184039c276d2bb0d7190d3ae0301dff77ecca8f33d5cb9f47217e00855784a175c18b4f311581a44509958b4f4bc9944a5f4198527d8596631df76fda7bc2fca006e4d04c1d478fd099d5a0e1d74c217af1b79d350d3619a67f4e75043a125c777ef830000000000000000", 0xd4) close(r4) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000000)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0xfb, 0x5}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000880000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x8, r5}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)}, 0x45) setsockopt$sock_attach_bpf(r6, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmsg$unix(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) sendmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="e7e69973a058a8da2a31a523b633bfd9aad04f52e624268cca40b894d3cafffe900906befd", 0x25}], 0x1, 0x0, 0x0, 0x2618b535fcd97791}, 0x885) clock_nanosleep(0xa5cf412ef679adbb, 0xfffffdfc, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1100000004000000040000000010"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r9}, 0x38) 4m27.928292201s ago: executing program 8 (id=1644): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x6d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x83}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000690030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x50, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="08000800010105000200082201000097002400650000f8219078ac1494aa7f0000014ea14e2404019078e047185108b2b7d8"], 0x32) close(r1) 4m26.806967339s ago: executing program 8 (id=1650): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x32}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x4b, 0x10001, 0xfffffffb, 0x1, 0xffffffffffffffff, 0x2000, '\x00', 0x0, r0, 0x2, 0x7}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f00090027bd6a000000000004"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x80, 0x4, 0x54, 0x5, @local, @mcast1, 0x700, 0x20, 0x101, 0x1}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x1, 0x38775951944642b9, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x108d41, 0x0) write$FUSE_ENTRY(r9, &(0x7f0000000340)={0x90, 0x0, r6, {0x2, 0x0, 0xa, 0x5, 0x800, 0xcc, {0x2, 0x6, 0x27, 0x5, 0x4, 0x4, 0x5, 0x7fffffff, 0xf5, 0xc000, 0x9, r7, r8, 0x6, 0x3e}}}, 0x90) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r10, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {0x0, 0x3, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x4e24, @rand_addr=0x64010102}}}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610438000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=@newpolicy={0x158, 0x13, 0x1, 0x70bd28, 0x25dfdbfd, {{@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e21, 0x3, 0x4e23, 0x3, 0xa, 0x80, 0x20, 0x0, r4, r7}, {0x0, 0x26, 0x7fff, 0x0, 0x2, 0x9ed9, 0x200, 0x2}, {0x4, 0x2, 0x7e464b2a, 0x6}, 0xffffffff, 0x6e6bb2, 0x0, 0x1, 0x3, 0x1}, [@algo_aead={0x74, 0x12, {{'aegis256-aesni\x00'}, 0x140, 0x100, "1c3bfb92751f5b4f21a9edbf6b9ef6b491b2202e159093ed6ff0b364872e982850e049fc273762a5"}}, @address_filter={0x28, 0x1a, {@in6=@remote, @in=@private=0xa010100, 0xa, 0x2}}, @tfcpad={0x8, 0x16, 0x1ff}]}, 0x158}, 0x1, 0x0, 0x0, 0x40800}, 0x8006) recvmsg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) 4m26.585119183s ago: executing program 8 (id=1653): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) fsopen(0x0, 0x0) (async) r1 = fsopen(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x4e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x450, 0x240, 0x240, 0x450, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@unspec=@mark={{0x2c}, {0x400, 0x4}}, @common=@inet=@recent0={{0xf4}, {0x20000000, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x2, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xbb02, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x540) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r6, 0x7aa, &(0x7f0000000200)={{@my=0x1, 0x4}, 0x3, 0x8}) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0xffffffffffffff2c) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}}, 0x4000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000280)=@sr0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='xfs\x00', 0x400080, &(0x7f00000001c0)='di\xa3\x88\xb5vd') 4m26.039093937s ago: executing program 8 (id=1658): syz_emit_ethernet(0x176, &(0x7f0000000500)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x140, 0x3a, 0x0, @private1, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @loopback}, [@dstopts={0x8, 0x1f, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x80, 0x0, [0x2, 0xd1e, 0xff, 0x3]}}, @jumbo={0xc2, 0x4, 0xfffffd50}, @generic={0x1, 0xb, "7e01494e4a0f2dd2992840"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x0, 0xb8, "c6e2885d457e69de13a38eaeb3c1f657823c5077200d616b76d42c641c01d550814d0d1aa90c85f16371aa32debb837c4bd770dd4d94a510fa6b136cb3eb612f137624c3120cd06a0426d1fc1bb8881f80097429c54b166b73747c259536d4f690ebc8a1020ccebb19c3cc288ca1758ea848c5887013f9d18a7acbaa20861b75350262d83d429459b38972233e3e063b8a6cc38bac563d0cbd9c8012c54aea73453b50cd80124e668e0e2aa4d0fdbeaf127d7f4fa6b13f09"}, @enc_lim]}, @fragment]}}}}}}}, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) read(r0, &(0x7f0000000300)=""/172, 0xdc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = epoll_create1(0x0) close(r3) read$FUSE(0xffffffffffffffff, &(0x7f0000001300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r0, 0x26, &(0x7f0000003340)={0x2, 0x0, 0x9, 0x10001, r4}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffff, 0xfff3}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x200410d1}, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000004c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) 4m25.736408679s ago: executing program 8 (id=1659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0xb85606ff292e961, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x4, 0xca0, 0xfffa}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="aefdda9d040000005a90f57f07703aefeef64ebbee07962cff772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f00000000c0)="530000002412ffa0273b7809ffffff0f945e44670c8e5300000000200000000000000000a55991b8f7d9ea5761cfc05bdc12c22913a248d9fc8fae5638e158ccb3db91fa10748c1427761af70d62f728303bcba7113b5c0d", 0x58}], 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) recvmsg$can_j1939(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000700)={0x0, 0xfffffffffffffffd, 0x7f, 0x3, @scatter={0x5, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/24, 0x18}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000400)=""/198, 0xf3}, {&(0x7f0000000400)}, {&(0x7f0000000840)=""/262, 0xfa}]}, &(0x7f0000000580)="08b46b074d9be0f212f021cb48d3a664c00cd0043b0696ab5f0c2e4f15b339c3cb9934d62f300c7d30b800cc431678c285", &(0x7f00000005c0)=""/225, 0x1fd, 0x4, 0x1, &(0x7f00000006c0)}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x2, 0xb0b, 0x52}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0xf6ae, 0x0, 0x2, 0xffa, r6}, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000340), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000100)={0x0}) r8 = openat$hpet(0xffffff9c, &(0x7f0000000000), 0x103000, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$DRM_IOCTL_SET_MASTER(r7, 0x641e) sendto$inet6(r2, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) 4m10.748445063s ago: executing program 38 (id=1659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0xb85606ff292e961, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x4, 0xca0, 0xfffa}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="aefdda9d040000005a90f57f07703aefeef64ebbee07962cff772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f00000000c0)="530000002412ffa0273b7809ffffff0f945e44670c8e5300000000200000000000000000a55991b8f7d9ea5761cfc05bdc12c22913a248d9fc8fae5638e158ccb3db91fa10748c1427761af70d62f728303bcba7113b5c0d", 0x58}], 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) recvmsg$can_j1939(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000700)={0x0, 0xfffffffffffffffd, 0x7f, 0x3, @scatter={0x5, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/24, 0x18}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000400)=""/198, 0xf3}, {&(0x7f0000000400)}, {&(0x7f0000000840)=""/262, 0xfa}]}, &(0x7f0000000580)="08b46b074d9be0f212f021cb48d3a664c00cd0043b0696ab5f0c2e4f15b339c3cb9934d62f300c7d30b800cc431678c285", &(0x7f00000005c0)=""/225, 0x1fd, 0x4, 0x1, &(0x7f00000006c0)}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x2, 0xb0b, 0x52}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0xf6ae, 0x0, 0x2, 0xffa, r6}, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000340), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000100)={0x0}) r8 = openat$hpet(0xffffff9c, &(0x7f0000000000), 0x103000, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$DRM_IOCTL_SET_MASTER(r7, 0x641e) sendto$inet6(r2, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) 3m12.93537379s ago: executing program 9 (id=2147): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$unix(0x1, 0x2, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRES16=r2, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES8=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@bloom_filter={0x1e, 0x8, 0x4, 0x7, 0x4400, r3, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x1}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000072000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095ad00000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000000000"], &(0x7f00000001c0)='GPL\x00', 0x80000001, 0x7e, &(0x7f0000000900)=""/126, 0x41000, 0x0, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000a00)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0xb, 0xf, 0x7f}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000b00)=[r3, r5], &(0x7f0000000b40)=[{0x4, 0x5, 0xf, 0x5}, {0x3, 0x1, 0x3, 0x7}, {0x5, 0x3, 0xd, 0x9}, {0x3, 0x5, 0xc, 0x6}, {0x5, 0x2, 0x2}, {0x2, 0x3, 0xd, 0xc}], 0x10, 0x3}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r6, r5}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0xe80, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x64040200) socket$kcm(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="b4", 0x1}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) 3m12.930280683s ago: executing program 9 (id=2152): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) mq_notify(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x40) socket$inet_udp(0x2, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x373}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x80, 0xffffffff, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x3, 0x12e, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x40000, 0x2, 0x36b}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r6, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r10, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x1}) 3m12.769845801s ago: executing program 9 (id=2153): syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e8901fc03010902120001085440010904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000780)={&(0x7f0000000740)=[{0x0, 0x8029, 0x0, 0x0}], 0x1}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f00000011c0)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3m11.921493482s ago: executing program 9 (id=2160): mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5d2af6636f4b8c006970000000b92b0400000000003c000200737956f0290500000000200000000000000500050003000000054000e3000000bcbebf48d8045ff7be823d5b41f8d35057f20abbdbd748e9a7260a43a2d0e0b2d98963e1f256c409fe4bd8dddddee654cc615320948e17d9104db9d8d59eabfd725474166fdae80000000000000000641f5bbd120000000000000000000000000000a82c1a9683ec4f3b3d029d3d13fa84c367eadada56a9e9b0a071a7ad6cb55c951f093aafc9c888"], 0x50}, 0x1, 0x0, 0x0, 0x86}, 0x80) mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000500)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffff9c, &(0x7f0000000800)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0', 0x1) r3 = openat(0xffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101401, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x0) ioctl$VIDIOC_S_FBUF(r5, 0x402c560b, &(0x7f0000000100)={0x22, 0x50, 0x0, {0x5, 0x8000, 0x3631564e, 0x4, 0x20000000, 0x0, 0x0, 0x7cf7}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x6, 0x4, 0x100, 0x2, 0x540000, r4}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000101a0100000a14000000090a010400000000000000000700000014000000020a47bf64960102000000000000000000000000140000001000010000000000000000000084000a0000000000000000000095132d5c6b6ad6385a92"], 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, 0x1, 0x6, 0x2, 0x100, 0x4, 0x86020086, r8}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) 3m11.837268272s ago: executing program 9 (id=2162): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0xfffffffe}, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = openat$cdrom(0xffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$CDROMREADALL(r3, 0x5318, &(0x7f0000000440)) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r4 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ptrace(0x10, r4) (rerun: 32) ioprio_set$pid(0x1, r0, 0x2007) (async) eventfd(0x6) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x1d6f4194, 0x8, 0x3) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async, rerun: 32) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x11, 0x0, 0x1, [@generic]}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (rerun: 32) 3m11.380425836s ago: executing program 9 (id=2170): syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f00000000c0)) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x800, 0xfff3}}}}, 0x11) 3m11.216598942s ago: executing program 39 (id=2170): syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f00000000c0)) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x800, 0xfff3}}}}, 0x11) 2m31.295927082s ago: executing program 3 (id=2419): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x8204091, 0x0, 0xffffffffffffff0c, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x38d}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m31.113955102s ago: executing program 3 (id=2421): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x3f00, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0x48, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 2m30.86022469s ago: executing program 3 (id=2423): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) mq_notify(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x40) socket$inet_udp(0x2, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x373}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x80, 0xffffffff, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x3, 0x12e, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x40000, 0x2, 0x36b}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r9, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x1}) 2m29.831315379s ago: executing program 3 (id=2434): mkdir(&(0x7f0000000e00)='./proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./proc_dir\x00', &(0x7f0000001100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc_dir/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r1, r0}}, 0x18) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x9) ioctl$DRM_IOCTL_VERSION(r6, 0xc0246400, &(0x7f0000000740)={0x7fff, 0x899d, 0x1ff, 0xfffffffffffffeb7, &(0x7f0000000500)=""/233, 0x86, &(0x7f0000000600)=""/134, 0x7b, &(0x7f00000006c0)=""/123}) write$binfmt_misc(r5, &(0x7f0000000880)="7ccdfb172d0a4fbc3b38c15576534b5c38aabd6e98f24ee9abe5727b705983e1078f498fc50c666ddb07bda5fdd43d649090c96247d4b28fa55c9cf6e524eec040fc56eb67eaaf0f389a7f42d62d6bfbd1883e31d2b1acb8a3b9bb9b941466d242e11643902d3393a5114b9aaf75728ab44b5c16b748cd9a9dab6640880f582f4dea2aa9faf0790d983b7f60b223f0c0c74e7d71ddfc6dfa85a331adccbc913efcf00073724a51e13a7b9bc98974e2db2e425623a072ea00"/196, 0xc4) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x8000000000000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xa2d2becd47f2686e}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'ip6gre0\x00'}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES8=r3, @ANYRES64=r0, @ANYRES16=0x0, @ANYRES8], 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x8000) write(r2, &(0x7f0000000b00)="8a18df15722eedeb8b10d7", 0xb) 2m28.06413358s ago: executing program 3 (id=2444): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x288082, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) r2 = fanotify_init(0x4, 0x40000) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000000)="2e68ea6c2f7cb2e0", 0x8}], 0x1) syz_emit_ethernet(0x109, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) capget(&(0x7f0000000040)={0x20071026}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/190, 0xbe}], 0x1, 0x14a, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x58a6, 0x7ff, 0x7fffffc}, 0x10) dup3(r6, r5, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) 2m27.110356865s ago: executing program 3 (id=2449): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010023bd70a664dbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) sendmsg$NFT_BATCH(r2, 0x0, 0x4004840) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x134}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) r7 = socket$kcm(0xa, 0x7, 0x106) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r7, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) 2m11.707914416s ago: executing program 40 (id=2449): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010023bd70a664dbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) sendmsg$NFT_BATCH(r2, 0x0, 0x4004840) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x134}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) r7 = socket$kcm(0xa, 0x7, 0x106) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r7, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) 1m35.598074746s ago: executing program 4 (id=2822): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6}, 0x10) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6}, 0x10) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="100000000400000004000000020000008f7020e600", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) pipe2(&(0x7f0000000c40), 0x4800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @loopback}, {0x2, 0xfffc, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @loopback}, {0x2, 0xfffc, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400000, 0x16) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000140)={0x10}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xfff3}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1m35.30047503s ago: executing program 4 (id=2824): r0 = socket(0x26, 0x80805, 0x452) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000240), 0x801, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x541b, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x6, 0x8, 0x10001, 0x8, 0x8002}, &(0x7f0000000100)=0x98) r2 = socket(0x18, 0x3, 0x0) sendmmsg$inet(r2, &(0x7f0000002400), 0x0, 0xc000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x8942, &(0x7f0000000140)={'ip6_vti0\x00', @ifru_ivalue=0x1}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000003c0)={r3, 0x0, 0x20}, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone3(&(0x7f0000000400)={0x2b130a480, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x58) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}}, 0xb4}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="80010000100033460000000002000000ac141400000000000000000000000000e000000000000000000000000000000000000000000068000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2001000000000000000000000000000200000000320000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001200616567697332353600"/312], 0x180}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r3, 0x1}, 0x8) 1m35.130668741s ago: executing program 4 (id=2827): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x4, 0x4}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4, 0x3e8}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xd, &(0x7f0000001180)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000001280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000022c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000002340)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m34.445527668s ago: executing program 4 (id=2830): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x8, 0x8, 0x8, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x44) (async, rerun: 32) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e0"], 0x4) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) (async) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x207, 0x80742, 0x0, 0x32315659, 0x2, 0x490, 0x1, 0xfffffffd, 0xfeedcafe, 0x3, 0x0, 0x1}}) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) (async, rerun: 64) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) (async, rerun: 64) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000540)='.\x00', 0x850003d1) (async) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) openat$snapshot(0xffffff9c, &(0x7f0000000480), 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, 0x0, 0x0) 1m34.205112387s ago: executing program 4 (id=2833): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000380)={0x0, 0x4, 0x0, 0x0, 0x10, 0x10}) syz_open_dev$MSR(&(0x7f0000000100), 0x3, 0x0) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) 1m33.964486641s ago: executing program 4 (id=2836): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r1, @ANYRES16=r1, @ANYBLOB="040026bd7000fcdbdf250f000000080031000200000008003400000000", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8841}, 0x4008841) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="0433000e8633d7bc778e05a16a00ce3e7911a5e0b8420de1e633422b514aeb5ab55ac73385d2db288b377d20819100e12b14715d62114a49facbbfae66eb0acd00081860cdb198c980000000000000000f3e29b8ea067d53b5ba2421a7ce2d8aca598a31679fb1500d19978cce071ab5df12be34ca8cdbecdd42bc8f2fae8e1fa7558f56f86742ec4ec04037ca3c16adf52258780a506a7486645c312aa98e9f8c73c6"], 0xd) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000600)={{0xa, 0x4e22, 0xffff26c0, @loopback, 0x28}, {0xa, 0x4e22, 0x5, @mcast1}, 0x1, {[0x8, 0x8, 0x101, 0x9, 0x1, 0x183c, 0x8, 0x6]}}, 0x5c) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000206050000000000000000000000000012000300686173683a0565742c706f72740000000500010006000000050005000300000005000400000000000900020073797a30000000000c000300686173683a697000"], 0x58}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000084) syz_usb_connect(0x5, 0x46, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)='^', 0x1, 0x44090, &(0x7f0000004ff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) listen(r4, 0xda90) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x8, 0x7, 0x4, 0xf8b, 0x1, 0x80}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7c2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x6}, 0x48) 1m18.948925427s ago: executing program 41 (id=2836): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r1, @ANYRES16=r1, @ANYBLOB="040026bd7000fcdbdf250f000000080031000200000008003400000000", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8841}, 0x4008841) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="0433000e8633d7bc778e05a16a00ce3e7911a5e0b8420de1e633422b514aeb5ab55ac73385d2db288b377d20819100e12b14715d62114a49facbbfae66eb0acd00081860cdb198c980000000000000000f3e29b8ea067d53b5ba2421a7ce2d8aca598a31679fb1500d19978cce071ab5df12be34ca8cdbecdd42bc8f2fae8e1fa7558f56f86742ec4ec04037ca3c16adf52258780a506a7486645c312aa98e9f8c73c6"], 0xd) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000600)={{0xa, 0x4e22, 0xffff26c0, @loopback, 0x28}, {0xa, 0x4e22, 0x5, @mcast1}, 0x1, {[0x8, 0x8, 0x101, 0x9, 0x1, 0x183c, 0x8, 0x6]}}, 0x5c) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000206050000000000000000000000000012000300686173683a0565742c706f72740000000500010006000000050005000300000005000400000000000900020073797a30000000000c000300686173683a697000"], 0x58}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000084) syz_usb_connect(0x5, 0x46, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)='^', 0x1, 0x44090, &(0x7f0000004ff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) listen(r4, 0xda90) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x8, 0x7, 0x4, 0xf8b, 0x1, 0x80}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7c2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x6}, 0x48) 1m3.507209677s ago: executing program 5 (id=2993): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x401}]}, 0x44}, 0x1, 0x0, 0x0, 0x40008}, 0x10) setns(r3, 0x24020000) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x1004c40, 0x0) 1m3.418054112s ago: executing program 5 (id=2994): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0xfd, 0x6, 0x0, 0x39, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2000, 0xba08}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0xfd, 0x6, 0x0, 0x39, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2000, 0xba08}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getpid() (async) r3 = getpid() socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040021}, 0x30) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x188, r5, 0x10, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x10) 1m3.270060137s ago: executing program 5 (id=2995): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f0000000e80)={{[0x0, 0xffffffff, 0x3, 0x2]}, 0x0, 0x2, 0x22, 0x0, &(0x7f0000000ac0)=[{{@align=0x7, {0xbc, 0x6, 0x4, 0x80}}, 0x4, 0x0, '0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k'}, {{@_ha_fsid={[0x9, 0xffffffff]}, {0x10, 0x2, 0x7, 0x66}}, 0x627b9f96, 0x0, 'posixacl\x00'}, {{@align=0x81, {0x6, 0xa, 0x6, 0x401}}, 0x7ff, 0x0, '}/\x00'}, {{@align=0x1, {0x8000, 0x1ff, 0x8}}, 0xb, 0x0, '0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k'}, {{@_ha_fsid={[0x4, 0xe]}, {0xd2d6, 0x4, 0x10, 0xfffffffffffffffe}}, 0x6000000, 0x0, '#*:@\x00'}, {{@_ha_fsid={[0x7, 0x1de]}, {0x8, 0x5, 0x1, 0xffffffff}}, 0x4, 0x0, '/@\x00'}, {{@_ha_fsid={[0x5, 0x800]}, {0x3, 0x1, 0x800, 0xeb}}, 0xa8c, 0x0, 'posixacl\x00'}, {{@align=0x7, {0xfff8, 0xffff, 0x9, 0x1ff}}, 0x4, 0x0, '}/\x11,+}^){^.).