last executing test programs: 12m14.73216766s ago: executing program 2 (id=257): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8008640b, &(0x7f0000182900)={0x2, &(0x7f0000182780)=[{0xa000005, 0x85e, &(0x7f0000000600)=[0x8001, 0x9f6, 0x1, 0xfffffc00, 0xffffffff, 0x4, 0x8, 0x9, 0x7, 0x3, 0x76, 0xeb, 0xb, 0x2, 0x2b1, 0x8000, 0x1, 0x9, 0x2, 0x7, 0x7fffffff, 0x1ff, 0x2, 0xfffff8ab, 0x3, 0x7fff, 0xfffffff7, 0x7fffffff, 0x3, 0x2, 0x4, 0x8, 0x1a7, 0x3, 0x0, 0x3, 0x401, 0x3, 0x5, 0xa, 0x1ff, 0x8, 0x9, 0x7ff, 0x8, 0x9, 0xab75, 0x81, 0x1ff, 0x80000001, 0xc4, 0x18, 0x10, 0xf, 0x5, 0x10000, 0x9414, 0xd, 0x4, 0x1, 0x401, 0x8, 0x0, 0x5, 0x8, 0x10000, 0xff, 0x92, 0x7, 0x6105a5b9, 0x77c2, 0x2, 0x1, 0x5, 0x8, 0x7fffffff, 0x8, 0x0, 0x3, 0x6, 0x7, 0x7, 0x9, 0x1, 0x1, 0x7471, 0x2, 0x9, 0x7fffffff, 0x7, 0x0, 0x5, 0xcf1, 0x8, 0xa393, 0x1, 0xe, 0x9412, 0x81, 0xfff, 0x55ec, 0xfffffffd, 0x0, 0x401, 0xc3e9, 0x1, 0x0, 0x6, 0xc, 0x1, 0x101, 0x1e, 0x7, 0x6, 0x1, 0x2, 0xd, 0x4, 0x8000, 0x49b, 0x0, 0x62154a7c, 0x4, 0x0, 0x7, 0x9, 0x7, 0xffff, 0x4b1, 0x5, 0x1268, 0x2, 0x0, 0x7, 0x3fd8, 0x3, 0x0, 0x3, 0x5, 0x101, 0xfc3, 0x401, 0xb72, 0x9, 0x4, 0x6, 0x8, 0x4, 0x4, 0x200, 0x3, 0xffff, 0x4, 0x5, 0x0, 0x621d, 0x1, 0x40, 0x966, 0x0, 0x1000, 0x7, 0x2, 0x6, 0x55e, 0x0, 0x7, 0x5, 0x5000000, 0xc, 0x2, 0x2, 0x1, 0x38af, 0x4, 0x8000, 0x0, 0xffffff01, 0x80000000, 0x7, 0xfe, 0x6, 0x7ff, 0x101, 0x1, 0x4, 0x1, 0x1, 0x9, 0x97, 0x3, 0xffff, 0x8, 0x5f76b6c6, 0xf1, 0xa4, 0x2, 0x3, 0x80, 0x1, 0xf, 0x9, 0x5, 0x6, 0x6, 0x9, 0x6, 0x3, 0x9, 0x2, 0x7fff, 0xf, 0x2b, 0xff, 0x1, 0x4, 0x5, 0x0, 0x7, 0x4, 0x0, 0x40000, 0xffff8c8c, 0xff, 0x306, 0x200, 0x1ff, 0x2, 0x7, 0xaa, 0xd, 0x5, 0x101, 0x8001, 0x6, 0x0, 0x9, 0xd, 0x0, 0x1, 0x4, 0xb46, 0x4, 0x7, 0xfffffff7, 0x9, 0x10001, 0x1, 0x5, 0x8, 0xffff, 0x80000000, 0x5c8e, 0x4, 0x3, 0x401, 0x9, 0x1, 0x0, 0x60ee, 0x6, 0x2, 0xb743, 0x5, 0x0, 0x400, 0x6, 0x1, 0x81, 0xa, 0x0, 0x0, 0xff, 0x7fff, 0x3, 0x3c654994, 0x4, 0x0, 0xfffffff8, 0x8, 0x1400000, 0x5, 0x1, 0x3, 0xf, 0xb655, 0x4, 0x7f, 0xffffffff, 0x0, 0x100, 0x52c, 0xc00000, 0x8, 0x0, 0x7, 0x7, 0x9, 0x6, 0xfffffeff, 0x40, 0x43, 0x800, 0x7, 0x8, 0x9, 0x9, 0x10000, 0xaf9, 0x9, 0x4, 0x81, 0xdf, 0x0, 0x33d6, 0x8, 0x200, 0x4, 0x40, 0x80000001, 0x1, 0x40, 0x9, 0x7, 0xa, 0xfffffff9, 0x1, 0x200, 