last executing test programs: 8m4.622655405s ago: executing program 3 (id=993): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080fa0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) timerfd_create(0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) syz_usb_control_io(r0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='stm32g0-typec 0x3', 0x11) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r5, 0xc0105702, &(0x7f00000002c0)=0x3) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x3, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0xd}, @rand_addr=' \x01\x00', 0x10, 0x40, 0x7, 0x7c1b9c11}}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000240)=r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x4, 0x101, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x1000, 0x7, 0x800, 0x8007, 0xc76, 0xdd, 0x386, 0x101, 0x5, 0xfd, 0x21, 0x66b6, 0x4, 0x9, 0x8, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0x8, 0x7, 0x66c53844, 0xb7, 0x5, 0x913c, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0x8001, 0x5, 0x8, 0xa2e, 0xd, 0x3c8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x387, 0x400, 0x81, 0x0, 0xffff, 0xa5e, 0x7ff, 0x8, 0x4, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x0, 0x7b, 0x400, 0xd33c, 0x8, 0x56, 0x3, 0x800, 0x7, 0x6, 0x2, 0x4, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x5, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x80, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x8000, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0xfffffffe, 0xc6, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x4, 0x40, 0x18000000, 0xa, 0x5, 0x9, 0x0, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x8000, 0x1, 0x9, 0x7fffffff, 0x7, 0x5, 0x1, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd012, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x8, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0xdd5, 0x7fffffff, 0x10000000, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x3, 0x1, 0x101, 0x4, 0x1, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x81, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x1, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) write$tun(r4, &(0x7f00000010c0)={@val={0x0, 0x60}, @val={0x0, 0x0, 0xfffc, 0x1d, 0x465, 0xfdf5}, @mpls={[], @ipv6=@icmpv6={0x1, 0x6, 'V3\v', 0x30, 0x3a, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x5}, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x81, {0x1, 0x6, "1acd3a", 0x0, 0x3f, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1}}}}}}, 0x66) 7m59.189949645s ago: executing program 3 (id=1007): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_clone(0x80100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) setpgid(0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4100000e, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0xb7, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x2, 0x7f, 0x20c}, {0xf1c6, 0x7, 0x38, 0xf, 0x84, 0x7, 0x3, 0x8, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x2, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000, 0x0, 0x40], 0x60000}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m54.096484836s ago: executing program 3 (id=1021): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newsa={0x158, 0x10, 0x400, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffefff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xfffffffffffffffc, 0xd9, 0x4, 0x80000001}}]}, 0x158}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) open(0x0, 0xc100, 0x29) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d37", 0x20) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f00000022c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRES64=r1, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@assoc={0x10, 0x117, 0x4, 0x10}], 0x10, 0x40040}], 0x1, 0x8040) r4 = fsopen(&(0x7f00000002c0)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff91, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x1, 0xd55, 0x0, 0x0, 0x1000, 0xffffffff, r5, 0x0, 0x88}}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008011}, 0x40880) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x2}, 0x8) 7m53.032921568s ago: executing program 3 (id=1022): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000500)={0x8, "e3d509f2c24aa8f2"}) (fail_nth: 3) 7m50.903004497s ago: executing program 3 (id=1027): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000500)={0x8, "e3d509f2c24aa8f2"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) 7m47.953411582s ago: executing program 3 (id=1030): mkdir(&(0x7f0000000080)='local_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='local_sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='local_sys/devices/system/node/node0/hugepages/hugepages-1048576kB/demote_size\x00', 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="021605050a00000025bd7000fddbdf250800120001000400000000000000000006002b0007f900000600000000000000fe8000000000000000000000000000bb0a0101020000000000000000000000004c5d550ab145fde9e108e32e076ee9d3724499d3e7476b738fa8e50ba118ef835ae0792e6a853a110f364783c33a88a93980bb2ef1bd2b5914cc"], 0x50}}, 0x4c040) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ppoll(&(0x7f00000001c0)=[{r1, 0x4420}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x801, 0x100) listen(r3, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406a80016c0050003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f018951e5277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4b85ddfa1ba963d8469f5f6741f2cedef3d93452a", 0xd8}], 0x1}, 0x0) read(r0, &(0x7f0000000000)=""/7, 0x7) 7m34.901082906s ago: executing program 32 (id=1028): r0 = syz_io_uring_setup(0x152b, &(0x7f0000000040)={0x0, 0x816c, 0x0, 0x3, 0x33b}, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000200)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[], 0x114}], 0x1}, 0x24044010) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000240)={r1, 0x3, 0xc73, 0x1ff, 0x7ff}, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x25, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x8) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="24000000010006", 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r8, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) 7m32.112333664s ago: executing program 33 (id=1032): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 7m31.9876502s ago: executing program 34 (id=1031): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8b00, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x480c4) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./tracing\x00', 0x30) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x67) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) ioctl$CDROMREADAUDIO(r0, 0x31e, 0x0) 7m31.987556074s ago: executing program 35 (id=1030): mkdir(&(0x7f0000000080)='local_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='local_sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='local_sys/devices/system/node/node0/hugepages/hugepages-1048576kB/demote_size\x00', 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="021605050a00000025bd7000fddbdf250800120001000400000000000000000006002b0007f900000600000000000000fe8000000000000000000000000000bb0a0101020000000000000000000000004c5d550ab145fde9e108e32e076ee9d3724499d3e7476b738fa8e50ba118ef835ae0792e6a853a110f364783c33a88a93980bb2ef1bd2b5914cc"], 0x50}}, 0x4c040) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ppoll(&(0x7f00000001c0)=[{r1, 0x4420}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x801, 0x100) listen(r3, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406a80016c0050003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f018951e5277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4b85ddfa1ba963d8469f5f6741f2cedef3d93452a", 0xd8}], 0x1}, 0x0) read(r0, &(0x7f0000000000)=""/7, 0x7) 6m45.570150049s ago: executing program 4 (id=1061): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x101040, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x20000000000003, 0x1004}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x8, 0x0, 0xfffffffffffffffc, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9286649abd8d4f18, &(0x7f0000000240)={0x0, &(0x7f0000000040)}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}], 0x1) 6m43.247994038s ago: executing program 4 (id=1064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}]}, 0x30}}, 0x20000040) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@mcast2, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) setxattr$security_ima(&(0x7f0000000140)='.\x00', &(0x7f0000000040), &(0x7f00000000c0)=@ng={0x4, 0xe, "bc51cbfa"}, 0xfd56, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) 6m42.610658254s ago: executing program 6 (id=1065): r0 = openat$dma_heap(0xffffff9c, &(0x7f00000000c0), 0x408000, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000140)={0x8000000000000000, r1, 0x2}) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2}, &(0x7f0000000000)=0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) sendfile(r3, r3, 0x0, 0x1e66) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$OCFS2_IOC_GROUP_ADD(r5, 0x40186f02, &(0x7f0000000080)={0x5, 0x6, 0x7, 0x7fff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 6m42.478142963s ago: executing program 5 (id=1066): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, 0x0, 0x20042004) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x300, 0xfffffffffffffc36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./debug\x00', &(0x7f0000000300)='ntfs3\x00', 0x200040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) listen(r0, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 6m42.148278142s ago: executing program 5 (id=1067): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000000280)='GPL\x00') r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, 0x0}}], 0x2, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) getpriority(0x0, r0) r4 = syz_open_dev$video(&(0x7f0000000080), 0x8003, 0x105580) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x2, 0x10001}}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f00000001c0)={0x11, 0x0, r7, 0x1, 0x8}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) 6m42.034668692s ago: executing program 4 (id=1068): openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x181041, 0x11) mount(&(0x7f0000004a00)=@nullb, &(0x7f0000004a40)='./file0\x00', &(0x7f0000004a80)='nfs\x00', 0x0, &(0x7f0000004ac0)='\x00') socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000006000079b005"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r2 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000340)={&(0x7f0000000380)=[{0x1e, 0x5011, 0x0, 0x0}], 0x1}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000240)={0x2, 0x0, [{0x5, 0x1, 0x1, 0x0, @irqchip={0x40, 0xfffff7b8}}, {0x3, 0x6, 0x0, 0x0, @irqchip={0x3, 0x10001}}]}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x81}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write(r6, &(0x7f0000000140)='1\x00', 0x1) openat(r6, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0xfc94c54f54391741, 0x188) 6m40.838503769s ago: executing program 5 (id=1070): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000680)=[{0x1, 0x4, 0xe, 0xa}, {0x3, 0x1, 0x0, 0x6}, {0x2, 0x1, 0xb, 0xd}, {0x0, 0x1, 0xd, 0xa}], 0x10, 0x1ff}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) unshare(0x2c060000) unshare(0x2a060400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) 6m39.208505549s ago: executing program 6 (id=1071): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newsa={0x158, 0x10, 0x400, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffefff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xfffffffffffffffc, 0xd9, 0x4, 0x80000001}}]}, 0x158}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) open(0x0, 0xc100, 0x29) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d37", 0x20) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f00000022c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRES64=r1, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@assoc={0x10, 0x117, 0x4, 0x10}], 0x10, 0x40040}], 0x1, 0x8040) r3 = fsopen(&(0x7f00000002c0)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff91, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x1, 0xd55, 0x0, 0x0, 0x1000, 0xffffffff, r4, 0x0, 0x88}}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008011}, 0x40880) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x2}, 0x8) 6m39.024770071s ago: executing program 7 (id=1072): r0 = socket(0x2a, 0x2, 0x4) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0xffeffff8, 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) socket$igmp(0x2, 0x3, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2c5082, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc828}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7ffffffe, 0x8}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8014}, 0x4000040) sendto$inet(r0, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmmsg$unix(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002040, 0x0) 6m37.416874098s ago: executing program 5 (id=1073): syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x350, 0x3d8, 0x3d8, 0x350, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1dc, 0x244, 0x0, {}, [@common=@rt={{0x138}, {0x6, [0x400, 0x9], 0x1109442d, 0x2, 0x7, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x40}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, @local, @rand_addr=' \x01\x00', @private0, @private1, @local, @empty, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback], 0xfc}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xb, 0x911, 0x0, 0x5, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, [0x0, 0x0, 0xff, 0xffffffff], [0xff, 0xff000000, 0x0, 0xff000000], 'netdevsim0\x00', 'ip_vti0\x00', {}, {0xff}, 0x21, 0xf4, 0x0, 0x5}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1d, 0x0, 0xfffffffc, 0x0, 'syz1\x00', 'syz0\x00', {0x9}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x474) r1 = syz_open_dev$I2C(0x0, 0x0, 0x40) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf25210000000c000500000800000000000009001f0070687931000000000a0001007770616e33000000050020"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x64008000) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x40}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e23, 0x37ffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) sendmmsg(r8, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0xc, 0x119, 0xc}], 0xc}}], 0x1, 0x4000000) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4ea0, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) stat64(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000f2ffb70300000000000a850000000c000000b7000000000000009500000000000000", @ANYRES32=r4, @ANYBLOB="1809000000000000000000000000000018120000", @ANYRESHEX=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) 6m37.386344631s ago: executing program 6 (id=1074): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000500740000"], 0x38}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) r3 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000600)={'syz1\x00', {0x8001, 0xff2b, 0x1, 0x7}, 0x41, [0x7, 0x4, 0x8, 0x3, 0x337, 0x23, 0x2, 0xa, 0x83, 0x8, 0x71, 0x6, 0x3, 0x40, 0x4, 0x7, 0x7f, 0x7fffffff, 0x4, 0x8, 0x0, 0xad, 0x999, 0x8072, 0xfffffb6b, 0x8000, 0x100, 0x0, 0x7, 0xb5, 0x1, 0x3, 0x6, 0x1, 0xffff0001, 0xabc, 0x10, 0x800, 0x7, 0x3, 0x2, 0x8001, 0xe3a, 0x8001, 0x5, 0x9, 0x8, 0x3, 0x9, 0x10001, 0x3, 0xb, 0x9, 0x8, 0x6, 0x7, 0x1, 0x100, 0xd9, 0x2, 0x0, 0x186d, 0x0, 0x8], [0xf, 0x2, 0x5, 0x10000, 0x5d, 0x9, 0x5, 0xcb4, 0x1ff, 0x1, 0x2, 0x95f4, 0xfffffeff, 0xff, 0x2, 0x4, 0xa, 0xffffffe1, 0xfffffff9, 0xe02d, 0x50e7, 0x9, 0x7, 0x0, 0x8, 0xa, 0x8, 0x2, 0x1, 0xdf, 0x7cd, 0x10c, 0x20, 0x3, 0x5, 0x80, 0x4, 0x80000000, 0x100000, 0xfffffffb, 0x1ff, 0xfffffc00, 0x2, 0x2, 0x4, 0x8, 0xf6, 0x0, 0x5, 0x9, 0x600000, 0x7, 0x0, 0x100, 0x10000, 0x8, 0x5ded, 0x5, 0xb, 0xee, 0x10, 0x6, 0xae, 0x5], [0x9, 0x1, 0x6, 0x0, 0x4c1, 0xc, 0x8003, 0x80000000, 0x7, 0x9, 0x5, 0x76, 0x27df2b69, 0x8, 0x80000001, 0x0, 0x6, 0x5, 0x4, 0x6, 0x9, 0x800, 0x8c8, 0x6, 0xf, 0x8, 0x0, 0x8001, 0x8, 0x1, 0xc2, 0x5, 0x6, 0x1, 0xb8, 0x8, 0x3, 0x5, 0x2, 0x6, 0x3e, 0x4806c43, 0x6, 0x400, 0x1, 0x8001, 0x7, 0xfffffffc, 0x3, 0x7fffffff, 0x7ff, 0x4, 0x8, 0x8, 0x401, 0x5ad, 0xfffffff4, 0x5, 0x5, 0x100, 0xfff, 0xc, 0x0, 0xfffffe00], [0x8, 0x0, 0x4, 0xffffff30, 0x8aa0, 0x401, 0xffffff69, 0x8, 0x5, 0x3, 0x9a, 0x80000000, 0x6, 0x6, 0x80, 0x4, 0x9, 0x7, 0x1, 0x1000000, 0x2, 0x4, 0xfffff000, 0x5, 0x3, 0x1, 0xfffffffa, 0x4, 0xd, 0x3, 0x80000000, 0x200, 0x6, 0x0, 0x5, 0x8, 0x4, 0x9, 0x687e, 0x4, 0x5, 0xfffffac1, 0x4, 0x8, 0x0, 0x2, 0xfff, 0x4, 0xce6c, 0x6, 0x5, 0x100, 0x400, 0x2e9a, 0x8, 0x1, 0x5, 0x0, 0x10000, 0x4, 0xb, 0x9, 0x2, 0x300]}, 0x45c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_io_uring_setup(0xf00, &(0x7f0000000300)={0x0, 0x595f, 0x40, 0x0, 0x51}, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_emit_ethernet(0x1684, &(0x7f0000000480)={@random="bb622ac1eb87", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, '\x00', 0x164e, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x1, 0xa, 0x4d38714, 0xc, [{0x3, 0x1d, "7abd44496fa944496fa99d4d4db315d53e60fb207f00e8c5d57f12a35539f156775cf2d8f6ea9ee9093b8bb270628bde736d9b7efad2454cfb80ffc98b8563fb473763d16d4a728ef891351ea12e6afd78b087ad202fad648b4c202abdf7afd2b970e7702586d6c458ee3cb24b7c8c5982a0bc5d7ea0d8e689c93224bdc3353c912ad55730f06b7592effa5a52558d95c040514e17b06d307287a8efc188a875b1393dbcb303065b6cbcadafb450bf7012dcc1f146a92b2038a4191079d075b790d2a4e3466e1d0129c83bbfff251d37d688347d967bbc1e7d90ce38e827817808f2476c5e91dc54"}, {0x4, 0xb, "3d1a8fb095d9c68af01898d1a30afa6a0e8541f4cf433d18fd63d92138f80029cdea26de5d05433c7426fe0aed3af561fdc12eef0bae63ef26dda26f2886a01b7083ee10ff57da90d57353ff1c5980377afab2a7482d76c745"}, {0x1f, 0x17f, "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"}, {0x3d, 0x11f, "95924f331203810718181eee907b0efeb600cf38306d7b5380486cdcec2f2a947cdc488b2fc358ff38bd13730643cd896539b3282680d75f839f35bce3294f8836d9244ec4bc7f21753486415f0b8441a805adc71bacea22ddfcfa654343316fe2891b2a7f84c271bef8bf2b9306b4863f8d9a08e9a159a95d85b2c1dd13e2b42c44ed9a6a09abfbcf87b79f4873ae39332ffdd098a6bed8b2a1daf3d176ca1d3aa42d9c7363b9422719c1d606d127d2da4a133a4e2c2746a9201a22944eeedafe24b4271d5f8e40f2368c38c5f669d32b404fcb7d83a5561bf4b9b44c2ad13d5db54a0891e3a61c499ca235bb5a09f2f030c1357e96fd2ba00fa739aebd6c7621b7546915002157a71a594de5971974eb4d4dcdb97d6a925c8e2b64c862a00d4195da1ab52f2e373bf1632577e323e331b291f5c77c0c25d693270cf0f014eb1a7aa38788f9f8f69fccbdc69cf793aa9a36428a9408221528bbcd9263735df656684e5d389615d5c77827e1d124af703aac4ded0492996355ce09b2bbccc058f227a0c84dad1917e5c945fcea03d711865db78c8f6773f13c365a092fcb697533090f1e46d3aa54285e55e44a6e2d8af29da0fba29c1c6f5b6345835a20ab3b2cf61986a923bd85af6a4c75bf4e2d106161e75eef3042886e47dbbec0239342a7fc24aeb9062bdb5a57f2e027d15b8c4e534352c36bb6dd13fe93130034f1633550f32f07f0967316e4f200b259f842f31ba8299ace5a00e913649379447dd0cd19690cf4259c4647eaaf8031e5e2386da8ecea9cbcc1fac278b08e9516b71606a26c93f03745de113a7efca128f527659f577a4771941fdabc426699df76293cea6a558d16103b2e46aa5d0e717213f725a17ecbb4e9961e33551310fcb92b4d82377db05c92d220694210f589562592a64fc748240c9db61b852925398c0eebabab7b480f89e926c277b914b40d127be1d02bca30f6875122c499277cde10140ec81f80650ddb671a8ed9890ea6ebc8c6ff022802cc1a0a622c2988a10359544ffb51679a2b111025e623326f5dc671a4ccbc5477dedd7d344ac456f1ee95317cefb6b67daddef7d4d499e52806ccae488b425c2f3640933007864fa033f767a842c588290e4c36754b298ae217a8101de5e68f9a7cb73a009ffcab032340edb7b17ece42d90a9764ae6be99e08a847c8d7ea2aee62e6edb8732cb90d9e16deba086c7a69c83b3a340928feb35461768ab723d3f8a96cca59ab72bfae7fb3a8d14056adf9eb24878158ccf734dfeaddde77fffabd82696547753300097571a0362dd8c1401bab6a73e22220b9e427442e3540836b24b1a5f355db2d72aa637bc93e09c1e006bd00780395bed7ec18bd62fccdb11ac863aa71cd4aa549679912698f4cb04219b2e4505f162c60b289b60cdb8bb9db8b67486b2e16ef9ce591cf81c21290fecc063cd2199533847ce132d1789253d2ec09423d582fba906333c3c7cf346519b4e6abe0a6c6d57cb194594e0632f5cab27c9412340c4d1e24bea434cb9eecbb76d60f2de0c6cd06907293310974e98520ec082a78ae9fdb023df93af8dfdac16178cbe0b92685b24f923287e3a33ad469b14e9ec7836c7b83227bdf96ac486f3ef05779dadd58a2e6ec5c95bcdc136ff4ad9d3710ede2af4be68c4a716836409b93a3e343165bf631db10f7b07449555ff668adda7c0297e22111ae83c35794a753f84f51634d9f85a1891c4709bdab7625f1558c14927702399af5dfac2944ece9ccec81c3d4fc6ff93f6230d871bce0d0ce69798550b96e9e346287239a42c5b22ac02543cafcae6072a0ac8d4386861e29006c4111119590effbf0f8f760ad5324d116e23e607b2cfac2c9f7373234bf48d7092f67d8d606e455a06ecc21dbc3a27a36667baae4966371f01f16cb99f30b5af137b8bb9bc1ee83e8bff1976318c1ddc45dd7a6a7b086857d540e1101f5a9d26709c6b9aab63a754c6bcd4921a0269ac752658324933f61c62647c52779f1f77686e07be2d4a30d138a1fec798b124ba2f98cea5892ae64349c579826894c170ffd24fa0d109519632add11919a2a71d5d82f57f958abc9d256bb000171ada4c21012cc532e73c972f503a8d0fda6492183497162e01712f4d969abad5130422082cc4a6d0f2f6c3af1198d684a44b08c9a3e34e0b3cc6aa30b8fbff46aa57f9b52b675602929b0a96d6d4a4487962d962a18fe2a52f2ebc8a213c0c357c4f21cbc2ca5f98d95890e7a3a51e51810a8ee368f1a628d12bfe059495889242ed0902502613cb4172684801ee2d2d5c524ef25bc349dce9367153b92dda1a655190c7eed3ad96a7755bae36dc2f7acd650983d85784e030541a742367fc6b6b25ba715718a41c9c70affb3e1bd9b37a7d2bd438d71ed7506ad82fd0f40d882b58afa42d48f2751cda6430f5db911f269063d95af738c3f9778bc9eff47c3e038f2f44154b379753842761bc6faf158eb87821bb2f9b8afc330a68665f7566e35b73703339557ef2a897b2a19053f513574587b78fe267d07e0e183467983d0f81e2d8e322156f1614f2dfba03612ecbaf6e2e8f23c16e94571ba6719e46f35dd234228a21a37c547d198f2e7ffa9904446b5f1b89b9f38f0c56180361a22b4828a2d3eeffeb897ef9ae37a9c0e0ab3e453145b22b1c1ae55c3b3c807a500fbd53266013751c48cca845f0d9b4031c5776cfb4adf6967d32c414df115a2824083df7f00165c7f3258a5b0736411426830e9c123c05620a53ab829157e7ab0a791980a76ff2832dcf8ee6c73947358995f7ae7d1e97c3fadd74bfb52205eafbbc4d10f044e592ac7b4e4e489e821e7ea7aff455ac47846b9d6fe69bde0ee73e34f610e639795ce5cbdd7bac572de8268bad8b1c4ee8b2805545e25d3c2408e8b6945727d75850ebb966b0abf95d813ae42cdf65ce62b7a02ba34a6e8fca1a7bf917c07f5b4456a8ab2b867be10e9e2167ffea68b9904fa4fd83cab029d9451d9d264c8823b26abcfa52ab77a0d9f6566650e256c73cfb1850193a672399079b0327fa5cbd082daea5fff3121134c2c97286c5c7e0061a4b778932672cd5f97f6b7942927f0d8f7fc5d3bbb8743fbba93e972160f1b78e992f138fef9cbed367039c10fc484fc0a38cbbf3948f8505076cc81bec6aa9cf7c5430e29ff503519aeb36cf8d50cc2e6b603912e6914180b850b5d0e957d9d5d2f085c271a09afd79a452115"}]}}}}}}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x2) ioctl$SCSI_IOCTL_PROBE_HOST(r6, 0x5385, 0x0) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x4, 0x0, 0x0, @tick=0x1f00, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0xd3, @time={0xffff, 0x6}, 0x0, {0x0, 0xfd}}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x217) 6m36.555494383s ago: executing program 6 (id=1075): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='./sys\x00', 0x6, 0x2) syz_usb_connect(0x3, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78", @ANYRES8], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000380)=""/131, 0x83) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x0) syz_usb_connect$uac3(0x0, 0xb5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1}, 0x50) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x64) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read$char_usb(r0, 0x0, 0x0) 6m36.292371353s ago: executing program 4 (id=1076): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x1b, @val=@netfilter={0xa, 0x0, 0x64, 0x1}}, 0x20) 6m31.463112571s ago: executing program 7 (id=1077): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000680)=[{0x1, 0x4, 0xe, 0xa}, {0x3, 0x1, 0x0, 0x6}, {0x2, 0x1, 0xb, 0xd}, {0x0, 0x1, 0xd, 0xa}], 0x10, 0x1ff}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) unshare(0x2c060000) unshare(0x2a060400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 6m30.477357821s ago: executing program 6 (id=1078): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x3, &(0x7f0000000340)=[{0x401, 0x2, 0x80, 0x20002db8}, {0x6, 0x2, 0x2, 0x4}, {0x5, 0x5, 0x8}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000440)='8', 0xf000}, {0x0, 0xb}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r3 = openat$ttyS3(0xffffff9c, 0x0, 0x208801, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYRES8=r5, @ANYRES16=r1, @ANYRESDEC=r4, @ANYRES32=r5, @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYRES64=r3, @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf250300000008000200020000000800010000000000080002000200000008000200020000000800020002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4008040) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) write(r6, &(0x7f00000000c0)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='1', 