#+\xd1{\x00'}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000000)='posixacl\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000002c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400c1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb) 1m3.218626649s ago: executing program 5 (id=2996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000100)={r0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x32, 0x0, 0xffffd000) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000080)={r9}) syz_fuse_handle_req(r2, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r4, r5, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r6, &(0x7f0000000100)=""/134, 0x86) syz_fuse_handle_req(r2, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x50, 0x0, 0x4000000000200, [{0x3, 0x3, 0x8, 0x9, 'group_id'}, {0x0, 0xb66, 0x2, 0x496, 'fd'}]}, 0x0, 0x0, 0x0, 0x0}) getdents64(r6, &(0x7f0000000640)=""/193, 0xc1) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x1c, r1, 0x301, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x60}, @void, @void}}}, 0x1c}}, 0x44) syz_clone3(&(0x7f0000000080)={0x8690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) futex(0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1m2.984380667s ago: executing program 5 (id=2998): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000002ec0)='./binderfs/binder-control\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000000)={'binder0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50583}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @private=0xa010101}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400004c}, 0x0) 1m2.671869592s ago: executing program 5 (id=2999): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0xffffffffffffffff) prlimit64(r0, 0xf, &(0x7f0000000200)={0xc, 0x58}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000000300)={r1, 0x5, 0xc9e8, 0x2}) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000340)) mq_notify(0xffffffffffffffff, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) fcntl$setlease(r5, 0x400, 0x1) r6 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0r1, 0x5, 0xc9e8, 0x2}) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000340)) mq_notify(0xffffffffffffffff, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) fcntl$setlease(r5, 0x400, 0x1) r6 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) openat$sw_sync_info(0xffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) r5 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = dup(r4) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000040)=@x86={0x5, 0x3, 0x6, 0x0, 0x8, 0x7, 0xf9, 0x0, 0x4, 0x9, 0x48, 0x6, 0x0, 0x80000003, 0x1, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x1f}) epoll_pwait(r1, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000010404000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="38410000440b00002400128009000100626f6e640000000014000280050001000100000008000200", @ANYBLOB="f7"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x125b00, 0x84) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x9}, 0x0) syz_ublk_setup_io_uring(0x698b, &(0x7f00000002c0)={0x0, 0xaf67, 0x200, 0x0, 0x3de, 0x0, r6}, &(0x7f0000000400), &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1}) 39.420329532s ago: executing program 0 (id=3191): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc0106442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r1, 0x0, 0x13) 39.350371815s ago: executing program 0 (id=3193): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3d, 0x0) r1 = syz_io_uring_setup(0x4b7, &(0x7f0000000380)={0x0, 0x5b62, 0x1000, 0x3, 0x1e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r5 = socket(0x18, 0x6, 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_BIND=@ipv4={0x38, 0x0, 0x0, r5, 0x0, 0x0}) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/mnt\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r6, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001c0020002abd7000fcdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0000440808000d004a0f0000060006004e200000060005000400000008000d00030200003356dc1ecf0c5879"], 0x44}}, 0x808d4) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="102300001000010425bb00000700000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000240)=0xb) ioctl$TCSETS(r8, 0x8924, 0x0) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000000c0)=0x40000003) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x80) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) close_range(r9, r9, 0x2) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_STD(r11, 0x40085618, &(0x7f0000000200)=0x320000) r12 = fanotify_init(0x4, 0x1000) fanotify_mark(r12, 0x1, 0x8000021, r10, 0x0) r13 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r13, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r13, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0xa, 0x100000}, 0x1c) readv(r12, &(0x7f0000000100)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1) openat$dir(0xffffff9c, &(0x7f0000000580)='./file0\x00', 0x4041, 0x148) 39.16965867s ago: executing program 0 (id=3194): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000400000008000000da00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000609d8d2b9266", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000002370000000000000e900"/28], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0xda00, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000070961c40e90f55dbfb690102c9030902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r2 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x200001) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000340)={0x1000, 0xe4c, 0xaa0, 0x4, 0x91e, 0x9, "bac870c5e617919972e583128157ba65", 0x2, 0x1, 0x5, 0x2, 0x4, 0x4, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, 0x0, 0x3261e) r4 = openat$drirender128(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x9842, 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r6, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000', 0x4b) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000240)=ANY=[], 0xfff5) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r5, 0xc0106441, &(0x7f00000000c0)={0x0, 0x0, 0x1a6c}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r5, 0xc0386447, &(0x7f0000000100)={{0x8, 0x8, &(0x7f0000000080)=[{0x81, 0x0, 0x40}, {0xa6}, {0x3, 0x0, 0xb}, {0x5, 0x0, 0xfffffffd}, {0x4, 0x0, 0x2}, {0x5, 0x0, 0x1}, {0x1, 0x0, 0xa}, {0xe6}]}, 0xe, 0x0, 0x3, 0x3, 0x0, 0xead7, 0x1, 0xb3, r7}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r4, 0xc028644b, &(0x7f00000002c0)={r7, 0x1, 0xc0000, 0x2, 0x5, 0x0, 0x9, 0x6}) r8 = socket$inet(0x2, 0xa, 0x6) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000640)={{0x2, 0x0, @dev}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000440)={&(0x7f0000000500)=[{0x8, 0x8201, 0x0, 0x0}], 0x1}) write(0xffffffffffffffff, &(0x7f0000000500)='ccgx-ucsi -x', 0xc) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000007000000ff0f000009000000000000008fe15edf7ba1e85b7ac055b8aa4e34144334090000000c9f4068977b942df73278a3105ada65b304d3c8fefa4dffff0000edffffffea541fad2b9dbf4edb27a2ff637880ed9eec6f219771277c61662dac8c46b68174044f26610461c001db1aaa8834ecbf4627f1d89332ba2c29b8a538e42b342ded4fe38de77594a555cd73252934e291e44b315935cc671d0000000000000004725965d60aa0c03e9e944b62aeb50f3e9b66f9c9fac7c3f3fe0f1aa80d4e9058389d689bb5a7af10b67a2d150e7b2a80d18dfee424c6ecf16eb9", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) 37.513389304s ago: executing program 0 (id=3212): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') lseek(r0, 0x300000002, 0xf5ffffff) 37.01991957s ago: executing program 0 (id=3217): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @initdev, 0x0}, &(0x7f00000001c0)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x1a, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7ff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x443}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x0, 0x2, 0xb, 0x9, 0x10, 0xfffffffffffffff0}, @exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ldst={0x1, 0x0, 0x0, 0x2, 0x6, 0x2, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000140)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41000, 0x1, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x1, 0x5, 0xfffffff9}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x0, 0x1, 0xf, 0xb}, {0x0, 0x2, 0xc, 0x7}, {0x3, 0x2, 0xf, 0x4}, {0x3, 0x1, 0xb, 0x1}, {0x3, 0x2, 0x2, 0x2}, {0x2, 0x4, 0xe, 0x5}, {0x5, 0x3, 0x9, 0x2}, {0x4, 0x2, 0xf, 0x6}, {0x4, 0x3, 0xf, 0xc}, {0x1, 0x5, 0xe, 0x2}]}, 0x94) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x2, {{0xa, 0x0, 0x0, @mcast1, 0xfc}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000580)={0x0, {{0xa, 0x4e1f, 0x7, @mcast1, 0xabdf}}, 0x1}, 0x90) 36.871701001s ago: executing program 43 (id=3217): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @initdev, 0x0}, &(0x7f00000001c0)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x1a, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7ff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x443}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x0, 0x2, 0xb, 0x9, 0x10, 0xfffffffffffffff0}, @exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ldst={0x1, 0x0, 0x0, 0x2, 0x6, 0x2, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000140)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41000, 0x1, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x1, 0x5, 0xfffffff9}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x0, 0x1, 0xf, 0xb}, {0x0, 0x2, 0xc, 0x7}, {0x3, 0x2, 0xf, 0x4}, {0x3, 0x1, 0xb, 0x1}, {0x3, 0x2, 0x2, 0x2}, {0x2, 0x4, 0xe, 0x5}, {0x5, 0x3, 0x9, 0x2}, {0x4, 0x2, 0xf, 0x6}, {0x4, 0x3, 0xf, 0xc}, {0x1, 0x5, 0xe, 0x2}]}, 0x94) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x2, {{0xa, 0x0, 0x0, @mcast1, 0xfc}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000580)={0x0, {{0xa, 0x4e1f, 0x7, @mcast1, 0xabdf}}, 0x1}, 0x90) 3.76044452s ago: executing program 2 (id=3522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x10}}, 0x14}}, 0x4004804) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000080)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002a396954811e1da39c00000008000300", @ANYRES32=r9, @ANYBLOB="04006c004e003300001c0600080211000000080211000000505050505050f2ff0006b10800060101010101010108033612a4096005852d1a00081001000000000000000d000f0002000000010002000000030000080026"], 0x78}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001100010000ff0f000000000007000000", @ANYRES32=r4, @ANYBLOB="80010000091004000c001a800800058004"], 0x2c}}, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x7a9}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r11, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x1c, r12, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) r14 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r14, 0x29, 0x19, &(0x7f00000000c0), 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) r15 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r15, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x4, 0x0}) 3.30077697s ago: executing program 6 (id=3528): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) close(0x3) r2 = socket(0x10, 0x3, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2}}, 0x20) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c82010000c0001000501"], 0x15) 3.30044186s ago: executing program 6 (id=3529): r0 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00001f5000/0x8000)=nil, 0x8000}, 0x3}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r1, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000c80)={0x0, 0x7, 0x0, [0x3, 0x0, 0x3, 0x1, 0x1], [0x80000000, 0x9, 0x8, 0x2fa, 0x3ff, 0x8, 0x7, 0x9, 0x7fff, 0x2, 0x5, 0x1d, 0xffffffff, 0x1, 0x3, 0xff, 0x8, 0x9, 0x1, 0x0, 0x6, 0x8, 0x9, 0x3, 0x15bfcf26, 0x1, 0x1, 0x242, 0x1, 0x2, 0x8, 0x1, 0x7, 0x5be, 0x3, 0xff, 0x7, 0x44, 0x7, 0x5, 0x6, 0x10, 0x80000001, 0x7, 0xb, 0x2, 0x8, 0x80000000, 0x3, 0x8, 0xfffffffffffffffe, 0x7, 0x3ff, 0xfffffffffffffff7, 0x1, 0x0, 0x4, 0x3, 0x0, 0x1, 0x8, 0x2, 0x2, 0xf9, 0x3, 0x7, 0x2, 0x2d01bfe6, 0x2, 0x11, 0x247682ff, 0x40, 0x8, 0x8d1, 0x6, 0xff, 0xd, 0x10000, 0x328000000000, 0x2, 0x5, 0x1, 0x79, 0x2, 0x0, 0xff, 0x6, 0xa89d, 0x200, 0x6, 0x5, 0x6, 0x84b, 0x4, 0x6, 0x9, 0x9959, 0x1, 0x401, 0x2, 0x4, 0x6, 0x1, 0xfffffffffffff675, 0x800, 0x5, 0x5, 0x4, 0x3, 0x3, 0x3, 0x8, 0xa, 0x1, 0x7, 0x9, 0x9, 0x5, 0x9, 0x1, 0xfe]}) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000900)={{0x9, 0x7, 0x0, 0x1, 0x2}, &(0x7f0000000600)=[{}, {}, {}, {}]}) 3.299485452s ago: executing program 2 (id=3532): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x83}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x2000000, 0x4008018}, 0x4000080) 3.295395024s ago: executing program 2 (id=3533): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], 0x0, 0x4a, 0xffffffffffffff57, 0x0, 0x80000000, 0x10000}, 0x28) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x201, 0x80, 0x20001, 0x0, 0x4, 0xc}, 0x1c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0xffffffffffffffde, 0x0, &(0x7f00000003c0)=[@request_death={0x400c630e, 0x3}, @free_buffer={0x40086303, r4}, @clear_death={0x400c630f, 0x2}, @request_death={0x400c630e, 0xffffffff}, @enter_looper, @exit_looper], 0x0, 0x0, 0x0}) r5 = dup3(r2, r1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0xffa6, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000007200010b2bbd7000fcdbdf250700000058ffb9590dfff201ff29585b080123389901facb5fb9add2893dbb29a643e8c8a1fc74", @ANYRES32=0x0], 0x18}}, 0x4040) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000569000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0xfffff7fd) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0xff3a, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000671000/0x3000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x3a780, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000040)={0x10000, 0xfec00000, 0x1, r10, 0x4}) ioctl$DVB_DEMUX_DMX_EXPBUF(r10, 0xc00c6f3e, &(0x7f0000000280)={0x8, 0x80000, r0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.959839182s ago: executing program 2 (id=3534): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) lstat(&(0x7f0000000380)='./file0\x00', 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="b805000000b98e0000000f01c1420fc7b463e5000000b9800000c00f3235010000000f30410f220566b88d008ed866b8e0008ee066baf80cb8e1fb4b8cef66bafc0cecf20f005700f30f1efdb97f0900000f32", 0x53}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x50000) 2.37024539s ago: executing program 1 (id=3538): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) 2.208789614s ago: executing program 1 (id=3539): syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @ndisc_ra={0x88}}}}}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000280)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 2.199573195s ago: executing program 1 (id=3540): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r8, r7, &(0x7f0000001b00)={0x0, 0xd050, 0x1, 0x2, 0x33c}, &(0x7f0000001b80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac2b, 0x40, 0x3, 0x12d, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a2, 0x20000, 0x0, 0x300, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1d7, 0x80000, 0x3, 0x3aa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x28c4, 0x2, 0x0, 0x1dc}, 0xffffffffffffffff}], 0x4, &(0x7f0000004040)={0x2e, 0x50, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r6, '\x00', {0x3, 0x693, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r8, r7, &(0x7f0000000700)={0x0, 0x7000000, 0x0, 0x0, 0x1de, 0x0, r1}, &(0x7f0000000800)=[{}, {}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) 2.117494891s ago: executing program 1 (id=3541): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0xfdffffff, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r3) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$dsp(r8, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24045091}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000069243279f92445cab5c9f940b4e32717e9549044fd98eb1ac224c8d9026595abb5802a4f16c4daad6bbb55363339cf55d1335", @ANYRES16=r2, @ANYBLOB="000829bd7000ffdbdf2501000000080002000100000014000c0020010000000000000000000000000001080008000400000008000700", @ANYRES32=r4, @ANYBLOB="0c0003000400000000000000080002000100000008000500ffffffff08000100", @ANYRES32=r6, @ANYBLOB="080004006401010005000d0002000000"], 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) 2.03972384s ago: executing program 2 (id=3542): r0 = socket$netlink(0x10, 0x3, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x1, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) shutdown(0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xf, 0xe, &(0x7f0000000200)=ANY=[], 0x0}, 0x94) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x13) sendto$packet(r1, &(0x7f00000001c0)="4abb09e698", 0x5, 0x40004, &(0x7f00000002c0)={0x11, 0x3, r2, 0x1, 0x5, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket(0x10, 0x803, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000440), 0x0, 0x204b01) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000000)=0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x20000003}) close_range(r7, r5, 0x0) r8 = socket(0x10, 0x803, 0x2) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES64=r3, @ANYRESHEX=r9, @ANYRESOCT=r3], 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000095) setsockopt$inet_tcp_int(r8, 0x6, 0x4, &(0x7f0000000180)=0x4764, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900010125bd7000ffdbdf25022080ccfd02c8060004000008001e0001000000"], 0x24}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) r12 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x20) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) 2.036923091s ago: executing program 1 (id=3543): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'syz_tun\x00', {0x2}}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x4, 0x1, 0x60, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x20, 0x0, 0x8}}) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket(0x15, 0x5, 0x0) r1 = syz_io_uring_setup(0x34bc, &(0x7f0000000200)={0x0, 0xc3b0, 0x800, 0x1, 0x82}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x8, 0x0, 0x91a, 0x3}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 1.859782284s ago: executing program 1 (id=3544): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r0, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x20004001) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) sched_setaffinity(r2, 0x8, &(0x7f00000001c0)=0x3) (async) sched_setaffinity(r2, 0x8, &(0x7f00000001c0)=0x3) sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x8) (async) sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x8) syz_open_dev$vbi(&(0x7f0000000380), 0x1, 0x2) (async) r3 = syz_open_dev$vbi(&(0x7f0000000380), 0x1, 0x2) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000240012800b00010067656e65766500001400028005000d000200000005000c20fd00000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.760337276s ago: executing program 2 (id=3545): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000000)='jffs2\x00', 0x0, 0x0) r0 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000140)={0x82000, 0x3c, 0x20}, 0x18) r1 = openat(r0, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)='0', 0x1}], 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[]) read$FUSE(r2, &(0x7f000000b0c0)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xa5) write$FUSE_INIT(r2, &(0x7f0000002280)={0x50, 0xffffffffffffffda, r3, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac3(0x0, 0x10f, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0x4, 0x1, 0x5, 0xff, 0x4}, 0x5, &(0x7f0000000440)={0x5, 0xf, 0x5}, 0x1, [{0x1e, &(0x7f0000000480)=@string={0x1e, 0x3, "57f70a3b325e8c7693469491d78f36ed3d71d070046aa8279f6b8ff6"}}]}) write(r1, 0x0, 0x0) 1.138371917s ago: executing program 7 (id=3549): r0 = openat$random(0xffffff9c, &(0x7f0000000000), 0x101040, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000003, 0x50, r0, 0xe1efd000) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r1, &(0x7f0000000040)='0123:ebcd4', 0xa) 1.059936141s ago: executing program 7 (id=3550): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000002007911c0000000000005000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000002007911c0000000000005000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) openat$ttyprintk(0xffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) r3 = openat$ttyprintk(0xffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x7fffffff, 0xd28b}}, './file0\x00'}) fgetxattr(r4, &(0x7f0000000280)=@random={'os2.', 'vxcan1\x00'}, &(0x7f0000000540)=""/150, 0x96) socket$inet(0x2, 0x3, 0x2) (async) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x20000) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x65) socket$key(0xf, 0x3, 0x2) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="021600000a0000000200000000000000080018000007a182"], 0x50}}, 0x0) (async) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="021600000a0000000200000000000000080018000007a182"], 0x50}}, 0x0) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x34, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x3}]}, 0x34}}, 0x0) sendmsg$sock(r0, &(0x7f0000000500)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 'bridge_slave_1\x00'}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)="8f66807e321c1ce5d8930935b499e065e4bed93a28e986daae470679262e86400b29758fae6f80f3db04b3b8ce99731bb19ec01c5a73597777e9eeb2419e8f719cfad2dfdfb4d0bed709f4705f403dc5701bdd3fa004ee81c80ae2eccedf3a2d9aa9057cdc18959ac4524ffccff4b370dfbe7f0baf2d48dcca59dacf3f52ae4122c11e5bd1281e4a4e16dffb32aeccf882a3d4bc6e33c4d4dbaa93403af6948ea70428ecc54313f2aebdb42db93ab2800e6f13faaa7e744df442f2d12b5797", 0xbf}], 0x1}, 0x20000000) 895.865563ms ago: executing program 7 (id=3551): mq_open(&(0x7f0000000280)='-.