0x5, 0x4, 0x81, 0x80000000, 0xfffff801, 0xb396, 0x1, 0x1, 0x8001, 0x100, 0x21, 0x5, 0x7b4c, 0x5, 0x0, 0x8000, 0x5, 0x9, 0x0, 0x3, 0x9, 0x81, 0x8001, 0x48c, 0x4, 0x3, 0x3, 0x8, 0x4, 0x3a8, 0x17d7cfe3, 0x4ed1, 0x10001, 0x7, 0xe, 0xba, 0x1, 0x3, 0x9, 0x2, 0x7, 0x5, 0x80000000, 0x40, 0x8, 0x1, 0xffff15ea, 0x3, 0x6, 0x8, 0x0, 0x7ff, 0x4, 0x8000, 0x80, 0x10, 0x6, 0x1, 0x9, 0x3, 0x2, 0x10000, 0x9, 0x6, 0xd7ac, 0x6, 0x1, 0x6c9, 0x2, 0x10000, 0x3, 0x5, 0x800, 0x28, 0x7, 0x1728, 0x0, 0x7fffffff, 0x4, 0x1, 0x3d3, 0xffffffff, 0x3, 0xfffffffe, 0x1, 0x319, 0x81, 0x6, 0x3, 0xfa80, 0x400, 0x7, 0x9, 0xfff, 0xb, 0x7, 0x8, 0x9, 0xd0e4, 0x8001, 0x344, 0x4, 0xffffff01, 0x5c, 0x3, 0x9, 0x81, 0x6, 0x2, 0xf840, 0x8001, 0x4, 0x5, 0x2, 0x5f25, 0x6, 0x45b, 0x6, 0xd770, 0x6, 0xf, 0xfff, 0x4, 0x6, 0xd8f, 0xb3c0, 0x0, 0x7, 0xfffffffc, 0x0, 0x8, 0x7, 0x12, 0x8, 0x3, 0xff, 0xf, 0x7, 0x10001, 0x6, 0x2, 0x80, 0x5f8, 0xfffffff7, 0x4, 0x101, 0x1, 0x1, 0xffffff00, 0x9, 0x1000, 0x4, 0x80, 0x2, 0x9, 0x7fffffff, 0x5, 0x10000, 0x8a, 0x2, 0x1, 0x2, 0xf70, 0x4, 0x7, 0x8, 0xe9be00, 0x8, 0x200, 0x5, 0x5, 0x5, 0x3, 0x5, 0x7, 0x6, 0x5, 0x5, 0x7f, 0x3, 0x7, 0x100, 0xe, 0x5, 0x6, 0x3, 0x1000000, 0xe, 0x0, 0x87cc, 0xfffffffc, 0x9, 0x0, 0x7fff, 0x0, 0x5098, 0x8001, 0x9, 0x4, 0xff, 0x1, 0x7, 0x6, 0x1, 0x9, 0x1, 0x1, 0x9, 0x2, 0x3ff, 0x6, 0x1, 0x8, 0x3, 0x300, 0xff5, 0xd, 0x17, 0x1, 0x9, 0x3, 0x8001, 0xfffffffd, 0x6, 0x4d, 0x9, 0x3, 0x200, 0x3, 0x3, 0x5, 0x9fb7, 0x3, 0xdb, 0x8, 0x80000001, 0x3, 0x9a, 0x10, 0x3, 0x10000, 0x10001, 0x7, 0x8, 0xfff, 0x9, 0x4, 0xffffffc0, 0x2, 0x2, 0x4, 0x1000, 0x40, 0x6228, 0x2, 0x7f, 0x2, 0x7, 0xff, 0x5, 0xfffffff7, 0x1, 0xdd8, 0x4, 0x4, 0x2, 0x101, 0x9, 0x7ff, 0x6, 0x9, 0x0, 0x9, 0x136, 0x6, 0x3, 0x800, 0x9, 0x13f5, 0x5, 0x6, 0x7, 0x2, 0x400, 0x8, 0x200, 0x7, 0x1, 0x80000001, 0x3, 0x8, 0x6, 0xc, 0x6, 0x4, 0x5, 0x2, 0x34a2, 0x101, 0xcd, 0x5, 0x73, 0xf, 0x4, 0x4, 0x0, 0xa, 0x4, 0xfffffffe, 0x7, 0x0, 0xfffffffc, 0x81, 0xc, 0xe8, 0x3, 0x5, 0x198, 0xf6, 0x3, 0xfffffffc, 0xf, 0x0, 0x7fff, 0x2, 0x7f, 0x8000, 0xff, 0xd9, 0x9, 0x8, 0x401, 0x5, 0x5, 0x9, 0x9, 0x1, 0xff, 0x5, 0x8, 0x3, 0x10000, 0x7fff, 0x7, 0x7, 0x8000, 0x2, 0x0, 0x5, 0x10, 0x3, 0x1, 0xab, 0xf0, 0x26af, 0x7, 0x9, 0xfb26, 0x3, 0x9, 0x5, 0x4, 0x1, 0xffffcfa7, 0x9, 0x532, 0x2, 0x1, 