0x1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x2440, &(0x7f00000005c0)=ANY=[@ANYBLOB="6105e2026bd29ffe92d8586a0c1521094a8d4f8a1f4f63c0aecfe84ffc337389c4bc74d91e4350dce6f1f235da66329a1d7a0a3657fcaf71dba0cf45b6e9b9809c57cb42717d86eecb1ddda45e2d0033c60a67052a9bf339801db1c5c54965b546528977f4fbf658daf81fc9685a9861f7e3b5539fdd5e8a9784ce212a37f018c599371854e8e3a36963d87d728c2142ebe854c25261375c9ed4901a615f4887f98bdf05782bc6c1f32b02144f663eaf8258d81495f88bf2901a8afa2cb488bd441730043fdf4489c8299da55a21b479bd273c3e4f964bfbcb2dfad9954089b17c9a28769f401a659c"]) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) socket(0xa, 0x3, 0xff) 6m30.274693368s ago: executing program 4 (id=1079): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$full(0xffffff9c, &(0x7f0000000140), 0x214000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b802000018007000100637400001400028008000160ee00000000000040000000000900010073797a30"], 0xe4}}, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000001c0)=@req3={0xbdf7, 0x3, 0xa19, 0x0, 0x5ba, 0x0, 0x7580}, 0x1c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r5, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) socket(0x1e, 0x4, 0x0) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), &(0x7f0000000280), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x12a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast2, 0x0, "01ceaac82ab7d944e84b6fb4c020d47e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x3, 0x4}, 0x3c) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r6, 0x8949, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0, 0xc3) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000000500)={0x8, "e3d509f2c24aa8f2"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7) 6m28.343304059s ago: executing program 7 (id=1080): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000680)=[{0x1, 0x4, 0xe, 0xa}, {0x3, 0x1, 0x0, 0x6}, {0x2, 0x1, 0xb, 0xd}, {0x0, 0x1, 0xd, 0xa}], 0x10, 0x1ff}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r2, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x3) unshare(0x2c060000) unshare(0x2a060400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 6m28.227713555s ago: executing program 5 (id=1081): socket$nl_route(0x10, 0x3, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x87, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000400)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x1000) io_uring_enter(r1, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) landlock_restrict_self(r0, 0xd) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffdf740200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007e9500000000000056080000000000008500000081000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a00)={0x168, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x20040044}, 0x4) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x8}, 0x28) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) 6m25.920628926s ago: executing program 6 (id=1082): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)="a2", 0x1}], 0x1}}], 0x1, 0x4) mkdir(0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$panthor(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DRM_IOCTL_GET_STATS(r4, 0x807c6406, &(0x7f0000002140)=""/29) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 6m24.706344668s ago: executing program 5 (id=1083): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r5, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @time={0x3, 0x3}, {0xff}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'lo\x00'}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001c00070c2bbd70000000000002000000", @ANYRES8=r1, @ANYBLOB="4000100a14000100009a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) r7 = socket$nl_route(0x10, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x432c40, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe"}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x200080c5}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000380), 0x3, 0x400000) ioctl$I2C_PEC(r9, 0x708, 0x4) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) 6m24.612142226s ago: executing program 7 (id=1084): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)="a2", 0x1}], 0x1}}], 0x1, 0x4) mkdir(0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$panthor(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DRM_IOCTL_GET_STATS(r4, 0x807c6406, &(0x7f0000002140)=""/29) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 6m21.382638337s ago: executing program 7 (id=1085): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r0, 0x0, 0x1d, 0x40000320, 0x0, 0x0) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/238, 0x6e}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)={0x14, 0x2a, 0x503, 0x0, 0x0, "", [@typed={0x4, 0xb4}]}, 0x14}], 0x1}, 0x14008010) 6m18.029932267s ago: executing program 7 (id=1086): mkdir(0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$panthor(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DRM_IOCTL_GET_STATS(r4, 0x807c6406, &(0x7f0000002140)=""/29) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 6m17.442735426s ago: executing program 4 (id=1087): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000004c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x30, 0x61, 0x3f, 0xfffff004}]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000002180)={[0xfffffffffffffff7]}, 0x8, 0x80000) syz_clone3(&(0x7f0000000080)={0x100, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) read$FUSE(r4, &(0x7f0000002280)={0x2020}, 0x2020) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002a0, 0x4, 0x0, &(0x7f0000000000)='v80\f', 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r5 = syz_open_dev$sg(&(0x7f0000005980), 0x0, 0xc0b41) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0xf8, @buffer={0x0, 0xe9, &(0x7f0000000000)=""/233}, &(0x7f0000000440)="153606ee522b", 0x0, 0x3, 0x0, 0x3, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x1000, 0x2000, &(0x7f0000010000/0x2000)=nil}) ioctl(r7, 0x4048aec9, &(0x7f0000000a00)="000000000000000001") ioctl(r7, 0x4048aec9, &(0x7f0000000600)="010000000000000001") ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001080)={"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"}) ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f0000000000)={0x40, 0x0, 0x4, 0x101, 0x1ff, 0xe3, 0x5, 0x4}) 6m11.35434086s ago: executing program 36 (id=1082): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)="a2", 0x1}], 0x1}}], 0x1, 0x4) mkdir(0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$panthor(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DRM_IOCTL_GET_STATS(r4, 0x807c6406, &(0x7f0000002140)=""/29) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 6m8.753077531s ago: executing program 37 (id=1083): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r5, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @time={0x3, 0x3}, {0xff}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'lo\x00'}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001c00070c2bbd70000000000002000000", @ANYRES8=r1, @ANYBLOB="4000100a14000100009a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) r7 = socket$nl_route(0x10, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x432c40, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe"}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x200080c5}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000380), 0x3, 0x400000) ioctl$I2C_PEC(r9, 0x708, 0x4) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) 5m59.995393398s ago: executing program 38 (id=1087): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000004c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x30, 0x61, 0x3f, 0xfffff004}]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000002180)={[0xfffffffffffffff7]}, 0x8, 0x80000) syz_clone3(&(0x7f0000000080)={0x100, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) read$FUSE(r4, &(0x7f0000002280)={0x2020}, 0x2020) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002a0, 0x4, 0x0, &(0x7f0000000000)='v80\f', 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r5 = syz_open_dev$sg(&(0x7f0000005980), 0x0, 0xc0b41) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0xf8, @buffer={0x0, 0xe9, &(0x7f0000000000)=""/233}, &(0x7f0000000440)="153606ee522b", 0x0, 0x3, 0x0, 0x3, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x1000, 0x2000, &(0x7f0000010000/0x2000)=nil}) ioctl(r7, 0x4048aec9, &(0x7f0000000a00)="000000000000000001") ioctl(r7, 0x4048aec9, &(0x7f0000000600)="010000000000000001") ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001080)={"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"}) ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f0000000000)={0x40, 0x0, 0x4, 0x101, 0x1ff, 0xe3, 0x5, 0x4}) 5m59.16375103s ago: executing program 39 (id=1086): mkdir(0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$panthor(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DRM_IOCTL_GET_STATS(r4, 0x807c6406, &(0x7f0000002140)=""/29) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2m0.677910861s ago: executing program 9 (id=2041): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)="a2", 0x1}], 0x1}}], 0x1, 0x4) mkdir(0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$panthor(0xffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_STATS(r4, 0x807c6406, &(0x7f0000002140)=""/29) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m59.756641635s ago: executing program 9 (id=2045): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m59.534229113s ago: executing program 9 (id=2047): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f0000000180)=""/103, 0x67, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000a00)=""/274, 0x112, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r3, 0x0, 0x0) write$vhost_msg_v2(r3, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) 1m58.471337948s ago: executing program 9 (id=2051): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r3 = openat$sr(0xffffff9c, &(0x7f0000000380), 0xa6080, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000001d00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001cc0)={&(0x7f00000007c0)={0x14d4, r4, 0xc19, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfff, 0x13}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "e9a8b4bc1c28ad4c55ef"}, @NL80211_ATTR_FILS_ERP_RRK={0x5, 0xfc, "8a"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_REALM={0x36, 0xfa, "b418cbad820576dbb41c6e01807ff1bc20bbf06de8fb52aa444fd5338b64d420050eded2d04bdc36cd1f50f3e0c345b0d5ba"}], @NL80211_ATTR_IE={0x85, 0x2a, [@ibss={0x6, 0x2, 0x4}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x8, 0x20}}, @random_vendor={0xdd, 0x3b, "c87f3a1e074c3688348ce0f29fab1b5699d5361ae6d872e22796f21033056200ed2a9ea9fb424d651d407e0c04b86459c2a61f857c393651b56bd4"}, @tim={0x5, 0x2c, {0x60, 0xa0, 0x40, "2188994caf5ee736a1cbb330daae0923e1da2506aa5b2cd1247483cc1c5d7de7a815fb1211bcbcbfcc"}}]}, @NL80211_ATTR_IE={0x217, 0x2a, [@mesh_id={0x72, 0x6}, @ssid={0x0, 0x6, @default_ibss_ssid}, @link_id={0x65, 0x12, {@random="f25370dec13f", @device_b}}, @mesh_chsw={0x76, 0x6, {0x4, 0xdf, 0x26, 0x70f}}, @fast_bss_trans={0x37, 0x8e, {0xa, 0x5, "24968a441b3a2c3fdec433eb779e8e35", "42128efe9f33bb88d9e3375997436b50437bbea8f23a7235c958966140fe4d58", "7d2725fe60231a4d9d05d0288b0aa099438149a571fb1fd1cef82570045865b7", [{0x1, 0x3, "93f5ec"}, {0x4}, {0x4, 0x7, "6ee808521e10fd"}, {0x4, 0x17, "4109209fdd1866d52c89270ab6bdc120c15b89876cca32"}, {0x1, 0x11, "856a94dd7744fb1d0658533e3142224ee6"}]}}, @preq={0x82, 0x88, {{0x0, 0x0, 0x1}, 0x9, 0x36, 0x2, @device_b, 0x3, @void, 0x9, 0x3, 0xa, [{{0x1, 0x0, 0x1}, @device_a, 0xc11}, {{0x1, 0x0, 0x1}, @device_b, 0x8}, {{0x1, 0x0, 0x1}, @broadcast, 0x507}, {{}, @broadcast, 0x9}, {{0x1}}, {{0x1, 0x0, 0x1}, @device_b, 0xffffffff}, {{0x1}, @device_a, 0xffffffff}, {{}, @device_b, 0x2}, {{0x1}, @device_b, 0x1}, {{0x1, 0x0, 0x1}, @device_b, 0x83}]}}, @random={0x4, 0xaf, "15f4086228bd09f8a9f6e769790c754dde22714ea056442fb2dadf787bc8e2da44e947a4014e807fa83f8f652a922119f89c3e1903653a642d869f1a61c9f10c834c8de6dec95c8d74929bddc1ae2032620a45971fd65a9a80d7b054b2f2328340524b2e0bb2e089dbd9de05fff6e90b13f08b01cbcd91b0d304c4e1e6cdb67ac89c8b260bfae4fe60f467ea0ea56d4c27c5a2696bb103018a44a5881a6b2a641b1ffb751e1e617703e3e70069c1c9"}, @ht={0x2d, 0x1a, {0x8, 0x0, 0x6, 0x0, {0xe, 0x9, 0x0, 0xa, 0x0, 0x0, 0x1, 0x2}, 0x1, 0xb7, 0x9}}]}, @NL80211_ATTR_IE={0x113, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x101, @val=0xfffb, @void, @val="aed4e4977422574f0261f4e84cb6673b"}}, @fast_bss_trans={0x37, 0x68, {0x8, 0x1, "391ce025085a34faea4eee67b091ae75", "8e3806b36eb7857b6e4e257c32c79f1d95ab5644a3a0ea1ee9fd1908a7f436a9", "b504dda60de4054245322a362da147aa9f6c3df502d8c2f76c6fb595c3a30e6e", [{0x2, 0x14, "63e906f703160f1ae695241bff15c305fa5eb1f0"}]}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x2, 0x6, @device_a, 0x7, @value, 0x2, 0xd2, @device_b, 0xffff}}, @channel_switch={0x25, 0x3, {0x1, 0x3c, 0x2}}, @peer_mgmt={0x75, 0x14, {0x1, 0x8, @void, @void, @val="af36edfecf23f79d6a8d9b2f4ee3b261"}}, @rann={0x7e, 0x15, {{0x1, 0x58}, 0x2, 0x8, @broadcast, 0x1, 0x7, 0x10}}, @sec_chan_ofs={0x3e, 0x1}, @random_vendor={0xdd, 0x2c, "6d1115be60a0fe241c8d9b45fa6e12c20f021e8f6beb7fecf34b2a69088358d197958ac53e6b5317d1f0bec9"}, @erp={0x2a, 0x1, {0x0, 0x1}}]}, @NL80211_ATTR_IE={0x76, 0x2a, [@ssid={0x0, 0x1e, @random="7dbd0d15047b17e8ebacedecbc9d42682721fe91ce8d5fe12772d93d5ed7"}, @rann={0x7e, 0x15, {{0x1, 0x42}, 0x0, 0x9, @device_a, 0x2, 0x9, 0x2}}, @mic={0x8c, 0x10, {0xe62, "f4390e083779", @short="63f850bf78861c97"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @prep={0x83, 0x1f, {{}, 0x48, 0x7f, @device_a, 0xc, @void, 0xc1, 0xd6, @device_a, 0x8001}}]}, @NL80211_ATTR_IE={0x23, 0x2a, [@ht={0x2d, 0x1a, {0x400, 0x0, 0x4, 0x0, {0x6, 0x4, 0x0, 0x7, 0x0, 0x1, 0x0, 0x3}, 0x6, 0x5, 0x66}}, @dsss={0x3, 0x1, 0x36}]}]}, 0x14d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0xffffffffff408000, 0x1000, 0x10, 0x3}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r8, 0x800442d4, &(0x7f00000001c0)=0x3b) write(r8, &(0x7f0000000000)='3', 0x4e) fstat(r6, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 1m58.24032711s ago: executing program 9 (id=2053): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)="a2", 0x1}], 0x1}}], 0x1, 0x4) mkdir(0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$panthor(0xffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_STATS(r4, 0x807c6406, &(0x7f0000002140)=""/29) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m57.922354078s ago: executing program 9 (id=2054): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m57.875903102s ago: executing program 40 (id=2054): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5.382935264s ago: executing program 8 (id=2733): pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) ptrace$ARCH_GET_CPUID(0x1e, 0xffffffffffffffff, 0x0, 0x1011) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x0) 5.378059062s ago: executing program 8 (id=2735): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) openat$ttyS3(0xffffff9c, 0x0, 0x208801, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4008040) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 4.662619814s ago: executing program 8 (id=2737): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0x8, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000580)=""/211, 0xd3, 0x10000, &(0x7f0000000680)=@sco, 0x80) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x2a, 0x1}, &(0x7f0000001100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9) timer_settime(r1, 0x1, &(0x7f0000001080)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000001200)={0x2, 0x4e22, @loopback}, 0x10) preadv(r0, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x5, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0x18, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000199000/0x2000)=nil, 0x2000, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x11c0, 0x0) r6 = open(&(0x7f0000000440)='./file0\x00', 0x20381, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0x560c89bb) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r7, 0x2, &(0x7f0000001300)=[&(0x7f0000001340)={0x0, 0x0, 0x0, 0x3, 0x5, r0, &(0x7f0000001140)="98ba94aaa9e3a373c8e8e030e1c54fdd92d31358", 0x14, 0x2, 0x0, 0x3}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, &(0x7f0000001380)="f4b9223c5ebd9388f7e3ce694869211d8dbf4cead831b6921c2a8acc8aac95fcfa9cc96ee89e283e00c0b93fddc9b9fc0d5ff03b69f801e17dd6186b2251e376e7b8f3dc397dc0a675fc307e08", 0x4d, 0x4, 0x0, 0x3, r6}]) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x20) splice(r4, 0x0, r8, 0x0, 0x8000, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=@gettaction={0x14, 0x32, 0x89910f7975f42df}, 0x14}}, 0x81) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) 3.676332248s ago: executing program 8 (id=2743): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0ea, 0xc574450d1af3b5bd}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5, 0xa, 0x5}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24044054}, 0x4040) 3.607760989s ago: executing program 8 (id=2744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r1, 0x107, 0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2, 0xd}, {0x5, 0xfff3}, {0x0, 0x9f95d081b93c5fdf}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x80}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044080}, 0x4000040) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x567a000) clock_adjtime(0x5, &(0x7f0000000180)={0x4, 0x6, 0x6, 0x8d9, 0x8001, 0xffffffff, 0x5, 0xe3a5, 0x4, 0x89f0, 0x400, 0x7, 0x535d, 0x6, 0x3, 0x4, 0x6, 0x3, 0x4, 0x1, 0x401, 0x9, 0x8, 0x4, 0x6, 0x528e276d}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x8000000, r6, 0x0) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mlock(&(0x7f0000009000/0x1000)=nil, 0x1000) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000001480)=0xffffffffffff7fff, 0x8) connect$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) bind$can_raw(r9, &(0x7f00000005c0), 0x10) read(r9, &(0x7f00000027c0)=""/4073, 0xfe9) 3.172970055s ago: executing program 8 (id=2751): creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x0, 0x1000051}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x228000, 0x0, 0x9, 0x8}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa6c81, 0xc0) writev(r9, &(0x7f0000000400)=[{&(0x7f0000001580)="03a30aa8", 0x4}], 0x20) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="b000000000000000", @ANYRES64=r8, @ANYBLOB="0300000000000000dc050000000000000100000021f6ffff230000000000"], 0x30) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r10, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) syz_fuse_handle_req(r7, &(0x7f00000021c0)="0a44566bd8cd7422e078875d6a98d0a2dcc0a0c7881e44e46c6bf84253a3ba4cba8183c2236313cd49babfb721c547a5caed646bac2f2ea43e134e2a05d84cd813c9e2a96e68352f95c458f6ba48078f1d10fce44d869b4a00c68ca338ff3b877cb434f502cedfe83cbfb33d5233d081ec8ee2ac10e08194f6257183be922fc7203071a2aaf87478d1420237a1516e749623929f0d60f15e536376ba41fbbce034588b60680572f0d1d76ed122dc46252cc143f0e665e3f4e3f56bc454957265bd9a029cf8c7397ca01f95bc0e6601673bb31804c34307725385260df48c32527d74e51e5f26728aaedf9f379f5960f5e6e7146eff3254aaf54eb42834e1f57595a2b0333f5ca1474e07c2447c33dbe8f62f24cd788ac18475493edb813450e917837b125ad6f850e6af93e16828a6741c6ac00a4e25cfcd498f1b857e74a4eb8dce5ffcb3999031f1da13e9e6a973134ec04795a3fe91388fb6b349e668f49bd4c4ffa71a8662916219b4a2075bbfe4892cd1080f662005c1c2030d35999c9637f4836ae5745acae8ff0d745184e58241510d780f8a9aeeccb17b9213527a1b747dd23df6b4ac2ca4bd07fb7de6bb4bf8811e5c2f99f4bbcb3cba79fc483182bb981815a1b1ba5afad464631e6eb940a5da4e73787e9e0103bc7ea59cc8d63f740131a14c3cd034e91e885bd730521ba80c1071f25e0073a44bf8e36cc23a5f433378a13d2e2be7fbb8ca204976651924ae8637b339e883f4d388e239424031e20616341a5d51cd5d574382d518e4824dcdadba86143b4de3ff8126f0be226d1e6526a2af981d11092c428bc699ea208d4d38d63ef525b8da551207397fdb7d57a52c2062182072b017141de1b70bd15c758c88c65f6acffd5b5b0846c2a779660ceef46b22336abf817a24d27c3f66839b5f2f99131898dd372a124d9e5df84b24fa7be045b92fb225a735da1be1972c706120c391ffadf231603ffbb86d38ff2c76202a0f81317a7f790dadcdca1d109e4428f52246b17f6b5822f64d36da71167df86cedf76f4405f320f70a3d6d6307a13e023d9a23985fd9c95793118674346d7977654ed14a121c1bc0b3e8672087245e0721230edc667c1fb6bcdb22b3264b7fffedb589a2899096493ba97ce5fb0ad97821d0a4528465380e086b61f632eb0ce1f89eea2d8336217f51b4085433d426d404431360be55776cbb0f80c33e807732df3d73bf9d9a8e3b1468d2ac7c73a4aa239c96bbeef3965132a02254d887e65fbeaf517e913cc331ed36c3e326163d1a3aef7df9db06f8997668cc35e39813c82a440a73f12011bcc0b2abb993b99e79727d49e6656e8d9ecfb7b65c2c187ca6262361c6a7d3679aba9df764d13485874b1443f47d8caea64963011294082a9d50ed2fb08cdfaaa7dbcf782b7e8f8d8206dbc421bf9807727126b1ea364498f3ae693fe19f5b56af13df090892919c136c201a0d058c1863f136a3ff389cc510c17b1de341ca9a8d6ffd80fd019ac3fd9eeeb845202f2c5f207b1e7e169d57164855b9c3dbdf3c696124136d07a4de6be16b43352567a3e3bab0f73ccdd41255ffeb3ecb2bdf9eedd1d4332f4a7534b01b6331474880d4d07b464bd8c3b18d02fbf1faeeff70c8ae35b4eef002930dfa9a0c9350ffb72c82535a55280ac9c6d5384cf9aa3c66cc918497f51a6dbad608eee21f6085f85990983d0a51e5b41cb69ae52d60fa835045aaa0132be8b4dfdb10f521bc22b0192a4133040453c5a0a8bbb5d4c46ea25f2be5b0e79d71c4a13db6e9cb66db9f2c4804d41b9c26f96fd23c358ee9c8f57322540953224b56072af25b5c7041de560f1d4bde367eb3bbac949d9a9a86123ae62d0f4741446192e85772fb893b64c0e7c44a6e967af906b0f50e32be384027379c8dde251f549f94b16cee199da537d07ae89848da801b43bab3b65651402756cb22d17e602cdc33790ec8a5484a955bc8f487597ac9752166a405bbd7dfc9107af72b46e39d29afd2a0447e53377fd11997ab21db0f740699843a168720377e365caf88fd319dca184cadb8ffb4d288a0045b349be5ecb64561a2bdfa13336ef96aea86c48a5e405330a01c5390d482e6ccf4ebb2cf149d8b6274b2f9e6e1066004172a1a90e0db9838afafcb663bd693b2e5ca35858dcb82c05cbc87ec5cedfbb08daf55c472e250861bf357569342d90a667f3ac7fc2d4e54220444a97810ac14b0af6b043a07c1d791182635b983492f21db4a6ffee2d686238869e50b9bb73d75ec26087c0c8cb92ff25740b3995e4d771469b8474efef04d8d75f3544aaf84f02ad977948764d4c1bce36aa4198d6f22091b263d9eae96f1096fe3d8045949f189f33ec713101fea26ea043fe98b987542e33ab372058c64205e90a0e1f52d04b2c5ba7a5572ddb95f7d2b04f22e2e987c5d0f879db65718d8979da2a45cd333a5aacf96081977a9eb3dcee4afb44443ad37528c5a314d1ea08d1c3f0a36d4bdf77fc0caaeaa1eb2746a26683561b62d22f4e166192892e2ec1597f8bf6e89cd53840c8d7baea220e1b5e17df52a05017363727b0cc77ee61577a79b3de2ed364f3419a30d23701044b45ed3ba44b01804750bacf5bc959cffba86619f3331cc939fecadb5cba1edfe28952e0f70d2d99ce696dab9411aa2f7e7ca6207a3b16fc36a70e339aa5a618f6bcb0272968eba6edd95242825fe6e47cf1d50d229d4b1676aad0e9410aa1f2d6d2fcb9c4ec8e06c83faefbc2143de2367123bdb7669bd959782cf64def3a601c596611ac98d76df33e1fe340829340ba0a582d014ffacf9a9394300ab7efd60222cf96a99e42dae6e1ff1fcad1e3280ca07de5ea7e08b264a60015ffb76cc72d70ded58a1e2f59906f3c76433e4353a94a2a49f91103e2b5491ac7f66d54ae2a0e82099c4c9bd683971c2d3dd51601bf5e94f7660158bc6fdc1b2ce3d689a3aa64c29810ad7d9e91e49b72e6f97230a2a966434bf5cdb339556e6452e6b446766f55df45219fc02192cb73076285e74eb848229bffd812f6058782b3f5d0efa4d7b0d3c120931aa8b679e318ecc5ea539e3dcaf87473e2573189ce500b616957d88a09a014baffbd66990e41a3432891279cb82d9c4b50675ff067b76503535631aab9a29ee7e274eded1cd542c801bf519e1119fbab84f57c7686209c9e5177545bf0f403609c81fe6d8f2979d886c43fa3053b38b6e21ec3632011c97451d8409f169f71d226e61fdd206ec5f962b0277eee286a694ba5381493941ed44b3659994d3cd2a8c9c3bdb2f63d77eaee180428d7d6df86f6738cf7adb4b863c9ee9da9904bba4c2c3188a1ce31c5b082857e5566055c8cf58a9e9f7624d220b8d3093cbc6eaed7fcf15fc700ed711575aff5fb5cb7e206c810ea7a766d2960a1356687aad2ec171e4a1db6540a9257385a1e8b9f029485866c32e74c1a19e1113040c9d215f9f4bb4311f0d587b9cb6d11cdf28d4cbcdde4ee7831e5c8608335a1e41883b55b3609b9c4fb8489619481dffc6224e4c98b1e89831187b28b6bcebe7f78c779f5a2896e47bef8e607811b435c517e8e3f19d74752d7ae99cb7caf69c0f977f1b94f8f11bdbf35444fabaac2fc0e568d3b5b3b9f13162b1fa92615bc16492b870fc85c79c51b6516276f8e559e769a8d37a2335d67edbdbe2d4ded10e79ad26629ba6de862acb27fa7d0607a5c83840e446ca0d231ae9175ae9cddf35443ef8434a61d54b704d2b46835ca030d4325dd62918d361c27bd6e422f3f8431ff979953c88a5f3d07a84b733b2fffda5dedbc2ba876ea653aaa2a8446019d2cb69c4c7023177af7b5de358c4a93ba969415c7e3bd3e10a17653cc4c0031dc779d47bedc8d0f77b9fb39484e47d1edfa16a4839d7e3c1f4147bf7a5a41395980d0234577d433c4f3663a648865cf5cfc4a713bfde809cae8161f044770d8f3dd65f183392ed73dd0512951dce40dd6f68927144d09a6df1225769a47a2f1dc7da5a0e5651dc0198c2feb7de7aae5675a3753272294cdc8f05b4bf1b478d6e2a18f6a9dfdc42421bae7072786a4122cb3fcc61b2d0bc9314b92be8be3f9b8b109631305e06b52c0bf621d577f014d0572327c49fd705b45794aa8f198b37c139c4a8008763c654af912552549203733ad09c667104a3c