{\x00', 0x40, 0x104, &(0x7f0000000440)={0x9, 0xd78e, 0x5, 0x1}) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000ac0)=ANY=[], 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000060000/0x4000)=nil, 0x4000, 0x6, 0x110, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000300), 0xca, &(0x7f00000a9000/0x1000)=nil, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r4, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000580)="78000000180025d908ac042d303d5344684a584407b9409b14ffff00000204be04020506050f020409430005da34307c3682abcb61567c09003f000ce0100000000d008563fa1a09a168d0bf46d32345", 0x50, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000040)=0x2c1, 0x4) sendto$inet6(r4, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000240)={0xa, 0x5e1e, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1}, 0x1c) recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x3d}, 0xa24f}], 0x1, 0x40000000, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000ffffffff00000000000000000000000000000000000000000000ffffac14141e000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) unshare(0x62040200) shutdown(r5, 0x0) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000480)="68920d0c79c9bda2d4537be4319d00cb4ead6a37548ff2e3dc863db2db840017459d34afa86a285e3fb7758bb90492c353cf7a9ad11816a5e464dfc532c73e0cc933b421f3f3cb6a3b51b0da20409501101de13eb73d569f67b2b681c6edd4716d15407dd2881b1c37cd1887a020185a17f315a431d4c3f5d0bc7a658d7ab295d3ee49051fa8d9e7b6e670a685ccbd47709755dd90a7e3b34737945cfa1448a9fdf86be18c6fe44ff36db6ed", 0xac}], 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0xffffffffffffff8f, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 619.778285ms ago: executing program 7 (id=3552): rt_tgsigqueueinfo(0x0, 0x0, 0x11, &(0x7f0000002d00)={0x9, 0x3, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x1, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x10000005, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x202, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800001200000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) 520.422342ms ago: executing program 7 (id=3553): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt/file0\x00', 0x1ed) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/22/smp_affinity\x00', 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x400076, 0x484100) fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x1, 0x41) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x1, 0x4}) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x8) syz_open_dev$sg(0x0, 0x63, 0x40000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x2, &(0x7f0000000300)=0x2, 0x7797, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40041) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000002400)={0x5, 0x0, [{0x40000001, 0xe63, 0x3, 0x2, 0x20002df3, 0x106, 0x5}, {0xa, 0x4, 0x3, 0x8002, 0x27, 0x7, 0x3}, {0xb, 0x5, 0x1, 0xfffffff7, 0xfffffff9, 0x81f, 0x9}, {0x80000000, 0x222be, 0x0, 0xd, 0x3, 0x107fd, 0x6}, {0x6, 0xc28, 0x3, 0xfffffffc, 0x5, 0xae, 0xffff}]}) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000080)=@phonet={0x23, 0x8, 0x0, 0xf}, 0x80, 0x0}, 0x8000) 384.999962ms ago: executing program 6 (id=3554): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r0, &(0x7f0000000200)={0x0, 0x1460, 0x8, 0xfffff001, 0xb6}, 0x0, 0x4, &(0x7f0000000b00)={0x2e, 0x42, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) r1 = syz_io_uring_setup(0x71a6, &(0x7f0000000000)={0x0, 0x6503, 0x4000, 0x3, 0x61}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_ublk_setup_io_uring(0x239f, &(0x7f00000001c0)={0x0, 0xf9d4, 0x800, 0x1, 0x35c}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r4, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) syz_ublk_setup_queues(0xffffffffffffffff, r0, &(0x7f0000000140)={0x0, 0x28c0, 0x800, 0x3, 0x273, 0x0, r1}, &(0x7f0000000300)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb62c, 0x49aab652de84d93e, 0x1, 0x226}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x58ae, 0x8000, 0x1, 0x1c4, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44aa, 0x800, 0x3, 0x174, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4a0, 0x200, 0x1, 0x3d2}}], 0x4, &(0x7f0000001580)={0x2e, 0x25, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, r5, '\x00', {0x3, 0x8a3, 0x0, &(0x7f0000000580)=@buf_4k="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"}}, &(0x7f0000001600)) 320.37483ms ago: executing program 6 (id=3555): mkdir(&(0x7f0000000300)='./bus\x00', 0x101) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xf, &(0x7f0000001040)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) chdir(&(0x7f00000003c0)='./bus\x00') ftruncate(r0, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) 319.188978ms ago: executing program 7 (id=3556): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) (async) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="a004000000"]) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002640)={0x2020}, 0x2020) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @loopback, 0x0, "c6c0e6ed8755b5dc4e0e000c58ea00000000000600", 0x22, 0xfffffffe, 0x2, 0x8001}, 0x3c) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f0000000340)="b2d311af94b883a7c917af570ae7b1e843a0a788f69d7891ade96769393efc8056a6f002e30c8d84568d737b56856a562c77400d2763599c42c39c2c346641f570afdc53d009685de5793fa1d5eece360b7f7647069f8c0e53a28126b06a6b5e797d92fc70f0bbf7cf41ac7523191c55decb8e836ebd8eba368cc270864fb703f797122b8690d189cd617620b20d0a9b8796") (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) (async) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) (async) r5 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCGLED(r5, 0x80284511, 0x0) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x185b2000) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80100, 0x9c) (async) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x54) setsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) connect$packet(r7, &(0x7f00000003c0)={0x11, 0x11, 0x0, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002280), 0xffffffffffffffff) (async) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000002e00090027bd700000000000040000004500118031f9e05e2f826cfc31dc2af824704f63dac994ce01dc7224e5479795b50d9015743a8b755e02e490bdfc3da898257de5b8996dbc932b5009df63b75f105c53ead0000000acc652da811ec41bc62fcd1ece064007233e937838ec6dd310243bb25df3f3da4035c973b36db7eee41680503e9a85319b6cde33bdcbed0f57b013b4c015dd521107a0df866951fe5769bce047be17f072233a9eb9244fd8d9ecd9ec5c3acf4bf2d9cd7209000000c3eb0e5d2c2ae6227b44019352854167792e1dacdee31a98d2591ced646e3ae8"], 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x24000880) 207.492429ms ago: executing program 6 (id=3557): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(0xc9, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x18, r3, 0x1, 0x7, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee00, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0xffffffffffffffff, 0x100000001, 0x4, 0x100fff}) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x20, 0x9, 0x6, 0x301, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8801}, 0x40000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x20040000) listen(r0, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r9, 0x0) close_range(r0, r9, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) 0s ago: executing program 6 (id=3558): futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x400}], 0x1, &(0x7f0000000080), &(0x7f00000000c0)={[0x1, 0x4]}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000180)="64f18761ed069bfd64d8a83927034c30c2cdd8fba7806fa0586976a4eb8e3e633762e08094e0c897b8951c90481747225b55821ea4b2a2dbe157", &(0x7f0000000400)="dade483405354293e62df61ce6de7781288f9bb92dcddf51a8e15c447a9819b85c79031c8c3fa6504aef3ee660eb86875aaed577b9e3b047bad78575554cc09f866d31f627256c25ed8c519cfe0d5f62baa6a4903c02cd032dc1eb64051689f7993727ba45043de397a7fb451e12e58b8665bbf5b6882a5964b87220288c8b3bf666c671239e684c23e132fd15773b99da6827cb6cdf95ac3d62825953bc07c5b59017a28011b087721db9d7abfe9f54554ee5975371ece602edab37779767a8be699eea61521b04350a7a73ba06a5e9f5c9b24d3b"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6faa, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x3e0}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x93}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x3505}}, 0xe4) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2503, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000340)={{&(0x7f000016b000/0x4000)=nil, 0x4000}}) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000021605710040000000000000000000000500041a0000000003833f043f0900020073797a3000000000050005000000000005000100060000ad48000000686173683a6d61"], 0x48}}, 0x0) splice(r3, 0x0, r4, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r3, 0x0, 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x1000, 0x800, 0x5ff, 0xfff, 0x7fff, 0x3a9a, 0xfff, 0xfffffffa, 0x6, 0x2, 0x8001, 0xdc, 0x1, 0x8, 0x4, 0x3, 0x5242, 0x0, 0x114e, 0x9, 0x6, 0x101, 0x3, 0xff, 0x7ff, 0xfffffffb, 0x80000000, 0x6177d997, 0xb63b8771, 0x1, 0xc, 0x1, 0x123a9273, 0x4, 0xff, 0x5, 0x100, 0x6, 0x5, 0x6, 0x4, 0x20, 0x4, 0x0, 0x9, 0x7ff, 0x3, 0x1, 0x7, 0x7, 0xd, 0xfffffffd, 0x7, 0x488, 0xc, 0xf74d, 0x8, 0x3d, 0x401, 0x5, 0x1, 0x7ff, 0x3, 0x9, 0xc, 0x3ff, 0x4139df5d, 0x9, 0xfffffff7, 0x1, 0x2, 0x1, 0x8f2c, 0x8000, 0x0, 0x2, 0x100, 0x66, 0x3, 0x5, 0x2, 0x200, 0x9, 0x76, 0x4, 0x10001, 0x4, 0x9, 0xe, 0x0, 0xf9, 0x9, 0x4ade, 0x3, 0x4000008, 0x4, 0xff, 0x0, 0x1, 0x800, 0x2bc, 0xffff, 0x7fff, 0x3b0a, 0x2, 0x0, 0x3, 0x200, 0x2, 0x9, 0x6, 0x9, 0x4, 0xc34d, 0x80000000, 0x8, 0x8, 0x0, 0xe, 0x6, 0x4, 0x4, 0x3, 0xe256, 0x80000000, 0xb, 0x7, 0x3, 0x5, 0x7, 0x5, 0x6, 0x6, 0x200, 0x7, 0xffffffff, 0x2, 0x5, 0x4, 0x10c, 0x8000, 0xd0, 0x6, 0x2, 0x7ff, 0x5, 0x6, 0xaa, 0x8, 0x6, 0x8, 0x4, 0x9, 0x3000, 0x3ff, 0x7, 0x40, 0x1, 0x4, 0x0, 0x7, 0x10000, 0x8, 0x7, 0x3, 0x417, 0x7fff, 0x6, 0x3, 0x7, 0x5, 0x2, 0x5, 0x9, 0x1, 0x0, 0x7, 0x5, 0x7, 0x0, 0x80000001, 0x10000, 0x6, 0xfff, 0x5e, 0x7fff, 0x6, 0xa159, 0x4, 0x1, 0x7, 0x4, 0x2, 0x8, 0x80, 0xfffffffc, 0x9e, 0x61aa91f9, 0x7, 0x81, 0xffff21e7, 0x4, 0x6, 0x7, 0x5, 0x3, 0x4ea, 0xfffffffd, 0x6d1, 0x8, 0x5, 0x6, 0x3, 0x6, 0x8, 0xfffffffb, 0x8, 0x1, 0xffff, 0x6, 0xfa9, 0x8, 0x10000, 0x2, 0x5635, 0x3ff, 0x3, 0x400, 0xedc, 0x8, 0x7, 0xd, 0xea1, 0xbef, 0x9, 0x3, 0xffff0000, 0x4, 0x335e, 0x3, 0xffffffff, 0x210f993b, 0x5, 0x6, 0x7, 0x6, 0x9, 0x2e6, 0xb, 0x0, 0x6, 0xffffffff, 0x2947, 0x8, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xd616, 0x2, 0x8, 0x2, 0x67, {0x5, 0x0, 0x7, 0x9, 0x101, 0xffffffff}, {0x9, 0x0, 0x6, 0xfd, 0x3, 0x2}, 0xffffffff, 0x80000000, 0x100}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x400c810) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "5335572af7aa9ec3", "0bb3bbceae3b6d56e33a5c51cbf284c6", "1363cf10", "5c892ebd183c8c13"}, 0x28) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000380)=""/84, 0x54}], 0x1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x8, 0x1, 0x0, 0x0, 0x1}, 0x30, 0x1) kernel console output (not intermixed with test programs): invalid length. [ 557.078626][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.094046][T17500] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2916'. [ 557.341722][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 557.346479][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 557.350968][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 557.983855][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 557.987687][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 558.450051][T17477] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.453416][T17477] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.456904][T17477] bridge_slave_0: entered allmulticast mode [ 558.463258][ T5749] Bluetooth: hci5: command tx timeout [ 558.479461][T17477] bridge_slave_0: entered promiscuous mode [ 558.531848][T17477] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.535425][T17477] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.538870][T17477] bridge_slave_1: entered allmulticast mode [ 558.550447][T17477] bridge_slave_1: entered promiscuous mode [ 558.591289][T17477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.597819][T17477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.687092][T17477] team0: Port device team_slave_0 added [ 558.700799][T17477] team0: Port device team_slave_1 added [ 558.750837][T17477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.754570][T17477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.766760][T17477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.768933][T12642] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 558.775358][ T13] bridge_slave_1: left allmulticast mode [ 558.777754][ T13] bridge_slave_1: left promiscuous mode [ 558.780815][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.792022][ T13] bridge_slave_0: left allmulticast mode [ 558.794436][ T13] bridge_slave_0: left promiscuous mode [ 558.797434][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.932217][T12642] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 558.937209][T12642] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 558.941866][T12642] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 558.945847][T12642] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.954731][T17530] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 558.965259][T12642] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 559.135432][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.155162][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.162073][ T13] bond0 (unregistering): Released all slaves [ 559.163985][T12642] usb 5-1: USB disconnect, device number 37 [ 559.167475][T17530] FAULT_INJECTION: forcing a failure. [ 559.167475][T17530] name failslab, interval 1, probability 1, space 0, times 0 [ 559.174323][T17530] CPU: 3 UID: 0 PID: 17530 Comm: syz.0.2926 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.174343][T17530] Tainted: [L]=SOFTLOCKUP [ 559.174348][T17530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 559.174354][T17530] Call Trace: [ 559.174372][T17530] [ 559.174377][T17530] dump_stack_lvl+0x100/0x190 [ 559.174412][T17530] should_fail_ex.cold+0x5/0xa [ 559.174427][T17530] should_failslab+0xc2/0x120 [ 559.174444][T17530] kmem_cache_alloc_noprof+0x91/0x6a0 [ 559.174459][T17530] ? skb_clone+0x190/0x400 [ 559.174477][T17530] skb_clone+0x190/0x400 [ 559.174493][T17530] netlink_broadcast_filtered+0xb22/0xf20 [ 559.174513][T17530] netlink_broadcast+0x39/0x50 [ 559.174525][T17530] kobject_uevent_env+0xcdd/0x18b0 [ 559.174543][T17530] device_release_driver_internal+0x51d/0x620 [ 559.174565][T17530] driver_detach+0xd8/0x1b0 [ 559.174582][T17530] bus_remove_driver+0x13b/0x2e0 [ 559.174597][T17530] driver_unregister+0x76/0xb0 [ 559.174613][T17530] usb_gadget_unregister_driver+0x49/0x70 [ 559.174627][T17530] raw_release+0x19b/0x260 [ 559.174638][T17530] ? __pfx_raw_release+0x10/0x10 [ 559.174649][T17530] __fput+0x3ff/0xb50 [ 559.174666][T17530] fput_close_sync+0x118/0x250 [ 559.174681][T17530] ? __pfx_fput_close_sync+0x10/0x10 [ 559.174700][T17530] __ia32_sys_close+0x8b/0x120 [ 559.174716][T17530] do_int80_emulation+0x14b/0x720 [ 559.174732][T17530] asm_int80_emulation+0x1a/0x20 [ 559.174744][T17530] RIP: 0023:0xf71272eb [ 559.174754][T17530] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 559.174766][T17530] RSP: 002b:00000000f53e644c EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 559.174777][T17530] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 559.174784][T17530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 559.174791][T17530] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 559.174797][T17530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.174804][T17530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 559.174818][T17530] [ 559.186540][ T13] bond1 (unregistering): Released all slaves [ 559.310679][T17477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.316634][T17477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.339266][T17477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.417290][T17543] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 559.433088][ T13] : left promiscuous mode [ 559.447131][T17547] xt_CT: You must specify a L4 protocol and not use inversions on it [ 559.577327][T17477] hsr_slave_0: entered promiscuous mode [ 559.601112][T17477] hsr_slave_1: entered promiscuous mode [ 559.604264][T17477] debugfs: 'hsr0' already exists in 'hsr' [ 559.606742][T17477] Cannot create hsr debugfs directory [ 559.640161][T17553] fuse: fd is not a fuse device [ 560.247983][T17579] FAULT_INJECTION: forcing a failure. [ 560.247983][T17579] name failslab, interval 1, probability 1, space 0, times 0 [ 560.254230][T17579] CPU: 0 UID: 0 PID: 17579 Comm: syz.0.2940 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.254262][T17579] Tainted: [L]=SOFTLOCKUP [ 560.254270][T17579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 560.254281][T17579] Call Trace: [ 560.254288][T17579] [ 560.254297][T17579] dump_stack_lvl+0x100/0x190 [ 560.254325][T17579] should_fail_ex.cold+0x5/0xa [ 560.254355][T17579] should_failslab+0xc2/0x120 [ 560.254383][T17579] kmem_cache_alloc_noprof+0x91/0x6a0 [ 560.254408][T17579] ? trace_kmem_cache_alloc+0xdd/0x100 [ 560.254434][T17579] ? security_file_alloc+0x34/0x2c0 [ 560.254467][T17579] security_file_alloc+0x34/0x2c0 [ 560.254494][T17579] init_file+0x95/0x480 [ 560.254518][T17579] alloc_empty_file+0x79/0x1c0 [ 560.254543][T17579] path_openat+0xe7/0x4280 [ 560.254561][T17579] ? kasan_save_track+0x14/0x30 [ 560.254584][T17579] ? __kasan_slab_alloc+0x89/0x90 [ 560.254608][T17579] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 560.254629][T17579] ? do_getname+0x35/0x390 [ 560.254651][T17579] ? do_sys_openat2+0xc7/0x1e0 [ 560.254674][T17579] ? __ia32_compat_sys_openat+0x12d/0x210 [ 560.254699][T17579] ? __do_fast_syscall_32+0xe7/0x970 [ 560.254733][T17579] ? __pfx_path_openat+0x10/0x10 [ 560.254761][T17579] do_file_open+0x20e/0x430 [ 560.254779][T17579] ? __lock_acquire+0x49f/0x1a40 [ 560.254811][T17579] ? __pfx_do_file_open+0x10/0x10 [ 560.254848][T17579] ? _raw_spin_unlock+0x28/0x50 [ 560.254868][T17579] ? alloc_fd+0x471/0x7a0 [ 560.254895][T17579] do_sys_openat2+0x10f/0x1e0 [ 560.254921][T17579] ? __pfx_do_sys_openat2+0x10/0x10 [ 560.254950][T17579] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 560.254979][T17579] __ia32_compat_sys_openat+0x12d/0x210 [ 560.255007][T17579] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 560.255033][T17579] ? fput+0x79/0x100 [ 560.255055][T17579] ? ksys_write+0x1ac/0x250 [ 560.255073][T17579] ? __pfx_ksys_write+0x10/0x10 [ 560.255096][T17579] __do_fast_syscall_32+0xe7/0x970 [ 560.255120][T17579] ? lockdep_hardirqs_on+0x78/0x100 [ 560.255145][T17579] do_fast_syscall_32+0x32/0x70 [ 560.255171][T17579] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 560.255196][T17579] RIP: 0023:0xf7f28fec [ 560.255219][T17579] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 560.255228][T17579] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 560.255247][T17579] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800001c0 [ 560.255260][T17579] RDX: 0000000000000079 RSI: 0000000000000000 RDI: 0000000000000000 [ 560.255271][T17579] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 560.255283][T17579] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 560.255294][T17579] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 560.255320][T17579] [ 560.491493][T17583] binder: 17582:17583 ioctl 4008f50a 0 returned -22 [ 560.539623][ T5749] Bluetooth: hci5: command tx timeout [ 560.555062][ T5454] 8021q: adding VLAN 0 to HW filter on device eth6 [ 560.591389][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.594274][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.600334][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.603645][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.610725][ T13] batman_adv: batadv0: Interface deactivated: dummy0 [ 560.613052][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 560.637153][ T13] veth1_macvtap: left promiscuous mode [ 560.640247][ T13] veth0_macvtap: left promiscuous mode [ 560.642810][ T13] veth1_vlan: left promiscuous mode [ 560.645300][ T13] veth0_vlan: left promiscuous mode [ 560.679424][ T55] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 560.842909][ T55] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 560.853912][ T55] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 560.859589][ T55] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 560.869721][ T55] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.877516][T17581] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 560.884569][ T55] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 561.053985][ T13] team0 (unregistering): Port device team_slave_1 removed [ 561.074517][ T13] team0 (unregistering): Port device team_slave_0 removed [ 561.181577][ C3] sctp_transport_update_pmtu: 20 callbacks suppressed [ 561.181593][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 561.187471][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 561.191019][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 561.195057][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 561.198483][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 561.379378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 561.404694][T17591] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 561.407282][T17591] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 561.422172][T17591] vhci_hcd vhci_hcd.0: Device attached [ 561.447064][T17593] 9pnet_fd: p9_fd_create_tcp (17593): problem binding to privport [ 561.495070][T17597] 9p: Bad value for 'rfdno' [ 561.709193][ T55] usb 52-1: SetAddress Request (19) to port 0 [ 561.711187][ T55] usb 52-1: new SuperSpeed USB device number 19 using vhci_hcd [ 561.830137][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 562.160127][T17604] fuse: fd is not a fuse device [ 562.461259][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 562.465436][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 562.469187][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 562.481040][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.489371][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.623091][ T5749] Bluetooth: hci5: command tx timeout [ 562.808547][ T5749] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 563.029682][ T13] IPVS: stop unused estimator thread 0... [ 563.101578][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 563.121279][ T5454] 8021q: adding VLAN 0 to HW filter on device eth7 [ 563.172228][T17625] veth1_to_team: Caught tx_queue_len zero misconfig [ 563.175736][T17625] netlink: 'syz.1.2953': attribute type 1 has an invalid length. [ 563.222423][T17625] 8021q: adding VLAN 0 to HW filter on device bond6 [ 563.227294][T17477] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 563.233279][T17477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 563.239879][T17477] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 563.250019][T17477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 563.291619][T17627] bond6: (slave gretap2): making interface the new active one [ 563.291767][T17594] vhci_hcd: connection reset by peer [ 