1756dacc50af3d19bd996a99a7f857d9ff8c337c6feb16cb7fe282cbf8c975bdb60a7ddaa056352d9cf752f2b49fd0ae9dd7a263c4e1c1a027c7d45529b5a49de9f2306862b8ef8d386594f9909aabc849c5955241d192ab57d52fd2c7db0e4066bc3f70445599a60016de606b30a92b1bcbcd9dc8cfb492a6e66aa2be612e1d5f7fc61989d51285f1ef8a4e724a46c36bdaa6bed82ec972fe3e929a7a708397432b13e266d9a66954e011a158c9bc031587f9315382dfcc2334100d99b7d50b87096970d294261dd3263bee8f5aac2d86f070d70e278ecca4cf6ff05e511c0a65d6da81b68d94cd635e9dc98c1259fa2060de60d05117090a9a36d7b7aab999cd28a6c0727336312ede8f7fe0118e22aeb4094a64311fa766412d68ee04a93a1b9e2da91afcc91a1fc3c216f0aed6da74baed3242e620482ae01d3055562d16cab58500a5f41145d2275f6da8e24003cae19a7bdb9de8ef57965341253901962d846fcfd687e32fc81e716c42fae279382c8a750c9ef9543c942ca644287ec9cc921f99e9c901810a342e198f3b60a5c75aa91e67c1a6f08008841ddbe0766604b38a211929682303ce61e8024ea4589aa955886adc98f365af515daf30c376eb2b96fd78d46bc3999935a336c89f02ebe822bb5db6a1fd145c4d403b88f17b3fac670b2eb1296b3a5a7055556c21259695c248696162fc179aa1b4ec10e022ea7bacd0255937f9aa89f4d4c58bdedb54b43fde47268552f51b949a9cfbdabf6e3172853e6de9d0b0d9643349595769e98dab85282c49ce8c52301c04710a2c43cf63decaf65243d4756015b681bb680fdd1aba59d63b54e2ebedc68df32e575a95adfb2b18a79688b23ffb498d03012250f0dfaaed5353025aea7a35c8a89873b5f73adb41cc864b9f86e14624d70c917f05e47bab793958de9957cf23c94a9807b30bd7574edf66250224b887a8c02baa05cc02abd4c008339129b3109f1b04da29a9edf472991a440fcc8e586bef32b8c95fcd3d6702b9f43bf41454d5fe72a1f1ac80604c93dc9e9abf9a824c6d45e65b4f39f8341799dce4eac5e9036450ba7829221fdac7ec394c0a8e9813f5aad3ad0052f5156b3dca979e9c9a8755d4be2502727d346889210a13e5391951afef1880bcbd2a9ea020c9b2946563cd40c40f6202bce9bd1d2a1bbc3e5e6b2a9d2220343fd1ff5cde1b4d27c0601b8890b6ad8d3d80075a23725bddd81c15cd1b63e0123c4ac01de7b62b1e0fe2b72eaf400a1bcc63f76316d471eb191c931d5350e83a110b89e77668cfdc47734b91c2268fbbd89ce15b50b84c423a1f27943c32739e99b046a665c966275dba2dd6449b69ec53e5cb9cde89afe4149589c7378f5f3648d748bf3d46fa53f50d1228714252a328cebe7146d81dbb2f850aad492bc0697e2760dc9c60bc76a010e85110c0076478a21b47e5fbc4f7397a319e1db642e305bb1330674d96eb4b421f0f2131d125d4cec8aef4637dce572bad633e076972c9147a48b4c67135ace6a4490e16fa4731d62864e910762f1eb58afa63031c78c375a90147ceef07cd1e8155a649f2558d67dba9d6d2e012a3af4b603cd094e4a3b2e30c65c80cf8d9b2cb840e9df91e70162b80e74be96467574ca0ac5ad52238163283c556f0865c2338d6dcc73fa330634f6e5ce68e766df2db5b7edce0d98203e1d4374e7eda3558667229ea2daeb74156cf5895c4afb460cb4037456b14d9b748ddf7b8f3d5accd3e0d8d2eca2a78056d945eb4383078cc09a3a77736ce4e91f8174fe03fdceef8df92a50c2797b0cd06c6f1ae95650e48d103fb269c0a004d62237b77257807c8954678476030d788543d84770a1533a72141c7ea919e533bc182a3306782233d1a20153fa3e9e315a856e75f760bb7f943ea2f5956243f75fdb241ddfb4c081219ebb4eb3c3e989e3d953a93d96dafe1142c29434a554a92d319747e618cbd3af5202e51d30761e81b6c2d6febf221e3147b63171ea5dbaab4cba1b0fe7dc9cb249d74bbbcd7ef11c35fade1132ee4b74dc6090cfb6f852fb01d79aa0e5ee6897b7c021c6a1e69995e0546932c56e65b2581d619fc59f9775f3e8573b3c4926b8f6a9041512788d11a6fb279941ce24fea916e6568db25f1fcd3fd1e907fb3c45ddbca37230f5b3ffd48cf9c2269ec068d0bc528aac14807636c9067c5e32f2c2f259f6502ffffdbea40ad1b6b4a1d819fccc5c77da908204781747ecb0f2245dfa2941a9dba5d11ad186ab0eb87173dda634bd5a9221143e244c793d6262c904a64ba36cdced65abdd3be06d534b649b03791f7ce41e9abdea4d2c17f14bfbee0455dfa791f241341c78ce24cb8b86a9e332787d4ac1bdc20d022ae9588e8d63c22925d5e507bf41faddc17e01d3354c597908124705d88131b2e8ce8d04d660ce4100b5288d750d996e069bca1fe21f9b84c97011dd14c95c3cd538bf619b1df241fcf286c7014f8467a7ee81b2bef1c3bc56573894dbb54efb6a2fff0302b26c7589e08993e755059ba8b94fe728f1fdcb8ab10a5133d0434973e6667c25288b6e5e2d75202aec6bc0255177a53ea7c666afa79dca738a9d20990f118075b9f1cfb8ff1e5be75b49635bcbf43cb3bf97719dae8ec5c5528fcf89a9dda8fe6c08f7f737d69ef181ad3e35cf8e46efd94358b4640de1c387e295ae38edd0d5b80287f022895ca4dd9532bece6b2bbe100a83fef98dc5af595f4f7e4747ff5d28ab372db71b7c1c423183fa8ba4d823cc05b7be8819dd669b6517bd753e83f4d407a72dcbfcd0e9b2d5daef7fa88c1618236375a50ad2baa6a5e0551e679dce352181a1f9e72f5fca8c323b945bdd92e2d424b3e75041734d099f778fcb1e6407c80e7724d52ab110b02c0c9d1d4b78df12fc443fd8dc8fe82d9f3c8da7b87fdfb11e912c97a4e61425ac7b3954cb2e7e46ed0e24cc0c961dd5c2fc619a9e5e3550ca7bc21f2adc1a85c5b9dade357f1ecfd72646b27e7ab59b1b4d63c63082907b3be4cda341c49ade8992af489d11cf285b81a34c5614284ab4bb94018009e2333aa8e4630a9f6792b44b62d9c6e9d1855ffecab30c611cf5dc1e6ec09088b83a4c2cda9e5ee080df0b5e36b9badc035d6991bfd82fbb408faac15ced6ddcc917a9249b767f8844d6458411c1a31ff84e272311ea968ed3ff02f2e0caa47b1a6e030b07984c07d71e740420a9ed47b26799feecbba4f26dcdb61c9422e940550bfafa99ef0f826d2bcb1d7862016abe81d021be29adabe2c399fb9aa2f3ac472012b26ccd4eea2957343b06ac8ad71a637b8fa209ab6d4351fae53a9af0e920c043df94eccd5c1a847cb17d13589021f1a621b457fbe02a16f0f4b9dee0e7eb9358b8afd999d47f5143d49d4aef227f5b06ecef1ed71207e3526ff82b6ec69d3e8788f6c476437fe96f0533394027cf48e3e146aed7943d872bc35de34f7fdba13e5e1c259a68aa8050a813aa734f202ad7faba9f64b16f5068b43bdfb726e5fa54a1675dcab0697fc47a4fa3dd472022cc0d317d39076ad9847e72e1965b227f3e49ad6e8e742305bdd05d0c88b5859d6cfc98cc47a566269dbc4c200615f3e995511a69d8e724f0c842c06c46b5460dca83137656aae785e8415cfb57d57265af9c1d8f126081bcb218a427b80ccfaa95b8bd3f87f58f09ac52a2a47bbff99b057576d26876fa758c8e41172dd2bd45742a30d55f1b65bafc0c7c9c785f583069caf6de080c9057238e110456c0f9e8d898918b6981011f8dd17c55caced49eed32839305ec37b45e8cc4c35aec0c8a4cac54035a941842e5d19fd298757799c4a501718bf21a024106a292626d4eb3c784119b9f5003c6cdb36e442c04ca5b0ea59efb63fe90f9e218fdd9f0864f407cf8edbe71f3fb1d3a587ccfadbf7a5acbb0713b1ca1991e25e75738ca68e1817d08fdbacfab6900242b91ed9541efd2ca469bf7acc7857185d47506fd0a735d7b542949241976cfb1252f2e490fcdef3166f993ff9a812d0af902001a4f239989c087b41de65f83af93e349a2d37ad3b59c5009465e14030ecdfc8fec2d27939af2311bc5d544b19220b12a5782deb83f0e193f57cc4631d8746e7d0736e1295128f3a48aeacf2952be3005b09de00c9a4565e07692d8355a947d072de4324f2e8f3b2f01483d31999826b4ac7bad4f6ae099225f751995f463e5f762b9671ebb79fdfc51b5080af6fae4837a4e00a76b775eaa6f1fa1479b6afe5d66ac5fd148fdc4750d6ae1e268da446ba08dc4d7c872bd6401f1dd6b226e91bcf77c085e3c115f49d05a29c4e282caa7b8a60a1fe09a2e98227a2cbaa838d6053cb56bc7cc84e6ffa81c18ee26c1b32c2ce205c8fee3b2f4fa8d983b4901c80d766a3299fd62e3339a697305ab7cda995b3cce61e3372f152841ec1d540c9f6cfe2871e7cf4e6997afac85b1c05bed03a5e017bce4b45b0903e9c60cf3538df7df9d8fa93b53856fe93f522f723470c553799c90c56fb705040ba78141f7e5e9117f4876c45884edd5059c8588fc39f9c6268038c4a462a4a5fbbecac0daaf54876ac0217a9ab6f83ec52f15a170005e57baead0e8b1570508e10d2c9808ff3a437436d93ffd02c72c703e2e1917c0c82c3a4b4c03cb91c961451e3f6e2d9d9e58ac1810831d7618f81a34c23cc14029326f16cd043e82ea3bea5c6bcb84152d140659d1a4f135cee82640f96e177c030907117a6c6a8049fd3815fa06249ba4b37c2381c0eca124e7f5abd393c6d175ccf0c5fd4a6e9e00d5338899ed03b5a5023dbe4c6ae1f1ffc192411049e6fa34adeefa3b2e6b45165f341e0b853561ea0d183d93100efe80237ab878312281d607ac8dc10f34e6840a6b6d5c2975348a15761326504c24d5ec648f5714254087bd8c53fe131461ca4cea09ab52848b2526edb91a2bf6c0287aeaac51eb720507d66522ff2f94d90ec584f6088910ee079538e43cf8db55e2f0d70a60eac90eafd82480d11ea5dd795a05a698c2961eedad5f8a79dc3ffa92129f76b8d795e24a1905fc82f11c40d68d11af282621b9a2e39a8dd146013bd3a044f55366af078f7c15adc548029ba4ed896ddb646d74e3af69d8597831e08eb4df1b7ed54b8f3b327753ebf47d50a215c461cd422483c8f2d54f010fa9b76e5afef86b1bb8aa6d4b0c5c9ee798791379ed4dea481feb37ea18b5c7c0146aed32772245cc39628ecc13e03b76c302f80ebcb50279fa2ff74139468a23f36881ee7e7119d8040f90c7e3d8f75d80624d17d881e363b4913eb02e73224c7dac1077d19cc9063f8831053eaa9ecf87ffc31140f6a0a47869e5a5660e5d53b404c34e17b4693df9d5418131c8aaabb0e15aee98594c57cfb2202f209a4529a293b37ef68a2e95fb8fe5142e974f1d3fe3a08ed169379387e96ab5d927771ca7157e9bbd2650992680105dcd6a75829e0643b5ad708e5c65ea4b04b3eeedc24bcac8152cb887f32436a11efab6dc2509fa42d3d31e8aac73e9e8e84a88d7096b9549bc4a879d8f824eb63809a253409294f359b76ac3f031e6bf74a4de018f1c666239bae7bb01c523f53efc922232415d68264872296967dd150af095a12717e7eaeeb98f48c84a70fce8063790f9c2f43db477175e1c8da911ce853042d84e7f24df59e8caca5ee93e2daa6aa18e92930b4495dc22ff6729964942d1baaccd07233dcab828c2254f719132271e9239390e2ebb74ddde7284ebb8955719f7d086cdbe7eef6d7298576fac821eae5a8b6ddf9d88a1dcb32121b6d3ce49c245dd675e8a3b2254a9998ec0d0d7d9570bf6b6db0392c5b060872e154841096351d880f71bc00e5a576b14c26f85840c93a0c424cdbbc57b1d1212e300a874921c1f9c0de14a8cf61f8ebd03eee5cc79f34a41235b6c72aebf48243250c6dae8547b6634374e0bd073f7c162d4226a26032bc154eba7964b2975a8d35f17560a5312cf124741c74774f9a30f8d5ddc891e78bafdaf4f86d16d4c1363d23708463ab1314e3bade23316c7fbf51d2a2417da5162f9112c4331eab695d457e3712bb5f880c68367dba95b61f6f6a9297e477eaec615dff2cd3222f21d90abd8bd4b12fabb278c9fd44ce1ed024ccf908cb4995a1d9da53f62532203d7079e20a46b2b069be4b13a52a81c3b5227f57d6c184945a1799e80dbc7cd137e3427df352c0c0fba04f3b7fb02aa36c9af4611ebb51333326f8f750d662a0a8b43e30acaaeaf2653431b57e95a77adf8261298f791d200c02bdf4b821f7d09f972dd165ce92109c8dce081bd0bd53f598200bb3c5d875bbf1be2a7dc68355e42c515c20f2d72cef3d680a42e8a705f17c6ce15f47b144e55a3e566cb73ba5ee18c5a1535e5f4b4c1774736ed1654bc024b6c748b48d9cea48a06a571d264fc876f9afb2bb43441b39bb3f9e844f70dabd4d0ea06a46c1361a60ef5914411397600e63ecaa65f6598b4ce6f3a967c93ef0697e268b70d0637709ea3fef1da8afed0d2ffd36503197efcf68e0a2cb10b4104b209c133fdbe11e07a8d5c511045d19b69c63818e55168de4357a99eed1d8410664efdc866451de9bf6794d9742e2182449e2ae3869a01f1ed7ee37ffe817a38c502b8243a1c05f1ccbd349c7b9864cbf45b5a3c6f395e4a6602a02bb80ccac94ab66d67dfd8e5cc6fa6321e930354a2c40a1e8d360752dbdcf00134d34a21b24b9acfa2cd37f3c191461f4c9d8243176f42a8109bb05c37ee715ceb027861cf71268f283035d71ce4bae4ac5f79ee5211475ddfc33f02dcd91276e5ca265e5b9104222fdff5969f434a4412ba9fe00aec27f559b63c25a9e8d53c063db549035ec2c8e91e1a6247045541a7e28ff6c13e9f29a3683e55731d80d714b9d5801cfbf617aeb6651290293ac0f4e246df99e72434772b7d8494485537b7b2063c7bc5e80eb6c7ab6647d01189cc910aae2fe8249a0fc3226caa8994b476c6777bf113d153c43da337a6304fd10582d58919596a6de42ad500b62c1e6550d8cdc059496073a48110b2fccb42c96e3e3640f1a87fe379779adcd8836aa8dc545db39bb3afc032c16977e150e9572c3e5f8e04bc15497ec8217a0e187ba097fa95a855af66d47a105bdc3c837091daf5fbeb3ee5ce10b132f912b89ea1c6b9ecb8fbee0e4ea4e43b835ae583b67aab430dec741ea03195fed3cc164472d4b571d166ae20e0a309a80ce00b0fb349f7641f41a31993a8bd9ee092aa7ef16c9563e4db6236c9e702710dc95b198f533b1140441a1827aa4bef6a01c689127eb7028d1bb083edc8a08b8d239389d99948f1290623ba908e6e1c606035b70ba7065f8011451151dca715fb920b4d87858f01c5484df0e63656", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18, 0x0, 0x400000008001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.853639264s ago: executing program 0 (id=2754): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) ptrace$ARCH_GET_CPUID(0x1e, 0xffffffffffffffff, 0x0, 0x1011) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.322434728s ago: executing program 1 (id=2762): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) openat$ttyS3(0xffffff9c, 0x0, 0x208801, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4008040) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 893.603232ms ago: executing program 0 (id=2766): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='hpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='test\x00', 0x42, 0x93) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r3, 0x0, 0x46) write$P9_RLERRORu(r1, &(0x7f0000000080)={0xe, 0x7, 0x1, {{0x1, '\x00'}, 0x4}}, 0xe) 893.335563ms ago: executing program 0 (id=2767): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 823.402ms ago: executing program 0 (id=2769): getpid() open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000fe000000030000000000000007000000dfe35ae478903ba4ec25d932781d28623ecb5f45c4fffc8aa44af80824e7c71c47870a4062a4d971f28438b19337be2bc95842721244651ecd19c1f157a3425ef600c7c37eaa62a242"], 0x0) 822.892293ms ago: executing program 0 (id=2771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x65}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x8e}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 772.370926ms ago: executing program 1 (id=2773): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={r1, 0x5, 0x4, 0x1}, &(0x7f0000000080)=0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x1000003}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff9, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000380)={r5}, &(0x7f0000000480)=0x8) r6 = fcntl$dupfd(r3, 0x0, r3) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000040)) 771.888156ms ago: executing program 0 (id=2774): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049ee) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4604070001010000000000000002000600030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f00000004"], 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x22, &(0x7f00000001c0)={0x0, 0x4010, 0x80, 0x0, 0x1029}, &(0x7f0000000000)=0x0, &(0x7f0000000f00)=0x0, &(0x7f0000000140)=0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x9ed149dd7686ab74, 0x0, r5, 0x0, 0x0, 0x0, 0x40002001, 0x1}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) writev(r10, &(0x7f0000005400)=[{&(0x7f0000000780)="4669d044962b", 0x6}], 0x1) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x1, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000300)={0x2e, 0x4b, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x927, 0x0, 0x0, 0x1000, 0x5, r6, 0x0, 0x108}}}, 0x0) 756.39177ms ago: executing program 1 (id=2775): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80000) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000140)=""/63, 0x3f}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/29, 0x1d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x6, &(0x7f0000001380)=[@cred={{0x18}}, @cred={{0x18}}], 0x30}, 0x10102) r1 = dup3(r0, r0, 0x80000) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000001400)='\\-+\x00', &(0x7f0000001440)='./file0\x00', r1) r2 = fsopen(&(0x7f0000001480)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000014c0)='\\-+\x00', &(0x7f0000001500)='./file0\x00', r1) bind$bt_sco(r1, &(0x7f0000001540)={0x1f, @none}, 0x8) pwritev(r2, &(0x7f0000001880)=[{&(0x7f0000001580)="cd040e663c7c7a5dce2218a47768f8538cb9d3ccaf22cce05ddf7dedcfb0f74aaa9a6af7ea7f6fac53f23e659b677e2675f53a3a83cf817c3bb3f1af60d865406d429734fd33921e2e3dd6216da86e2e2cf36072c78b27976a68b2225ad5277f3b8cee6a9d6c520e1d6d074df9c98ca74a8b51537dc98d3b599dab868b4f5f4be2defa043f3d7e6b6c5431dc437ff773e11676eaf833610d0b0c0d248578daad45aaaf9f90cda4ccd546039d0e52bf587abc16748e024e65c615583c96bf050b3975406583aeaeb734a2d303a9a225350673b985b8654b8e9be8bf6e8ad9", 0xde}, {&(0x7f0000001680)="fd76c79e3930d835224ab650f280c744cf918a9073e8fac9ba64", 0x1a}, {&(0x7f00000016c0)="48f5bab5852616ba7fca70883fa73947a50584cbfdf0508f8ff7be25f637619aa60f831741ad85ae88ddc9ec357fa0eb1c66d3d837ebb3e2d2420cbe404de0cc7ac0ee6cfdcc8037309bc901c358469be57c032e98efb6c1a0fdf7dd7cf1775cf3d33cfaa4e8bbdc7fa9a50add3b067819bbdf7a1d3cd72f79d9ca506c88f4d4", 0x80}, {&(0x7f0000001740)="b47e0c3437d9a37e73ef295be43053d1ff7d73dbd2879a22353f01605fa386980bb4c118b824ef9cf06580c6729e35ca1719fac8777927e614e013324e52dcdc30940495da74edbaa8e53323f0111063cf64b15ec2f370b84bf4a64b88c0e983b465d66884f417d7518a1948a625f1e370c825227346b22b297eae6f136a89683302da408dab523b547c09036d59f86f5a86c321ed0c99c6b3fff5eb73e7dd02d4f1a245ae6914d734e33d3869d0eaaa645418c6c505c4acbb44b7637edf871e56de283dd607df0786fef8a0d7f5ac82263d947652ef866f1e3c66cac279b3811294d46c301e6e201081f35a6faf7f8d0fc6530a88bc", 0xf6}, {&(0x7f0000001840)="f7acebfdc3c3564a7208bb47dbcccc08b507f073fb217331ef02dcb5b4155670235001", 0x23}], 0x5, 0x6, 0x6) chdir(&(0x7f00000018c0)='./file0\x00') ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000001900)) recvfrom$unix(r0, &(0x7f0000001940)=""/130, 0x82, 0x2000, &(0x7f0000001a00)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r3 = openat$vhost_vsock(0xffffff9c, &(0x7f0000001b80), 0x2, 0x0) r4 = signalfd4(r3, &(0x7f0000001bc0)={[0x37, 0x6]}, 0x8, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000001c00)=0xc, 0x4) r5 = openat$autofs(0xffffff9c, &(0x7f0000001c40), 0x408000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$SIOCX25SDTEFACILITIES(r6, 0x89eb, &(0x7f0000001cc0)={0xf77, 0x8f7b, 0x7, 0x4, 0x7, 0xa, 0x1c, "9c8d3625ea8e89e78b0c5696d46a33e98d71fd6f", "7d1619c869ebe73d28cc2e59ea3c476be89353ea"}) r7 = openat$sequencer(0xffffff9c, &(0x7f0000001d00), 0x410080, 0x0) write$sysctl(r4, &(0x7f0000001d40)='7\x00', 0x2) statx(r4, &(0x7f0000001d80)='./file0\x00', 0x4000, 0x100, &(0x7f0000001dc0)) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc01c5869, &(0x7f0000001fc0)={r1, &(0x7f0000001ec0)='/=^!\\\x00', 0x200000, &(0x7f0000001f00)={@_ha_fsid={[0xd, 0xfffffffd]}, {0xd97, 0x3d, 0xfdb8}}, 0x0, &(0x7f0000001f40)={@_ha_fsid}, &(0x7f0000001f80)=0x7ff}) sendfile(r7, r3, &(0x7f0000002000)=0x80000000, 0x3) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x10010, r4, 0x6000) bind$pptp(r8, &(0x7f0000002040)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) setsockopt(r6, 0x9, 0x8, &(0x7f0000002080)="443db81c2fda9171ebc215aa721891e17518fb32001bc6e7afa1c2acbf589d0868c9aaa9b01e3fe8176dfdbb1c0365ca914a7a526d7827e8791c682d4e49ecb094562498438c2b", 0x47) fsmount(r4, 0x1, 0x82) syz_open_dev$sndmidi(&(0x7f0000002100), 0x10000, 0x228040) getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000002140), &(0x7f0000002180)=0x4) 673.697823ms ago: executing program 1 (id=2777): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01e1ff0001000000140003007665746830000000000000000000000008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000000000014000300626174616476300000000000000000007d6c73db27a08975c65cdf3b611077c197f8a9a0a0bf93f74bd696070e4265c41f5fe3a512339be8457660b7e91def081da0ce64817224a9c12d93daedfc46c0a8a2334f180bec5485f103e5e3af1711"], 0x34}, 0x1, 0x0, 0x0, 0x2044}, 0x0) 589.672863ms ago: executing program 2 (id=2780): getpid() open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000fe000000030000000000000007000000dfe35ae478903ba4ec25d932781d28623ecb5f45c4fffc8aa44af80824e7c71c47870a4062a4d971f28438b19337be2bc95842721244651ecd19c1f157a3425ef600c7c37eaa62a242"], 0x0) 589.567154ms ago: executing program 1 (id=2781): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) openat$ttyS3(0xffffff9c, 0x0, 0x208801, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4008040) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 589.467636ms ago: executing program 2 (id=2782): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) 587.727817ms ago: executing program 2 (id=2783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x65}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x8e}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 513.644114ms ago: executing program 2 (id=2784): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffcd4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x4004743c, 0x0) 510.060887ms ago: executing program 2 (id=2792): getpid() open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000fe000000030000000000000007000000dfe35ae478903ba4ec25d932781d28623ecb5f45c4fffc8aa44af80824e7c71c47870a4062a4d971f28438b19337be2bc95842721244651ecd19c1f157a3425ef600c7c37eaa62a242"], 0x0) 3.489788ms ago: executing program 1 (id=2785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000f00000000002c0004800800010000000001200002800c000100706f6c69637930f50800020000000002080003000000001e", 0x68}], 0x1}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x15e) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x5000003a, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001c00)={0x2020}, 0x2030) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x8, 0x4) bind$netlink(r1, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbff}, 0xc) 0s ago: executing program 2 (id=2786): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x50) write(r0, &(0x7f0000000500)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) r2 = getpid() r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(r2, 0xe, &(0x7f0000000380)={0x8b680000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x159100) sendmsg$nl_crypto(r1, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB="200100001000000126bd7080ffdbdf2563636d286165732d61736d290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00000000007d3c69696e86f6090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000400000000000000000000080001000e0000000800010005000000080001000000010008000100000000000800010000000000080001008d1e000008000100080000000800010001000000"], 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x41) writev(r4, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc040564a, &(0x7f00000000c0)={0x1}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001340)={{}, r6, 0x4, @inherit={0x80, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000700000000000000e70e000000000000018000000000000016000000000080000010000000000000040000000000000002000000000000008130000000000000ff7fbf461af80057f5b400000000000000000000000000008c440000000000000a00000000000000"]}, @name="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"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, &(0x7f0000000140)={"e0dfa732a2a3f81fc94830d10b97ac16", 0x0, r6, {0x7, 0x1000}, {0x7fff, 0x49c}, 0xb0, [0x80000001, 0x2, 0x6, 0x82, 0x0, 0x100, 0x8000, 0xbb1, 0x4, 0x6, 0x3, 0x6, 0xfff, 0x3, 0xd212, 0x101]}) write(r1, &(0x7f0000000080)='2\n', 0x2) r7 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r7, &(0x7f0000000700)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000002400)='./config/nullb/nullb2/zoned\x00', 0x2, 0x0) write(r3, &(0x7f0000000880)="310a3bd2e7290300000000000000b0e94e6c6599035957a4a959895f7cd228cf660352dd8e25d4f36836b2668697f4b87425137e664116ad75c8a912096b341940bb9727856b485d5a77f48e91bb3bcb8aa9f2d181c5a74e7f4b278ecbe52edd0adc29d079ddf914cd133ad4f091436d2638c657b43e6740b21f90fbd4804492701c165ec0af1d8fe3457c7f00b21315a75a75122f66c6926beaebed67b3da6eb165f68239", 0xa5) kernel console output (not intermixed with test programs): roduct=6889, bcdDevice= 1.00 [ 597.805059][T10248] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.810725][T10248] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.810906][T10248] usb 7-1: Product: syz [ 597.810915][T10248] usb 7-1: Manufacturer: syz [ 597.810923][T10248] usb 7-1: SerialNumber: syz [ 597.816490][T10248] kalmia 7-1:1.0: probe with driver kalmia failed with error -22 [ 597.878294][T15090] syzkaller0: entered promiscuous mode [ 597.878356][T15090] syzkaller0: entered allmulticast mode [ 598.068624][T15096] FAULT_INJECTION: forcing a failure. [ 598.068624][T15096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.068689][T15096] CPU: 2 UID: 0 PID: 15096 Comm: syz.2.2185 Tainted: G L syzkaller #0 PREEMPT(full) [ 598.068713][T15096] Tainted: [L]=SOFTLOCKUP [ 598.068720][T15096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 598.068730][T15096] Call Trace: [ 598.068736][T15096] [ 598.068744][T15096] dump_stack_lvl+0x100/0x190 [ 598.068770][T15096] should_fail_ex.cold+0x5/0xa [ 598.068791][T15096] _copy_from_iter+0x1f4/0x1690 [ 598.068813][T15096] ? __asan_memset+0x23/0x50 [ 598.068855][T15096] ? __pfx__copy_from_iter+0x10/0x10 [ 598.068873][T15096] ? __pfx___alloc_skb+0x10/0x10 [ 598.068940][T15096] ? aa_sk_perm+0x389/0xab0 [ 598.068969][T15096] netlink_sendmsg+0x808/0xda0 [ 598.068998][T15096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.069025][T15096] ? apparmor_socket_sendmsg+0x165/0x280 [ 598.069046][T15096] ____sys_sendmsg+0xa4d/0xbe0 [ 598.069067][T15096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.069093][T15096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.069126][T15096] ___sys_sendmsg+0x190/0x1e0 [ 598.069150][T15096] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.069183][T15096] ? find_held_lock+0x2b/0x80 [ 598.069214][T15096] __sys_sendmsg+0x160/0x210 [ 598.069233][T15096] ? __pfx___sys_sendmsg+0x10/0x10 [ 598.069257][T15096] ? __pfx_ksys_write+0x10/0x10 [ 598.069280][T15096] __do_fast_syscall_32+0x13a/0x8b0 [ 598.069300][T15096] ? lockdep_hardirqs_on+0x7d/0x110 [ 598.069321][T15096] do_fast_syscall_32+0x32/0x70 [ 598.069341][T15096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 598.069364][T15096] RIP: 0023:0xf6ffefec [ 598.069384][T15096] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 598.069392][T15096] RSP: 002b:00000000f53cc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 598.069410][T15096] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000240 [ 598.069422][T15096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 598.069431][T15096] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 598.069442][T15096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.069453][T15096] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 598.069475][T15096] [ 598.149860][ T948] usb 7-1: USB disconnect, device number 54 [ 598.258174][T15100] netlink: 'syz.8.2187': attribute type 10 has an invalid length. [ 598.515028][ T948] usb 6-1: USB disconnect, device number 57 [ 598.515161][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 598.538868][T15108] FAULT_INJECTION: forcing a failure. [ 598.538868][T15108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.538942][T15108] CPU: 2 UID: 0 PID: 15108 Comm: syz.1.2192 Tainted: G L syzkaller #0 PREEMPT(full) [ 598.538969][T15108] Tainted: [L]=SOFTLOCKUP [ 598.538981][T15108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 598.538988][T15108] Call Trace: [ 598.538993][T15108] [ 598.538998][T15108] dump_stack_lvl+0x100/0x190 [ 598.539016][T15108] should_fail_ex.cold+0x5/0xa [ 598.539031][T15108] strncpy_from_user+0x3b/0x2d0 [ 598.539045][T15108] do_getname+0x78/0x390 [ 598.539062][T15108] __do_sys_move_mount+0x511/0x780 [ 598.539077][T15108] ? __pfx___do_sys_move_mount+0x10/0x10 [ 598.539090][T15108] ? fput+0x7c/0x100 [ 598.539103][T15108] ? ksys_write+0x1ac/0x250 [ 598.539113][T15108] ? __pfx_ksys_write+0x10/0x10 [ 598.539127][T15108] __do_fast_syscall_32+0x13a/0x8b0 [ 598.539147][T15108] ? lockdep_hardirqs_on+0x7d/0x110 [ 598.539167][T15108] do_fast_syscall_32+0x32/0x70 [ 598.539184][T15108] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 598.539198][T15108] RIP: 0023:0xf6fdefec [ 598.539213][T15108] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 598.539218][T15108] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 00000000000001ad [ 598.539230][T15108] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080008080 [ 598.539241][T15108] RDX: 00000000ffffff9c RSI: 0000000080000180 RDI: 0000000000000152 [ 598.539252][T15108] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 598.539262][T15108] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 598.539273][T15108] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 598.539294][T15108] [ 598.598125][T15111] lo speed is unknown, defaulting to 1000 [ 598.602792][T15111] lo speed is unknown, defaulting to 1000 [ 598.605812][T15111] lo speed is unknown, defaulting to 1000 [ 598.641700][T12681] IPVS: starting estimator thread 0... [ 598.657160][T15112] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 598.730549][T15116] sit1: entered promiscuous mode [ 598.731263][T15113] IPVS: using max 43 ests per chain, 103200 per kthread [ 598.800586][ T948] lo speed is unknown, defaulting to 1000 [ 598.800730][T15111] infiniband syz1: set down [ 598.800741][T15111] infiniband syz1: added lo [ 598.814387][T15111] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 598.814461][T15111] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 598.814491][T15111] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 598.839854][T15121] sysfs: Unknown parameter ':' [ 598.854209][T15111] RDS/IB: syz1: added [ 598.854803][T15111] smc: adding ib device syz1 with port count 1 [ 598.854965][T15111] smc: ib device syz1 port 1 has no pnetid [ 598.857174][ T948] lo speed is unknown, defaulting to 1000 [ 598.858520][T15111] lo speed is unknown, defaulting to 1000 [ 599.092547][T15111] lo speed is unknown, defaulting to 1000 [ 599.200430][T15111] lo speed is unknown, defaulting to 1000 [ 599.316642][T15111] lo speed is unknown, defaulting to 1000 [ 599.370796][T15135] FAULT_INJECTION: forcing a failure. [ 599.370796][T15135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.370870][T15135] CPU: 2 UID: 0 PID: 15135 Comm: syz.0.2200 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.370900][T15135] Tainted: [L]=SOFTLOCKUP [ 599.370906][T15135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 599.370913][T15135] Call Trace: [ 599.370918][T15135] [ 599.370923][T15135] dump_stack_lvl+0x100/0x190 [ 599.370942][T15135] should_fail_ex.cold+0x5/0xa [ 599.370957][T15135] _copy_to_iter+0x5a4/0x1720 [ 599.370977][T15135] ? ip_vs_info_seq_stop+0x31/0xb0 [ 599.370992][T15135] ? __pfx__copy_to_iter+0x10/0x10 [ 599.371011][T15135] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 599.371034][T15135] seq_read_iter+0x691/0x1270 [ 599.371044][T15135] ? aa_file_perm+0x7f3/0x14d0 [ 599.371066][T15135] seq_read+0x344/0x4d0 [ 599.371077][T15135] ? __pfx_seq_read+0x10/0x10 [ 599.371087][T15135] ? lock_acquire+0x1d1/0x380 [ 599.371104][T15135] ? get_pid_task+0xfc/0x250 [ 599.371115][T15135] ? get_pid_task+0xfc/0x250 [ 599.371127][T15135] ? common_file_perm+0x266/0x500 [ 599.371156][T15135] ? __pfx_seq_read+0x10/0x10 [ 599.371172][T15135] proc_reg_read+0x240/0x330 [ 599.371193][T15135] ? __pfx_proc_reg_read+0x10/0x10 [ 599.371215][T15135] vfs_read+0x1e4/0xb40 [ 599.371255][T15135] ? lock_acquire+0x1d1/0x380 [ 599.371276][T15135] ? __fget_files+0x34/0x3d0 [ 599.371293][T15135] ? __pfx_vfs_read+0x10/0x10 [ 599.371341][T15135] ? find_held_lock+0x2b/0x80 [ 599.371357][T15135] ? __fget_files+0x215/0x3d0 [ 599.371374][T15135] ? __fget_files+0x215/0x3d0 [ 599.371400][T15135] ? __fget_files+0x21f/0x3d0 [ 599.371421][T15135] ksys_pread64+0x161/0x1a0 [ 599.371438][T15135] ? __pfx_ksys_pread64+0x10/0x10 [ 599.371467][T15135] __do_fast_syscall_32+0x13a/0x8b0 [ 599.371492][T15135] ? lockdep_hardirqs_on+0x7d/0x110 [ 599.371512][T15135] do_fast_syscall_32+0x32/0x70 [ 599.371530][T15135] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 599.371552][T15135] RIP: 0023:0xf7fa6fec [ 599.371571][T15135] Code: Unable to access opcode bytes at 0xf7fa6fc2. [ 599.371580][T15135] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 00000000000000b4 [ 599.371597][T15135] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 599.371609][T15135] RDX: 00000000ffffff7f RSI: 0000000000000008 RDI: 0000000000000000 [ 599.371619][T15135] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 599.371630][T15135] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 599.371641][T15135] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 599.371663][T15135] [ 599.471286][ T948] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 599.572573][T15144] FAULT_INJECTION: forcing a failure. [ 599.572573][T15144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.572662][T15144] CPU: 3 UID: 0 PID: 15144 Comm: syz.0.2204 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.572703][T15144] Tainted: [L]=SOFTLOCKUP [ 599.572711][T15144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 599.572723][T15144] Call Trace: [ 599.572730][T15144] [ 599.572739][T15144] dump_stack_lvl+0x100/0x190 [ 599.572768][T15144] should_fail_ex.cold+0x5/0xa [ 599.572790][T15144] _copy_to_user+0x32/0xd0 [ 599.572820][T15144] simple_read_from_buffer+0xcb/0x170 [ 599.572841][T15144] proc_fail_nth_read+0x1af/0x230 [ 599.572870][T15144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 599.572899][T15144] ? rw_verify_area+0xce/0x6d0 [ 599.572923][T15144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 599.572956][T15144] vfs_read+0x1e4/0xb40 [ 599.572984][T15144] ? lock_acquire+0x1d1/0x380 [ 599.573007][T15144] ? __fget_files+0x34/0x3d0 [ 599.573023][T15144] ? __pfx_vfs_read+0x10/0x10 [ 599.573048][T15144] ? find_held_lock+0x2b/0x80 [ 599.573066][T15144] ? __fget_files+0x215/0x3d0 [ 599.573088][T15144] ? __fget_files+0x21f/0x3d0 [ 599.573114][T15144] ksys_read+0x12a/0x250 [ 599.573130][T15144] ? __pfx_ksys_read+0x10/0x10 [ 599.573152][T15144] do_int80_emulation+0x166/0x650 [ 599.573178][T15144] asm_int80_emulation+0x1a/0x20 [ 599.573196][T15144] RIP: 0023:0xf71a75ab [ 599.573213][T15144] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 599.573230][T15144] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 599.573248][T15144] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54665d0 [ 599.573257][T15144] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 599.573268][T15144] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 599.573280][T15144] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 599.573292][T15144] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 599.573316][T15144] [ 599.645174][ T948] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 599.655605][ T948] usb 7-1: config index 0 descriptor too short (expected 65431, got 45) [ 599.657230][ T948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.657243][ T948] usb 7-1: Product: syz [ 599.657251][ T948] usb 7-1: Manufacturer: syz [ 599.657259][ T948] usb 7-1: SerialNumber: syz [ 599.671331][ T9369] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 599.823182][ T9369] usb 13-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 599.829352][ T9369] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.833308][ T9369] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.833329][ T9369] usb 13-1: Product: syz [ 599.833341][ T9369] usb 13-1: Manufacturer: syz [ 599.833351][ T9369] usb 13-1: SerialNumber: syz [ 599.856226][T15156] netlink: 'syz.1.2203': attribute type 10 has an invalid length. [ 599.856751][ T9369] kalmia 13-1:1.0: probe with driver kalmia failed with error -22 [ 600.068013][ T9369] usb 13-1: USB disconnect, device number 19 [ 600.508799][ T948] rtl8150 7-1:1.0: couldn't reset the device [ 600.509008][ T948] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 600.518580][ T948] usb 7-1: USB disconnect, device number 55 [ 600.842462][ T10] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 600.950348][T15176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.955594][T15176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.991226][ T10] usb 13-1: Using ep0 maxpacket: 8 [ 600.993662][ T10] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 600.997990][ T10] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 601.000792][ T10] usb 13-1: config 0 has no interface number 0 [ 601.003070][ T10] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 601.007386][ T10] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 601.012081][ T10] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 601.016515][ T10] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 601.021350][ T10] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.031037][ T10] usb 13-1: config 0 descriptor?? [ 601.041955][ T10] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 601.064873][T15180] __nla_validate_parse: 5 callbacks suppressed [ 601.065010][T15180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2215'. [ 601.225383][T15186] fuse: Bad value for 'fd' [ 601.292790][T15169] lo speed is unknown, defaulting to 1000 [ 601.452232][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2218'. [ 601.483613][T15189] vlan3: entered allmulticast mode [ 601.483705][T15189] bridge2: entered allmulticast mode [ 601.489044][T15189] bridge2: port 1(erspan0) entered blocking state [ 601.491945][T15189] bridge2: port 1(erspan0) entered disabled state [ 601.492127][T15189] erspan0: entered allmulticast mode [ 601.496844][T15189] erspan0: entered promiscuous mode [ 601.603759][ T9544] usb 13-1: USB disconnect, device number 20 [ 601.603890][ C0] ldusb 13-1:0.55: usb_submit_urb failed (-19) [ 601.609100][ T9544] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 601.809435][T15198] 9p: Bad value for 'rfdno' [ 602.489059][T15218] fuse: Bad value for 'fd' [ 602.967430][T15222] netlink: 'syz.0.2226': attribute type 10 has an invalid length. [ 603.242208][T15224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2228'. [ 603.294715][T15230] ip6t_rt: too many addresses specified [ 603.710794][T15238] comedi comedi3: comedi_test: 256 microvolt, 15 microsecond waveform attached [ 603.936769][T15241] FAULT_INJECTION: forcing a failure. [ 603.936769][T15241] name failslab, interval 1, probability 0, space 0, times 0 [ 603.937047][T15241] CPU: 0 UID: 0 PID: 15241 Comm: syz.0.2231 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.937086][T15241] Tainted: [L]=SOFTLOCKUP [ 603.937091][T15241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 603.937098][T15241] Call Trace: [ 603.937103][T15241] [ 603.937108][T15241] dump_stack_lvl+0x100/0x190 [ 603.937127][T15241] should_fail_ex.cold+0x5/0xa [ 603.937142][T15241] should_failslab+0xc2/0x120 [ 603.937157][T15241] kmem_cache_alloc_noprof+0x92/0x6a0 [ 603.937170][T15241] ? fuse_request_alloc+0x22/0x200 [ 603.937185][T15241] fuse_request_alloc+0x22/0x200 [ 603.937197][T15241] fuse_get_req+0x20a/0x400 [ 603.937209][T15241] ? __pfx_fuse_get_req+0x10/0x10 [ 603.937222][T15241] ? from_kgid+0x8f/0xd0 [ 603.937236][T15241] ? __pfx_from_kgid+0x10/0x10 [ 603.937254][T15241] fuse_chan_send+0x259/0x9c0 [ 603.937271][T15241] __fuse_simple_request+0x18e/0x1e0 [ 603.937287][T15241] fuse_direct_io+0x17b7/0x26b0 [ 603.937312][T15241] ? __pfx_fuse_direct_io+0x10/0x10 [ 603.937326][T15241] ? __pfx_generic_write_checks+0x10/0x10 [ 603.937343][T15241] ? __pfx_down_write+0x10/0x10 [ 603.937362][T15241] fuse_direct_write_iter+0x6ef/0x900 [ 603.937381][T15241] ? __pfx_fuse_direct_write_iter+0x10/0x10 [ 603.937407][T15241] ? lock_acquire+0x1d1/0x380 [ 603.937423][T15241] ? ksys_write+0x12a/0x250 [ 603.937435][T15241] fuse_file_write_iter+0x59b/0x960 [ 603.937452][T15241] vfs_write+0x6af/0x1050 [ 603.937463][T15241] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 603.937487][T15241] ? __pfx_vfs_write+0x10/0x10 [ 603.937497][T15241] ? find_held_lock+0x2b/0x80 [ 603.937517][T15241] ksys_write+0x12a/0x250 [ 603.937533][T15241] ? __pfx_ksys_write+0x10/0x10 [ 603.937544][T15241] ? rcu_is_watching+0x13/0xc0 [ 603.937558][T15241] __do_fast_syscall_32+0x13a/0x8b0 [ 603.937574][T15241] ? lockdep_hardirqs_on+0x7d/0x110 [ 603.937588][T15241] do_fast_syscall_32+0x32/0x70 [ 603.937602][T15241] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 603.937617][T15241] RIP: 0023:0xf7fa6fec [ 603.937631][T15241] Code: Unable to access opcode bytes at 0xf7fa6fc2. [ 603.937637][T15241] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 603.937648][T15241] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 603.937656][T15241] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000000000000000 [ 603.937663][T15241] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 603.937669][T15241] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 603.937676][T15241] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 603.937690][T15241] [ 604.157768][T15244] FAULT_INJECTION: forcing a failure. [ 604.157768][T15244] name failslab, interval 1, probability 0, space 0, times 0 [ 604.157835][T15244] CPU: 3 UID: 0 PID: 15244 Comm: syz.1.2232 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.157873][T15244] Tainted: [L]=SOFTLOCKUP [ 604.157881][T15244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 604.157892][T15244] Call Trace: [ 604.157898][T15244] [ 604.157907][T15244] dump_stack_lvl+0x100/0x190 [ 604.157935][T15244] should_fail_ex.cold+0x5/0xa [ 604.157958][T15244] should_failslab+0xc2/0x120 [ 604.157981][T15244] __kmalloc_cache_noprof+0x91/0x6d0 [ 604.158007][T15244] ? proc_thread_self_get_link+0x1a6/0x210 [ 604.158032][T15244] proc_thread_self_get_link+0x1a6/0x210 [ 604.158053][T15244] pick_link+0xac2/0x13c0 [ 604.158079][T15244] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 604.158102][T15244] step_into_slowpath+0x9ba/0xf90 [ 604.158132][T15244] ? __pfx_step_into_slowpath+0x10/0x10 [ 604.158163][T15244] ? lookup_fast+0x2da/0x600 [ 604.158186][T15244] ? inode_permission+0x374/0x620 [ 604.158211][T15244] link_path_walk+0xf28/0x1cc0 [ 604.158245][T15244] path_openat+0x1ac/0x2440 [ 604.158268][T15244] ? __pfx_path_openat+0x10/0x10 [ 604.158294][T15244] do_file_open+0x20e/0x430 [ 604.158312][T15244] ? __pfx_do_file_open+0x10/0x10 [ 604.158334][T15244] ? _raw_spin_unlock+0x28/0x50 [ 604.158345][T15244] ? alloc_fd+0x471/0x7a0 [ 604.158362][T15244] do_sys_openat2+0x10f/0x1e0 [ 604.158376][T15244] ? __pfx_do_sys_openat2+0x10/0x10 [ 604.158391][T15244] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 604.158407][T15244] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 604.158421][T15244] __ia32_compat_sys_openat+0x12d/0x210 [ 604.158438][T15244] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 604.158459][T15244] do_int80_emulation+0x166/0x650 [ 604.158475][T15244] asm_int80_emulation+0x1a/0x20 [ 604.158486][T15244] RIP: 0023:0xf71175ab [ 604.158496][T15244] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 604.158507][T15244] RSP: 002b:00000000f53cd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 604.158519][T15244] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f71e1b2e [ 604.158526][T15244] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 604.158537][T15244] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 604.158544][T15244] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 604.158550][T15244] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 604.158564][T15244] [ 604.158878][T15244] FAULT_INJECTION: forcing a failure. [ 604.158878][T15244] name failslab, interval 1, probability 0, space 0, times 0 [ 604.158901][T15244] CPU: 3 UID: 0 PID: 15244 Comm: syz.1.2232 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.158924][T15244] Tainted: [L]=SOFTLOCKUP [ 604.158930][T15244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 604.158940][T15244] Call Trace: [ 604.158945][T15244] [ 604.158952][T15244] dump_stack_lvl+0x100/0x190 [ 604.158975][T15244] should_fail_ex.cold+0x5/0xa [ 604.158996][T15244] should_failslab+0xc2/0x120 [ 604.159016][T15244] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 604.159035][T15244] ? shmem_alloc_inode+0x25/0x50 [ 604.159055][T15244] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 604.159074][T15244] shmem_alloc_inode+0x25/0x50 [ 604.159091][T15244] alloc_inode+0x68/0x250 [ 604.159114][T15244] new_inode+0x22/0x1c0 [ 604.159138][T15244] shmem_get_inode+0x1e3/0xf70 [ 604.159158][T15244] ? __lock_acquire+0x4c5/0x1ec0 [ 604.159180][T15244] ? __pfx_shmem_get_inode+0x10/0x10 [ 604.159219][T15244] __shmem_file_setup+0x168/0x460 [ 604.159238][T15244] ? lock_acquire+0x1d1/0x380 [ 604.159259][T15244] ? __pfx___shmem_file_setup+0x10/0x10 [ 604.159302][T15244] ? do_raw_spin_lock+0x128/0x260 [ 604.159327][T15244] ? find_held_lock+0x2b/0x80 [ 604.159344][T15244] ? alloc_fd+0x471/0x7a0 [ 604.159360][T15244] ? alloc_fd+0x471/0x7a0 [ 604.159380][T15244] memfd_alloc_file+0x247/0x610 [ 604.159402][T15244] ? _raw_spin_unlock+0x28/0x50 [ 604.159419][T15244] ? __pfx_memfd_alloc_file+0x10/0x10 [ 604.159447][T15244] __do_sys_memfd_create+0x236/0x3d0 [ 604.159472][T15244] __do_fast_syscall_32+0x13a/0x8b0 [ 604.159492][T15244] ? lockdep_hardirqs_on+0x7d/0x110 [ 604.159512][T15244] do_fast_syscall_32+0x32/0x70 [ 604.159539][T15244] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 604.159560][T15244] RIP: 0023:0xf6fdefec [ 604.159578][T15244] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 604.159586][T15244] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000164 [ 604.159603][T15244] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 604.159613][T15244] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 604.159623][T15244] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 604.159633][T15244] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 604.159643][T15244] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 604.159666][T15244] [ 604.703662][T15262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2237'. [ 604.861367][T15264] netlink: 'syz.8.2235': attribute type 10 has an invalid length. [ 605.216003][T15266] FAULT_INJECTION: forcing a failure. [ 605.216003][T15266] name fail_futex, interval 1, probability 0, space 0, times 0 [ 605.216072][T15266] CPU: 3 UID: 0 PID: 15266 Comm: syz.0.2238 Tainted: G L syzkaller #0 PREEMPT(full) [ 605.216105][T15266] Tainted: [L]=SOFTLOCKUP [ 605.216111][T15266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 605.216119][T15266] Call Trace: [ 605.216124][T15266] [ 605.216130][T15266] dump_stack_lvl+0x100/0x190 [ 605.216152][T15266] should_fail_ex.cold+0x5/0xa [ 605.216168][T15266] get_futex_key+0xf72/0x14f0 [ 605.216191][T15266] ? __pfx_get_futex_key+0x10/0x10 [ 605.216211][T15266] ? __mutex_unlock_slowpath+0x35d/0x930 [ 605.216229][T15266] ? lock_acquire+0x1d1/0x380 [ 605.216250][T15266] futex_wake+0xf4/0x5e0 [ 605.216274][T15266] ? __pfx_futex_wake+0x10/0x10 [ 605.216300][T15266] ? detach_task_ctx_data+0x83/0x490 [ 605.216327][T15266] do_futex+0x2b2/0x440 [ 605.216340][T15266] ? __pfx_do_futex+0x10/0x10 [ 605.216351][T15266] ? __might_fault+0xc5/0x140 [ 605.216373][T15266] mm_exit_exec_release+0x256/0x2f0 [ 605.216395][T15266] do_exit+0x707/0x2ae0 [ 605.216412][T15266] ? __pfx_do_exit+0x10/0x10 [ 605.216425][T15266] ? do_raw_spin_lock+0x1e0/0x260 [ 605.216445][T15266] ? find_held_lock+0x2b/0x80 [ 605.216457][T15266] ? get_signal+0x7e0/0x21e0 [ 605.216483][T15266] do_group_exit+0xd5/0x2a0 [ 605.216506][T15266] get_signal+0x1ec7/0x21e0 [ 605.216540][T15266] ? __pfx_get_signal+0x10/0x10 [ 605.216571][T15266] ? do_futex+0x190/0x440 [ 605.216589][T15266] arch_do_signal_or_restart+0x91/0x7a0 [ 605.216614][T15266] ? __sys_bind+0x1c7/0x260 [ 605.216642][T15266] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 605.216674][T15266] ? xfd_validate_state+0x129/0x190 [ 605.216710][T15266] exit_to_user_mode_loop+0x139/0x700 [ 605.216732][T15266] ? rcu_is_watching+0x13/0xc0 [ 605.216750][T15266] __do_fast_syscall_32+0x59f/0x8b0 [ 605.216769][T15266] do_fast_syscall_32+0x32/0x70 [ 605.216785][T15266] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 605.216803][T15266] RIP: 0023:0xf7fa6fec [ 605.216818][T15266] Code: Unable to access opcode bytes at 0xf7fa6fc2. [ 605.216824][T15266] RSP: 002b:00000000f54665bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 605.216837][T15266] RAX: fffffffffffffe00 RBX: 00000000f7464f88 RCX: 0000000000000080 [ 605.216846][T15266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7464f8c [ 605.216854][T15266] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 605.216862][T15266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.216873][T15266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 605.216900][T15266] [ 605.223967][T15273] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 605.223994][T15273] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 605.224111][T15273] vhci_hcd vhci_hcd.0: Device attached [ 605.253204][ T9397] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.253255][ T9397] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.253274][ T9397] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.253292][ T9397] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.340815][T15273] wg2 speed is unknown, defaulting to 1000 [ 605.344774][T15273] wg2 speed is unknown, defaulting to 1000 [ 605.345453][T15273] wg2 speed is unknown, defaulting to 1000 [ 605.744844][T15282] netlink: 'syz.0.2240': attribute type 10 has an invalid length. [ 605.760123][ T9544] usb 40-1: SetAddress Request (6) to port 0 [ 605.760434][ T9544] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 606.101828][T15274] vhci_hcd: connection reset by peer [ 606.104846][ T5813] vhci_hcd vhci_hcd.1: stop threads [ 606.107518][ T5813] vhci_hcd vhci_hcd.1: release socket [ 606.113638][ T5813] vhci_hcd vhci_hcd.1: disconnect device [ 606.369430][T10248] wg2 speed is unknown, defaulting to 1000 [ 606.376204][T15273] infiniband syz2: set down [ 606.376312][T15273] infiniband syz2: added wg2 [ 606.398500][T15273] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 606.398599][T15273] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 606.398653][T15273] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 606.432975][T15273] RDS/IB: syz2: added [ 606.442639][T15273] smc: adding ib device syz2 with port count 1 [ 606.442707][T15273] smc: ib device syz2 port 1 has no pnetid [ 606.442797][T10248] wg2 speed is unknown, defaulting to 1000 [ 606.443851][T15273] wg2 speed is unknown, defaulting to 1000 [ 606.476927][T15289] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2250'. [ 606.477025][T15289] openvswitch: netlink: Missing key (keys=c0, expected=10000000) [ 606.581099][T15297] ip6t_rt: too many addresses specified [ 606.665676][T15273] wg2 speed is unknown, defaulting to 1000 [ 607.187007][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2247'. [ 607.258862][T15323] cgroup2: Unknown parameter 'l' [ 607.879839][T15273] wg2 speed is unknown, defaulting to 1000 [ 608.095002][T15273] wg2 speed is unknown, defaulting to 1000 [ 608.147844][T15330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.155344][T15330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.197547][T15330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.199086][T15330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.607551][ T43] audit: type=1800 audit(1787942056.618:1674): pid=15347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2256" name="file0" dev="overlay" ino=1413 res=0 errno=0 [ 608.624028][T15347] MTD: Couldn't look up './cgroup.cpu/cgroup.procs': -2 [ 