563.297637][T17627] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 563.301440][ T1045] usb 12-1: USB disconnect, device number 24 [ 563.306429][T17477] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 563.309625][ T12] vhci_hcd vhci_hcd.7: stop threads [ 563.311884][ T12] vhci_hcd vhci_hcd.7: release socket [ 563.315135][ T12] vhci_hcd vhci_hcd.7: disconnect device [ 563.397636][T17477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 563.421272][T17477] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 563.463766][T17477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 563.886148][T17477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.942134][ T5454] 8021q: adding VLAN 0 to HW filter on device eth8 [ 563.950068][T17477] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.955741][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2957'. [ 563.962607][T16446] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.964950][T16446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.968338][T17651] team0: Cannot enslave team device to itself [ 563.974686][T16446] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.977540][T16446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.239327][ T1045] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 564.439211][ T1045] usb 12-1: Using ep0 maxpacket: 32 [ 564.446809][ T1045] usb 12-1: unable to get BOS descriptor or descriptor too short [ 564.452303][ T1045] usb 12-1: config 14 has an invalid interface number: 57 but max is 1 [ 564.455022][ T1045] usb 12-1: config 14 has an invalid interface number: 228 but max is 1 [ 564.457705][ T1045] usb 12-1: config 14 has no interface number 0 [ 564.457852][ T5454] 8021q: adding VLAN 0 to HW filter on device eth9 [ 564.459738][ T1045] usb 12-1: config 14 has no interface number 1 [ 564.459828][ T1045] usb 12-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 564.469467][ T1045] usb 12-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 564.484707][ T1045] usb 12-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 564.508972][ T1045] usb 12-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 564.522963][ T1045] usb 12-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 564.536270][ T1045] usb 12-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 564.543601][ T1045] usb 12-1: config 14 interface 57 has no altsetting 0 [ 564.546149][ T1045] usb 12-1: config 14 interface 228 has no altsetting 0 [ 564.552718][ T1045] usb 12-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 564.556187][ T1045] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.559016][ T1045] usb 12-1: Product: syz [ 564.562185][ T1045] usb 12-1: Manufacturer: syz [ 564.564128][ T1045] usb 12-1: SerialNumber: syz [ 564.699311][ T5749] Bluetooth: hci5: command tx timeout [ 564.833371][T17677] lo speed is unknown, defaulting to 1000 [ 565.033664][ T1045] legousbtower 12-1:14.57: interrupt endpoints not found [ 565.044622][T17477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.537711][ T1045] legousbtower 12-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 565.546263][ T1045] legousbtower 12-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 566.299854][ C3] sctp_transport_update_pmtu: 10 callbacks suppressed [ 566.299877][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 566.768535][T17477] veth0_vlan: entered promiscuous mode [ 566.779944][ T55] usb 52-1: device descriptor read/8, error -110 [ 566.784528][T17477] veth1_vlan: entered promiscuous mode [ 566.792297][T17726] overlayfs: failed to clone upperpath [ 566.915300][T17477] veth0_macvtap: entered promiscuous mode [ 566.929752][T17477] veth1_macvtap: entered promiscuous mode [ 566.949907][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 566.952429][T17477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.978760][T17730] syzkaller0: entered promiscuous mode [ 566.982913][T17730] syzkaller0: entered allmulticast mode [ 566.993449][T17477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.031856][ T5591] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.036182][ T5591] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.053036][ T5591] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.058794][ T5591] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.194799][ T55] usb usb52-port1: attempt power cycle [ 567.225765][T16466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.236003][T16466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.294437][T16446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.301637][T16446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.613303][ T73] usb 12-1: USB disconnect, device number 25 [ 567.628012][ T73] legousbtower 12-1:14.228: LEGO USB Tower #-160 now disconnected [ 567.769984][ T55] usb usb52-port1: unable to enumerate USB device [ 568.098889][T17781] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2974'. [ 568.222627][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 569.515612][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.521935][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.524283][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.526715][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.530169][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.533642][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.536043][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.538600][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.541003][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.543319][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.545894][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.548392][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.551181][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.553518][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.555933][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.558320][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.560791][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.563392][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.566787][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.570923][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.574392][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.577417][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.580294][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.583096][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.585748][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.588434][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.592044][T17829] FAULT_INJECTION: forcing a failure. [ 569.592044][T17829] name failslab, interval 1, probability 1, space 0, times 0 [ 569.592340][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.597654][T17829] CPU: 2 UID: 0 PID: 17829 Comm: syz.7.2979 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.597692][T17829] Tainted: [L]=SOFTLOCKUP [ 569.597699][T17829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 569.597710][T17829] Call Trace: [ 569.597717][T17829] [ 569.597726][T17829] dump_stack_lvl+0x100/0x190 [ 569.597752][T17829] should_fail_ex.cold+0x5/0xa [ 569.597775][T17829] should_failslab+0xc2/0x120 [ 569.597801][T17829] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 569.597826][T17829] ? __lock_acquire+0x49f/0x1a40 [ 569.597855][T17829] ? kstrdup_const+0x63/0x80 [ 569.597881][T17829] kstrdup+0x51/0xe0 [ 569.597903][T17829] kstrdup_const+0x63/0x80 [ 569.597923][T17829] __kernfs_new_node+0x9b/0xa10 [ 569.597945][T17829] ? rcu_is_watching+0x12/0xc0 [ 569.597966][T17829] ? __pfx___kernfs_new_node+0x10/0x10 [ 569.597992][T17829] ? find_held_lock+0x2b/0x80 [ 569.598014][T17829] ? kernfs_root+0xee/0x2a0 [ 569.598039][T17829] ? kernfs_root+0xee/0x2a0 [ 569.598070][T17829] kernfs_new_node+0x117/0x150 [ 569.598094][T17829] kernfs_create_link+0xcc/0x240 [ 569.598119][T17829] sysfs_do_create_link_sd+0x90/0x140 [ 569.598148][T17829] sysfs_create_link+0x61/0xc0 [ 569.598174][T17829] driver_sysfs_add+0x91/0x2d0 [ 569.598200][T17829] really_probe+0x146/0xa60 [ 569.598229][T17829] __driver_probe_device+0x20e/0x450 [ 569.598256][T17829] driver_probe_device+0x4a/0x140 [ 569.598282][T17829] __driver_attach+0x21f/0x5b0 [ 569.598306][T17829] ? __pfx___driver_attach+0x10/0x10 [ 569.598327][T17829] bus_for_each_dev+0x13e/0x1d0 [ 569.598348][T17829] ? __pfx_bus_for_each_dev+0x10/0x10 [ 569.598366][T17829] ? bus_add_driver+0x2b5/0x5b0 [ 569.598394][T17829] bus_add_driver+0x305/0x5b0 [ 569.598418][T17829] driver_register+0x1e2/0x360 [ 569.598459][T17829] ? rcu_is_watching+0x12/0xc0 [ 569.598483][T17829] usb_gadget_register_driver_owner+0x132/0x210 [ 569.598503][T17829] raw_ioctl+0x1a85/0x2b80 [ 569.598527][T17829] ? __pfx_raw_ioctl+0x10/0x10 [ 569.598550][T17829] ? __pfx_raw_ioctl+0x10/0x10 [ 569.598568][T17829] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 569.598598][T17829] __do_fast_syscall_32+0xe7/0x970 [ 569.598627][T17829] do_fast_syscall_32+0x32/0x70 [ 569.598651][T17829] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 569.598679][T17829] RIP: 0023:0xf7fb4fec [ 569.598701][T17829] Code: Unable to access opcode bytes at 0xf7fb4fc2. [ 569.598709][T17829] RSP: 002b:00000000f5453424 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 569.598727][T17829] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000005501 [ 569.598739][T17829] RDX: 0000000000000000 RSI: 00000000f7446ff4 RDI: 00000000f54544c0 [ 569.598749][T17829] RBP: 00000000f7446ff4 R08: 0000000000000000 R09: 0000000000000000 [ 569.598760][T17829] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 569.598770][T17829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 569.598795][T17829] [ 569.598942][T17829] raw-gadget.0 gadget.7: really_probe: driver_sysfs_add failed [ 569.601649][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.609460][T17829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.611800][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.613204][T17829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.614981][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.715573][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.718114][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.721261][T17827] binder: 17824:17827 ioctl c00c6211 0 returned -14 [ 569.966051][ T5749] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 570.139827][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 571.420062][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 571.423420][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 572.059875][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 572.454465][ T5821] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.576707][ T5754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 572.590386][ T5754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 572.590503][ T5821] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.603679][ T5754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 572.608194][ T5754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 572.615295][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 572.953790][ T5821] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.120551][ T5821] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.168765][T17891] lo speed is unknown, defaulting to 1000 [ 573.339555][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 573.344611][ T5821] bridge_slave_1: left allmulticast mode [ 573.346798][ T5821] bridge_slave_1: left promiscuous mode [ 573.351651][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.356707][ T5821] bridge_slave_0: left allmulticast mode [ 573.358755][ T5821] bridge_slave_0: left promiscuous mode [ 573.363025][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.539814][ T5821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.544967][ T5821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.551671][ T5821] bond0 (unregistering): Released all slaves [ 573.700273][T17891] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.704499][T17891] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.708847][T17891] bridge_slave_0: entered allmulticast mode [ 573.715185][T17891] bridge_slave_0: entered promiscuous mode [ 573.733874][T17891] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.736337][T17891] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.738725][T17891] bridge_slave_1: entered allmulticast mode [ 573.741518][T17891] bridge_slave_1: entered promiscuous mode [ 573.831355][T17891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.854530][T17891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.944211][T17891] team0: Port device team_slave_0 added [ 573.947988][T17891] team0: Port device team_slave_1 added [ 573.966249][T17891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.968890][T17891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.979013][T17891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.989562][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 573.993851][T17891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.996095][T17891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.001503][T17945] i2c i2c-1: new_device: Instantiated device tps6598x at 0x03 [ 574.006403][T17891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.012719][T17940] tipc: Enabling of bearer rejected, failed to enable media [ 574.043751][T17891] hsr_slave_0: entered promiscuous mode [ 574.046255][T17891] hsr_slave_1: entered promiscuous mode [ 574.049378][T17891] debugfs: 'hsr0' already exists in 'hsr' [ 574.052029][T17891] Cannot create hsr debugfs directory [ 574.099388][T17948] tipc: Started in network mode [ 574.100989][T17948] tipc: Node identity fa4d73456476, cluster identity 4711 [ 574.103480][T17948] tipc: Enabled bearer , priority 0 [ 574.117522][ T5821] hsr_slave_0: left promiscuous mode [ 574.130856][ T5821] hsr_slave_1: left promiscuous mode [ 574.133435][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.136006][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.145830][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.148826][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.160808][ T5821] veth1_macvtap: left promiscuous mode [ 574.162903][ T5821] veth0_macvtap: left promiscuous mode [ 574.164807][ T5821] veth1_vlan: left promiscuous mode [ 574.166498][ T5821] veth0_vlan: left promiscuous mode [ 574.207873][T17955] 9pnet_fd: p9_fd_create_tcp (17955): problem connecting socket to 127.0.0.1 [ 574.377673][ T5821] team0 (unregistering): Port device team_slave_1 removed [ 574.393300][ T5821] team0 (unregistering): Port device team_slave_0 removed [ 574.472340][T17948] syzkaller0: entered promiscuous mode [ 574.475035][T17948] syzkaller0: entered allmulticast mode [ 574.540458][T17958] tipc: Resetting bearer [ 574.541819][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.545466][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.554770][T17946] tipc: Resetting bearer [ 574.603085][T17946] tipc: Disabling bearer [ 574.712265][ T5749] Bluetooth: hci0: command tx timeout [ 574.780212][ T5749] Bluetooth: hci4: command 0x0406 tx timeout [ 574.819793][T17966] netlink: 'syz.7.3015': attribute type 1 has an invalid length. [ 574.822210][T17966] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3015'. [ 574.889937][T17972] Bluetooth: MGMT ver 1.23 [ 575.269939][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 575.273358][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 575.910364][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 575.913416][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 575.916511][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 576.552976][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 576.556155][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 576.779321][ T5754] Bluetooth: hci0: command tx timeout [ 577.112012][T17891] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 577.117527][T17891] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 577.125109][T17891] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 577.133799][T17891] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 577.140614][T17891] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 577.153067][T17891] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 577.156098][T17891] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 577.161630][T17891] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 577.179606][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 577.230316][T17891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.243434][T17891] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.255530][T16455] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.257903][T16455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.271983][T16455] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.274288][T16455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.281977][T18063] syzkaller0: entered allmulticast mode [ 577.286469][T18063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3028'. [ 577.309641][T18063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3028'. [ 577.491074][T18077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3029'. [ 577.666246][T17891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.770417][T17891] veth0_vlan: entered promiscuous mode [ 577.782802][T17891] veth1_vlan: entered promiscuous mode [ 577.820146][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 577.828044][T17891] veth0_macvtap: entered promiscuous mode [ 577.854918][T17891] veth1_macvtap: entered promiscuous mode [ 577.868183][T17891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.874346][T17891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.894201][ T5821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.898992][ T5821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.913393][ T5821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.923516][ T5821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.050665][T18110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.134860][T16455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.139018][T16455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.168110][T16446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.175213][T16446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.466062][T18112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3000'. [ 578.470862][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 578.475068][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 578.497859][T18112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3000'. [ 578.512050][T18112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3000'. [ 578.869215][ T5754] Bluetooth: hci0: command tx timeout [ 578.888261][T18126] 8021q: VLANs not supported on vcan0 [ 578.891482][T18125] veth1_to_bond: entered allmulticast mode [ 578.904491][T18125] veth1_to_bond: left allmulticast mode [ 579.099902][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 579.139489][ T5851] usb 12-1: new full-speed USB device number 26 using dummy_hcd [ 579.269250][ T5851] usb 12-1: device descriptor read/64, error -71 [ 579.305963][T18138] fuse: Bad value for 'fd' [ 579.529245][ T5851] usb 12-1: new full-speed USB device number 27 using dummy_hcd [ 579.659308][ T5851] usb 12-1: device descriptor read/64, error -71 [ 579.752543][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 579.780732][ T5851] usb usb12-port1: attempt power cycle [ 580.120205][ T5851] usb 12-1: new full-speed USB device number 28 using dummy_hcd [ 580.153202][ T5851] usb 12-1: device descriptor read/8, error -71 [ 580.334842][T18165] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 580.350949][T18168] bond2: entered allmulticast mode [ 580.353446][T18168] ipip0: entered allmulticast mode [ 580.358612][T18168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3049'. [ 580.390282][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 580.393547][ C3] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 580.409186][ T5851] usb 12-1: new full-speed USB device number 29 using dummy_hcd [ 580.429623][ T5851] usb 12-1: device descriptor read/8, error -71 [ 580.539892][ T5851] usb usb12-port1: unable to enumerate USB device [ 580.658862][T18183] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.662203][T18183] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.857319][T18183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.872295][T18183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.939778][ T5754] Bluetooth: hci0: command tx timeout [ 580.981411][T18167] bond2: left allmulticast mode [ 580.983027][T18167] ipip0: left allmulticast mode [ 580.995425][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.004029][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.012069][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.030100][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.099348][T18210] binder: 18209:18210 ioctl 80047213 800003c0 returned -22 [ 581.296786][ T42] audit: type=1326 audit(1785249042.519:23726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18227 comm="syz.1.3059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 581.327186][ T42] audit: type=1326 audit(1785249042.519:23727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18227 comm="syz.1.3059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 581.335717][ T42] audit: type=1326 audit(1785249042.519:23728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18227 comm="syz.1.3059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 581.346065][ T42] audit: type=1326 audit(1785249042.519:23729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18227 comm="syz.1.3059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 581.354539][ T42] audit: type=1326 audit(1785249042.519:23730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18227 comm="syz.1.3059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 581.367305][ T42] audit: type=1326 audit(1785249042.519:23731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18227 comm="syz.1.3059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 581.375561][ T42] audit: type=1326 audit(1785249042.519:23732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18227 comm="syz.1.3059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 581.383974][ T42] audit: type=1326 audit(1785249042.519:23733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18227 comm="syz.1.3059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 581.393142][ T42] audit: type=1326 audit(1785249042.519:23734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18227 comm="syz.1.3059" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf702efec code=0x7ffc0000 [ 581.401960][ T42] audit: type=1326 audit(1785249042.519:23735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18227 comm="syz.1.3059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 581.884723][T18244] netlink: 'syz.7.3062': attribute type 8 has an invalid length. [ 581.989464][T18246] xt_CT: No such helper "syz1" [ 582.120174][T18191] Set syz1 is full, maxelem 65536 reached [ 582.204879][T18253] lo speed is unknown, defaulting to 1000 [ 582.520285][T18264] kvm: user requested TSC rate below hardware speed [ 583.252628][T18286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.356757][T18288] io-wq is not configured for unbound workers [ 583.601782][T18302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3082'. [ 583.647955][T18294] warn_alloc: 1 callbacks suppressed [ 583.647981][T18294] syz.0.3079: vmalloc error: size 2147483264, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 583.673974][T18294] CPU: 2 UID: 0 PID: 18294 Comm: syz.0.3079 Tainted: G L syzkaller #0 PREEMPT(full) [ 583.674007][T18294] Tainted: [L]=SOFTLOCKUP [ 583.674012][T18294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 