608.799835][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2257'. [ 609.191645][T15355] netlink: 'syz.0.2258': attribute type 10 has an invalid length. [ 609.917032][T15359] netlink: 'syz.1.2260': attribute type 10 has an invalid length. [ 609.917548][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2261'. [ 610.791517][ T9544] usb 40-1: device descriptor read/8, error -110 [ 610.798103][T15383] FAULT_INJECTION: forcing a failure. [ 610.798103][T15383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.798160][T15383] CPU: 0 UID: 0 PID: 15383 Comm: syz.0.2269 Tainted: G L syzkaller #0 PREEMPT(full) [ 610.798188][T15383] Tainted: [L]=SOFTLOCKUP [ 610.798194][T15383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 610.798201][T15383] Call Trace: [ 610.798206][T15383] [ 610.798211][T15383] dump_stack_lvl+0x100/0x190 [ 610.798230][T15383] should_fail_ex.cold+0x5/0xa [ 610.798245][T15383] _copy_from_iter+0x1f4/0x1690 [ 610.798258][T15383] ? __asan_memset+0x23/0x50 [ 610.798276][T15383] ? __pfx__copy_from_iter+0x10/0x10 [ 610.798287][T15383] ? __pfx___alloc_skb+0x10/0x10 [ 610.798303][T15383] netlink_sendmsg+0x808/0xda0 [ 610.798323][T15383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.798341][T15383] ? apparmor_socket_sendmsg+0x165/0x280 [ 610.798356][T15383] ____sys_sendmsg+0xa4d/0xbe0 [ 610.798369][T15383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.798387][T15383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.798405][T15383] ? _kstrtoull+0x144/0x200 [ 610.798418][T15383] ? __pfx__kstrtoull+0x10/0x10 [ 610.798432][T15383] ___sys_sendmsg+0x190/0x1e0 [ 610.798448][T15383] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.798463][T15383] ? __lock_acquire+0x4c5/0x1ec0 [ 610.798487][T15383] ? __fget_files+0x34/0x3d0 [ 610.798509][T15383] __sys_sendmmsg+0x309/0x440 [ 610.798522][T15383] ? __pfx___sys_sendmmsg+0x10/0x10 [ 610.798533][T15383] ? find_held_lock+0x2b/0x80 [ 610.798548][T15383] ? __mutex_unlock_slowpath+0x35d/0x930 [ 610.798569][T15383] ? fput+0x7c/0x100 [ 610.798582][T15383] ? ksys_write+0x1ac/0x250 [ 610.798594][T15383] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 610.798610][T15383] ? lockdep_hardirqs_on+0x7d/0x110 [ 610.798622][T15383] __do_fast_syscall_32+0x13a/0x8b0 [ 610.798636][T15383] ? lockdep_hardirqs_on+0x7d/0x110 [ 610.798649][T15383] do_fast_syscall_32+0x32/0x70 [ 610.798663][T15383] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 610.798677][T15383] RIP: 0023:0xf7fa6fec [ 610.798690][T15383] Code: Unable to access opcode bytes at 0xf7fa6fc2. [ 610.798696][T15383] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 610.798707][T15383] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 610.798714][T15383] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 610.798721][T15383] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 610.798728][T15383] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 610.798735][T15383] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 610.798748][T15383] [ 610.854227][T15386] ip6t_rt: too many addresses specified [ 611.194658][ T9544] usb usb40-port1: attempt power cycle [ 611.474928][T15392] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2271'. [ 611.528185][T15394] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2271'. [ 611.896243][ T9544] usb usb40-port1: unable to enumerate USB device [ 612.612385][T15411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'. [ 612.860294][T15420] ip6t_rt: too many addresses specified [ 612.889022][T15422] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2282'. [ 612.950028][T15423] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2282'. [ 613.625927][T15429] fuse: Unknown parameter 'fd0x0000000000000003' [ 614.705416][T15462] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 614.726232][T15462] FAULT_INJECTION: forcing a failure. [ 614.726232][T15462] name failslab, interval 1, probability 0, space 0, times 0 [ 614.726277][T15462] CPU: 0 UID: 0 PID: 15462 Comm: syz.0.2290 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.726308][T15462] Tainted: [L]=SOFTLOCKUP [ 614.726314][T15462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 614.726322][T15462] Call Trace: [ 614.726328][T15462] [ 614.726333][T15462] dump_stack_lvl+0x100/0x190 [ 614.726353][T15462] should_fail_ex.cold+0x5/0xa [ 614.726386][T15462] should_failslab+0xc2/0x120 [ 614.726402][T15462] __kmalloc_noprof+0xfc/0x840 [ 614.726415][T15462] ? rcu_is_watching+0x13/0xc0 [ 614.726428][T15462] ? tomoyo_realpath_from_path+0xb6/0x690 [ 614.726449][T15462] tomoyo_realpath_from_path+0xb6/0x690 [ 614.726470][T15462] tomoyo_path_number_perm+0x23c/0x580 [ 614.726485][T15462] ? tomoyo_path_number_perm+0x22e/0x580 [ 614.726500][T15462] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 614.726516][T15462] ? get_pid_task+0x106/0x250 [ 614.726533][T15462] ? __lock_acquire+0x4c5/0x1ec0 [ 614.726557][T15462] ? __fget_files+0x34/0x3d0 [ 614.726569][T15462] ? find_held_lock+0x2b/0x80 [ 614.726581][T15462] ? __fget_files+0x215/0x3d0 [ 614.726592][T15462] ? hook_file_ioctl_common+0x140/0x440 [ 614.726608][T15462] ? __fget_files+0x215/0x3d0 [ 614.726623][T15462] ? __fget_files+0x21f/0x3d0 [ 614.726637][T15462] security_file_ioctl_compat+0xd3/0x230 [ 614.726654][T15462] __ia32_compat_sys_ioctl+0xc2/0x360 [ 614.726675][T15462] __do_fast_syscall_32+0x13a/0x8b0 [ 614.726691][T15462] ? lockdep_hardirqs_on+0x7d/0x110 [ 614.726706][T15462] do_fast_syscall_32+0x32/0x70 [ 614.726721][T15462] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 614.726737][T15462] RIP: 0023:0xf7fa6fec [ 614.726752][T15462] Code: Unable to access opcode bytes at 0xf7fa6fc2. [ 614.726757][T15462] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 614.726770][T15462] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000000ae80 [ 614.726778][T15462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 614.726786][T15462] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 614.726793][T15462] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 614.726800][T15462] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 614.726815][T15462] [ 614.784952][T15462] ERROR: Out of memory at tomoyo_realpath_from_path. [ 614.835045][T15462] kvm: pic: level sensitive irq not supported [ 614.844821][T15462] kvm: pic: non byte read [ 614.854635][T15462] kvm: pic: level sensitive irq not supported [ 614.856821][T15462] kvm: pic: non byte read [ 614.880842][T15462] kvm: pic: level sensitive irq not supported [ 614.882515][T15462] kvm: pic: non byte read [ 614.889015][T15462] kvm: pic: level sensitive irq not supported [ 614.894703][T15462] kvm: pic: non byte read [ 614.914251][T15462] kvm: pic: level sensitive irq not supported [ 614.914594][T15462] kvm: pic: non byte read [ 615.202048][T15475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2293'. [ 615.258536][T15477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2293'. [ 615.803570][T15485] ip6t_rt: too many addresses specified [ 616.139952][T15491] 9p: Bad value for 'rfdno' [ 616.143165][T15491] ±ÿ: renamed from veth0_vlan [ 616.381041][T15497] capability: warning: `syz.2.2298' uses 32-bit capabilities (legacy support in use) [ 616.390106][ T43] audit: type=1804 audit(1787942064.398:1675): pid=15497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2298" name="/newroot/57/file0" dev="tmpfs" ino=322 res=1 errno=0 [ 616.615745][T15510] FAULT_INJECTION: forcing a failure. [ 616.615745][T15510] name failslab, interval 1, probability 0, space 0, times 0 [ 616.615828][T15510] CPU: 2 UID: 0 PID: 15510 Comm: syz.0.2302 Tainted: G L syzkaller #0 PREEMPT(full) [ 616.615859][T15510] Tainted: [L]=SOFTLOCKUP [ 616.615866][T15510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 616.615874][T15510] Call Trace: [ 616.615879][T15510] [ 616.615884][T15510] dump_stack_lvl+0x100/0x190 [ 616.615906][T15510] should_fail_ex.cold+0x5/0xa [ 616.615923][T15510] should_failslab+0xc2/0x120 [ 616.615939][T15510] __kmalloc_noprof+0xfc/0x840 [ 616.615953][T15510] ? sk_prot_alloc+0x10b/0x2a0 [ 616.615972][T15510] sk_prot_alloc+0x10b/0x2a0 [ 616.615989][T15510] sk_alloc+0x36/0xe80 [ 616.616002][T15510] bpf_prog_test_run_skb+0x4d2/0x3530 [ 616.616023][T15510] ? lock_acquire+0x1d1/0x380 [ 616.616039][T15510] ? __fget_files+0x34/0x3d0 [ 616.616052][T15510] ? find_held_lock+0x2b/0x80 [ 616.616065][T15510] ? __fget_files+0x141/0x3d0 [ 616.616081][T15510] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 616.616102][T15510] ? fput+0x7c/0x100 [ 616.616119][T15510] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 616.616137][T15510] __sys_bpf+0x2265/0x4a30 [ 616.616154][T15510] ? __pfx___sys_bpf+0x10/0x10 [ 616.616165][T15510] ? lock_acquire+0x1d1/0x380 [ 616.616181][T15510] ? get_pid_task+0x2a/0x250 [ 616.616194][T15510] ? find_held_lock+0x2b/0x80 [ 616.616206][T15510] ? get_pid_task+0xfc/0x250 [ 616.616218][T15510] ? get_pid_task+0xfc/0x250 [ 616.616234][T15510] ? proc_fail_nth_write+0x9f/0x220 [ 616.616255][T15510] ? find_held_lock+0x2b/0x80 [ 616.616271][T15510] ? rcu_read_lock_any_held+0x6a/0x90 [ 616.616284][T15510] ? find_held_lock+0x2b/0x80 [ 616.616296][T15510] ? ksys_write+0x190/0x250 [ 616.616307][T15510] ? ksys_write+0x190/0x250 [ 616.616318][T15510] ? lock_acquire+0x1d1/0x380 [ 616.616345][T15510] ? fput+0x7c/0x100 [ 616.616360][T15510] ? __ia32_sys_bpf+0xcc/0x170 [ 616.616372][T15510] __ia32_sys_bpf+0xcc/0x170 [ 616.616385][T15510] ? __do_fast_syscall_32+0xb3/0x8b0 [ 616.616403][T15510] __do_fast_syscall_32+0x13a/0x8b0 [ 616.616417][T15510] ? lockdep_hardirqs_on+0x7d/0x110 [ 616.616433][T15510] do_fast_syscall_32+0x32/0x70 [ 616.616448][T15510] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 616.616465][T15510] RIP: 0023:0xf7fa6fec [ 616.616479][T15510] Code: Unable to access opcode bytes at 0xf7fa6fc2. [ 616.616485][T15510] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 616.616498][T15510] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000d80 [ 616.616506][T15510] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 616.616513][T15510] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 616.616520][T15510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.616528][T15510] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 616.616543][T15510] [ 616.897182][T15518] ip6t_rt: too many addresses specified [ 617.314778][T15527] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 617.865715][T15538] batman_adv: batadv0: Adding interface: veth0 [ 617.865802][T15538] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.865864][T15538] batman_adv: batadv0: Interface activated: veth0 [ 617.868133][T15538] batman_adv: batadv0: Interface deactivated: veth0 [ 617.876732][T15538] batman_adv: batadv0: Removing interface: veth0 [ 618.078392][T15547] FAULT_INJECTION: forcing a failure. [ 618.078392][T15547] name failslab, interval 1, probability 0, space 0, times 0 [ 618.082711][T15547] CPU: 1 UID: 0 PID: 15547 Comm: syz.8.2313 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.082743][T15547] Tainted: [L]=SOFTLOCKUP [ 618.082749][T15547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 618.082756][T15547] Call Trace: [ 618.082762][T15547] [ 618.082767][T15547] dump_stack_lvl+0x100/0x190 [ 618.082790][T15547] should_fail_ex.cold+0x5/0xa [ 618.082805][T15547] should_failslab+0xc2/0x120 [ 618.082821][T15547] __kmalloc_noprof+0xfc/0x840 [ 618.082834][T15547] ? sk_prot_alloc+0x10b/0x2a0 [ 618.082852][T15547] sk_prot_alloc+0x10b/0x2a0 [ 618.082868][T15547] sk_alloc+0x36/0xe80 [ 618.082880][T15547] bpf_prog_test_run_skb+0x4d2/0x3530 [ 618.082901][T15547] ? lock_acquire+0x1d1/0x380 [ 618.082917][T15547] ? __fget_files+0x34/0x3d0 [ 618.082930][T15547] ? find_held_lock+0x2b/0x80 [ 618.082942][T15547] ? __fget_files+0x141/0x3d0 [ 618.082958][T15547] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 618.082978][T15547] ? fput+0x7c/0x100 [ 618.082994][T15547] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 618.083011][T15547] __sys_bpf+0x2265/0x4a30 [ 618.083027][T15547] ? __pfx___sys_bpf+0x10/0x10 [ 618.083038][T15547] ? lock_acquire+0x1d1/0x380 [ 618.083053][T15547] ? get_pid_task+0x2a/0x250 [ 618.083065][T15547] ? find_held_lock+0x2b/0x80 [ 618.083077][T15547] ? get_pid_task+0xfc/0x250 [ 618.083088][T15547] ? get_pid_task+0xfc/0x250 [ 618.083103][T15547] ? proc_fail_nth_write+0x9f/0x220 [ 618.083123][T15547] ? find_held_lock+0x2b/0x80 [ 618.083138][T15547] ? rcu_read_lock_any_held+0x6a/0x90 [ 618.083152][T15547] ? find_held_lock+0x2b/0x80 [ 618.083163][T15547] ? ksys_write+0x190/0x250 [ 618.083174][T15547] ? ksys_write+0x190/0x250 [ 618.083185][T15547] ? lock_acquire+0x1d1/0x380 [ 618.083242][T15547] ? fput+0x7c/0x100 [ 618.083266][T15547] ? __ia32_sys_bpf+0xcc/0x170 [ 618.083286][T15547] __ia32_sys_bpf+0xcc/0x170 [ 618.083299][T15547] ? __do_fast_syscall_32+0xb3/0x8b0 [ 618.083316][T15547] __do_fast_syscall_32+0x13a/0x8b0 [ 618.083330][T15547] ? lockdep_hardirqs_on+0x7d/0x110 [ 618.083346][T15547] do_fast_syscall_32+0x32/0x70 [ 618.083361][T15547] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 618.083378][T15547] RIP: 0023:0xf709efec [ 618.083392][T15547] Code: Unable to access opcode bytes at 0xf709efc2. [ 618.083398][T15547] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 618.083410][T15547] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000140 [ 618.083418][T15547] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 618.083426][T15547] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 618.083433][T15547] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 618.083441][T15547] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 618.083456][T15547] [ 618.209506][T15557] ip6t_rt: too many addresses specified [ 618.591310][ T25] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 618.742229][ T25] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 618.742279][ T25] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 618.743514][ T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.743538][ T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 618.743552][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 618.744351][ T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.744373][ T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 618.744386][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 618.745188][ T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.745223][ T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 618.745245][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 618.746102][ T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.746147][ T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 618.746168][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 618.747168][ T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.747203][ T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 618.747249][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 618.748269][ T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.748311][ T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 618.748334][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 618.749177][ T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.749199][ T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 618.749212][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 618.749975][ T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.750012][ T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 618.750033][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 618.752567][ T25] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 618.752588][ T25] usb 6-1: Product: syz [ 618.752600][ T25] usb 6-1: Manufacturer: syz [ 618.752613][ T25] usb 6-1: SerialNumber: syz [ 618.761375][ T25] usb 6-1: config 0 descriptor?? [ 618.768843][ T25] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 619.220020][ T43] audit: type=1804 audit(1787942067.228:1676): pid=15582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2323" name="bus" dev="ramfs" ino=55665 res=1 errno=0 [ 619.227170][ T43] audit: type=1804 audit(1787942067.238:1677): pid=15582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2323" name="bus" dev="ramfs" ino=55665 res=1 errno=0 [ 619.238642][T15581] xt_connbytes: Forcing CT accounting to be enabled [ 619.238982][T15581] xt_SECMARK: invalid mode: 0 [ 619.344459][T15586] syz_tun: entered allmulticast mode [ 619.635822][T15591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2319'. [ 621.261463][ C2] usb 6-1: yurex_control_callback - control failed: -2 [ 621.262694][T15564] syz_tun: left allmulticast mode [ 621.267840][ T25] usb 6-1: USB disconnect, device number 58 [ 621.271775][ T25] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 621.376868][T15616] overlayfs: unescaped trailing colons in lowerdir mount option. [ 621.448993][T15619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.449588][T15619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.673155][T15630] xt_connbytes: Forcing CT accounting to be enabled [ 621.673216][T15630] xt_SECMARK: invalid mode: 0 [ 621.998758][T15639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2338'. [ 622.051512][T15640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2338'. [ 622.809340][T15662] xt_connbytes: Forcing CT accounting to be enabled [ 622.809425][T15662] xt_SECMARK: invalid mode: 0 [ 622.874329][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 622.927680][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 623.348192][T15675] netlink: 'syz.8.2349': attribute type 10 has an invalid length. [ 623.673314][T15691] ip6t_rt: too many addresses specified [ 623.902755][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.902833][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.978693][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2355'. [ 624.031602][T15701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2355'. [ 624.534303][T15704] tipc: Enabling of bearer rejected, failed to enable media [ 624.553246][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2357'. [ 625.553411][T15731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2364'. [ 625.609159][T15732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2364'. [ 625.924800][T15736] netlink: 'syz.8.2366': attribute type 10 has an invalid length. [ 626.107492][T15738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2367'. [ 626.144201][T15740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.144513][T15740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.347856][T15740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.348111][T15740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.318807][T15762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.320537][T15762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.351361][T15762] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 627.352879][T15762] qnx6: wrong signature (magic) in superblock #1. [ 627.352889][T15762] qnx6: unable to read the first superblock [ 627.968163][T15799] FAULT_INJECTION: forcing a failure. [ 627.968163][T15799] name failslab, interval 1, probability 0, space 0, times 0 [ 627.968246][T15799] CPU: 2 UID: 0 PID: 15799 Comm: syz.1.2386 Tainted: G L syzkaller #0 PREEMPT(full) [ 627.968278][T15799] Tainted: [L]=SOFTLOCKUP [ 627.968284][T15799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 627.968292][T15799] Call Trace: [ 627.968298][T15799] [ 627.968305][T15799] dump_stack_lvl+0x100/0x190 [ 627.968325][T15799] should_fail_ex.cold+0x5/0xa [ 627.968341][T15799] should_failslab+0xc2/0x120 [ 627.968357][T15799] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 627.968371][T15799] ? proc_alloc_inode+0x25/0x200 [ 627.968386][T15799] ? __pfx_proc_alloc_inode+0x10/0x10 [ 627.968400][T15799] proc_alloc_inode+0x25/0x200 [ 627.968412][T15799] alloc_inode+0x68/0x250 [ 627.968429][T15799] new_inode+0x22/0x1c0 [ 627.968446][T15799] proc_get_inode+0x1d/0x780 [ 627.968460][T15799] proc_lookup_de+0x236/0x360 [ 627.968478][T15799] proc_lookup+0xd8/0x110 [ 627.968493][T15799] lookup_one_qstr_excl+0x1cd/0x250 [ 627.968508][T15799] ? mnt_want_write+0x164/0x420 [ 627.968527][T15799] filename_create+0x1cf/0x400 [ 627.968559][T15799] ? __pfx_filename_create+0x10/0x10 [ 627.968579][T15799] ? lock_acquire+0x1d1/0x380 [ 627.968595][T15799] ? find_held_lock+0x2b/0x80 [ 627.968609][T15799] filename_mkdirat+0xb9/0x5e0 [ 627.968624][T15799] ? __pfx_filename_mkdirat+0x10/0x10 [ 627.968638][T15799] ? strncpy_from_user+0x19d/0x2d0 [ 627.968652][T15799] ? do_getname+0x191/0x390 [ 627.968668][T15799] __ia32_sys_mkdirat+0x88/0xc0 [ 627.968682][T15799] __do_fast_syscall_32+0x13a/0x8b0 [ 627.968697][T15799] ? lockdep_hardirqs_on+0x7d/0x110 [ 627.968712][T15799] do_fast_syscall_32+0x32/0x70 [ 627.968726][T15799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 627.968741][T15799] RIP: 0023:0xf6fdefec [ 627.968756][T15799] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 627.968762][T15799] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 627.968774][T15799] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 627.968781][T15799] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 627.968788][T15799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 627.968801][T15799] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 627.968808][T15799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 627.968823][T15799] [ 628.322023][ T9544] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 628.502152][ T9544] usb 6-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 628.503237][ T9544] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.505120][ T9544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.505133][ T9544] usb 6-1: Product: syz [ 628.505141][ T9544] usb 6-1: Manufacturer: syz [ 628.505148][ T9544] usb 6-1: SerialNumber: syz [ 628.518925][ T9544] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 628.730537][ T9544] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 628.743881][ T9544] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 628.744110][ T9544] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 628.744131][ T9544] usb 6-1: media controller created [ 628.758875][ T9544] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 629.026405][ T9544] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 629.050081][ T9544] usb 6-1: USB disconnect, device number 59 [ 629.403198][T15846] socket: no more sockets [ 629.423411][T15846] socket: no more sockets [ 629.449491][T15846] warn_alloc: 1 callbacks suppressed [ 629.449562][T15846] syz.2.2397: vmalloc error: size 4096, failed to allocate pages, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 629.449640][T15846] CPU: 0 UID: 0 PID: 15846 Comm: syz.2.2397 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.449668][T15846] Tainted: [L]=SOFTLOCKUP [ 629.449675][T15846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 629.449687][T15846] Call Trace: [ 629.449695][T15846] [ 629.449703][T15846] dump_stack_lvl+0x100/0x190 [ 629.449733][T15846] warn_alloc.cold+0x9e/0xb2 [ 629.449753][T15846] ? __pfx_warn_alloc+0x10/0x10 [ 629.449781][T15846] ? policy_nodemask+0xed/0x4f0 [ 629.449815][T15846] ? alloc_pages_mpol+0x260/0x550 [ 629.449840][T15846] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 629.449867][T15846] ? __get_vm_area_node+0x22b/0x350 [ 629.449895][T15846] __vmalloc_node_range_noprof+0x111c/0x1420 [ 629.449928][T15846] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 629.449959][T15846] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 629.449998][T15846] ? __lock_acquire+0x4c5/0x1ec0 [ 629.450024][T15846] ? __lock_acquire+0x4c5/0x1ec0 [ 629.450052][T15846] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 629.450075][T15846] __vmalloc_node_noprof+0xad/0xf0 [ 629.450099][T15846] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 629.450125][T15846] __vmalloc_noprof+0xa3/0x120 [ 629.450149][T15846] ? __pfx___vmalloc_noprof+0x10/0x10 [ 629.450171][T15846] ? rcu_is_watching+0x13/0xc0 [ 629.450192][T15846] ? rcu_is_watching+0x13/0xc0 [ 629.450210][T15846] ? apparmor_capable+0x1d7/0x4d0 [ 629.450236][T15846] bpf_prog_alloc_no_stats+0x58/0x690 [ 629.450265][T15846] ? security_capable+0x80/0x260 [ 629.450298][T15846] bpf_prog_alloc+0x3b/0x200 [ 629.450319][T15846] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 629.450346][T15846] bpf_prog_load+0x49e/0x2a80 [ 629.450371][T15846] ? __lock_acquire+0x4c5/0x1ec0 [ 629.450399][T15846] ? __pfx_bpf_prog_load+0x10/0x10 [ 629.450423][T15846] ? lock_acquire+0x1d1/0x380 [ 629.450465][T15846] __sys_bpf+0x1f46/0x4a30 [ 629.450491][T15846] ? __pfx___sys_bpf+0x10/0x10 [ 629.450508][T15846] ? find_held_lock+0x2b/0x80 [ 629.450528][T15846] ? futex_wake+0x4ea/0x5e0 [ 629.450566][T15846] ? find_held_lock+0x2b/0x80 [ 629.450586][T15846] ? __fget_files+0x215/0x3d0 [ 629.450604][T15846] ? __fget_files+0x215/0x3d0 [ 629.450636][T15846] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 629.450657][T15846] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 629.450680][T15846] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 629.450703][T15846] ? __ia32_sys_bpf+0xcc/0x170 [ 629.450722][T15846] __ia32_sys_bpf+0xcc/0x170 [ 629.450741][T15846] ? __do_fast_syscall_32+0xb3/0x8b0 [ 629.450767][T15846] __do_fast_syscall_32+0x13a/0x8b0 [ 629.450790][T15846] ? lockdep_hardirqs_on+0x7d/0x110 [ 629.450817][T15846] do_fast_syscall_32+0x32/0x70 [ 629.450841][T15846] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 629.450864][T15846] RIP: 0023:0xf6ffefec [ 629.450887][T15846] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 629.450895][T15846] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 629.450915][T15846] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800006c0 [ 629.450926][T15846] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 629.450939][T15846] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 629.450950][T15846] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 629.450960][T15846] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 629.450985][T15846] [ 629.451021][T15846] Mem-Info: [ 629.451032][T15846] active_anon:4831 inactive_anon:12646 isolated_anon:0 [ 629.451032][T15846] active_file:2461 inactive_file:15580 isolated_file:0 [ 629.451032][T15846] unevictable:1000 dirty:474 writeback:0 [ 629.451032][T15846] slab_reclaimable:6931 slab_unreclaimable:64459 [ 629.451032][T15846] mapped:23840 shmem:15165 pagetables:1990 [ 629.451032][T15846] sec_pagetables:312 bounce:0 [ 629.451032][T15846] kernel_misc_reclaimable:0 [ 629.451032][T15846] free:37585 free_pcp:6071 free_cma:0 [ 629.451076][T15846] Node 0 active_anon:144kB inactive_anon:320kB active_file:84kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5660kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9248kB pagetables:1220kB sec_pagetables:1096kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 629.451120][T15846] Node 1 active_anon:19180kB inactive_anon:50264kB active_file:9760kB inactive_file:62276kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:89700kB dirty:1896kB writeback:0kB shmem:60660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8288kB pagetables:6740kB sec_pagetables:152kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 629.451323][T15846] Node 0 DMA free:3884kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 629.451439][T15846] lowmem_reserve[]: 0 278 278 278 278 [ 629.451469][T15846] Node 0 DMA32 free:27240kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:140kB inactive_anon:320kB active_file:84kB inactive_file:44kB unevictable:0kB writepending:0kB zspages:1324kB present:1032196kB managed:284760kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB [ 629.451520][T15846] lowmem_reserve[]: 0 0 0 0 0 [ 629.451551][T15846] Node 1 DMA32 free:119216kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:19180kB inactive_anon:50264kB active_file:9760kB inactive_file:62276kB unevictable:4000kB writepending:1896kB zspages:5204kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:24228kB local_pcp:2260kB free_cma:0kB [ 629.451652][T15846] lowmem_reserve[]: 0 0 0 0 0 [ 629.451684][T15846] Node 0 DMA: 133*4kB (U) 63*8kB (UE) 32*16kB (UE) 37*32kB (UE) 6*64kB (UE) 6*128kB (UE) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3884kB [ 629.451802][T15846] Node 0 DMA32: 766*4kB (UME) 286*8kB (UME) 184*16kB (UME) 224*32kB (UME) 58*64kB (UME) 25*128kB (UE) 9*256kB (UME) 5*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 27240kB [ 629.451925][T15846] Node 1 DMA32: 224*4kB (UME) 592*8kB (UME) 581*16kB (UME) 669*32kB (UME) 365*64kB (UME) 159*128kB (UME) 57*256kB (UME) 36*512kB (UM) 6*1024kB (UM) 0*2048kB 0*4096kB = 119216kB [ 629.452055][T15846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 629.452072][T15846] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 629.452087][T15846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 629.452101][T15846] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 629.452117][T15846] 33891 total pagecache pages [ 629.452124][T15846] 687 pages in swap cache [ 629.452130][T15846] Free swap = 98732kB [ 629.452136][T15846] Total swap = 124996kB [ 629.452145][T15846] 524155 pages RAM [ 629.452152][T15846] 0 pages HighMem/MovableOnly [ 629.452158][T15846] 212073 pages reserved [ 629.452166][T15846] 0 pages cma reserved [ 629.541708][T15851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2398'. [ 629.594078][T15852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2398'. [ 630.746802][T15879] input: syz1 as /devices/virtual/input/input23 [ 630.746873][T15879] input: failed to attach handler leds to device input23, error: -6 [ 631.049411][T15886] netlink: 'syz.2.2406': attribute type 10 has an invalid length. [ 631.479627][T15893] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2412'. [ 631.533353][T15894] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2412'. [ 631.794733][T15906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2417'. [ 631.847019][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2417'. [ 632.112395][T15911] netlink: 'syz.0.2418': attribute type 10 has an invalid length. [ 632.381379][ T5745] Bluetooth: hci1: command 0x0405 tx timeout [ 632.843678][T15937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2428'. [ 632.898011][T15938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2428'. [ 633.059641][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2431'. [ 633.111053][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2431'. [ 633.291370][ T1344] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 633.441405][ T1344] usb 6-1: Using ep0 maxpacket: 32 [ 633.442163][ T1344] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 633.443065][ T1344] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 633.443088][ T1344] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 633.443108][ T1344] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 633.443125][ T1344] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 633.443166][ T1344] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 633.445080][ T1344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.445098][ T1344] usb 6-1: Product: syz [ 633.445109][ T1344] usb 6-1: Manufacturer: syz [ 633.445120][ T1344] usb 6-1: SerialNumber: syz [ 633.447782][ T1344] usb 6-1: config 0 descriptor?? [ 634.078511][T15962] netlink: 'syz.8.2437': attribute type 10 has an invalid length. [ 634.206207][ T25] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 634.351292][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 634.351799][ T25] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 634.353072][ T25] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 634.353089][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 634.353102][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 634.353114][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 634.353127][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 634.354723][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.354736][ T25] usb 7-1: Product: syz [ 634.354744][ T25] usb 7-1: Manufacturer: syz [ 634.354751][ T25] usb 7-1: SerialNumber: syz [ 634.356062][ T25] usb 7-1: config 0 descriptor?? [ 634.871449][ T1344] iforce 6-1:0.0: usb_submit_urb failed: -110 [ 634.871733][ T1344] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 634.871967][ T1344] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 634.872199][ T1344] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 634.872445][ T1344] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 634.872677][ T1344] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 634.872909][ T1344] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 634.873154][ T1344] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 634.873395][ T1344] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 634.873652][ T1344] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 634.873887][ T1344] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 634.874120][ T1344] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 634.874359][ T1344] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 634.874595][ T1344] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 634.874900][ T1344] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 634.875149][ T1344] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 634.875387][ T1344] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 634.875621][ T1344] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 634.875641][ T1344] input input24: Timeout waiting for response from device. [ 634.971299][ T948] usb 13-1: new high-speed USB device number 21 using dummy_hcd [ 635.014406][T15976] FAULT_INJECTION: forcing a failure. [ 635.014406][T15976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.014471][T15976] CPU: 1 UID: 0 PID: 15976 Comm: syz.2.2436 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.014497][T15976] Tainted: [L]=SOFTLOCKUP [ 635.014504][T15976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 635.014515][T15976] Call Trace: [ 635.014521][T15976] [ 635.014528][T15976] dump_stack_lvl+0x100/0x190 [ 635.014555][T15976] should_fail_ex.cold+0x5/0xa [ 635.014578][T15976] _copy_to_user+0x32/0xd0 [ 635.014605][T15976] simple_read_from_buffer+0xcb/0x170 [ 635.014625][T15976] proc_fail_nth_read+0x1af/0x230 [ 635.014665][T15976] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 635.014692][T15976] ? rw_verify_area+0xce/0x6d0 [ 635.014737][T15976] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 635.014763][T15976] vfs_read+0x1e4/0xb40 [ 635.014790][T15976] ? lock_acquire+0x1d1/0x380 [ 635.014806][T15976] ? __fget_files+0x34/0x3d0 [ 635.014817][T15976] ? __pfx_vfs_read+0x10/0x10 [ 635.014833][T15976] ? find_held_lock+0x2b/0x80 [ 635.014845][T15976] ? __fget_files+0x215/0x3d0 [ 635.014858][T15976] ? __fget_files+0x21f/0x3d0 [ 635.014873][T15976] ksys_read+0x12a/0x250 [ 635.014883][T15976] ? __pfx_ksys_read+0x10/0x10 [ 635.014897][T15976] do_int80_emulation+0x166/0x650 [ 635.014914][T15976] asm_int80_emulation+0x1a/0x20 [ 635.014926][T15976] RIP: 0023:0xf71375ab [ 635.014936][T15976] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 635.014947][T15976] RSP: 002b:00000000f53cc4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 635.014958][T15976] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f53cc5d0 [ 635.014966][T15976] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 635.014972][T15976] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 635.014979][T15976] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 635.014986][T15976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 635.015000][T15976] [ 635.027449][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 635.028620][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 635.029641][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 635.031300][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 635.034664][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 635.045628][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 635.051815][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 635.071393][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 635.077655][T15980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2443'. [ 635.081814][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 635.091792][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 635.111195][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 635.111491][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 635.111824][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 635.112710][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 635.112961][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 635.113201][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 635.113436][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 635.113937][ T25] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 635.113957][ T25] input input25: Timeout waiting for response from device. [ 635.118040][ T25] usb 7-1: USB disconnect, device number 56 [ 635.133704][T15981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2443'. [ 635.141292][ T948] usb 13-1: Using ep0 maxpacket: 8 [ 635.141906][ T948] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 635.142798][ T948] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10 [ 635.142817][ T948] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024 [ 635.142836][ T948] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.144135][ T948] usb 13-1: config 0 descriptor?? [ 635.351327][ T948] iowarrior 13-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 635.557694][ T948] usb 13-1: USB disconnect, device number 21 [ 635.557837][ C0] iowarrior 13-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 636.065216][T15945] [U] ¹ÉMÙ­ÕÁQ&¹ÉMÙ­ÕÁQ& [ 636.067690][ T1344] usb 6-1: USB disconnect, device number 60 [ 636.255081][ T5745] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 637.022940][T16013] ceph: Path missing in source [ 637.100059][T16019] __nla_validate_parse: 2 callbacks suppressed [ 637.100158][T16019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2453'. [ 637.131106][T16013] Bluetooth: MGMT ver 1.23 [ 637.153474][T16020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2453'. [ 637.884169][T16024] FAULT_INJECTION: forcing a failure. [ 637.884169][T16024] name failslab, interval 1, probability 0, space 0, times 0 [ 637.884225][T16024] CPU: 1 UID: 0 PID: 16024 Comm: syz.8.2455 Tainted: G L syzkaller #0 PREEMPT(full) [ 637.884252][T16024] Tainted: [L]=SOFTLOCKUP [ 637.884263][T16024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 637.884270][T16024] Call Trace: [ 637.884275][T16024] [ 637.884279][T16024] dump_stack_lvl+0x100/0x190 [ 637.884298][T16024] should_fail_ex.cold+0x5/0xa [ 637.884312][T16024] should_failslab+0xc2/0x120 [ 637.884327][T16024] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 637.884339][T16024] ? lock_list_lru_of_memcg+0x23f/0x710 [ 637.884356][T16024] ? __d_alloc+0x35/0xa50 [ 637.884371][T16024] __d_alloc+0x35/0xa50 [ 637.884385][T16024] d_alloc_parallel+0x105/0x14c0 [ 637.884403][T16024] ? lock_acquire+0x1d1/0x380 [ 637.884419][T16024] ? find_held_lock+0x2b/0x80 [ 637.884430][T16024] ? __d_lookup+0x25c/0x4a0 [ 637.884447][T16024] ? __pfx_d_alloc_parallel+0x10/0x10 [ 637.884465][T16024] ? __d_lookup+0x266/0x4a0 [ 637.884483][T16024] ? d_lookup+0xe7/0x190 [ 637.884500][T16024] proc_fill_cache+0x225/0x3a0 [ 637.884513][T16024] ? __pfx_proc_ns_instantiate+0x10/0x10 [ 637.884527][T16024] ? __pfx_proc_fill_cache+0x10/0x10 [ 637.884544][T16024] proc_ns_dir_readdir+0x1ba/0x530 [ 637.884559][T16024] iterate_dir+0x296/0xae0 [ 637.884578][T16024] __ia32_sys_getdents64+0x13a/0x2c0 [ 637.884597][T16024] ? __pfx___ia32_sys_getdents64+0x10/0x10 [ 637.884615][T16024] ? __pfx_filldir64+0x10/0x10 [ 637.884632][T16024] ? ksys_write+0x1ac/0x250 [ 637.884642][T16024] ? __pfx_ksys_write+0x10/0x10 [ 637.884656][T16024] __do_fast_syscall_32+0x13a/0x8b0 [ 637.884670][T16024] ? lockdep_hardirqs_on+0x7d/0x110 [ 637.884683][T16024] do_fast_syscall_32+0x32/0x70 [ 637.884697][T16024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 637.884712][T16024] RIP: 0023:0xf709efec [ 637.884725][T16024] Code: Unable to access opcode bytes at 0xf709efc2. [ 637.884730][T16024] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000dc [ 637.884742][T16024] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 637.884749][T16024] RDX: 0000000000000085 RSI: 0000000000000000 RDI: 0000000000000000 [ 637.884756][T16024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 637.884765][T16024] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 637.884772][T16024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 637.884786][T16024] [ 638.059986][T16032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2458'. [ 638.072085][ T1344] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 638.112001][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2458'. [ 638.147096][T12667] IPVS: starting estimator thread 0... [ 638.207314][ T5745] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 638.221266][ T1344] usb 7-1: Using ep0 maxpacket: 8 [ 638.223353][ T1344] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 638.227303][ T1344] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 638.230117][ T1344] usb 7-1: config 0 has no interface number 0 [ 638.232667][ T1344] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 638.236421][T16039] IPVS: using max 44 ests per chain, 105600 per kthread [ 638.238668][ T1344] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 638.238682][ T1344] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 638.238695][ T1344] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 638.238708][ T1344] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 638.256093][ T1344] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.259001][ T1344] usb 7-1: Product: syz [ 638.260525][ T1344] usb 7-1: Manufacturer: syz [ 638.262183][ T1344] usb 7-1: SerialNumber: syz [ 638.266114][ T1344] usb 7-1: config 0 descriptor?? [ 638.483339][ T1344] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 638.684762][ T1344] usb 7-1: USB disconnect, device number 57 [ 639.122214][T16058] ceph: Path missing in source [ 639.284870][T16053] lo speed is unknown, defaulting to 1000 [ 639.534215][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2467'. [ 639.537096][T16053] wg2 speed is unknown, defaulting to 1000 [ 639.594757][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2467'. [ 640.243980][ T948] libceph: connect (1)[c::]:6789 error -101 [ 640.244100][ T948] libceph: mon0 (1)[c::]:6789 connect error [ 640.289414][T16084] ceph: No mds server is up or the cluster is laggy [ 640.343126][T16089] netlink: 'syz.1.2470': attribute type 10 has an invalid length. [ 640.485725][T16091] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2471'. [ 640.501639][ T948] libceph: connect (1)[c::]:6789 error -101 [ 640.501805][ T948] libceph: mon0 (1)[c::]:6789 connect error [ 640.540090][T16092] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2471'. [ 641.262074][T16115] ceph: Path missing in source [ 641.367361][T16122] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2481'. [ 641.452401][T16123] netlink: 'syz.0.2479': attribute type 10 has an invalid length. [ 641.547223][T16124] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2481'. [ 642.458141][T16155] netlink: 'syz.1.2485': attribute type 10 has an invalid length. [ 643.486352][T16172] ip6t_rt: too many addresses specified [ 643.492518][T16172] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2494'. [ 643.531334][ T9544] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 643.711700][ T9544] usb 7-1: Using ep0 maxpacket: 32 [ 643.718269][ T9544] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 643.726192][ T9544] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.726336][ T9544] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 643.737613][ T9544] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.738354][ T9544] usb 7-1: Product: syz [ 643.738364][ T9544] usb 7-1: Manufacturer: syz [ 643.738372][ T9544] usb 7-1: SerialNumber: syz [ 643.985755][T16163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2492'. [ 644.886368][T16189] netlink: 'syz.0.2497': attribute type 10 has an invalid length. [ 645.031869][ T9544] usb 7-1: USB disconnect, device number 58 [ 645.361328][ T5835] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 645.511291][ T5835] usb 6-1: Using ep0 maxpacket: 8 [ 645.514804][ T5835] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 645.515710][ T5835] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 645.515735][ T5835] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 645.515747][ T5835] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 645.515759][ T5835] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 645.515771][ T5835] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 645.515790][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.726943][ T5835] usb 6-1: usb_control_msg returned -32 [ 645.727005][ T5835] usbtmc 6-1:16.0: can't read capabilities [ 645.780265][T16217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2511'. [ 645.780353][T16217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2511'. [ 646.076921][T16226] netlink: 'syz.2.2512': attribute type 10 has an invalid length. [ 646.434907][T16235] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 646.444919][T16235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.445865][T16235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.455480][T16236] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2516'. [ 646.468684][T16232] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2516'. [ 646.757212][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2520'. [ 646.786599][T16247] FAULT_INJECTION: forcing a failure. [ 646.786599][T16247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.786693][T16247] CPU: 2 UID: 0 PID: 16247 Comm: syz.2.2521 Tainted: G L syzkaller #0 PREEMPT(full) [ 646.786738][T16247] Tainted: [L]=SOFTLOCKUP [ 646.786748][T16247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 646.786761][T16247] Call Trace: [ 646.786769][T16247] [ 646.786778][T16247] dump_stack_lvl+0x100/0x190 [ 646.786812][T16247] should_fail_ex.cold+0x5/0xa [ 646.786905][T16247] _copy_from_iter+0x1f4/0x1690 [ 646.786930][T16247] ? __asan_memset+0x23/0x50 [ 646.786963][T16247] ? __pfx__copy_from_iter+0x10/0x10 [ 646.787144][T16247] ? __pfx___alloc_skb+0x10/0x10 [ 646.787175][T16247] netlink_sendmsg+0x808/0xda0 [ 646.787210][T16247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.787243][T16247] ? apparmor_socket_sendmsg+0x165/0x280 [ 646.787271][T16247] ____sys_sendmsg+0xa4d/0xbe0 [ 646.787296][T16247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.787329][T16247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 646.787363][T16247] ___sys_sendmsg+0x190/0x1e0 [ 646.787387][T16247] ? __pfx____sys_sendmsg+0x10/0x10 [ 646.787424][T16247] ? find_held_lock+0x2b/0x80 [ 646.787464][T16247] __sys_sendmsg+0x160/0x210 [ 646.787487][T16247] ? __pfx___sys_sendmsg+0x10/0x10 [ 646.787516][T16247] ? __pfx_ksys_write+0x10/0x10 [ 646.787543][T16247] __do_fast_syscall_32+0x13a/0x8b0 [ 646.787570][T16247] ? lockdep_hardirqs_on+0x7d/0x110 [ 646.787597][T16247] do_fast_syscall_32+0x32/0x70 [ 646.787623][T16247] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 646.787649][T16247] RIP: 0023:0xf6ffefec [ 646.787672][T16247] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 646.787682][T16247] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 646.787703][T16247] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 646.787718][T16247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 646.787731][T16247] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 646.787743][T16247] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 646.787756][T16247] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 646.787779][T16247] [ 646.803975][ T5835] usb 13-1: new high-speed USB device number 22 using dummy_hcd [ 646.809270][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2520'. [ 646.936567][T16252] ip6t_rt: too many addresses specified [ 646.971381][ T5835] usb 13-1: Using ep0 maxpacket: 32 [ 646.972182][ T5835] usb 13-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 646.973138][ T5835] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 646.973157][ T5835] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 646.974760][ T5835] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.974773][ T5835] usb 13-1: Product: syz [ 646.974780][ T5835] usb 13-1: Manufacturer: syz [ 646.974788][ T5835] usb 13-1: SerialNumber: syz [ 647.205097][T16238] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2517'. [ 647.501606][ T5835] usb 13-1: USB disconnect, device number 22 [ 648.214531][ T25] usb 6-1: USB disconnect, device number 61 [ 648.379049][T16271] netlink: 'syz.8.2527': attribute type 10 has an invalid length. [ 648.414664][T16273] FAULT_INJECTION: forcing a failure. [ 648.414664][T16273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.416587][T16273] CPU: 1 UID: 0 PID: 16273 Comm: syz.1.2529 Tainted: G L syzkaller #0 PREEMPT(full) [ 648.416615][T16273] Tainted: [L]=SOFTLOCKUP [ 648.416622][T16273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 648.416633][T16273] Call Trace: [ 648.416641][T16273] [ 648.416650][T16273] dump_stack_lvl+0x100/0x190 [ 648.416676][T16273] should_fail_ex.cold+0x5/0xa [ 648.416700][T16273] _copy_to_iter+0x5a4/0x1720 [ 648.416737][T16273] ? __pfx__copy_to_iter+0x10/0x10 [ 648.416763][T16273] ? __pfx___schedule+0x10/0x10 [ 648.416791][T16273] simple_copy_to_iter+0x46/0x90 [ 648.416814][T16273] __skb_datagram_iter+0x5c8/0x900 [ 648.416836][T16273] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 648.416867][T16273] skb_copy_datagram_iter+0xa1/0x250 [ 648.416894][T16273] tcp_recvmsg_locked+0x2221/0x2a30 [ 648.416917][T16273] ? reacquire_held_locks+0xdd/0x1f0 [ 648.416940][T16273] ? release_sock+0x21/0x280 [ 648.416965][T16273] ? do_raw_spin_lock+0x128/0x260 [ 648.416991][T16273] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 648.417022][T16273] ? __local_bh_enable_ip+0xa5/0x120 [ 648.417052][T16273] tcp_recvmsg+0x141/0x630 [ 648.417075][T16273] ? __pfx_tcp_recvmsg+0x10/0x10 [ 648.417103][T16273] ? copy_compat_iovec_from_user+0x13a/0x180 [ 648.417132][T16273] ? __pfx_tcp_recvmsg+0x10/0x10 [ 648.417154][T16273] inet_recvmsg+0xd5/0x4c0 [ 648.417179][T16273] ? __pfx_inet_recvmsg+0x10/0x10 [ 648.417199][T16273] ____sys_recvmsg+0x5cd/0x670 [ 648.417235][T16273] ? __pfx_____sys_recvmsg+0x10/0x10 [ 648.417269][T16273] ? rcu_is_watching+0x13/0xc0 [ 648.417286][T16273] ? ___sys_recvmsg+0x177/0x1a0 [ 648.417307][T16273] ? kfree+0x1e5/0x6d0 [ 648.417334][T16273] ___sys_recvmsg+0x16a/0x1a0 [ 648.417358][T16273] ? __pfx____sys_recvmsg+0x10/0x10 [ 648.417380][T16273] ? lock_acquire+0x1d1/0x380 [ 648.417418][T16273] ? __pfx___might_resched+0x10/0x10 [ 648.417445][T16273] do_recvmmsg+0x54d/0x740 [ 648.417475][T16273] ? __pfx_do_recvmmsg+0x10/0x10 [ 648.417499][T16273] ? find_held_lock+0x2b/0x80 [ 648.417536][T16273] ? ksys_write+0x190/0x250 [ 648.417553][T16273] ? ksys_write+0x190/0x250 [ 648.417578][T16273] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 648.417602][T16273] __sys_recvmmsg+0x21f/0x270 [ 648.417622][T16273] ? __pfx___sys_recvmmsg+0x10/0x10 [ 648.417643][T16273] ? ksys_write+0x1ac/0x250 [ 648.417661][T16273] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 648.417685][T16273] ? __do_fast_syscall_32+0xb3/0x8b0 [ 648.417706][T16273] ? lockdep_hardirqs_on+0x7d/0x110 [ 648.417725][T16273] __do_fast_syscall_32+0x13a/0x8b0 [ 648.417745][T16273] ? lockdep_hardirqs_on+0x7d/0x110 [ 648.417766][T16273] do_fast_syscall_32+0x32/0x70 [ 648.417786][T16273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 648.417812][T16273] RIP: 0023:0xf6fdefec [ 648.417832][T16273] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 648.417840][T16273] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 648.417857][T16273] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800031c0 [ 648.417869][T16273] RDX: 0000000000000002 RSI: 0000000000000022 RDI: 0000000000000000 [ 648.417879][T16273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 648.417890][T16273] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 648.417900][T16273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 648.417924][T16273] [ 649.106739][ T5835] libceph: connect (1)[c::]:6789 error -22 [ 649.110075][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 649.146723][T16283] ceph: No mds server is up or the cluster is laggy [ 649.373839][ T5835] libceph: connect (1)[c::]:6789 error -22 [ 649.374029][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 649.884851][ T5835] libceph: connect (1)[c::]:6789 error -22 [ 649.885063][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 651.423981][ T5835] libceph: connect (1)[c::]:6789 error -22 [ 651.424188][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 652.835352][T16320] netlink: 884 bytes leftover after parsing attributes in process `syz.2.2544'. [ 653.069683][T16326] netlink: 'syz.1.2543': attribute type 10 has an invalid length. [ 653.168365][T16328] ip6t_rt: too many addresses specified [ 655.456645][T16384] FAULT_INJECTION: forcing a failure. [ 655.456645][T16384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.456743][T16384] CPU: 2 UID: 0 PID: 16384 Comm: syz.2.2565 Tainted: G L syzkaller #0 PREEMPT(full) [ 655.456781][T16384] Tainted: [L]=SOFTLOCKUP [ 655.456787][T16384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 655.456799][T16384] Call Trace: [ 655.456806][T16384] [ 655.456814][T16384] dump_stack_lvl+0x100/0x190 [ 655.456841][T16384] should_fail_ex.cold+0x5/0xa [ 655.456863][T16384] _copy_from_iter+0x1f4/0x1690 [ 655.456882][T16384] ? __asan_memset+0x23/0x50 [ 655.456906][T16384] ? __pfx__copy_from_iter+0x10/0x10 [ 655.456923][T16384] ? __pfx___alloc_skb+0x10/0x10 [ 655.456949][T16384] netlink_sendmsg+0x808/0xda0 [ 655.456975][T16384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.457001][T16384] ? apparmor_socket_sendmsg+0x165/0x280 [ 655.457024][T16384] ____sys_sendmsg+0xa4d/0xbe0 [ 655.457044][T16384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.457071][T16384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 655.457095][T16384] ? _kstrtoull+0x144/0x200 [ 655.457113][T16384] ? __pfx__kstrtoull+0x10/0x10 [ 655.457135][T16384] ___sys_sendmsg+0x190/0x1e0 [ 655.457160][T16384] ? __pfx____sys_sendmsg+0x10/0x10 [ 655.457182][T16384] ? __lock_acquire+0x4c5/0x1ec0 [ 655.457209][T16384] ? __fget_files+0x34/0x3d0 [ 655.457249][T16384] __sys_sendmmsg+0x309/0x440 [ 655.457269][T16384] ? __pfx___sys_sendmmsg+0x10/0x10 [ 655.457282][T16384] ? find_held_lock+0x2b/0x80 [ 655.457305][T16384] ? __mutex_unlock_slowpath+0x35d/0x930 [ 655.457338][T16384] ? fput+0x7c/0x100 [ 655.457358][T16384] ? ksys_write+0x1ac/0x250 [ 655.457373][T16384] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 655.457396][T16384] ? lockdep_hardirqs_on+0x7d/0x110 [ 655.457415][T16384] __do_fast_syscall_32+0x13a/0x8b0 [ 655.457435][T16384] ? lockdep_hardirqs_on+0x7d/0x110 [ 655.457470][T16384] do_fast_syscall_32+0x32/0x70 [ 655.457489][T16384] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 655.457511][T16384] RIP: 0023:0xf6ffefec [ 655.457595][T16384] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 655.457608][T16384] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 655.457627][T16384] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 655.457638][T16384] RDX: 00000000000001f2 RSI: 0000000000000600 RDI: 0000000000000000 [ 655.457649][T16384] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 655.457660][T16384] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 655.457671][T16384] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 655.457693][T16384] [ 657.202115][T16399] ip6t_rt: too many addresses specified [ 657.321380][T16407] netlink: 884 bytes leftover after parsing attributes in process `syz.8.2574'. [ 658.257091][T16421] ip6t_rt: too many addresses specified [ 658.273793][T16423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2580'. [ 659.454064][T16445] netlink: 'syz.8.2585': attribute type 10 has an invalid length. [ 659.676607][T16452] ip6t_rt: too many addresses specified [ 660.028733][T16458] netlink: 'syz.8.2591': attribute type 1 has an invalid length. [ 661.323292][T16476] netlink: 'syz.1.2596': attribute type 10 has an invalid length. [ 661.407048][T16493] netlink: 'syz.2.2600': attribute type 10 has an invalid length. [ 662.231324][ T25] usb 13-1: new low-speed USB device number 23 using dummy_hcd [ 662.420285][ T25] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 662.432453][ T25] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 662.432539][ T25] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 662.432921][ T25] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 662.432945][ T25] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 662.432967][ T25] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 662.435326][ T25] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 662.435360][ T25] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 662.435382][ T25] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 662.435404][ T25] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 662.435425][ T25] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 662.436306][ T25] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 662.436339][ T25] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 662.436364][ T25] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 662.436387][ T25] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 662.436411][ T25] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 662.440390][ T25] usb 13-1: string descriptor 0 read error: -22 [ 662.441589][ T25] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.449842][ T25] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 663.880430][T16521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2615'. [ 665.265107][ T25] usb 13-1: USB disconnect, device number 23 [ 665.498032][T16557] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2621'. [ 666.069621][T16566] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input27 [ 666.197578][T16567] tipc: Enabled bearer , priority 0 [ 666.202421][T16571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2625'. [ 666.424257][T16574] ip6t_rt: too many addresses specified [ 666.584812][T16577] ip6t_rt: too many addresses specified [ 667.321312][ T25] tipc: Node number set to 1148290612 [ 667.926102][ T5745] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 668.354891][T16614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2639'. [ 668.877186][T16626] netlink: 'syz.0.2640': attribute type 10 has an invalid length. [ 669.262314][T16636] ip6t_rt: too many addresses specified [ 669.918520][T16657] ip6t_rt: too many addresses specified [ 670.015899][T16660] ip6t_rt: too many addresses specified [ 670.185447][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2653'. [ 671.332583][T16686] netlink: 'syz.1.2654': attribute type 10 has an invalid length. [ 671.488826][T16688] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2656'. [ 672.175748][T16707] ip6t_rt: too many addresses specified [ 672.271229][T16708] netlink: 'syz.0.2662': attribute type 10 has an invalid length. [ 673.131284][T16720] ip6t_rt: too many addresses specified [ 674.454982][T16737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2674'. [ 674.733957][T16749] loop8: detected capacity change from 0 to 7 [ 674.742288][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 674.742637][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 674.754403][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 674.754489][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 674.758173][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 674.758238][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 674.758394][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 674.758444][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 674.758556][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 674.758645][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 674.760385][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 674.760544][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 674.760889][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 674.760942][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 674.760981][T16749] ldm_validate_partition_table(): Disk read failed. [ 674.762193][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 674.762251][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 674.762378][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 674.762431][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 674.762664][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 674.762733][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 674.765259][T16749] Dev loop8: unable to read RDB block 0 [ 674.765870][T16749] loop8: unable to read partition table [ 674.766049][T16749] loop8: partition table beyond EOD, truncated [ 674.766068][T16749] loop_reread_partitions: partition scan of loop8 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 675.174343][T16754] ip6t_rt: too many addresses specified [ 675.267328][T16755] netlink: 'syz.1.2678': attribute type 10 has an invalid length. [ 676.255776][T16771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2683'. [ 676.719598][T16774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.719847][T16774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.726856][T16774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.730525][T16774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.149227][T16793] loop8: detected capacity change from 0 to 7 [ 677.161305][T16793] ldm_validate_partition_table(): Disk read failed. [ 677.163453][T16793] Dev loop8: unable to read RDB block 0 [ 677.164748][T16793] loop8: unable to read partition table [ 677.164920][T16793] loop8: partition table beyond EOD, truncated [ 677.164991][T16793] loop_reread_partitions: partition scan of loop8 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 677.695133][T16805] ip6t_rt: too many addresses specified [ 679.088456][T16842] FAULT_INJECTION: forcing a failure. [ 679.088456][T16842] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 679.088539][T16842] CPU: 0 UID: 0 PID: 16842 Comm: syz.8.2707 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.088570][T16842] Tainted: [L]=SOFTLOCKUP [ 679.088577][T16842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 679.088585][T16842] Call Trace: [ 679.088590][T16842] [ 679.088596][T16842] dump_stack_lvl+0x100/0x190 [ 679.088617][T16842] should_fail_ex.cold+0x5/0xa [ 679.088636][T16842] ? prepare_alloc_pages+0x16d/0x5b0 [ 679.088654][T16842] should_fail_alloc_page+0xeb/0x140 [ 679.088671][T16842] prepare_alloc_pages+0x1f0/0x5b0 [ 679.088687][T16842] ? is_bpf_text_address+0x94/0x1a0 [ 679.088706][T16842] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 679.088734][T16842] ? stack_trace_save+0x8e/0xc0 [ 679.088749][T16842] ? __pfx_stack_trace_save+0x10/0x10 [ 679.088763][T16842] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 679.088779][T16842] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 679.088799][T16842] ? is_bpf_text_address+0x94/0x1a0 [ 679.088818][T16842] ? kasan_save_stack+0x3f/0x50 [ 679.088831][T16842] ? kasan_save_stack+0x30/0x50 [ 679.088844][T16842] ? kasan_save_track+0x14/0x30 [ 679.088857][T16842] ? __kasan_slab_alloc+0x89/0x90 [ 679.088871][T16842] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 679.088884][T16842] ? alloc_vmap_area+0x640/0x2bb0 [ 679.088897][T16842] ? __get_vm_area_node+0x1ed/0x350 [ 679.088911][T16842] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 679.088927][T16842] ? __vmalloc_node_noprof+0xad/0xf0 [ 679.088942][T16842] ? __vmalloc_noprof+0xa3/0x120 [ 679.088957][T16842] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 679.088973][T16842] ? bpf_prog_alloc+0x3b/0x200 [ 679.088987][T16842] ? bpf_prog_load+0x49e/0x2a80 [ 679.089002][T16842] ? __sys_bpf+0x1f46/0x4a30 [ 679.089013][T16842] ? __ia32_sys_bpf+0xcc/0x170 [ 679.089025][T16842] ? __do_fast_syscall_32+0x13a/0x8b0 [ 679.089041][T16842] ? do_fast_syscall_32+0x32/0x70 [ 679.089061][T16842] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 679.089077][T16842] ? policy_nodemask+0xed/0x4f0 [ 679.089092][T16842] alloc_pages_mpol+0x201/0x550 [ 679.089107][T16842] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 679.089126][T16842] alloc_pages_noprof+0x1a/0x160 [ 679.089144][T16842] get_free_pages_noprof+0x10/0xb0 [ 679.089157][T16842] __kasan_populate_vmalloc+0xa0/0x210 [ 679.089172][T16842] alloc_vmap_area+0x95d/0x2bb0 [ 679.089188][T16842] ? kasan_save_track+0x14/0x30 [ 679.089200][T16842] ? __kasan_kmalloc+0xaa/0xb0 [ 679.089212][T16842] ? __pfx_alloc_vmap_area+0x10/0x10 [ 679.089225][T16842] ? __get_vm_area_node+0x124/0x350 [ 679.089240][T16842] __get_vm_area_node+0x1ed/0x350 [ 679.089256][T16842] __vmalloc_node_range_noprof+0x268/0x1420 [ 679.089271][T16842] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 679.089284][T16842] ? process_measurement+0x4c8/0x2350 [ 679.089296][T16842] ? down_write+0x146/0x1f0 [ 679.089312][T16842] ? up_write+0x2dc/0x5b0 [ 679.089329][T16842] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 679.089345][T16842] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 679.089360][T16842] ? __lock_acquire+0x4c5/0x1ec0 [ 679.089378][T16842] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 679.089392][T16842] __vmalloc_node_noprof+0xad/0xf0 [ 679.089406][T16842] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 679.089422][T16842] __vmalloc_noprof+0xa3/0x120 [ 679.089436][T16842] ? __pfx___vmalloc_noprof+0x10/0x10 [ 679.089449][T16842] ? lock_acquire+0x1d1/0x380 [ 679.089463][T16842] ? is_bpf_text_address+0x25/0x1a0 [ 679.089478][T16842] ? rcu_is_watching+0x13/0xc0 [ 679.089489][T16842] ? apparmor_capable+0x1d7/0x4d0 [ 679.089502][T16842] bpf_prog_alloc_no_stats+0x58/0x690 [ 679.089516][T16842] ? security_capable+0x80/0x260 [ 679.089535][T16842] bpf_prog_alloc+0x3b/0x200 [ 679.089548][T16842] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 679.089563][T16842] bpf_prog_load+0x49e/0x2a80 [ 679.089577][T16842] ? __lock_acquire+0x4c5/0x1ec0 [ 679.089594][T16842] ? __pfx_bpf_prog_load+0x10/0x10 [ 679.089620][T16842] __sys_bpf+0x1f46/0x4a30 [ 679.089639][T16842] ? __pfx___sys_bpf+0x10/0x10 [ 679.089649][T16842] ? lock_acquire+0x1d1/0x380 [ 679.089663][T16842] ? get_pid_task+0x2a/0x250 [ 679.089675][T16842] ? find_held_lock+0x2b/0x80 [ 679.089686][T16842] ? get_pid_task+0xfc/0x250 [ 679.089696][T16842] ? get_pid_task+0xfc/0x250 [ 679.089710][T16842] ? proc_fail_nth_write+0x9f/0x220 [ 679.089727][T16842] ? find_held_lock+0x2b/0x80 [ 679.089741][T16842] ? rcu_read_lock_any_held+0x6a/0x90 [ 679.089753][T16842] ? find_held_lock+0x2b/0x80 [ 679.089764][T16842] ? ksys_write+0x190/0x250 [ 679.089774][T16842] ? ksys_write+0x190/0x250 [ 679.089784][T16842] ? lock_acquire+0x1d1/0x380 [ 679.089807][T16842] ? fput+0x7c/0x100 [ 679.089821][T16842] ? __ia32_sys_bpf+0xcc/0x170 [ 679.089831][T16842] __ia32_sys_bpf+0xcc/0x170 [ 679.089842][T16842] ? __do_fast_syscall_32+0xb3/0x8b0 [ 679.089857][T16842] __do_fast_syscall_32+0x13a/0x8b0 [ 679.089870][T16842] ? lockdep_hardirqs_on+0x7d/0x110 [ 679.089884][T16842] do_fast_syscall_32+0x32/0x70 [ 679.089897][T16842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 679.089912][T16842] RIP: 0023:0xf709efec [ 679.089925][T16842] Code: Unable to access opcode bytes at 0xf709efc2. [ 679.089930][T16842] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 679.089942][T16842] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000140 [ 679.089950][T16842] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 679.089956][T16842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 679.089963][T16842] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 679.089969][T16842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 679.089983][T16842] [ 679.090041][T16842] syz.8.2707: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 679.090153][T16842] CPU: 0 UID: 0 PID: 16842 Comm: syz.8.2707 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.090179][T16842] Tainted: [L]=SOFTLOCKUP [ 679.090185][T16842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 679.090191][T16842] Call Trace: [ 679.090196][T16842] [ 679.090200][T16842] dump_stack_lvl+0x100/0x190 [ 679.090215][T16842] warn_alloc.cold+0x9e/0xb2 [ 679.090228][T16842] ? __pfx_warn_alloc+0x10/0x10 [ 679.090244][T16842] ? lockdep_hardirqs_on+0x7d/0x110 [ 679.090258][T16842] ? __get_vm_area_node+0x2f0/0x350 [ 679.090274][T16842] ? __get_vm_area_node+0x22b/0x350 [ 679.090290][T16842] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 679.090304][T16842] ? process_measurement+0x4c8/0x2350 [ 679.090315][T16842] ? down_write+0x146/0x1f0 [ 679.090330][T16842] ? up_write+0x2dc/0x5b0 [ 679.090347][T16842] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 679.090364][T16842] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 679.090378][T16842] ? __lock_acquire+0x4c5/0x1ec0 [ 679.090397][T16842] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 679.090410][T16842] __vmalloc_node_noprof+0xad/0xf0 [ 679.090424][T16842] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 679.090440][T16842] __vmalloc_noprof+0xa3/0x120 [ 679.090454][T16842] ? __pfx___vmalloc_noprof+0x10/0x10 [ 679.090468][T16842] ? lock_acquire+0x1d1/0x380 [ 679.090481][T16842] ? is_bpf_text_address+0x25/0x1a0 [ 679.090496][T16842] ? rcu_is_watching+0x13/0xc0 [ 679.090507][T16842] ? apparmor_capable+0x1d7/0x4d0 [ 679.090520][T16842] bpf_prog_alloc_no_stats+0x58/0x690 [ 679.090533][T16842] ? security_capable+0x80/0x260 [ 679.090552][T16842] bpf_prog_alloc+0x3b/0x200 [ 679.090564][T16842] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 679.090580][T16842] bpf_prog_load+0x49e/0x2a80 [ 679.090594][T16842] ? __lock_acquire+0x4c5/0x1ec0 [ 679.090611][T16842] ? __pfx_bpf_prog_load+0x10/0x10 [ 679.090641][T16842] __sys_bpf+0x1f46/0x4a30 [ 679.090655][T16842] ? __pfx___sys_bpf+0x10/0x10 [ 679.090665][T16842] ? lock_acquire+0x1d1/0x380 [ 679.090679][T16842] ? get_pid_task+0x2a/0x250 [ 679.090690][T16842] ? find_held_lock+0x2b/0x80 [ 679.090700][T16842] ? get_pid_task+0xfc/0x250 [ 679.090710][T16842] ? get_pid_task+0xfc/0x250 [ 679.090724][T16842] ? proc_fail_nth_write+0x9f/0x220 [ 679.090742][T16842] ? find_held_lock+0x2b/0x80 [ 679.090756][T16842] ? rcu_read_lock_any_held+0x6a/0x90 [ 679.090768][T16842] ? find_held_lock+0x2b/0x80 [ 679.090778][T16842] ? ksys_write+0x190/0x250 [ 679.090788][T16842] ? ksys_write+0x190/0x250 [ 679.090798][T16842] ? lock_acquire+0x1d1/0x380 [ 679.090821][T16842] ? fput+0x7c/0x100 [ 679.090835][T16842] ? __ia32_sys_bpf+0xcc/0x170 [ 679.090846][T16842] __ia32_sys_bpf+0xcc/0x170 [ 679.090857][T16842] ? __do_fast_syscall_32+0xb3/0x8b0 [ 679.090871][T16842] __do_fast_syscall_32+0x13a/0x8b0 [ 679.090885][T16842] ? lockdep_hardirqs_on+0x7d/0x110 [ 679.090898][T16842] do_fast_syscall_32+0x32/0x70 [ 679.090912][T16842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 679.090948][T16842] RIP: 0023:0xf709efec [ 679.091020][T16842] Code: Unable to access opcode bytes at 0xf709efc2. [ 679.091029][T16842] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 679.091041][T16842] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000140 [ 679.091048][T16842] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 679.091055][T16842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 679.091062][T16842] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 679.091069][T16842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 679.091083][T16842] [ 679.091108][T16842] Mem-Info: [ 679.091116][T16842] active_anon:3807 inactive_anon:7692 isolated_anon:0 [ 679.091116][T16842] active_file:3968 inactive_file:6105 isolated_file:0 [ 679.091116][T16842] unevictable:1000 dirty:92 writeback:0 [ 679.091116][T16842] slab_reclaimable:6919 slab_unreclaimable:64519 [ 679.091116][T16842] mapped:23289 shmem:9903 pagetables:1984 [ 679.091116][T16842] sec_pagetables:316 bounce:0 [ 679.091116][T16842] kernel_misc_reclaimable:0 [ 679.091116][T16842] free:38669 free_pcp:16378 free_cma:0 [ 679.091205][T16842] Node 0 active_anon:56kB inactive_anon:60kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5660kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9088kB pagetables:1220kB sec_pagetables:1096kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 679.091234][T16842] Node 1 active_anon:15172kB inactive_anon:30708kB active_file:15744kB inactive_file:24420kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:87496kB dirty:368kB writeback:0kB shmem:39612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8204kB pagetables:6716kB sec_pagetables:168kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 679.091262][T16842] Node 0 DMA free:3732kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:80kB local_pcp:0kB free_cma:0kB [ 679.091291][T16842] lowmem_reserve[]: 0 278 278 278 278 [ 679.091309][T16842] Node 0 DMA32 free:19652kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:2048kB free_highatomic:1056kB active_anon:52kB inactive_anon:60kB active_file:128kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:1620kB present:1032196kB managed:284760kB mlocked:0kB bounce:0kB free_pcp:8468kB local_pcp:200kB free_cma:0kB [ 679.091340][T16842] lowmem_reserve[]: 0 0 0 0 0 [ 679.091359][T16842] Node 1 DMA32 free:131292kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:15172kB inactive_anon:30708kB active_file:15744kB inactive_file:24420kB unevictable:4000kB writepending:368kB zspages:6476kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:56964kB local_pcp:568kB free_cma:0kB [ 679.091390][T16842] lowmem_reserve[]: 0 0 0 0 0 [ 679.091407][T16842] Node 0 DMA: 131*4kB (U) 55*8kB (UE) 35*16kB (UE) 35*32kB (UE) 5*64kB (UE) 6*128kB (UE) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3732kB [ 679.091473][T16842] Node 0 DMA32: 605*4kB (UEH) 258*8kB (UMEH) 166*16kB (UMEH) 51*32kB (UEH) 54*64kB (UEH) 24*128kB (UME) 7*256kB (UMEH) 5*512kB (UMH) 0*1024kB 0*2048kB 0*4096kB = 19652kB [ 679.091545][T16842] Node 1 DMA32: 141*4kB (UM) 1590*8kB (UME) 883*16kB (UME) 494*32kB (UME) 388*64kB (UME) 169*128kB (UME) 72*256kB (UM) 43*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 131156kB [ 679.091620][T16842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 679.091632][T16842] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 679.091640][T16842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 679.091649][T16842] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 679.091657][T16842] 20700 total pagecache pages [ 679.091661][T16842] 726 pages in swap cache [ 679.091665][T16842] Free swap = 62960kB [ 679.091669][T16842] Total swap = 124996kB [ 679.091674][T16842] 524155 pages RAM [ 679.091678][T16842] 0 pages HighMem/MovableOnly [ 679.091681][T16842] 212073 pages reserved [ 679.091685][T16842] 0 pages cma reserved [ 679.865555][ T43] audit: type=1326 audit(1787942127.878:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16866 comm="syz.8.2714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 679.873023][ T43] audit: type=1326 audit(1787942127.878:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16866 comm="syz.8.2714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 679.873055][ T43] audit: type=1326 audit(1787942127.878:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16866 comm="syz.8.2714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 679.873082][ T43] audit: type=1326 audit(1787942127.878:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16866 comm="syz.8.2714" exe="/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf709efec code=0x7ffc0000 [ 679.873105][ T43] audit: type=1326 audit(1787942127.878:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16866 comm="syz.8.2714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 679.873125][ T43] audit: type=1326 audit(1787942127.878:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16866 comm="syz.8.2714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 679.873145][ T43] audit: type=1326 audit(1787942127.878:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16866 comm="syz.8.2714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 679.873166][ T43] audit: type=1326 audit(1787942127.878:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16866 comm="syz.8.2714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 679.873187][ T43] audit: type=1326 audit(1787942127.878:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16866 comm="syz.8.2714" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf709efec code=0x7ffc0000 [ 679.873208][ T43] audit: type=1326 audit(1787942127.878:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16866 comm="syz.8.2714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 679.974234][T16870] ip6t_rt: too many addresses specified [ 680.050862][T16867] XFS (nullb0): Invalid superblock magic number [ 680.589255][T16889] openvswitch: netlink: VXLAN extension 54 out of range max 1 [ 680.605921][T16887] FAULT_INJECTION: forcing a failure. [ 680.605921][T16887] name failslab, interval 1, probability 0, space 0, times 0 [ 680.605995][T16887] CPU: 3 UID: 0 PID: 16887 Comm: syz.8.2717 Tainted: G L syzkaller #0 PREEMPT(full) [ 680.606037][T16887] Tainted: [L]=SOFTLOCKUP [ 680.606059][T16887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 680.606072][T16887] Call Trace: [ 680.606079][T16887] [ 680.606087][T16887] dump_stack_lvl+0x100/0x190 [ 680.606117][T16887] should_fail_ex.cold+0x5/0xa [ 680.606141][T16887] should_failslab+0xc2/0x120 [ 680.606164][T16887] kmem_cache_alloc_noprof+0x92/0x6a0 [ 680.606183][T16887] ? mas_prev+0xa4/0x100 [ 680.606209][T16887] ? vm_area_alloc+0x1f/0x160 [ 680.606238][T16887] vm_area_alloc+0x1f/0x160 [ 680.606260][T16887] __mmap_region+0x107c/0x32c0 [ 680.606292][T16887] ? __pfx___mmap_region+0x10/0x10 [ 680.606319][T16887] ? __lock_acquire+0x4c5/0x1ec0 [ 680.606353][T16887] ? do_raw_spin_lock+0x128/0x260 [ 680.606382][T16887] ? debug_object_activate+0x343/0x4b0 [ 680.606406][T16887] ? do_raw_spin_unlock+0x145/0x1e0 [ 680.606434][T16887] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 680.606464][T16887] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 680.606494][T16887] ? find_held_lock+0x2b/0x80 [ 680.606545][T16887] ? __pfx_mt_find+0x10/0x10 [ 680.606573][T16887] mmap_region+0x3db/0x6d0 [ 680.606610][T16887] ? __pfx_mmap_region+0x10/0x10 [ 680.606638][T16887] ? find_vma_intersection+0xc0/0x140 [ 680.606659][T16887] ? __pfx_find_vma_intersection+0x10/0x10 [ 680.606678][T16887] ? security_mmap_addr+0x71/0x1e0 [ 680.606701][T16887] ? __get_unmapped_area+0x255/0x3e0 [ 680.606724][T16887] do_mmap+0x12c7/0x1c30 [ 680.606750][T16887] ? lock_acquire+0x1d1/0x380 [ 680.606772][T16887] ? __pfx_do_mmap+0x10/0x10 [ 680.606794][T16887] ? futex_wait+0x11e/0x370 [ 680.606820][T16887] ? __pfx_down_write_killable+0x10/0x10 [ 680.606849][T16887] vm_mmap_pgoff+0x28d/0x470 [ 680.606871][T16887] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 680.606889][T16887] ? __pfx_do_futex+0x10/0x10 [ 680.606941][T16887] ksys_mmap_pgoff+0xe4/0x610 [ 680.606965][T16887] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 680.606989][T16887] __do_fast_syscall_32+0x13a/0x8b0 [ 680.607011][T16887] do_fast_syscall_32+0x32/0x70 [ 680.607033][T16887] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 680.607056][T16887] RIP: 0023:0xf709efec [ 680.607077][T16887] Code: Unable to access opcode bytes at 0xf709efc2. [ 680.607086][T16887] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 680.607105][T16887] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000001000 [ 680.607116][T16887] RDX: 0000000000000002 RSI: 0000000004199831 RDI: 00000000ffffffff [ 680.607127][T16887] RBP: 0000000010000000 R08: 0000000000000000 R09: 0000000000000000 [ 680.607139][T16887] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 680.607150][T16887] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 680.607174][T16887] [ 681.327591][T16894] FAULT_INJECTION: forcing a failure. [ 681.327591][T16894] name failslab, interval 1, probability 0, space 0, times 0 [ 681.327638][T16894] CPU: 3 UID: 0 PID: 16894 Comm: syz.2.2722 Tainted: G L syzkaller #0 PREEMPT(full) [ 681.327669][T16894] Tainted: [L]=SOFTLOCKUP [ 681.327679][T16894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 681.327686][T16894] Call Trace: [ 681.327691][T16894] [ 681.327696][T16894] dump_stack_lvl+0x100/0x190 [ 681.327715][T16894] should_fail_ex.cold+0x5/0xa [ 681.327732][T16894] should_failslab+0xc2/0x120 [ 681.327747][T16894] __kmalloc_noprof+0xfc/0x840 [ 681.327759][T16894] ? __memcg_list_lru_alloc+0x418/0x680 [ 681.327778][T16894] __memcg_list_lru_alloc+0x418/0x680 [ 681.327794][T16894] ? xa_load+0x149/0x2c0 [ 681.327811][T16894] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 681.327830][T16894] ? rcu_read_unlock+0x17/0x60 [ 681.327850][T16894] memcg_list_lru_alloc+0xd3/0x100 [ 681.327868][T16894] __memcg_slab_post_alloc_hook+0x27b/0x1270 [ 681.327890][T16894] ? kasan_save_track+0x14/0x30 [ 681.327904][T16894] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 681.327916][T16894] ? __d_alloc+0x35/0xa50 [ 681.327932][T16894] __d_alloc+0x35/0xa50 [ 681.327947][T16894] d_alloc+0x4a/0x1e0 [ 681.327960][T16894] lookup_one_qstr_excl+0x171/0x250 [ 681.327975][T16894] ? mnt_want_write+0x164/0x420 [ 681.327994][T16894] filename_rmdir+0x26b/0x5c0 [ 681.328008][T16894] ? __pfx_filename_rmdir+0x10/0x10 [ 681.328026][T16894] ? do_getname+0x191/0x390 [ 681.328042][T16894] __ia32_sys_unlinkat+0xf5/0x130 [ 681.328057][T16894] __do_fast_syscall_32+0x13a/0x8b0 [ 681.328071][T16894] ? lockdep_hardirqs_on+0x7d/0x110 [ 681.328085][T16894] do_fast_syscall_32+0x32/0x70 [ 681.328099][T16894] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 681.328113][T16894] RIP: 0023:0xf6ffefec [ 681.328125][T16894] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 681.328130][T16894] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 000000000000012d [ 681.328142][T16894] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 681.328150][T16894] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 681.328157][T16894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 681.328163][T16894] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 681.328170][T16894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 681.328184][T16894] [ 681.691773][ T5813] syzkaller0: tun_net_xmit 76 [ 681.691966][ T5813] syzkaller0: tun_net_xmit 48 [ 681.713319][T16904] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 681.713386][T16904] syzkaller0: Linktype set failed because interface is up [ 681.721418][ T9369] syzkaller0: tun_net_xmit 76 [ 682.002121][ T9369] syzkaller0: tun_net_xmit 76 [ 682.568451][T16915] netlink: 'syz.1.2729': attribute type 4 has an invalid length. [ 683.438785][ T25] usb 7-1: new low-speed USB device number 59 using dummy_hcd [ 683.613135][ T25] usb 7-1: unable to get BOS descriptor or descriptor too short [ 683.613226][ T25] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 683.614376][ T25] usb 7-1: config 18 has an invalid interface number: 166 but max is 0 [ 683.614604][ T25] usb 7-1: config 18 has no interface number 0 [ 683.614729][ T25] usb 7-1: too many endpoints for config 18 interface 166 altsetting 9: 162, using maximum allowed: 30 [ 683.614842][ T25] usb 7-1: config 18 interface 166 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 162 [ 683.614995][ T25] usb 7-1: config 18 interface 166 has no altsetting 0 [ 683.617191][ T25] usb 7-1: string descriptor 0 read error: -22 [ 683.617262][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.832865][T16918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.833426][T16918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.875156][ T9369] usb 7-1: USB disconnect, device number 59 [ 685.331673][T16923] xt_NETMAP: bad MAP_IPS. [ 685.344786][T16923] netlink: 'syz.2.2732': attribute type 1 has an invalid length. [ 685.345613][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.345644][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.775728][T16926] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2733'. [ 685.821536][T16930] ip6t_rt: too many addresses specified [ 687.784465][T16976] ip6t_rt: too many addresses specified [ 689.014773][ T9369] kernel read not supported for file /dsp1 (pid: 9369 comm: kworker/3:5) [ 689.404014][T16995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2753'. [ 689.404087][T16995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2753'. [ 689.822044][T17021] jffs2: notice: (17021) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 690.076835][ T43] kauditd_printk_skb: 104 callbacks suppressed [ 690.076904][ T43] audit: type=1326 audit(1787942138.088:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.2.2764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 690.076945][ T43] audit: type=1326 audit(1787942138.088:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.2.2764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 690.077805][ T43] audit: type=1326 audit(1787942138.088:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.2.2764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 690.077832][ T43] audit: type=1326 audit(1787942138.088:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.2.2764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 690.077852][ T43] audit: type=1326 audit(1787942138.088:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.2.2764" exe="/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 690.077872][ T43] audit: type=1326 audit(1787942138.088:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.2.2764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 690.077892][ T43] audit: type=1326 audit(1787942138.088:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.2.2764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 690.078180][ T43] audit: type=1326 audit(1787942138.088:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.2.2764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 690.078310][ T43] audit: type=1326 audit(1787942138.088:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.2.2764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 690.078414][ T43] audit: type=1326 audit(1787942138.088:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17028 comm="syz.2.2764" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 690.092410][T17029] XFS (nullb0): Invalid superblock magic number [ 690.253658][T17043] ./file0: Can't lookup blockdev [ 690.446688][T17064] netlink: 'syz.2.2776': attribute type 4 has an invalid length. [ 690.635930][T17084] syz.2.2784 (17084) used obsolete PPPIOCDETACH ioctl [ 691.199053][T17088] [ 691.199975][T17088] ====================================================== [ 691.202140][T17088] WARNING: possible circular locking dependency detected [ 691.204413][T17088] syzkaller #0 Tainted: G L [ 691.206565][T17088] ------------------------------------------------------ [ 691.209032][T17088] syz.2.2786/17088 is trying to acquire lock: [ 691.211150][T17088] ffff888026178080 (&buffer->mutex){+.+.}-{4:4}, at: configfs_read_iter+0x79/0x6f0 [ 691.213912][T17088] [ 691.213912][T17088] but task is already holding lock: [ 691.216131][T17088] ffff88804ba14480 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 691.219267][T17088] [ 691.219267][T17088] which lock already depends on the new lock. [ 691.219267][T17088] [ 691.222426][T17088] [ 691.222426][T17088] the existing dependency chain (in reverse order) is: [ 691.225135][T17088] [ 691.225135][T17088] -> #6 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 691.227766][T17088] lock_acquire+0x1d1/0x380 [ 691.229363][T17088] __mutex_lock+0x1a4/0x1bc0 [ 691.230976][T17088] process_measurement+0x5ab/0x2350 [ 691.232709][T17088] ima_file_check+0xcc/0x120 [ 691.234273][T17088] security_file_post_open+0xc4/0x210 [ 691.236038][T17088] path_openat+0x5cd/0x2440 [ 691.237539][T17088] do_file_open+0x20e/0x430 [ 691.239069][T17088] file_open_name+0x1c3/0x3e0 [ 691.240728][T17088] filp_open+0x2e/0x50 [ 691.242248][T17088] kernel_read_file_from_path_initns+0xec/0x240 [ 691.244425][T17088] _request_firmware+0x733/0x13c0 [ 691.246079][T17088] request_firmware+0x35/0x50 [ 691.247634][T17088] reg_reload_regdb+0x85/0x460 [ 691.249214][T17088] genl_family_rcv_msg_doit+0x214/0x300 [ 691.251114][T17088] genl_rcv_msg+0x560/0x800 [ 691.252658][T17088] netlink_rcv_skb+0x159/0x420 [ 691.254344][T17088] genl_rcv+0x28/0x40 [ 691.255798][T17088] netlink_unicast+0x585/0x850 [ 691.257497][T17088] netlink_sendmsg+0x8b0/0xda0 [ 691.259373][T17088] ____sys_sendmsg+0xa4d/0xbe0 [ 691.261236][T17088] ___sys_sendmsg+0x190/0x1e0 [ 691.262950][T17088] __sys_sendmsg+0x160/0x210 [ 691.264580][T17088] __do_fast_syscall_32+0x13a/0x8b0 [ 691.266270][T17088] do_fast_syscall_32+0x32/0x70 [ 691.267846][T17088] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 691.269886][T17088] [ 691.269886][T17088] -> #5 (cb_lock){++++}-{4:4}: [ 691.271963][T17088] lock_acquire+0x1d1/0x380 [ 691.273480][T17088] down_read+0x99/0x4c0 [ 691.274926][T17088] genl_rcv+0x19/0x40 [ 691.276326][T17088] netlink_unicast+0x585/0x850 [ 691.277919][T17088] netlink_sendmsg+0x8b0/0xda0 [ 691.279473][T17088] sock_sendmsg+0x394/0x410 [ 691.280984][T17088] splice_to_socket+0xb3c/0x11a0 [ 691.282644][T17088] do_splice+0x109c/0x1fa0 [ 691.284131][T17088] __do_splice+0x33b/0x370 [ 691.285695][T17088] __ia32_sys_splice+0x189/0x250 [ 691.287363][T17088] __do_fast_syscall_32+0x13a/0x8b0 [ 691.289221][T17088] do_fast_syscall_32+0x32/0x70 [ 691.290980][T17088] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 691.293036][T17088] [ 691.293036][T17088] -> #4 (&pipe->mutex){+.+.}-{4:4}: [ 691.295262][T17088] lock_acquire+0x1d1/0x380 [ 691.296797][T17088] __mutex_lock+0x1a4/0x1bc0 [ 691.298349][T17088] pipe_lock+0x69/0x80 [ 691.299899][T17088] iter_file_splice_write+0x1fd/0x10b0 [ 691.301744][T17088] do_splice+0x109c/0x1fa0 [ 691.303255][T17088] __do_splice+0x33b/0x370 [ 691.304781][T17088] __ia32_sys_splice+0x189/0x250 [ 691.306529][T17088] __do_fast_syscall_32+0x13a/0x8b0 [ 691.308362][T17088] do_fast_syscall_32+0x32/0x70 [ 691.310091][T17088] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 691.312412][T17088] [ 691.312412][T17088] -> #3 (sb_writers#5){.+.+}-{0:0}: [ 691.314923][T17088] lock_acquire+0x1d1/0x380 [ 691.316522][T17088] mnt_want_write+0x6f/0x420 [ 691.318124][T17088] lookup_open+0x150/0x1990 [ 691.319670][T17088] path_openat+0xa2c/0x2440 [ 691.321226][T17088] do_file_open+0x20e/0x430 [ 691.322761][T17088] file_open_name+0x1c3/0x3e0 [ 691.324359][T17088] filp_open+0x2e/0x50 [ 691.325795][T17088] nvmet_file_ns_enable+0x95/0x420 [ 691.327711][T17088] nvmet_ns_enable+0x35f/0x5d0 [ 691.329445][T17088] nvmet_ns_enable_store+0x11e/0x160 [ 691.331466][T17088] configfs_write_iter+0x302/0x4e0 [ 691.333208][T17088] vfs_write+0x6af/0x1050 [ 691.334693][T17088] ksys_write+0x12a/0x250 [ 691.336216][T17088] __do_fast_syscall_32+0x13a/0x8b0 [ 691.337941][T17088] do_fast_syscall_32+0x32/0x70 [ 691.339607][T17088] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 691.341675][T17088] [ 691.341675][T17088] -> #2 (&subsys->lock){+.+.}-{4:4}: [ 691.343944][T17088] lock_acquire+0x1d1/0x380 [ 691.345445][T17088] __mutex_lock+0x1a4/0x1bc0 [ 691.347016][T17088] nvmet_ns_device_path_store+0x57/0x1c0 [ 691.348796][T17088] configfs_write_iter+0x302/0x4e0 [ 691.350509][T17088] vfs_write+0x6af/0x1050 [ 691.352138][T17088] ksys_write+0x12a/0x250 [ 691.353812][T17088] __do_fast_syscall_32+0x13a/0x8b0 [ 691.355832][T17088] do_fast_syscall_32+0x32/0x70 [ 691.357572][T17088] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 691.359578][T17088] [ 691.359578][T17088] -> #1 (&p->frag_sem){.+.+}-{4:4}: [ 691.361976][T17088] lock_acquire+0x1d1/0x380 [ 691.363650][T17088] down_read+0x99/0x4c0 [ 691.365081][T17088] configfs_write_iter+0x218/0x4e0 [ 691.366792][T17088] vfs_write+0x6af/0x1050 [ 691.368237][T17088] ksys_write+0x12a/0x250 [ 691.369706][T17088] __do_fast_syscall_32+0x13a/0x8b0 [ 691.371449][T17088] do_fast_syscall_32+0x32/0x70 [ 691.373050][T17088] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 691.375172][T17088] [ 691.375172][T17088] -> #0 (&buffer->mutex){+.+.}-{4:4}: [ 691.377544][T17088] check_prev_add+0xeb/0xe60 [ 691.379182][T17088] __lock_acquire+0x1492/0x1ec0 [ 691.380845][T17088] lock_acquire+0x1d1/0x380 [ 691.382390][T17088] __mutex_lock+0x1a4/0x1bc0 [ 691.383966][T17088] configfs_read_iter+0x79/0x6f0 [ 691.386055][T17088] __kernel_read+0x397/0xad0 [ 691.387623][T17088] integrity_kernel_read+0x7e/0xb0 [ 691.389365][T17088] ima_calc_file_hash_tfm+0x25e/0x350 [ 691.391158][T17088] ima_calc_file_hash+0x1e3/0x380 [ 691.392813][T17088] ima_collect_measurement+0x94f/0xb30 [ 691.394702][T17088] process_measurement+0xdfe/0x2350 [ 691.396437][T17088] ima_file_check+0xcc/0x120 [ 691.397974][T17088] security_file_post_open+0xc4/0x210 [ 691.399734][T17088] path_openat+0x5cd/0x2440 [ 691.401315][T17088] do_file_open+0x20e/0x430 [ 691.402834][T17088] do_sys_openat2+0x10f/0x1e0 [ 691.404404][T17088] __ia32_compat_sys_openat+0x12d/0x210 [ 691.406282][T17088] __do_fast_syscall_32+0x13a/0x8b0 [ 691.408093][T17088] do_fast_syscall_32+0x32/0x70 [ 691.409721][T17088] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 691.411844][T17088] [ 691.411844][T17088] other info that might help us debug this: [ 691.411844][T17088] [ 691.414837][T17088] Chain exists of: [ 691.414837][T17088] &buffer->mutex --> cb_lock --> &ima_iint_mutex_key[depth] [ 691.414837][T17088] [ 691.418705][T17088] Possible unsafe locking scenario: [ 691.418705][T17088] [ 691.420886][T17088] CPU0 CPU1 [ 691.422493][T17088] ---- ---- [ 691.424119][T17088] lock(&ima_iint_mutex_key[depth]); [ 691.425700][T17088] lock(cb_lock); [ 691.427580][T17088] lock(&ima_iint_mutex_key[depth]); [ 691.430025][T17088] lock(&buffer->mutex); [ 691.431438][T17088] [ 691.431438][T17088] *** DEADLOCK *** [ 691.431438][T17088] [ 691.433891][T17088] locks held by syz.2.2786/17088: 1, last CPU#3: [ 691.435908][T17088] #0: ffff88804ba14480 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 691.439267][T17088] [ 691.439267][T17088] stack backtrace: [ 691.441168][T17088] CPU: 3 UID: 0 PID: 17088 Comm: syz.2.2786 Tainted: G L syzkaller #0 PREEMPT(full) [ 691.444393][T17088] Tainted: [L]=SOFTLOCKUP [ 691.445691][T17088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 691.448865][T17088] Call Trace: [ 691.449982][T17088] [ 691.451006][T17088] dump_stack_lvl+0x100/0x190 [ 691.452484][T17088] print_circular_bug.cold+0x178/0x1be [ 691.454128][T17088] check_noncircular+0x146/0x160 [ 691.455660][T17088] check_prev_add+0xeb/0xe60 [ 691.457031][T17088] __lock_acquire+0x1492/0x1ec0 [ 691.458511][T17088] ? is_bpf_text_address+0x8a/0x1a0 [ 691.460072][T17088] lock_acquire+0x1d1/0x380 [ 691.461448][T17088] ? configfs_read_iter+0x79/0x6f0 [ 691.463022][T17088] ? __pfx___might_resched+0x10/0x10 [ 691.464611][T17088] ? arch_stack_walk+0xa6/0xf0 [ 691.466278][T17088] __mutex_lock+0x1a4/0x1bc0 [ 691.467841][T17088] ? configfs_read_iter+0x79/0x6f0 [ 691.469603][T17088] ? configfs_read_iter+0x79/0x6f0 [ 691.471389][T17088] ? stack_trace_save+0x8e/0xc0 [ 691.472874][T17088] ? __pfx___mutex_lock+0x10/0x10 [ 691.474373][T17088] ? stack_depot_save_flags+0x27/0x9f0 [ 691.476037][T17088] ? __kasan_kmalloc+0xaa/0xb0 [ 691.477570][T17088] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 691.479348][T17088] ? ima_calc_file_hash_tfm+0x236/0x350 [ 691.481061][T17088] ? ima_calc_file_hash+0x1e3/0x380 [ 691.482624][T17088] ? ima_collect_measurement+0x94f/0xb30 [ 691.484364][T17088] ? process_measurement+0xdfe/0x2350 [ 691.486026][T17088] ? ima_file_check+0xcc/0x120 [ 691.487508][T17088] ? security_file_post_open+0xc4/0x210 [ 691.489191][T17088] ? configfs_read_iter+0x79/0x6f0 [ 691.490744][T17088] configfs_read_iter+0x79/0x6f0 [ 691.492250][T17088] __kernel_read+0x397/0xad0 [ 691.493702][T17088] ? __pfx___kernel_read+0x10/0x10 [ 691.495309][T17088] integrity_kernel_read+0x7e/0xb0 [ 691.496944][T17088] ? __pfx_integrity_kernel_read+0x10/0x10 [ 691.499042][T17088] ? ima_calc_file_hash_tfm+0x236/0x350 [ 691.501217][T17088] ima_calc_file_hash_tfm+0x25e/0x350 [ 691.503366][T17088] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 691.505702][T17088] ? stack_trace_consume_entry+0x170/0x170 [ 691.507626][T17088] ? look_up_lock_class+0x64/0x120 [ 691.509250][T17088] ? ima_alloc_tfm+0x21a/0x2e0 [ 691.510766][T17088] ima_calc_file_hash+0x1e3/0x380 [ 691.512395][T17088] ima_collect_measurement+0x94f/0xb30 [ 691.514092][T17088] ? __pfx_ima_collect_measurement+0x10/0x10 [ 691.515924][T17088] ? process_measurement+0x5ab/0x2350 [ 691.517570][T17088] ? is_bad_inode+0xd/0x40 [ 691.518992][T17088] ? xattr_resolve_name+0x27d/0x3f0 [ 691.520639][T17088] ? vfs_getxattr_alloc+0xec/0x350 [ 691.522274][T17088] ? ima_get_hash_algo+0x241/0x400 [ 691.523885][T17088] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 691.525607][T17088] ? process_measurement+0xdfe/0x2350 [ 691.527334][T17088] process_measurement+0xdfe/0x2350 [ 691.528953][T17088] ? __pfx_process_measurement+0x10/0x10 [ 691.530785][T17088] ? lock_acquire+0x1d1/0x380 [ 691.532414][T17088] ? __configfs_open_file+0x6ca/0x9c0 [ 691.534227][T17088] ima_file_check+0xcc/0x120 [ 691.535896][T17088] ? __pfx_ima_file_check+0x10/0x10 [ 691.537523][T17088] security_file_post_open+0xc4/0x210 [ 691.539186][T17088] path_openat+0x5cd/0x2440 [ 691.540566][T17088] ? __pfx_path_openat+0x10/0x10 [ 691.542255][T17088] do_file_open+0x20e/0x430 [ 691.543814][T17088] ? __pfx_do_file_open+0x10/0x10 [ 691.545333][T17088] ? _raw_spin_unlock+0x28/0x50 [ 691.546805][T17088] ? alloc_fd+0x471/0x7a0 [ 691.548168][T17088] do_sys_openat2+0x10f/0x1e0 [ 691.549591][T17088] ? __pfx_do_sys_openat2+0x10/0x10 [ 691.551161][T17088] __ia32_compat_sys_openat+0x12d/0x210 [ 691.552995][T17088] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 691.554987][T17088] __do_fast_syscall_32+0x13a/0x8b0 [ 691.556777][T17088] do_fast_syscall_32+0x32/0x70 [ 691.558356][T17088] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 691.560409][T17088] RIP: 0023:0xf6ffefec [ 691.561733][T17088] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 691.563798][T17088] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 691.566285][T17088] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000400 [ 691.568658][T17088] RDX: 0000000000000002 RSI: 0000000000000050 RDI: 0000000000000000 [ 691.571016][T17088] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 691.573332][T17088] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 691.575691][T17088] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 691.578042][T17088] [ 697.661286][T17095] Bluetooth: hci1: command 0x0405 tx timeout