583.674024][T18294] Call Trace: [ 583.674032][T18294] [ 583.674040][T18294] dump_stack_lvl+0x100/0x190 [ 583.674068][T18294] warn_alloc.cold+0x94/0xa8 [ 583.674089][T18294] ? __pfx_warn_alloc+0x10/0x10 [ 583.674117][T18294] ? __lock_acquire+0x49f/0x1a40 [ 583.674150][T18294] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 583.674177][T18294] __vmalloc_node_range_noprof+0x136c/0x1630 [ 583.674210][T18294] ? find_held_lock+0x2b/0x80 [ 583.674229][T18294] ? __might_fault+0xc5/0x140 [ 583.674246][T18294] ? __might_fault+0xc5/0x140 [ 583.674262][T18294] ? compat_do_replace+0x1b1/0x7a0 [ 583.674286][T18294] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 583.674312][T18294] ? compat_copy_ebt_replace_from_user+0x2c8/0x3f0 [ 583.674334][T18294] ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10 [ 583.674363][T18294] ? compat_do_replace+0x1b1/0x7a0 [ 583.674382][T18294] __vmalloc_node_noprof+0xad/0xf0 [ 583.674409][T18294] ? compat_do_replace+0x1b1/0x7a0 [ 583.674432][T18294] compat_do_replace+0x1b1/0x7a0 [ 583.674455][T18294] ? __pfx_compat_do_replace+0x10/0x10 [ 583.674488][T18294] ? bpf_lsm_capable+0x9/0x10 [ 583.674507][T18294] ? security_capable+0x80/0x260 [ 583.674530][T18294] do_ebt_set_ctl+0x3f4/0x4a0 [ 583.674553][T18294] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 583.674572][T18294] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 583.674604][T18294] ? nf_sockopt_find.isra.0+0x222/0x290 [ 583.674632][T18294] nf_setsockopt+0x8d/0xf0 [ 583.674657][T18294] ip_setsockopt+0xcb/0xf0 [ 583.674680][T18294] tcp_setsockopt+0xa7/0x100 [ 583.674711][T18294] smc_setsockopt+0x1b6/0xa40 [ 583.674730][T18294] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 583.674764][T18294] ? __pfx_smc_setsockopt+0x10/0x10 [ 583.674780][T18294] ? aa_sock_opt_perm+0xfe/0x1b0 [ 583.674802][T18294] ? __pfx_smc_setsockopt+0x10/0x10 [ 583.674823][T18294] do_sock_setsockopt+0xf3/0x1d0 [ 583.674855][T18294] __sys_setsockopt+0x119/0x190 [ 583.674880][T18294] __ia32_sys_setsockopt+0xbc/0x160 [ 583.674903][T18294] ? __do_fast_syscall_32+0x98/0x970 [ 583.674927][T18294] ? lockdep_hardirqs_on+0x78/0x100 [ 583.674950][T18294] __do_fast_syscall_32+0xe7/0x970 [ 583.674974][T18294] do_fast_syscall_32+0x32/0x70 [ 583.674995][T18294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 583.675018][T18294] RIP: 0023:0xf7f28fec [ 583.675042][T18294] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 583.675050][T18294] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 583.675068][T18294] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 583.675078][T18294] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 00000000000000e0 [ 583.675086][T18294] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 583.675098][T18294] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 583.675110][T18294] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 583.675142][T18294] [ 583.675149][T18294] Mem-Info: [ 583.784949][T18294] active_anon:2682 inactive_anon:1603 isolated_anon:0 [ 583.784949][T18294] active_file:3015 inactive_file:9792 isolated_file:25 [ 583.784949][T18294] unevictable:1768 dirty:284 writeback:0 [ 583.784949][T18294] slab_reclaimable:9398 slab_unreclaimable:72992 [ 583.784949][T18294] mapped:28132 shmem:2681 pagetables:1612 [ 583.784949][T18294] sec_pagetables:333 bounce:0 [ 583.784949][T18294] kernel_misc_reclaimable:0 [ 583.784949][T18294] free:26884 free_pcp:14099 free_cma:0 [ 583.802395][T18294] Node 0 active_anon:32kB inactive_anon:52kB active_file:4kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:1052kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8508kB pagetables:1068kB sec_pagetables:1144kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 583.812788][T18294] Node 1 active_anon:10696kB inactive_anon:6060kB active_file:11756kB inactive_file:38568kB unevictable:5536kB isolated(anon):300kB isolated(file):1000kB mapped:111276kB dirty:1136kB writeback:0kB shmem:9188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:9164kB pagetables:5380kB sec_pagetables:188kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 583.824815][T18294] Node 0 DMA free:3836kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 583.835040][T18294] lowmem_reserve[]: 0 280 280 280 280 [ 583.838049][T18294] Node 0 DMA32 free:32924kB boost:28732kB min:41504kB low:44696kB high:47888kB reserved_highatomic:2048KB free_highatomic:1192KB active_anon:32kB inactive_anon:52kB active_file:4kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:4672kB present:1032196kB managed:286948kB mlocked:0kB bounce:0kB free_pcp:7044kB local_pcp:2180kB free_cma:0kB [ 583.848448][T18294] lowmem_reserve[]: 0 0 0 0 0 [ 583.850103][T18294] Node 1 DMA32 free:73828kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10996kB inactive_anon:5960kB active_file:11756kB inactive_file:38568kB unevictable:5536kB writepending:1136kB zspages:9764kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:47892kB local_pcp:14924kB free_cma:0kB [ 583.879519][T18294] lowmem_reserve[]: 0 0 0 0 0 [ 583.881615][T18294] Node 0 DMA: 135*4kB (UM) 54*8kB (UM) 41*16kB (UM) 27*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 3836kB [ 583.886518][T18294] Node 0 DMA32: 473*4kB (UMEH) 317*8kB (UMEH) 113*16kB (UMH) 248*32kB (UMEH) 93*64kB (UMEH) 44*128kB (UMEH) 8*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 32924kB [ 583.892631][T18294] Node 1 DMA32: 1575*4kB (UME) 1092*8kB (UME) 448*16kB (UME) 258*32kB (UME) 135*64kB (UME) 70*128kB (ME) 30*256kB (UM) 11*512kB (UME) 5*1024kB (UM) 4*2048kB (UM) 0*4096kB = 74684kB [ 583.898881][T18294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 583.902292][T18294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 583.905504][T18294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 583.908580][T18294] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 583.912010][T18294] 16583 total pagecache pages [ 583.913548][T18294] 1072 pages in swap cache [ 583.915277][T18294] Free swap = 17532kB [ 583.916684][T18294] Total swap = 124996kB [ 583.918016][T18294] 524155 pages RAM [ 583.919395][T18294] 0 pages HighMem/MovableOnly [ 583.921066][T18294] 211525 pages reserved [ 583.922713][T18294] 0 pages cma reserved [ 584.405310][T18342] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 584.429385][T18342] VFS: Can't find a romfs filesystem on dev nullb0. [ 584.429385][T18342] [ 584.618523][ T5754] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 584.945349][T18362] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3100'. [ 585.226831][T18379] netlink: 'syz.1.3105': attribute type 2 has an invalid length. [ 585.238795][T18381] FAULT_INJECTION: forcing a failure. [ 585.238795][T18381] name failslab, interval 1, probability 1, space 0, times 0 [ 585.244517][T18381] CPU: 1 UID: 0 PID: 18381 Comm: syz.0.3106 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.244545][T18381] Tainted: [L]=SOFTLOCKUP [ 585.244552][T18381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 585.244563][T18381] Call Trace: [ 585.244570][T18381] [ 585.244577][T18381] dump_stack_lvl+0x100/0x190 [ 585.244608][T18381] should_fail_ex.cold+0x5/0xa [ 585.244630][T18381] should_failslab+0xc2/0x120 [ 585.244655][T18381] kmem_cache_alloc_noprof+0x91/0x6a0 [ 585.244678][T18381] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 585.244704][T18381] ? ptlock_alloc+0x1f/0x70 [ 585.244723][T18381] ptlock_alloc+0x1f/0x70 [ 585.244738][T18381] pte_alloc_one+0x82/0x3d0 [ 585.244761][T18381] do_fault+0x86c/0x1750 [ 585.244787][T18381] __handle_mm_fault+0x187d/0x2a00 [ 585.244808][T18381] ? mt_find+0x45e/0x8e0 [ 585.244831][T18381] ? __pfx___handle_mm_fault+0x10/0x10 [ 585.244845][T18381] ? __pfx_mt_find+0x10/0x10 [ 585.244881][T18381] ? find_vma+0xbf/0x140 [ 585.244902][T18381] ? __pfx_find_vma+0x10/0x10 [ 585.244927][T18381] handle_mm_fault+0x37b/0xa30 [ 585.244950][T18381] do_user_addr_fault+0x74c/0x12f0 [ 585.244982][T18381] exc_page_fault+0x6f/0xd0 [ 585.245004][T18381] asm_exc_page_fault+0x26/0x30 [ 585.245021][T18381] RIP: 0010:__get_user_4+0x14/0x30 [ 585.245039][T18381] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 585.245055][T18381] RSP: 0018:ffffc9000052fd98 EFLAGS: 00050287 [ 585.245071][T18381] RAX: 0000000000000000 RBX: ffff8880584b8bc0 RCX: ffffc9000052fd3c [ 585.245083][T18381] RDX: 00007ffffffff000 RSI: ffffffff825c1371 RDI: ffffffff8c400980 [ 585.245094][T18381] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000000000001d2 [ 585.245104][T18381] R10: 0000000000000200 R11: 0000000000000000 R12: 1ffff920000a5fbb [ 585.245114][T18381] R13: 00000000c0045006 R14: ffff888013f90fc0 R15: 0000000000005000 [ 585.245133][T18381] ? __might_fault+0x111/0x140 [ 585.245156][T18381] snd_pcm_oss_ioctl+0x21b8/0x3790 [ 585.245177][T18381] ? find_held_lock+0x2b/0x80 [ 585.245199][T18381] ? __fget_files+0x215/0x3d0 [ 585.245215][T18381] ? hook_file_ioctl_common+0x140/0x440 [ 585.245239][T18381] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 585.245261][T18381] ? __fget_files+0x21f/0x3d0 [ 585.245298][T18381] ? __pfx_snd_pcm_oss_ioctl_compat+0x10/0x10 [ 585.245320][T18381] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 585.245357][T18381] __do_fast_syscall_32+0xe7/0x970 [ 585.245379][T18381] ? lockdep_hardirqs_on+0x78/0x100 [ 585.245402][T18381] do_fast_syscall_32+0x32/0x70 [ 585.245425][T18381] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 585.245447][T18381] RIP: 0023:0xf7f28fec [ 585.245466][T18381] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 585.245474][T18381] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 585.245490][T18381] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0045006 [ 585.245501][T18381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.245511][T18381] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 585.245521][T18381] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 585.245531][T18381] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 585.245571][T18381] [ 585.513408][T18390] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 585.583446][T18393] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3108'. [ 586.340387][ T5821] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.344814][ T5821] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.348619][ T5821] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.352547][ T5821] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.404723][T18413] netlink: 'syz.7.3117': attribute type 1 has an invalid length. [ 586.811648][T18425] fuse: fd is not a fuse device [ 587.561236][T18439] fuse: Unknown parameter 'fd }HZKM#×' [ 587.587463][T18442] fuse: Bad value for 'fd' [ 587.592283][T18442] overlayfs: failed to resolve './debug': -2 [ 587.809677][T18448] Invalid ELF header magic: != ELF [ 587.999532][T18451] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 588.002489][T18451] overlayfs: overlapping lowerdir path [ 588.259493][T18429] ceph: No mds server is up or the cluster is laggy [ 588.630525][ T5754] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 588.641487][ T5754] Bluetooth: hci1: Injecting HCI hardware error event [ 588.646549][ T5754] Bluetooth: hci1: hardware error 0x00 [ 589.384735][T18461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3130'. [ 589.392713][T18461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3130'. [ 589.400229][T18461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3130'. [ 589.403391][T18461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3130'. [ 589.406427][T18461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3130'. [ 589.410275][T18461] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3130'. [ 589.413430][T18461] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3130'. [ 589.416892][T18461] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3130'. [ 589.420415][T18461] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3130'. [ 589.647934][ T42] kauditd_printk_skb: 184 callbacks suppressed [ 589.647950][ T42] audit: type=1800 audit(1785249050.869:23920): pid=18462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3128" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 589.763483][T18477] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 589.877404][T18475] FAULT_INJECTION: forcing a failure. [ 589.877404][T18475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.890671][T18475] CPU: 3 UID: 0 PID: 18475 Comm: syz.2.3135 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.890690][T18475] Tainted: [L]=SOFTLOCKUP [ 589.890694][T18475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 589.890701][T18475] Call Trace: [ 589.890705][T18475] [ 589.890709][T18475] dump_stack_lvl+0x100/0x190 [ 589.890726][T18475] should_fail_ex.cold+0x5/0xa [ 589.890739][T18475] _copy_to_user+0x32/0xd0 [ 589.890757][T18475] simple_read_from_buffer+0xcb/0x170 [ 589.890776][T18475] proc_fail_nth_read+0x1af/0x230 [ 589.890793][T18475] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 589.890808][T18475] ? rw_verify_area+0xce/0x6d0 [ 589.890824][T18475] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 589.890838][T18475] vfs_read+0x1e4/0xb40 [ 589.890850][T18475] ? __pfx_vfs_read+0x10/0x10 [ 589.890866][T18475] ? find_held_lock+0x2b/0x80 [ 589.890880][T18475] ? __fget_files+0x215/0x3d0 [ 589.890893][T18475] ? __fget_files+0x21f/0x3d0 [ 589.890907][T18475] ksys_read+0x12a/0x250 [ 589.890917][T18475] ? __pfx_ksys_read+0x10/0x10 [ 589.890926][T18475] ? arch_syscall_is_vdso_sigreturn+0x19b/0x200 [ 589.890944][T18475] ? syscall_user_dispatch+0x76/0x130 [ 589.890958][T18475] do_int80_emulation+0x14b/0x720 [ 589.890974][T18475] asm_int80_emulation+0x1a/0x20 [ 589.890985][T18475] RIP: 0023:0xf71472eb [ 589.890995][T18475] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 589.891006][T18475] RSP: 002b:00000000f53fd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 589.891017][T18475] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f53fd5d0 [ 589.891024][T18475] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 589.891030][T18475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 589.891037][T18475] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 589.891043][T18475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 589.891057][T18475] [ 590.016332][T18486] synth uevent: /bus/platform/drivers/intel_xhci_usb_sw: unknown uevent action string [ 590.401168][T18497] 9p: Bad value for 'wfdno' [ 590.699139][ T5754] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 590.922936][T18509] __nla_validate_parse: 1 callbacks suppressed [ 590.922957][T18509] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.3145'. [ 590.958031][T18510] overlay: Unknown parameter '/' [ 591.007754][T18510] netlink: zone id is out of range [ 591.012745][T18510] netlink: zone id is out of range [ 591.015799][T18510] netlink: zone id is out of range [ 591.080152][T18510] input: syz0 as /devices/virtual/input/input35 [ 591.138107][T18513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3148'. [ 592.318323][T18553] lo speed is unknown, defaulting to 1000 [ 592.535420][T18565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3163'. [ 592.609529][ T34] usb 12-1: new high-speed USB device number 30 using dummy_hcd [ 592.760868][ T34] usb 12-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 592.767640][ T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.841092][ T34] emi26 - firmware loader 12-1:1.0: emi26_probe start [ 592.871219][ T34] usb 12-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 592.879443][ T34] usb 12-1: Falling back to sysfs fallback for: emi26/loader.fw [ 592.913185][T18576] netlink: 114 bytes leftover after parsing attributes in process `syz.2.3166'. [ 593.042630][T18556] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3160'. [ 593.131559][T18580] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 593.162542][ T34] usb 12-1: emi26_load_firmware - request_firmware() failed [ 593.168760][ T34] usb 12-1: emi26_load_firmware - error loading firmware: error = -2 [ 593.174750][ T34] emi26 - firmware loader 12-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 593.380859][T18586] netlink: 'syz.1.3169': attribute type 4 has an invalid length. [ 593.402153][T18586] tmpfs: Bad value for 'mpol' [ 593.416652][T18586] fuse: fd is not a fuse device [ 593.550682][T13097] usb 12-1: USB disconnect, device number 30 [ 593.642929][T18594] netlink: 'syz.0.3173': attribute type 1 has an invalid length. [ 593.663672][T18594] bond3: entered promiscuous mode [ 593.665988][T18594] 8021q: adding VLAN 0 to HW filter on device bond3 [ 594.013386][T18607] netlink: 'syz.2.3176': attribute type 4 has an invalid length. [ 594.091353][T18609] syzkaller0: entered promiscuous mode [ 594.093164][T18609] syzkaller0: entered allmulticast mode [ 594.818037][ T55] libceph: connect (1)[c::]:6789 error -101 [ 594.839311][T18631] ceph: No mds server is up or the cluster is laggy [ 594.846366][T18635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3182'. [ 594.851854][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 595.055297][T18636] bond4 (unregistering): Released all slaves [ 595.340862][T18644] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 595.346829][T18644] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 596.049976][T18671] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3198'. [ 596.110079][T13097] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 596.284580][T13097] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 596.288230][T13097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 596.292595][T13097] usb 5-1: Product: syz [ 596.294435][T13097] usb 5-1: Manufacturer: syz [ 596.296474][T13097] usb 5-1: SerialNumber: syz [ 596.310276][T13097] usb 5-1: config 0 descriptor?? [ 596.320093][T13097] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 596.324520][T13097] dvb-usb: bulk message failed: -22 (2/0) [ 596.337745][T13097] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 596.341062][T18688] openvswitch: netlink: Actions may not be safe on all matching packets [ 596.342470][T13097] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 596.347032][T13097] usb 5-1: media controller created [ 596.470657][T18691] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3204'. [ 596.600381][T13097] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 596.873365][T18662] dvb-usb: bulk message failed: -22 (4/0) [ 596.876139][T18662] cxusb: i2c read failed [ 596.976782][T13097] cxusb: set interface failed [ 596.978802][T13097] dvb-usb: bulk message failed: -22 (1/0) [ 597.061799][T13097] DVB: Unable to find symbol mt352_attach() [ 597.066678][T13097] dvb-usb: bulk message failed: -22 (5/0) [ 597.087947][T13097] zl10353_read_register: readreg error (reg=127, ret==-121) [ 597.093369][T13097] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 597.217564][T13097] rc_core: IR keymap rc-dvico-mce not found [ 597.220680][T13097] Registered IR keymap rc-empty [ 597.326997][T13097] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 597.453268][T13097] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input36 [ 597.571780][T13097] dvb-usb: schedule remote query interval to 100 msecs. [ 597.575768][T13097] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 597.653736][T13097] usb 5-1: USB disconnect, device number 38 [ 597.795798][T13097] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 597.972495][T18720] syzkaller0: entered promiscuous mode [ 597.974816][T18720] syzkaller0: entered allmulticast mode [ 598.900789][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 598.909769][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 598.913320][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 598.916793][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 598.929027][ T5749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 599.114688][T18737] FAULT_INJECTION: forcing a failure. [ 599.114688][T18737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.118614][T18737] CPU: 1 UID: 0 PID: 18737 Comm: syz.7.3220 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.118633][T18737] Tainted: [L]=SOFTLOCKUP [ 599.118637][T18737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 599.118643][T18737] Call Trace: [ 599.118648][T18737] [ 599.118653][T18737] dump_stack_lvl+0x100/0x190 [ 599.118669][T18737] should_fail_ex.cold+0x5/0xa [ 599.118682][T18737] _copy_from_user+0x2e/0xd0 [ 599.118699][T18737] kstrtouint_from_user+0xd6/0x1d0 [ 599.118713][T18737] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 599.118726][T18737] ? __lock_acquire+0x49f/0x1a40 [ 599.118749][T18737] proc_fail_nth_write+0x83/0x220 [ 599.118765][T18737] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 599.118784][T18737] vfs_write+0x2aa/0x1050 [ 599.118795][T18737] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 599.118811][T18737] ? __pfx_vfs_write+0x10/0x10 [ 599.118820][T18737] ? find_held_lock+0x2b/0x80 [ 599.118833][T18737] ? __fget_files+0x215/0x3d0 [ 599.118846][T18737] ? __fget_files+0x21f/0x3d0 [ 599.118860][T18737] ksys_write+0x12a/0x250 [ 599.118871][T18737] ? __pfx_ksys_write+0x10/0x10 [ 599.118885][T18737] do_int80_emulation+0x14b/0x720 [ 599.118901][T18737] asm_int80_emulation+0x1a/0x20 [ 599.118912][T18737] RIP: 0023:0xf71b72eb [ 599.118922][T18737] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 599.118933][T18737] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 599.118943][T18737] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54765d0 [ 599.118950][T18737] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 599.118956][T18737] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 599.118963][T18737] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 599.118969][T18737] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 599.118982][T18737] [ 599.295211][T18745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3223'. [ 599.437232][T18731] lo speed is unknown, defaulting to 1000 [ 599.498834][T18752] befs: (nullb0): No write support. Marking filesystem read-only [ 599.535575][T18752] befs: (nullb0): invalid magic header [ 599.551077][T18751] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 599.775789][ T5851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 599.782846][ T5851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 599.800498][ T5851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 599.804403][ T5851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 599.807503][ T5851] rtc rtc0: __rtc_set_alarm: err=-22 [ 599.840581][T18761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.998378][T18769] FAULT_INJECTION: forcing a failure. [ 599.998378][T18769] name failslab, interval 1, probability 1, space 0, times 0 [ 600.004074][T18769] CPU: 2 UID: 0 PID: 18769 Comm: syz.2.3227 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.004104][T18769] Tainted: [L]=SOFTLOCKUP [ 600.004111][T18769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 600.004123][T18769] Call Trace: [ 600.004130][T18769] [ 600.004137][T18769] dump_stack_lvl+0x100/0x190 [ 600.004164][T18769] should_fail_ex.cold+0x5/0xa [ 600.004186][T18769] should_failslab+0xc2/0x120 [ 600.004212][T18769] __kmalloc_noprof+0xfc/0x820 [ 600.004236][T18769] ? tomoyo_encode2+0xfb/0x3c0 [ 600.004269][T18769] tomoyo_encode2+0xfb/0x3c0 [ 600.004300][T18769] tomoyo_encode+0x29/0x50 [ 600.004349][T18769] tomoyo_realpath_from_path+0x18c/0x690 [ 600.004382][T18769] tomoyo_path_number_perm+0x23c/0x580 [ 600.004404][T18769] ? tomoyo_path_number_perm+0x22e/0x580 [ 600.004429][T18769] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 600.004452][T18769] ? get_pid_task+0x106/0x250 [ 600.004508][T18769] ? find_held_lock+0x2b/0x80 [ 600.004530][T18769] ? __fget_files+0x215/0x3d0 [ 600.004546][T18769] ? hook_file_ioctl_common+0x140/0x440 [ 600.004568][T18769] ? __fget_files+0x215/0x3d0 [ 600.004589][T18769] ? __fget_files+0x21f/0x3d0 [ 600.004611][T18769] security_file_ioctl_compat+0xd3/0x230 [ 600.004636][T18769] __ia32_compat_sys_ioctl+0xc2/0x360 [ 600.004665][T18769] __do_fast_syscall_32+0xe7/0x970 [ 600.004688][T18769] ? lockdep_hardirqs_on+0x78/0x100 [ 600.004713][T18769] do_fast_syscall_32+0x32/0x70 [ 600.004737][T18769] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 600.004762][T18769] RIP: 0023:0xf700efec [ 600.004783][T18769] Code: Unable to access opcode bytes at 0xf700efc2. [ 600.004791][T18769] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 600.004809][T18769] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 600.004821][T18769] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 600.004833][T18769] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 600.004843][T18769] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 600.004854][T18769] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 600.004879][T18769] [ 600.004897][T18769] ERROR: Out of memory at tomoyo_realpath_from_path. [ 600.030881][T18731] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.164473][T18731] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.179399][T18731] bridge_slave_0: entered allmulticast mode [ 600.182189][T18771] Bluetooth: MGMT ver 1.23 [ 600.186260][T18731] bridge_slave_0: entered promiscuous mode [ 600.195201][T18731] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.204779][T18731] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.207987][T18731] bridge_slave_1: entered allmulticast mode [ 600.214150][T18731] bridge_slave_1: entered promiscuous mode [ 600.250233][T18731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.265437][T18731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.416214][T18731] team0: Port device team_slave_0 added [ 600.421906][T18731] team0: Port device team_slave_1 added [ 600.449266][T18731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.452121][T18731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.469665][T18731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.478717][T18731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.483172][T18731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.491196][T18731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.509845][T18782] bond5: entered promiscuous mode [ 600.619560][T18731] hsr_slave_0: entered promiscuous mode [ 600.622650][T18731] hsr_slave_1: entered promiscuous mode [ 600.625498][T18731] debugfs: 'hsr0' already exists in 'hsr' [ 600.627850][T18731] Cannot create hsr debugfs directory [ 601.019368][ T5749] Bluetooth: hci2: command tx timeout [ 601.086080][T18819] netlink: 'syz.1.3239': attribute type 3 has an invalid length. [ 601.093326][T18819] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3239'. [ 601.105762][T18821] netlink: 'syz.7.3240': attribute type 1 has an invalid length. [ 601.109134][T18821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.995756][T18731] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 602.003930][T18731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 602.008071][T18731] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 602.015898][T18731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 602.026452][T18731] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 602.037688][T18731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 602.042932][T18731] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 602.049390][T18855] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3249'. [ 602.050693][T18731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 602.193602][T18731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.216769][T18731] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.231396][T15277] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.234016][T15277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.252927][T16462] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.255504][T16462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.383023][T18731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 602.577071][T18888] dlm: no local IP address has been set [ 602.594482][T18891] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 602.603385][T18888] dlm: cannot start dlm midcomms -107 [ 602.700224][T18896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3256'. [ 603.014867][T18731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.099468][ T5749] Bluetooth: hci2: command tx timeout [ 603.217529][T18918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3257'. [ 603.391581][T18731] veth0_vlan: entered promiscuous mode [ 603.421532][T18731] veth1_vlan: entered promiscuous mode [ 603.485667][T18731] veth0_macvtap: entered promiscuous mode [ 603.507319][T18731] veth1_macvtap: entered promiscuous mode [ 603.548517][T18731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.583852][T18731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.615684][ T5821] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.626873][ T5821] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.640981][ T5821] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.646491][ T5821] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.973935][T16466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.986823][T16466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.062152][T16466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.066596][T16466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.213286][T18957] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3218'. [ 604.519300][ T55] usb 12-1: new high-speed USB device number 31 using dummy_hcd [ 604.657373][T18966] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 604.659722][T18966] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 604.669214][ T55] usb 12-1: Using ep0 maxpacket: 16 [ 604.677968][T18966] vhci_hcd vhci_hcd.0: Device attached [ 604.686017][ T55] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.698101][ T55] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 604.713566][ T55] usb 12-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 604.738082][ T55] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.753326][ T55] usb 12-1: config 0 descriptor?? [ 604.767874][T18973] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 604.959720][T11565] usb 50-1: SetAddress Request (2) to port 0 [ 604.961723][T11565] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 605.148341][T18980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.154661][T18980] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.178045][T18980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.179462][ T5749] Bluetooth: hci2: command tx timeout [ 605.271805][T18980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.304158][T18980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.337402][T18980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 605.358348][T18980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 605.426678][T18980] veth1_vlan: left promiscuous mode [ 605.435159][T18980] veth0_vlan: left promiscuous mode [ 605.435206][T18988] zero sized request [ 605.438085][T18980] veth0_vlan: entered promiscuous mode [ 605.444651][T18980] veth1_vlan: entered promiscuous mode [ 605.463146][T18980] veth1_macvtap: left promiscuous mode [ 605.466298][T18980] veth0_macvtap: left promiscuous mode [ 605.469782][T18980] veth0_macvtap: entered promiscuous mode [ 605.474254][T18980] veth1_macvtap: entered promiscuous mode [ 605.483060][T18980] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 605.490768][T18968] vhci_hcd: connection reset by peer [ 605.494068][T11009] vhci_hcd vhci_hcd.6: stop threads [ 605.496367][T11009] vhci_hcd vhci_hcd.6: release socket [ 605.498636][T11009] vhci_hcd vhci_hcd.6: disconnect device [ 605.535457][T18980] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 605.543832][T18980] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 605.549040][T18980] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 605.560567][T18980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 605.566975][T18980] 8021q: adding VLAN 0 to HW filter on device bond2 [ 605.575808][T18980] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 605.583223][T18980] 8021q: adding VLAN 0 to HW filter on device bond3 [ 605.593445][T18980] 8021q: adding VLAN 0 to HW filter on device bond4 [ 605.602938][T18980] bond5: left promiscuous mode [ 605.605865][T18980] 8021q: adding VLAN 0 to HW filter on device bond5 [ 605.627778][T16460] bridge0: port 1(guar) entered blocking state [ 605.628613][ T55] usbhid 12-1:0.0: can't add hid device: -71 [ 605.629316][ T6020] lo speed is unknown, defaulting to 1000 [ 605.629338][ T6020] syz0: Port: 1 Link ACTIVE [ 605.629961][T16460] bridge0: port 1(guar) entered forwarding state [ 605.633021][ T55] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 605.645888][ T55] usb 12-1: USB disconnect, device number 31 [ 605.650327][T16460] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.650895][T18992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3267'. [ 605.652613][T16460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.698339][ T5821] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.702809][ T5821] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.712393][ T5821] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.717282][ T5821] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.723534][ T5821] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.727258][ T5821] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.741509][ T5821] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.745470][ T5821] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.369263][ T55] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 606.520891][ T55] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 606.539550][ T55] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 606.544114][ T55] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 606.548955][ T55] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 606.571677][ T55] usb 11-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 606.575580][ T55] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.582836][ T55] usb 11-1: Product: syz [ 606.584656][ T55] usb 11-1: Manufacturer: syz [ 606.599159][ T55] usb 11-1: SerialNumber: syz [ 606.603395][ T55] usb 11-1: config 0 descriptor?? [ 606.664532][T19012] overlay: Unknown parameter '/' [ 606.667120][T19012] netlink: zone id is out of range [ 606.669372][T19012] netlink: zone id is out of range [ 606.671134][T19012] netlink: zone id is out of range [ 606.675961][T19012] input: syz0 as /devices/virtual/input/input37 [ 606.816729][ T55] adutux 11-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 606.926295][T19026] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3275'. [ 606.938899][T19025] vlan4: entered allmulticast mode [ 606.950485][T19025] bond0: entered allmulticast mode [ 606.952703][T19025] bond_slave_0: entered allmulticast mode [ 606.955306][T19025] bond_slave_1: entered allmulticast mode [ 606.957982][T19025] syz_tun: entered allmulticast mode [ 606.974590][T19026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.981592][T19026] bond_slave_0: left allmulticast mode [ 606.987129][T19026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.993654][T19026] bond_slave_1: left allmulticast mode [ 607.002487][T19026] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 607.015348][T19026] syz_tun: left allmulticast mode [ 607.022499][T19026] bond0 (unregistering): Released all slaves [ 607.132027][ T5851] usb 11-1: USB disconnect, device number 6 [ 607.261301][ T5749] Bluetooth: hci2: command tx timeout [ 607.414939][T19031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3277'. [ 607.418430][T19037] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 608.092110][T19023] kexec: Could not allocate control_code_buffer [ 608.200718][T19053] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3279'. [ 608.344236][T19061] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3282'. [ 609.752556][T19079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3289'. [ 609.806688][T19081] binder: 19080:19081 ioctl c0306201 80000200 returned -14 [ 609.946700][T19089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3294'. [ 610.063593][T11565] usb 50-1: device descriptor read/8, error -110 [ 610.067724][T19092] overlayfs: failed to clone upperpath [ 610.085997][T19094] netlink: 196 bytes leftover after parsing attributes in process `syz.6.3293'. [ 610.089971][T19094] netlink: 196 bytes leftover after parsing attributes in process `syz.6.3293'. [ 610.093336][T19094] netlink: 19 bytes leftover after parsing attributes in process `syz.6.3293'. [ 610.732083][T11565] usb usb50-port1: attempt power cycle [ 610.741853][T19107] loop5: detected capacity change from 0 to 6 [ 610.787762][T19107] Dev loop5: unable to read RDB block 6 [ 610.790190][T19107] loop5: unable to read partition table [ 610.793518][T19107] loop5: partition table beyond EOD, truncated [ 610.796833][T19107] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 611.300868][T11565] usb usb50-port1: unable to enumerate USB device [ 612.133307][T19130] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3306'. [ 612.407986][T19139] xt_connbytes: Forcing CT accounting to be enabled [ 612.416597][T19139] SET target dimension over the limit! [ 612.423287][T19139] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3308'. [ 612.897090][T19144] bridge0: port 4(erspan0) entered blocking state [ 612.900226][T19144] bridge0: port 4(erspan0) entered listening state [ 612.914235][T19144] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.923456][T19144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.979859][T19144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.995119][T19144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.020569][T19144] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 613.030723][T19144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 613.054334][T19144] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 613.111616][T19144] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 613.137482][T19144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 613.150784][T19144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 613.158699][T19144] 8021q: adding VLAN 0 to HW filter on device bond3 [ 613.185568][T19144] 8021q: adding VLAN 0 to HW filter on device eth0 [ 613.200238][T19144] 8021q: adding VLAN 0 to HW filter on device eth1 [ 613.207214][T19144] 8021q: adding VLAN 0 to HW filter on device eth2 [ 613.221060][T19144] 8021q: adding VLAN 0 to HW filter on device eth3 [ 613.285878][T16455] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.288743][T16455] bridge0: port 1(bridge_slave_0) entered listening state [ 613.303622][T19157] Bluetooth: MGMT ver 1.23 [ 613.304961][T16455] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.308670][T16455] bridge0: port 2(bridge_slave_1) entered listening state [ 613.396545][T19163] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3317'. [ 613.712539][ T5591] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.717569][ T5591] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.723571][ T5591] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.724048][T19175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3320'. [ 613.727602][ T5591] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.844784][ T5591] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.848045][ T5591] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.855369][ T5591] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.867970][ T5591] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.881841][ T5591] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 613.893294][ T5591] bond4: (slave veth5): making interface the new active one [ 613.919268][ T5591] bond4: active interface up! [ 613.996153][T19181] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3323'. [ 614.000206][T19181] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3323'. [ 614.019405][T19181] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3323'. [ 614.023681][T19181] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3323'. [ 614.024007][T19184] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3322'. [ 614.038698][T19184] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3322'. [ 614.045552][T19184] FAULT_INJECTION: forcing a failure. [ 614.045552][T19184] name failslab, interval 1, probability 1, space 0, times 0 [ 614.052600][T19184] CPU: 2 UID: 0 PID: 19184 Comm: syz.6.3322 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.052628][T19184] Tainted: [L]=SOFTLOCKUP [ 614.052634][T19184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 614.052643][T19184] Call Trace: [ 614.052649][T19184] [ 614.052657][T19184] dump_stack_lvl+0x100/0x190 [ 614.052681][T19184] should_fail_ex.cold+0x5/0xa [ 614.052699][T19184] should_failslab+0xc2/0x120 [ 614.052721][T19184] __kmalloc_cache_noprof+0x91/0x6c0 [ 614.052739][T19184] ? nf_tables_newtable+0xcff/0x19f0 [ 614.052764][T19184] nf_tables_newtable+0xcff/0x19f0 [ 614.052789][T19184] ? __pfx_nf_tables_newtable+0x10/0x10 [ 614.052828][T19184] ? __nla_parse+0x40/0x60 [ 614.052852][T19184] nfnetlink_rcv_batch+0x1410/0x2880 [ 614.052886][T19184] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 614.052908][T19184] ? find_held_lock+0x2b/0x80 [ 614.052930][T19184] ? __local_bh_enable_ip+0x9e/0x120 [ 614.052947][T19184] ? lockdep_hardirqs_on+0x78/0x100 [ 614.052966][T19184] ? __dev_queue_xmit+0xa12/0x4970 [ 614.053015][T19184] ? __nla_parse+0x40/0x60 [ 614.053035][T19184] nfnetlink_rcv+0x3bd/0x440 [ 614.053056][T19184] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 614.053082][T19184] netlink_unicast+0x585/0x850 [ 614.053104][T19184] ? __pfx_netlink_unicast+0x10/0x10 [ 614.053126][T19184] netlink_sendmsg+0x8b0/0xda0 [ 614.053146][T19184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.053166][T19184] ? apparmor_socket_sendmsg+0x15b/0x270 [ 614.053187][T19184] ____sys_sendmsg+0xa4d/0xbe0 [ 614.053201][T19184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.053219][T19184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.053245][T19184] ___sys_sendmsg+0x190/0x1e0 [ 614.053264][T19184] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.053292][T19184] ? find_held_lock+0x2b/0x80 [ 614.053326][T19184] __sys_sendmsg+0x160/0x210 [ 614.053348][T19184] ? __pfx___sys_sendmsg+0x10/0x10 [ 614.053376][T19184] ? __pfx_ksys_write+0x10/0x10 [ 614.053396][T19184] __do_fast_syscall_32+0xe7/0x970 [ 614.053417][T19184] ? lockdep_hardirqs_on+0x78/0x100 [ 614.053437][T19184] do_fast_syscall_32+0x32/0x70 [ 614.053458][T19184] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 614.053478][T19184] RIP: 0023:0xf70cefec [ 614.053502][T19184] Code: Unable to access opcode bytes at 0xf70cefc2. [ 614.053512][T19184] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 614.053531][T19184] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 614.053542][T19184] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 614.053555][T19184] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 614.053566][T19184] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 614.053577][T19184] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 614.053611][T19184] [ 614.636680][ T42] audit: type=1326 audit(1785249074.859:23921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.6.3328" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7fc00000 [ 614.642588][ T6020] kernel read not supported for file /dsp1 (pid: 6020 comm: kworker/0:4) [ 614.794240][T19206] netlink: 'syz.7.3330': attribute type 1 has an invalid length. [ 615.263764][ T42] audit: type=1326 audit(1785249075.489:23922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.6.3328" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70cf008 code=0x7fc00000 [ 615.339675][T16462] wlan1: Trigger new scan to find an IBSS to join [ 615.422286][T19235] syz_tun: entered allmulticast mode [ 615.431092][T19234] syz_tun: left allmulticast mode [ 615.470255][T19237] FAULT_INJECTION: forcing a failure. [ 615.470255][T19237] name failslab, interval 1, probability 1, space 0, times 0 [ 615.474735][T19237] CPU: 2 UID: 0 PID: 19237 Comm: syz.6.3339 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.474757][T19237] Tainted: [L]=SOFTLOCKUP [ 615.474761][T19237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 615.474769][T19237] Call Trace: [ 615.474775][T19237] [ 615.474781][T19237] dump_stack_lvl+0x100/0x190 [ 615.474798][T19237] should_fail_ex.cold+0x5/0xa [ 615.474812][T19237] should_failslab+0xc2/0x120 [ 615.474829][T19237] __kmalloc_cache_noprof+0x91/0x6c0 [ 615.474842][T19237] ? sctp_add_bind_addr+0xae/0x3e0 [ 615.474861][T19237] sctp_add_bind_addr+0xae/0x3e0 [ 615.474878][T19237] sctp_copy_local_addr_list+0x349/0x550 [ 615.474897][T19237] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 615.474915][T19237] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 615.474934][T19237] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 615.474953][T19237] sctp_bind_addr_copy+0xe0/0x530 [ 615.474971][T19237] sctp_connect_new_asoc+0x1c9/0x770 [ 615.474985][T19237] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 615.474997][T19237] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 615.475017][T19237] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 615.475039][T19237] __sctp_connect+0x3e7/0xc70 [ 615.475054][T19237] ? __pfx___sctp_connect+0x10/0x10 [ 615.475068][T19237] ? __pfx_sctp_inet_connect+0x10/0x10 [ 615.475080][T19237] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 615.475098][T19237] ? __pfx_sctp_inet_connect+0x10/0x10 [ 615.475109][T19237] sctp_inet_connect+0x15f/0x220 [ 615.475122][T19237] __sys_connect_file+0x141/0x1a0 [ 615.475139][T19237] __sys_connect+0x141/0x170 [ 615.475153][T19237] ? __pfx___sys_connect+0x10/0x10 [ 615.475166][T19237] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 615.475187][T19237] ? ksys_write+0x1ac/0x250 [ 615.475199][T19237] ? __pfx_ksys_write+0x10/0x10 [ 615.475212][T19237] __ia32_sys_connect+0x71/0xb0 [ 615.475225][T19237] ? lockdep_hardirqs_on+0x78/0x100 [ 615.475239][T19237] __do_fast_syscall_32+0xe7/0x970 [ 615.475254][T19237] ? lockdep_hardirqs_on+0x78/0x100 [ 615.475269][T19237] do_fast_syscall_32+0x32/0x70 [ 615.475284][T19237] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 615.475300][T19237] RIP: 0023:0xf70cefec [ 615.475314][T19237] Code: Unable to access opcode bytes at 0xf70cefc2. [ 615.475320][T19237] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 615.475332][T19237] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 615.475340][T19237] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 615.475346][T19237] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 615.475353][T19237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.475360][T19237] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 615.475374][T19237] [ 616.409610][T14296] usb 12-1: new full-speed USB device number 32 using dummy_hcd [ 616.563009][T14296] usb 12-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 616.581617][T14296] usb 12-1: config 0 interface 0 has no altsetting 0 [ 616.593609][T14296] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 616.601834][T14296] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 616.607636][T14296] usb 12-1: Product: syz [ 616.613131][T14296] usb 12-1: Manufacturer: syz [ 616.615363][T14296] usb 12-1: SerialNumber: syz [ 616.629940][T14296] usb 12-1: config 0 descriptor?? [ 616.633335][T19247] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 616.645328][T14296] usb 12-1: selecting invalid altsetting 0 [ 616.863723][T19247] usb 12-1: BOGUS urb xfer, pipe 0 != type 1 [ 616.889123][T19273] FAULT_INJECTION: forcing a failure. [ 616.889123][T19273] name failslab, interval 1, probability 1, space 0, times 0 [ 616.894578][T19273] CPU: 0 UID: 0 PID: 19273 Comm: syz.2.3351 Tainted: G L syzkaller #0 PREEMPT(full) [ 616.894609][T19273] Tainted: [L]=SOFTLOCKUP [ 616.894616][T19273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 616.894627][T19273] Call Trace: [ 616.894634][T19273] [ 616.894641][T19273] dump_stack_lvl+0x100/0x190 [ 616.894667][T19273] should_fail_ex.cold+0x5/0xa [ 616.894689][T19273] should_failslab+0xc2/0x120 [ 616.894713][T19273] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 616.894737][T19273] ? __alloc_skb+0x5b7/0x710 [ 616.894758][T19273] ? __alloc_skb+0x140/0x710 [ 616.894785][T19273] __alloc_skb+0x140/0x710 [ 616.894805][T19273] ? __alloc_skb+0x5b7/0x710 [ 616.894827][T19273] ? __pfx___alloc_skb+0x10/0x10 [ 616.894857][T19273] netlink_ack+0x117/0xb80 [ 616.894885][T19273] netlink_rcv_skb+0x333/0x420 [ 616.894905][T19273] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 616.894932][T19273] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 616.894961][T19273] ? netlink_deliver_tap+0x1ae/0xcc0 [ 616.894984][T19273] netlink_unicast+0x585/0x850 [ 616.895008][T19273] ? __pfx_netlink_unicast+0x10/0x10 [ 616.895034][T19273] netlink_sendmsg+0x8b0/0xda0 [ 616.895059][T19273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.895082][T19273] ? apparmor_socket_sendmsg+0x15b/0x270 [ 616.895107][T19273] ____sys_sendmsg+0xa4d/0xbe0 [ 616.895123][T19273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.895145][T19273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 616.895175][T19273] ___sys_sendmsg+0x190/0x1e0 [ 616.895196][T19273] ? __pfx____sys_sendmsg+0x10/0x10 [ 616.895228][T19273] ? find_held_lock+0x2b/0x80 [ 616.895267][T19273] __sys_sendmsg+0x160/0x210 [ 616.895292][T19273] ? __pfx___sys_sendmsg+0x10/0x10 [ 616.895323][T19273] ? __pfx_ksys_write+0x10/0x10 [ 616.895345][T19273] __do_fast_syscall_32+0xe7/0x970 [ 616.895368][T19273] ? lockdep_hardirqs_on+0x78/0x100 [ 616.895392][T19273] do_fast_syscall_32+0x32/0x70 [ 616.895420][T19273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 616.895444][T19273] RIP: 0023:0xf700efec [ 616.895488][T19273] Code: Unable to access opcode bytes at 0xf700efc2. [ 616.895497][T19273] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 616.895516][T19273] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000800 [ 616.895527][T19273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 616.895537][T19273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 616.895548][T19273] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 616.895558][T19273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 616.895583][T19273] [ 616.971607][T12642] usb 12-1: USB disconnect, device number 32 [ 616.973120][T19247] usb 12-1: cannot submit urb 0, error -19: no device [ 618.045381][T19308] usb usb9: usbfs: process 19308 (syz.6.3362) did not claim interface 0 before use [ 618.118078][T19308] vlan2: entered allmulticast mode [ 618.122271][T19308] bond0: entered allmulticast mode [ 618.124756][T19308] bond_slave_0: entered allmulticast mode [ 618.127171][T19308] bond_slave_1: entered allmulticast mode [ 618.389374][T15277] wlan1: Trigger new scan to find an IBSS to join [ 618.801543][T19321] __nla_validate_parse: 14 callbacks suppressed [ 618.801563][T19321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3368'. [ 619.326390][T19347] fuse: Unknown parameter 'ÿÿ0xffffffffffffffff' [ 619.372158][T19349] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 619.383561][T19349] bridge0: port 3(syz_tun) entered blocking state [ 619.386636][T19349] bridge0: port 3(syz_tun) entered disabled state [ 619.392380][T19349] syz_tun: entered allmulticast mode [ 619.397959][T19349] syz_tun: entered promiscuous mode [ 619.401488][T19349] bridge0: port 3(syz_tun) entered blocking state [ 619.403555][T19349] bridge0: port 3(syz_tun) entered forwarding state [ 619.505775][T19353] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3377'. [ 619.562195][T19355] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3378'. [ 619.572209][T19355] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3378'. [ 619.745088][T19364] batadv_slave_1: entered promiscuous mode [ 619.834312][T19370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3380'. [ 619.845483][T19370] batadv_slave_1: left promiscuous mode [ 620.152907][T19377] FAULT_INJECTION: forcing a failure. [ 620.152907][T19377] name failslab, interval 1, probability 1, space 0, times 0 [ 620.169178][T19377] CPU: 3 UID: 0 PID: 19377 Comm: syz.7.3386 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.169201][T19377] Tainted: [L]=SOFTLOCKUP [ 620.169206][T19377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 620.169213][T19377] Call Trace: [ 620.169218][T19377] [ 620.169223][T19377] dump_stack_lvl+0x100/0x190 [ 620.169244][T19377] should_fail_ex.cold+0x5/0xa [ 620.169258][T19377] should_failslab+0xc2/0x120 [ 620.169275][T19377] kmem_cache_alloc_noprof+0x91/0x6a0 [ 620.169290][T19377] ? trace_kmem_cache_alloc+0xdd/0x100 [ 620.169306][T19377] ? security_file_alloc+0x34/0x2c0 [ 620.169326][T19377] security_file_alloc+0x34/0x2c0 [ 620.169342][T19377] init_file+0x95/0x480 [ 620.169356][T19377] alloc_empty_file+0x79/0x1c0 [ 620.169371][T19377] path_openat+0xe7/0x4280 [ 620.169382][T19377] ? kasan_save_track+0x14/0x30 [ 620.169395][T19377] ? __kasan_kmalloc+0xaa/0xb0 [ 620.169408][T19377] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 620.169419][T19377] ? do_getname+0x238/0x390 [ 620.169432][T19377] ? do_sys_openat2+0xc7/0x1e0 [ 620.169445][T19377] ? __ia32_sys_creat+0xcb/0x120 [ 620.169459][T19377] ? __do_fast_syscall_32+0xe7/0x970 [ 620.169479][T19377] ? __pfx_path_openat+0x10/0x10 [ 620.169494][T19377] do_file_open+0x20e/0x430 [ 620.169504][T19377] ? __lock_acquire+0x49f/0x1a40 [ 620.169524][T19377] ? __pfx_do_file_open+0x10/0x10 [ 620.169545][T19377] ? _raw_spin_unlock+0x28/0x50 [ 620.169556][T19377] ? alloc_fd+0x471/0x7a0 [ 620.169572][T19377] do_sys_openat2+0x10f/0x1e0 [ 620.169586][T19377] ? __pfx_do_sys_openat2+0x10/0x10 [ 620.169603][T19377] ? __pfx___seccomp_filter+0x10/0x10 [ 620.169619][T19377] __ia32_sys_creat+0xcb/0x120 [ 620.169634][T19377] ? __pfx___ia32_sys_creat+0x10/0x10 [ 620.169651][T19377] ? __secure_computing+0x1e4/0x2c0 [ 620.169665][T19377] __do_fast_syscall_32+0xe7/0x970 [ 620.169679][T19377] ? lockdep_hardirqs_on+0x78/0x100 [ 620.169693][T19377] do_fast_syscall_32+0x32/0x70 [ 620.169708][T19377] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 620.169723][T19377] RIP: 0023:0xf7fb4fec [ 620.169740][T19377] Code: Unable to access opcode bytes at 0xf7fb4fc2. [ 620.169745][T19377] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000008 [ 620.169757][T19377] RAX: ffffffffffffffda RBX: 0000000080000580 RCX: 0000000000000025 [ 620.169764][T19377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.169770][T19377] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.169777][T19377] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 620.169783][T19377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.169797][T19377] [ 620.613188][T19394] netlink: 'syz.2.3392': attribute type 2 has an invalid length. [ 620.720510][T19400] random: crng reseeded on system resumption [ 621.419546][T16462] wlan1: Trigger new scan to find an IBSS to join [ 621.486240][T19412] bridge_slave_1: Caught tx_queue_len zero misconfig [ 621.610802][T19416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3397'. [ 622.180828][T19446] FAULT_INJECTION: forcing a failure. [ 622.180828][T19446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.189183][T19446] CPU: 1 UID: 0 PID: 19446 Comm: syz.2.3407 Tainted: G L syzkaller #0 PREEMPT(full) [ 622.189205][T19446] Tainted: [L]=SOFTLOCKUP [ 622.189209][T19446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 622.189216][T19446] Call Trace: [ 622.189222][T19446] [ 622.189227][T19446] dump_stack_lvl+0x100/0x190 [ 622.189245][T19446] should_fail_ex.cold+0x5/0xa [ 622.189259][T19446] copy_fpstate_to_sigframe+0x82d/0xae0 [ 622.189275][T19446] ? cgroup1_freezing+0x12c/0x3b0 [ 622.189290][T19446] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 622.189305][T19446] ? cgroup1_freezing+0x136/0x3b0 [ 622.189319][T19446] ? x86_task_fpu+0x5f/0x90 [ 622.189338][T19446] get_sigframe+0x3fb/0x940 [ 622.189360][T19446] ? __pfx_get_sigframe+0x10/0x10 [ 622.189378][T19446] ? _raw_spin_unlock_irq+0x23/0x50 [ 622.189391][T19446] ? siginfo_layout+0x156/0x290 [ 622.189404][T19446] ? get_signal+0x16b/0x21e0 [ 622.189418][T19446] ia32_setup_frame+0xe5/0x990 [ 622.189436][T19446] ? __pfx_ia32_setup_frame+0x10/0x10 [ 622.189454][T19446] arch_do_signal_or_restart+0x571/0x7a0 [ 622.189474][T19446] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 622.189492][T19446] ? hook_file_ioctl_common+0x140/0x440 [ 622.189511][T19446] ? __fget_files+0x21f/0x3d0 [ 622.189531][T19446] exit_to_user_mode_loop+0x139/0x6f0 [ 622.189543][T19446] ? rcu_is_watching+0x12/0xc0 [ 622.189558][T19446] __do_fast_syscall_32+0x701/0x970 [ 622.189573][T19446] ? lockdep_hardirqs_on+0x78/0x100 [ 622.189588][T19446] do_fast_syscall_32+0x32/0x70 [ 622.189603][T19446] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 622.189619][T19446] RIP: 0023:0xf700efec [ 622.189633][T19446] Code: Unable to access opcode bytes at 0xf700efc2. [ 622.189639][T19446] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 622.189651][T19446] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00000000c0386106 [ 622.189658][T19446] RDX: 00000000800010c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 622.189665][T19446] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 622.189672][T19446] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 622.189679][T19446] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 622.189694][T19446] [ 622.356079][T16446] wlan1: Creating new IBSS network, BSSID 16:d9:3a:2d:75:b3 [ 622.551005][T19488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3419'. [ 622.569283][T19488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3419'. [ 622.600191][T19482] team0: No ports can be present during mode change [ 622.804611][T19498] tcpci 0-0050: Can't find connector node. [ 622.806828][T19498] tcpci 0-0050: probe with driver tcpci failed with error -22 [ 622.810679][T19498] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 623.031485][T19508] FAULT_INJECTION: forcing a failure. [ 623.031485][T19508] name failslab, interval 1, probability 1, space 0, times 0 [ 623.036072][T19508] CPU: 3 UID: 0 PID: 19508 Comm: syz.7.3424 Tainted: G L syzkaller #0 PREEMPT(full) [ 623.036104][T19508] Tainted: [L]=SOFTLOCKUP [ 623.036110][T19508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 623.036121][T19508] Call Trace: [ 623.036128][T19508] [ 623.036138][T19508] dump_stack_lvl+0x100/0x190 [ 623.036165][T19508] should_fail_ex.cold+0x5/0xa [ 623.036188][T19508] should_failslab+0xc2/0x120 [ 623.036241][T19508] __kmalloc_cache_noprof+0x91/0x6c0 [ 623.036263][T19508] ? nf_tables_newtable+0xcff/0x19f0 [ 623.036291][T19508] nf_tables_newtable+0xcff/0x19f0 [ 623.036320][T19508] ? __pfx_nf_tables_newtable+0x10/0x10 [ 623.036349][T19508] ? __nla_parse+0x40/0x60 [ 623.036380][T19508] nfnetlink_rcv_batch+0x1410/0x2880 [ 623.036426][T19508] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 623.036452][T19508] ? find_held_lock+0x2b/0x80 [ 623.036479][T19508] ? __local_bh_enable_ip+0x9e/0x120 [ 623.036499][T19508] ? lockdep_hardirqs_on+0x78/0x100 [ 623.036521][T19508] ? __dev_queue_xmit+0xa12/0x4970 [ 623.036583][T19508] ? __nla_parse+0x40/0x60 [ 623.036609][T19508] nfnetlink_rcv+0x3bd/0x440 [ 623.036634][T19508] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 623.036667][T19508] netlink_unicast+0x585/0x850 [ 623.036690][T19508] ? __pfx_netlink_unicast+0x10/0x10 [ 623.036718][T19508] netlink_sendmsg+0x8b0/0xda0 [ 623.036742][T19508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 623.036766][T19508] ? apparmor_socket_sendmsg+0x15b/0x270 [ 623.036790][T19508] ____sys_sendmsg+0xa4d/0xbe0 [ 623.036807][T19508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 623.036829][T19508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 623.036860][T19508] ___sys_sendmsg+0x190/0x1e0 [ 623.036881][T19508] ? __pfx____sys_sendmsg+0x10/0x10 [ 623.036913][T19508] ? find_held_lock+0x2b/0x80 [ 623.036952][T19508] __sys_sendmsg+0x160/0x210 [ 623.036978][T19508] ? __pfx___sys_sendmsg+0x10/0x10 [ 623.037010][T19508] ? __pfx_ksys_write+0x10/0x10 [ 623.037033][T19508] __do_fast_syscall_32+0xe7/0x970 [ 623.037056][T19508] ? lockdep_hardirqs_on+0x78/0x100 [ 623.037078][T19508] do_fast_syscall_32+0x32/0x70 [ 623.037101][T19508] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 623.037123][T19508] RIP: 0023:0xf7fb4fec [ 623.037148][T19508] Code: Unable to access opcode bytes at 0xf7fb4fc2. [ 623.037156][T19508] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 623.037174][T19508] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 623.037184][T19508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 623.037194][T19508] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 623.037204][T19508] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 623.037213][T19508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 623.037237][T19508] [ 623.214187][T19513] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3425'. [ 623.904216][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.508088][T19539] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3434'. [ 625.998427][T19559] veth0: Caught tx_queue_len zero misconfig [ 626.653945][T19584] overlay: Unknown parameter '/' [ 626.711604][T19586] erspan0: entered promiscuous mode [ 626.946458][T19594] fuse: fd is not a fuse device [ 627.845985][T19641] FAULT_INJECTION: forcing a failure. [ 627.845985][T19641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.851283][T19641] CPU: 0 UID: 0 PID: 19641 Comm: syz.2.3466 Tainted: G L syzkaller #0 PREEMPT(full) [ 627.851304][T19641] Tainted: [L]=SOFTLOCKUP [ 627.851308][T19641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 627.851315][T19641] Call Trace: [ 627.851320][T19641] [ 627.851325][T19641] dump_stack_lvl+0x100/0x190 [ 627.851344][T19641] should_fail_ex.cold+0x5/0xa [ 627.851359][T19641] _copy_from_user+0x2e/0xd0 [ 627.851378][T19641] move_addr_to_kernel+0x65/0x170 [ 627.851393][T19641] get_compat_msghdr+0x3c7/0x480 [ 627.851411][T19641] ? __pfx_get_compat_msghdr+0x10/0x10 [ 627.851431][T19641] ? _kstrtoull+0x13c/0x1f0 [ 627.851444][T19641] ? __pfx__kstrtoull+0x10/0x10 [ 627.851458][T19641] ___sys_sendmsg+0x1b6/0x1e0 [ 627.851472][T19641] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.851484][T19641] ? __lock_acquire+0x49f/0x1a40 [ 627.851520][T19641] __sys_sendmmsg+0x309/0x440 [ 627.851538][T19641] ? __pfx___sys_sendmmsg+0x10/0x10 [ 627.851554][T19641] ? find_held_lock+0x2b/0x80 [ 627.851572][T19641] ? __mutex_unlock_slowpath+0x35d/0x930 [ 627.851596][T19641] ? fput+0x79/0x100 [ 627.851609][T19641] ? ksys_write+0x1ac/0x250 [ 627.851622][T19641] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 627.851641][T19641] ? lockdep_hardirqs_on+0x78/0x100 [ 627.851655][T19641] __do_fast_syscall_32+0xe7/0x970 [ 627.851685][T19641] ? lockdep_hardirqs_on+0x78/0x100 [ 627.851700][T19641] do_fast_syscall_32+0x32/0x70 [ 627.851716][T19641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 627.851732][T19641] RIP: 0023:0xf700efec [ 627.851747][T19641] Code: Unable to access opcode bytes at 0xf700efc2. [ 627.851753][T19641] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 627.851766][T19641] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080007240 [ 627.851774][T19641] RDX: 0000000000000003 RSI: 000000000001c000 RDI: 0000000000000000 [ 627.851784][T19641] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 627.851793][T19641] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 627.851800][T19641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 627.851815][T19641] [ 627.960515][T19644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3468'. [ 627.963600][T19644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3468'. [ 628.353245][T19669] fuse: fd is not a fuse device [ 628.379532][ C3] bridge0: port 4(erspan0) entered learning state [ 628.382351][ C2] bridge0: port 2(bridge_slave_1) entered learning state [ 628.385503][ C2] bridge0: port 1(bridge_slave_0) entered learning state [ 628.391578][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 628.438139][ T42] audit: type=1326 audit(1785249088.659:23923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19670 comm="syz.7.3476" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb4fec code=0x0 [ 628.727787][T19685] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3481'. [ 629.358145][T19695] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3485'. [ 629.583633][T19716] netlink: 'syz.1.3490': attribute type 11 has an invalid length. [ 629.610579][T19716] bond0: option ad_actor_sys_prio: invalid value (0) [ 629.613007][T19716] bond0: option ad_actor_sys_prio: allowed values 1 - 65535 [ 629.617434][T19716] bond0 (unregistering): Released all slaves [ 630.333740][T19739] dlm: no local IP address has been set [ 630.338928][T19739] dlm: cannot start dlm midcomms -107 [ 630.418153][T19761] fuse: fd is not a fuse device [ 630.431362][T19763] syzkaller1: entered promiscuous mode [ 630.433431][T19763] syzkaller1: entered allmulticast mode [ 630.680124][T19784] overlayfs: missing 'lowerdir' [ 630.705938][T19786] can: request_module (can-proto-3) failed. [ 631.026315][T19803] bridge0: port 5(syz_tun) entered blocking state [ 631.031254][T19803] bridge0: port 5(syz_tun) entered disabled state [ 631.038871][T19803] syz_tun: entered allmulticast mode [ 631.048383][T19803] bridge0: port 5(syz_tun) entered blocking state [ 631.050622][T19803] bridge0: port 5(syz_tun) entered listening state [ 631.114597][T19809] netlink: 'syz.1.3519': attribute type 8 has an invalid length. [ 631.389245][T14296] usb 12-1: new high-speed USB device number 33 using dummy_hcd [ 631.493002][T19833] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3528'. [ 631.549315][T14296] usb 12-1: Using ep0 maxpacket: 32 [ 631.554124][T14296] usb 12-1: unable to get BOS descriptor or descriptor too short [ 631.558876][T14296] usb 12-1: config 14 has an invalid interface number: 57 but max is 1 [ 631.568399][T14296] usb 12-1: config 14 has an invalid interface number: 228 but max is 1 [ 631.574179][T14296] usb 12-1: config 14 has no interface number 0 [ 631.576271][T14296] usb 12-1: config 14 has no interface number 1 [ 631.589261][T14296] usb 12-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 631.592951][T14296] usb 12-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 631.605054][T14296] usb 12-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 631.611229][T14296] usb 12-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 631.621706][T14296] usb 12-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 631.629113][T14296] usb 12-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 631.639120][T14296] usb 12-1: config 14 interface 57 has no altsetting 0 [ 631.643715][T14296] usb 12-1: config 14 interface 228 has no altsetting 0 [ 631.651329][T14296] usb 12-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 631.655724][T14296] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.659679][T14296] usb 12-1: Product: syz [ 631.661112][T14296] usb 12-1: Manufacturer: syz [ 631.662631][T14296] usb 12-1: SerialNumber: syz [ 631.776979][T19846] binder: BINDER_SET_CONTEXT_MGR already set [ 631.779800][T19846] binder: 19845:19846 ioctl 4018620d 80000040 returned -16 [ 632.081133][T14296] legousbtower 12-1:14.57: interrupt endpoints not found [ 632.482712][T14296] legousbtower 12-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 632.495532][T14296] legousbtower 12-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 632.526804][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3535'. [ 632.994685][ T42] audit: type=1326 audit(1785249093.219:23924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19875 comm="syz.2.3542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 632.998935][T19876] netlink: 'syz.2.3542': attribute type 1 has an invalid length. [ 633.019596][ T42] audit: type=1326 audit(1785249093.219:23925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19875 comm="syz.2.3542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 633.027975][T19876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 633.048548][ T42] audit: type=1326 audit(1785249093.219:23926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19875 comm="syz.2.3542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 633.074397][ T42] audit: type=1326 audit(1785249093.219:23927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19875 comm="syz.2.3542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 633.085894][ T42] audit: type=1326 audit(1785249093.219:23928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19875 comm="syz.2.3542" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf700efec code=0x7ffc0000 [ 633.095156][ T42] audit: type=1326 audit(1785249093.219:23929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19875 comm="syz.2.3542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 633.105106][ T42] audit: type=1326 audit(1785249093.219:23930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19875 comm="syz.2.3542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 633.115281][ T42] audit: type=1326 audit(1785249093.219:23931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19875 comm="syz.2.3542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 633.125194][ T42] audit: type=1326 audit(1785249093.219:23932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19875 comm="syz.2.3542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 633.194324][T19876] bond1: (slave dummy0): making interface the new active one [ 633.201549][T19876] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 633.214832][T13097] usb 12-1: USB disconnect, device number 33 [ 633.242140][T13097] legousbtower 12-1:14.228: LEGO USB Tower #-160 now disconnected [ 633.279688][T19885] No source specified [ 633.288108][T19885] fuse: Unknown parameter 'jffs2' [ 633.434174][ T5754] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 633.443178][ T5754] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 633.447613][ T5754] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 633.451291][ T5754] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 633.454685][ T5754] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 633.487356][T12881] bridge0: port 5(syz_tun) entered disabled state [ 633.549189][ T1045] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 633.554731][T12881] syz_tun (unregistering): left allmulticast mode [ 633.564195][T12881] bridge0: port 5(syz_tun) entered disabled state [ 633.699256][ T1045] usb 7-1: device descriptor read/64, error -71 [ 633.810159][T19887] lo speed is unknown, defaulting to 1000 [ 633.949598][ T1045] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 634.077118][T19908] [U] e [ 634.079368][ T1045] usb 7-1: device descriptor read/64, error -71 [ 634.085634][T19887] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.088651][T19887] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.093277][T19887] bridge_slave_0: entered allmulticast mode [ 634.096649][T19887] bridge_slave_0: entered promiscuous mode [ 634.100113][T19887] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.109344][T19887] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.114890][T19887] bridge_slave_1: entered allmulticast mode [ 634.120557][T19887] bridge_slave_1: entered promiscuous mode [ 634.147105][T19887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.155167][T19915] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3551'. [ 634.164393][T19887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.189754][ T1045] usb usb7-port1: attempt power cycle [ 634.205705][T19915] lo speed is unknown, defaulting to 1000 [ 634.216381][T19887] team0: Port device team_slave_0 added [ 634.233753][T19887] team0: Port device team_slave_1 added [ 634.274449][T19887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.277125][T19887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.286510][T19887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.295854][T19887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.298259][T19887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.307905][T19887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.342091][T19887] hsr_slave_0: entered promiscuous mode [ 634.345648][T19887] hsr_slave_1: entered promiscuous mode [ 634.347816][T19887] debugfs: 'hsr0' already exists in 'hsr' [ 634.350323][T19887] Cannot create hsr debugfs directory [ 634.427861][T19919] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3552'. [ 634.433505][T19919] netlink: 'syz.7.3552': attribute type 6 has an invalid length. [ 634.436797][T19919] netlink: 'syz.7.3552': attribute type 5 has an invalid length. [ 634.440611][T19919] netlink: 'syz.7.3552': attribute type 4 has an invalid length. [ 634.529355][ T1045] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 634.549977][ T1045] usb 7-1: device descriptor read/8, error -71 [ 634.745774][T19925] overlayfs: failed to clone upperpath [ 634.799445][ T1045] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 634.826158][ T1045] usb 7-1: device descriptor read/8, error -71 [ 634.850818][T19887] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.856819][T19887] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.918656][T19933] bridge0: port 3(syz_tun) entered disabled state [ 634.921907][T19933] syz_tun: left allmulticast mode [ 634.924019][T19933] syz_tun: left promiscuous mode [ 634.926375][T19933] bridge0: port 3(syz_tun) entered disabled state [ 634.940107][ T1045] usb usb7-port1: unable to enumerate USB device [ 634.944719][T19933] syz_tun: entered allmulticast mode [ 635.000743][T11565] usb 12-1: new high-speed USB device number 34 using dummy_hcd [ 635.008332][T19887] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.012018][T19887] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.149854][T19887] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.154116][T19887] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.159180][T11565] usb 12-1: Using ep0 maxpacket: 8 [ 635.164936][T11565] usb 12-1: config 179 has an invalid interface number: 65 but max is 0 [ 635.175924][T11565] usb 12-1: config 179 has no interface number 0 [ 635.180133][T11565] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 635.193967][T11565] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 635.202181][T11565] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 635.207709][T11565] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 635.213756][T11565] usb 12-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 635.220581][T11565] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 635.224664][T11565] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.238820][T19928] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 635.318145][T19887] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.322819][T19887] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.499754][ T5749] Bluetooth: hci5: command tx timeout [ 635.514894][T19887] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 635.521067][T19887] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 635.524007][T19887] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 635.528385][T19887] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 635.531626][T19887] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 635.542543][T19887] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 635.576039][T19887] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 635.588130][T19887] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 635.623052][ T34] usb 12-1: USB disconnect, device number 34 [ 635.623165][ C0] xpad 12-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 635.629164][ C0] xpad 12-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 635.633782][ C0] ================================================================== [ 635.637627][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23b/0x260 [ 635.640914][ C0] Read of size 4 at addr ffff88806b8a585c by task syz.6.3558/19934 [ 635.644732][ C0] [ 635.646564][ C0] CPU: 0 UID: 0 PID: 19934 Comm: syz.6.3558 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.646591][ C0] Tainted: [L]=SOFTLOCKUP [ 635.646597][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 635.646607][ C0] Call Trace: [ 635.646613][ C0] [ 635.646620][ C0] dump_stack_lvl+0x100/0x190 [ 635.646644][ C0] print_report+0x13d/0x4b0 [ 635.646667][ C0] ? __virt_addr_valid+0x239/0x430 [ 635.646686][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 635.646703][ C0] kasan_report+0xdf/0x1c0 [ 635.646728][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 635.646749][ C0] do_raw_spin_lock+0x23b/0x260 [ 635.646767][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 635.646785][ C0] ? kcov_remote_stop+0x201/0x540 [ 635.646808][ C0] ? kcov_remote_stop+0x201/0x540 [ 635.646831][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 635.646849][ C0] ? __wake_up+0x1c/0x60 [ 635.646872][ C0] __wake_up+0x1c/0x60 [ 635.646893][ C0] usb_anchor_resume_wakeups+0xc7/0xf0 [ 635.646914][ C0] __usb_hcd_giveback_urb+0x3d6/0x610 [ 635.646943][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 635.646973][ C0] dummy_timer+0xdb2/0x36f0 [ 635.646997][ C0] ? find_held_lock+0x2b/0x80 [ 635.647019][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 635.647045][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 635.647074][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 635.647093][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 635.647116][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 635.647139][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 635.647153][ C0] ? rcu_is_watching+0x12/0xc0 [ 635.647174][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 635.647191][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 635.647205][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 635.647226][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 635.647245][ C0] handle_softirqs+0x1ea/0x9b0 [ 635.647262][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 635.647278][ C0] ? _raw_spin_unlock+0x28/0x50 [ 635.647292][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 635.647317][ C0] __irq_exit_rcu+0x162/0x210 [ 635.647337][ C0] irq_exit_rcu+0x9/0x30 [ 635.647357][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 635.647379][ C0] [ 635.647385][ C0] [ 635.647392][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 635.647414][ C0] RIP: 0010:do_int80_emulation+0xd3/0x720 [ 635.647440][ C0] Code: 0f 85 58 06 00 00 8b 43 50 48 c7 43 50 da ff ff ff 48 89 43 78 41 83 4c 24 10 02 4c 8b 6b 78 e8 63 09 5a f6 fb 4d 8b 74 24 08 <41> f6 c6 bf 0f 84 9b 01 00 00 41 f6 c6 20 0f 85 c5 02 00 00 41 f6 [ 635.647458][ C0] RSP: 0000:ffffc900069f7f10 EFLAGS: 00000206 [ 635.647477][ C0] RAX: 0000000000013b8b RBX: ffffc900069f7f48 RCX: 0000000000000000 [ 635.647489][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a83a9 RDI: ffffffff8c400980 [ 635.647501][ C0] RBP: ffffc900069f7f38 R08: 0000000000000001 R09: 0000000000000000 [ 635.647513][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801cb70000 [ 635.647525][ C0] R13: 00000000000000ad R14: 0000000000000001 R15: 0000000000000000 [ 635.647546][ C0] asm_int80_emulation+0x1a/0x20 [ 635.647565][ C0] RIP: 0023:0xf70cf017 [ 635.647578][ C0] Code: 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 77 00 00 00 cd 80 0f 0b 90 2e 8d 74 26 00 b8 ad 00 00 00 cd 80 <0f> 0b 90 90 90 90 90 90 90 55 31 c9 89 e5 57 8b 45 0c 8b 55 10 8b [ 635.647592][ C0] RSP: 002b:00000000ffa4e180 EFLAGS: 00000282 ORIG_RAX: 00000000000000ad [ 635.647605][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000ffa4e20c [ 635.647615][ C0] RDX: 00000000ffa4e18c RSI: 00000000ffa4ee1c RDI: 0000000000000000 [ 635.647625][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 635.647633][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.647643][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 635.647657][ C0] [ 635.647663][ C0] [ 635.780527][ C0] Allocated by task 11565: [ 635.782053][ C0] kasan_save_stack+0x30/0x50 [ 635.783756][ C0] kasan_save_track+0x14/0x30 [ 635.785477][ C0] __kasan_kmalloc+0xaa/0xb0 [ 635.787210][ C0] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 635.789165][ C0] xpad_probe+0x28e/0x1f60 [ 635.790676][ C0] usb_probe_interface+0x303/0x8f0 [ 635.792279][ C0] really_probe+0x241/0xa60 [ 635.793766][ C0] __driver_probe_device+0x20e/0x450 [ 635.795698][ C0] driver_probe_device+0x4a/0x140 [ 635.797413][ C0] __device_attach_driver+0x1df/0x320 [ 635.799173][ C0] bus_for_each_drv+0x159/0x1e0 [ 635.801239][ C0] __device_attach+0x1e4/0x4d0 [ 635.802926][ C0] device_initial_probe+0xaf/0xd0 [ 635.804633][ C0] bus_probe_device+0x64/0x160 [ 635.806210][ C0] device_add+0x121d/0x1970 [ 635.807689][ C0] usb_set_configuration+0xd97/0x1c60 [ 635.809436][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 635.811130][ C0] usb_probe_device+0xef/0x400 [ 635.812912][ C0] really_probe+0x241/0xa60 [ 635.814707][ C0] __driver_probe_device+0x20e/0x450 [ 635.816878][ C0] driver_probe_device+0x4a/0x140 [ 635.818783][ C0] __device_attach_driver+0x1df/0x320 [ 635.820721][ C0] bus_for_each_drv+0x159/0x1e0 [ 635.822568][ C0] __device_attach+0x1e4/0x4d0 [ 635.824503][ C0] device_initial_probe+0xaf/0xd0 [ 635.826369][ C0] bus_probe_device+0x64/0x160 [ 635.827965][ C0] device_add+0x121d/0x1970 [ 635.829734][ C0] usb_new_device.cold+0x685/0x115c [ 635.831736][ C0] hub_event+0x30a3/0x4a60 [ 635.833486][ C0] process_one_work+0xa23/0x1940 [ 635.835413][ C0] worker_thread+0x5ef/0xe50 [ 635.837232][ C0] kthread+0x370/0x450 [ 635.838865][ C0] ret_from_fork+0x72b/0xd50 [ 635.840919][ C0] ret_from_fork_asm+0x1a/0x30 [ 635.842975][ C0] [ 635.843974][ C0] Freed by task 34: [ 635.845433][ C0] kasan_save_stack+0x30/0x50 [ 635.847053][ C0] kasan_save_track+0x14/0x30 [ 635.848641][ C0] kasan_save_free_info+0x3b/0x70 [ 635.850197][ C0] __kasan_slab_free+0x5f/0x80 [ 635.851676][ C0] kfree+0x22b/0x6c0 [ 635.852936][ C0] xpad_disconnect+0x1cf/0x530 [ 635.854445][ C0] usb_unbind_interface+0x1dd/0x9e0 [ 635.856089][ C0] device_remove+0x12a/0x180 [ 635.857588][ C0] device_release_driver_internal+0x44e/0x620 [ 635.859673][ C0] bus_remove_device+0x2bc/0x560 [ 635.861387][ C0] device_del+0x376/0x9b0 [ 635.862904][ C0] usb_disable_device+0x367/0x810 [ 635.864440][ C0] usb_disconnect+0x2e2/0x9a0 [ 635.865935][ C0] hub_event+0x1c4f/0x4a60 [ 635.867318][ C0] process_one_work+0xa23/0x1940 [ 635.868880][ C0] worker_thread+0x5ef/0xe50 [ 635.870316][ C0] kthread+0x370/0x450 [ 635.871580][ C0] ret_from_fork+0x72b/0xd50 [ 635.873024][ C0] ret_from_fork_asm+0x1a/0x30 [ 635.874512][ C0] [ 635.875400][ C0] The buggy address belongs to the object at ffff88806b8a5800 [ 635.875400][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 635.879911][ C0] The buggy address is located 92 bytes inside of [ 635.879911][ C0] freed 1024-byte region [ffff88806b8a5800, ffff88806b8a5c00) [ 635.884545][ C0] [ 635.885385][ C0] The buggy address belongs to the physical page: [ 635.887439][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6b8a0 [ 635.890092][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 635.892691][ C0] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 635.895036][ C0] page_type: f5(slab) [ 635.896282][ C0] raw: 04fff00000000040 ffff88801bc42dc0 dead000000000100 dead000000000122 [ 635.899175][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 635.902209][ C0] head: 04fff00000000040 ffff88801bc42dc0 dead000000000100 dead000000000122 [ 635.905044][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 635.907698][ C0] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 635.910404][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 635.913071][ C0] page dumped because: kasan: bad access detected [ 635.915072][ C0] page_owner tracks the page as allocated [ 635.916831][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 61, tgid 61 (kworker/u33:3), ts 406142756061, free_ts 406130888004 [ 635.923329][ C0] post_alloc_hook+0xfd/0x120 [ 635.924829][ C0] get_page_from_freelist+0xf48/0x3530 [ 635.926543][ C0] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 635.928444][ C0] new_slab+0xa2/0x640 [ 635.929751][ C0] refill_objects+0xe3/0x410 [ 635.931244][ C0] __pcs_replace_empty_main+0x376/0x680 [ 635.933066][ C0] __kmalloc_noprof+0x66d/0x820 [ 635.934608][ C0] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 635.936502][ C0] ieee80211_inform_bss+0x159/0x1170 [ 635.938150][ C0] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 635.940045][ C0] cfg80211_inform_bss_data+0x230/0x3b60 [ 635.941778][ C0] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 635.943659][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 635.945458][ C0] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 635.947466][ C0] ieee80211_iface_work+0xa9a/0x1070 [ 635.949295][ C0] cfg80211_wiphy_work+0x2b7/0x550 [ 635.951015][ C0] page last free pid 11187 tgid 11187 stack trace: [ 635.953014][ C0] free_pages_prepare+0x586/0xd80 [ 635.954556][ C0] __free_contig_range_common+0x14f/0x250 [ 635.956551][ C0] free_pages_bulk+0x12a/0x200 [ 635.958221][ C0] vm_area_free_pages+0xad/0x2b0 [ 635.959780][ C0] vfree+0x107/0x750 [ 635.961106][ C0] delayed_vfree_work+0x56/0x80 [ 635.962693][ C0] process_one_work+0xa23/0x1940 [ 635.964326][ C0] worker_thread+0x5ef/0xe50 [ 635.965948][ C0] kthread+0x370/0x450 [ 635.967386][ C0] ret_from_fork+0x72b/0xd50 [ 635.968974][ C0] ret_from_fork_asm+0x1a/0x30 [ 635.970547][ C0] [ 635.971302][ C0] Memory state around the buggy address: [ 635.973018][ C0] ffff88806b8a5700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 635.975477][ C0] ffff88806b8a5780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 635.977922][ C0] >ffff88806b8a5800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 635.980372][ C0] ^ [ 635.982467][ C0] ffff88806b8a5880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 635.985056][ C0] ffff88806b8a5900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 635.987917][ C0] ================================================================== [ 635.990749][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 635.993172][ C0] CPU: 0 UID: 0 PID: 19934 Comm: syz.6.3558 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.996379][ C0] Tainted: [L]=SOFTLOCKUP [ 635.997694][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 636.000739][ C0] Call Trace: [ 636.001773][ C0] [ 636.002667][ C0] dump_stack_lvl+0x100/0x190 [ 636.004110][ C0] vpanic+0x552/0x970 [ 636.005395][ C0] ? __pfx_vpanic+0x10/0x10 [ 636.006789][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 636.008340][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 636.009911][ C0] panic+0xd1/0xe0 [ 636.011061][ C0] ? __pfx_panic+0x10/0x10 [ 636.012501][ C0] ? end_report.part.0+0x23/0x90 [ 636.014057][ C0] ? rcu_is_watching+0x12/0xc0 [ 636.015607][ C0] ? end_report.part.0+0x23/0x90 [ 636.017182][ C0] ? check_panic_on_warn+0x1f/0x90 [ 636.018881][ C0] check_panic_on_warn.cold+0x19/0x34 [ 636.020854][ C0] end_report.part.0+0x3a/0x90 [ 636.022522][ C0] kasan_report.cold+0xe/0x18 [ 636.024012][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 636.025582][ C0] do_raw_spin_lock+0x23b/0x260 [ 636.027094][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 636.028752][ C0] ? kcov_remote_stop+0x201/0x540 [ 636.030342][ C0] ? kcov_remote_stop+0x201/0x540 [ 636.032112][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 636.034083][ C0] ? __wake_up+0x1c/0x60 [ 636.035637][ C0] __wake_up+0x1c/0x60 [ 636.037144][ C0] usb_anchor_resume_wakeups+0xc7/0xf0 [ 636.038777][ C0] __usb_hcd_giveback_urb+0x3d6/0x610 [ 636.040641][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 636.042641][ C0] dummy_timer+0xdb2/0x36f0 [ 636.044369][ C0] ? find_held_lock+0x2b/0x80 [ 636.046032][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 636.048012][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 636.049805][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 636.051620][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 636.053405][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 636.055482][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 636.057153][ C0] ? rcu_is_watching+0x12/0xc0 [ 636.058807][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 636.060631][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 636.062151][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 636.063758][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 636.065475][ C0] handle_softirqs+0x1ea/0x9b0 [ 636.067073][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 636.068961][ C0] ? _raw_spin_unlock+0x28/0x50 [ 636.070761][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 636.072695][ C0] __irq_exit_rcu+0x162/0x210 [ 636.074270][ C0] irq_exit_rcu+0x9/0x30 [ 636.075614][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 636.077469][ C0] [ 636.078460][ C0] [ 636.079387][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 636.081327][ C0] RIP: 0010:do_int80_emulation+0xd3/0x720 [ 636.083321][ C0] Code: 0f 85 58 06 00 00 8b 43 50 48 c7 43 50 da ff ff ff 48 89 43 78 41 83 4c 24 10 02 4c 8b 6b 78 e8 63 09 5a f6 fb 4d 8b 74 24 08 <41> f6 c6 bf 0f 84 9b 01 00 00 41 f6 c6 20 0f 85 c5 02 00 00 41 f6 [ 636.089064][ C0] RSP: 0000:ffffc900069f7f10 EFLAGS: 00000206 [ 636.090923][ C0] RAX: 0000000000013b8b RBX: ffffc900069f7f48 RCX: 0000000000000000 [ 636.093583][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a83a9 RDI: ffffffff8c400980 [ 636.096192][ C0] RBP: ffffc900069f7f38 R08: 0000000000000001 R09: 0000000000000000 [ 636.098650][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801cb70000 [ 636.101089][ C0] R13: 00000000000000ad R14: 0000000000000001 R15: 0000000000000000 [ 636.103430][ C0] asm_int80_emulation+0x1a/0x20 [ 636.105004][ C0] RIP: 0023:0xf70cf017 [ 636.106310][ C0] Code: 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 77 00 00 00 cd 80 0f 0b 90 2e 8d 74 26 00 b8 ad 00 00 00 cd 80 <0f> 0b 90 90 90 90 90 90 90 55 31 c9 89 e5 57 8b 45 0c 8b 55 10 8b [ 636.112356][ C0] RSP: 002b:00000000ffa4e180 EFLAGS: 00000282 ORIG_RAX: 00000000000000ad [ 636.115069][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000ffa4e20c [ 636.117587][ C0] RDX: 00000000ffa4e18c RSI: 00000000ffa4ee1c RDI: 0000000000000000 [ 636.119996][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 636.122419][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.124839][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 636.127031][ C0] [ 636.128689][ C0] Kernel Offset: disabled [ 636.130049][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:19:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a123a5 RDI=ffffffff9b9f31a0 RBP=ffffffff9b9f3160 RSP=ffffc900000074f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3630383838666666 R12=0000000000000000 R13=0000000000000035 R14=ffffffff9b6f322e R15=ffffffff85a12340 RIP=ffffffff85a123cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096be3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7288950 CR3=0000000070116000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000134c9dd RBX=ffff88801c742540 RCX=ffffffff8bb872d5 RDX=0000000000000000 RSI=ffffffff8e1a83a9 RDI=ffffffff8c400980 RBP=ffffed10038e84a8 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bb8589f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ce3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7ef3500 CR3=00000000244a5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbf459f2b 00007ffdbf459f2b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbf45a430 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbf45a430 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7375202d206e695f 7172695f64617078 203a35362e393731 3a312d3231206400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7375202720646355 7172635564617072 2030353624333731 3031273231206400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 735f627375202d20 74756f5f7172695f 64617078203a3536 2e3937313a312d32 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3332203a65756c61 76207327726f7470 6972637365642065 6361667265746e69 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20656874206d6f72 6620746e65726566 666964202c73726f 7470697263736564 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20746e696f70646e 6520322073616820 3020676e69747465 73746c6120353620 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656361667265746e 6920393731206769 666e6f63203a312d 323120627375205d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff888028c6f800 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffff888028c6f802 RBP=dffffc0000000000 RSP=ffffc900040a6fd8 R8 =0000000000000001 R9 =ffffed100518df00 R10=ffff888028c6f803 R11=0000000000000000 R12=0000000000007ca2 R13=ffffed100518df00 R14=ffff88802b43c600 R15=0000000000000000 RIP=ffffffff8bbb7014 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4df9be6300 ffffffff 00c00000 GS =0000 ffff888096de3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000562f7c0c9f40 CR3=00000000523ec000 CR4=00352ef0 DR0=000000006000003f DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=cc63d0128fbc5532 e7c7464c53d92955 cc63d0128fbc5532 e7c7464c53d92955 cc63d0128fbc5532 e7c7464c53d92955 cc63d0128fbc5532 e7c7464c53d92955 ZMM18=246a878777003cb9 151c1d2f276e1b91 246a878777003cb9 151c1d2f276e1b91 246a878777003cb9 151c1d2f276e1b91 246a878777003cb9 151c1d2f276e1b91 ZMM19=1716000000000000 0000000000000004 1716000000000000 0000000000000003 1716000000000000 0000000000000002 1716000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0608002008000601 74be000400148080 0800000201c70800 08014ea000335379 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74742f7665642f01 ffffffffffffffff e908000300040035 b482080004800201 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c7080008004da200 6c6c696b66722f76 65642f01ffffffff ffffffffe7080480 ZMM24=276e1b91276e1b91 276e1b91276e1b91 276e1b91276e1b91 276e1b91276e1b91 276e1b91276e1b91 276e1b91276e1b91 276e1b91276e1b91 276e1b91276e1b91 ZMM25=151c1d2f151c1d2f 151c1d2f151c1d2f 151c1d2f151c1d2f 151c1d2f151c1d2f 151c1d2f151c1d2f 151c1d2f151c1d2f 151c1d2f151c1d2f 151c1d2f151c1d2f ZMM26=77003cb977003cb9 77003cb977003cb9 77003cb977003cb9 77003cb977003cb9 77003cb977003cb9 77003cb977003cb9 77003cb977003cb9 77003cb977003cb9 ZMM27=246a8787246a8787 246a8787246a8787 246a8787246a8787 246a8787246a8787 246a8787246a8787 246a8787246a8787 246a8787246a8787 246a8787246a8787 ZMM28=000000600000005f 0000005e0000005d 0000005c0000005b 0000005a00000059 0000005800000057 0000005600000055 0000005400000053 0000005200000051 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=1516000015160000 1516000015160000 1516000015160000 1516000015160000 1516000015160000 1516000015160000 1516000015160000 1516000015160000 info registers vcpu 3 CPU#3 RAX=ffff8880422a0000 RBX=0000000000000000 RCX=ffffc90000415110 RDX=0000000000000008 RSI=ffffc90000415100 RDI=ffff888028c6fc48 RBP=0000000000000000 RSP=ffffc900005e8e48 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888028c6f910 R13=dffffc0000000000 R14=ffff888028c6f800 R15=0000000000000001 RIP=ffffffff86b0714f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ee3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff 0000000000ff0000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000