0xff, 0x2, 0x1eb7, 0x45e, 0x6, 0x1, 0x1, 0x4, 0x2, 0x9, 0x800, 0xfffffffe, 0x3, 0x8, 0x0, 0x3, 0x40, 0x0, 0x1, 0x8001, 0x6, 0x6, 0x40, 0x7, 0x7fff, 0x8, 0x200, 0x4, 0x1c, 0x1, 0x1, 0x2, 0x7, 0x6, 0xffff32c6, 0x6, 0x9, 0x8, 0x5, 0x5c8, 0xff, 0x6, 0x688, 0x3, 0xf31, 0x7f, 0x0, 0x7, 0x5, 0x9, 0xfffff4a6, 0xd, 0x3, 0x0, 0x7f, 0x4, 0x9, 0x8, 0xd, 0x6, 0x81, 0x5, 0x8, 0x3, 0x0, 0x40, 0xffff, 0x400, 0x3, 0x3, 0x9, 0x9, 0x6, 0x8, 0x0, 0xffff473e, 0x401, 0x1, 0x3, 0x5be0, 0x3ff, 0x8, 0xc0000, 0x644d, 0x10000, 0x8, 0xfffffff9, 0xffff, 0x3, 0x2, 0x7, 0x7ff, 0x2, 0x3, 0x1, 0x7f, 0x30000, 0x7ff, 0xffffffff, 0x80000000, 0x7fffffff, 0xac, 0x4, 0x9, 0x1000, 0xf42, 0x0, 0xc391, 0x8, 0xffff4ee1, 0x5, 0xffffffff, 0x5, 0x7ff, 0x131, 0x7fff, 0x7f, 0x2, 0x6, 0xa, 0x2, 0x5, 0x3, 0x46, 0x2, 0x80000001, 0xd0a, 0xc00, 0x2, 0x800000, 0x7, 0x7, 0x3, 0x3df, 0x3, 0xd, 0x40, 0x1000, 0xffffffff, 0x8, 0x6, 0x5b0f, 0x9, 0x7098, 0x5, 0x7fffffff, 0xfffffffe, 0xffff, 0x7f, 0xfffffff9, 0x9, 0x80, 0x8, 0x3, 0x4, 0xb0b, 0x8, 0xffff, 0x0, 0x80000001, 0x5, 0x9, 0x1400, 0x3, 0x4, 0x100, 0x200, 0x2, 0x7ff, 0x9, 0x23f, 0xfffffffe, 0xffff, 0x4, 0x9, 0x5, 0x7fffffff, 0x10, 0x9, 0x1, 0x7f, 0x98a7, 0x800, 0x4, 0x8aa, 0x6b5, 0x7, 0x7, 0x40, 0x839, 0x4, 0x1a, 0x43, 0x5, 0x200, 0x5, 0x0, 0x4, 0x8, 0x38f, 0xfffffff9, 0x80000001, 0x2, 0x1, 0x5, 0xbd, 0x9, 0x1, 0x6ea82a99, 0x9, 0xbdc2, 0x3, 0x7, 0x3, 0x10000, 0x4, 0x5d32933e, 0x5, 0x6d, 0x1, 0x1c25, 0x7, 0x7f, 0x4, 0x7, 0x4, 0x8, 0x7ce, 0x40, 0x0, 0xf, 0x7, 0x80000000, 0x3, 0x3, 0xf6, 0x4, 0x4, 0x4, 0x3, 0x401, 0x9, 0x3, 0x0, 0x100, 0x4, 0x7, 0x1ff, 0x9, 0x2, 0x9943, 0x100, 0x4, 0x2, 0x1000, 0xd02, 0x4, 0x7, 0x54, 0x0, 0x4, 0x1c83, 0x21, 0x0, 0x4, 0x5, 0x1, 0x800, 0x8, 0x3, 0x0, 0xfffffffa, 0x7, 0x9, 0x10, 0x6, 0xe0f0c66, 0x5, 0x8, 0x1, 0x8, 0xd, 0x3ff, 0x0, 0x7, 0x5, 0x7, 0x2000000, 0x7, 0x7, 0x6, 0x8d6, 0x8, 0x6593, 0xffffff81, 0x2, 0x4, 0xa05d, 0x8, 0x8, 0x3, 0x5, 0x3ff, 0x3, 0x0, 0xf, 0x6, 0x5a0, 0xbcaf, 0xfffffff8, 0x40, 0xfffff19c, 0x5, 0x0, 0xffffffff, 0x2, 0x401, 0x7, 0x9, 0x9, 0x1ff, 0x5, 0x7fff, 0x8, 0xfffff800, 0x4, 0x4, 0x4, 0xffff17a5, 0x200, 0x3, 0x9, 0x3ff, 0x1, 0x0, 0x200, 0x1ff, 0x6, 0x3, 0x232, 0x6, 0x40, 0x0, 0x7b, 0x9, 0x49a, 0x8001, 0x1, 0x0, 0x6, 0xdc, 0xfa, 0x2, 0x400, 0xfffffffb, 0x6, 0x0, 0x9, 0xbe, 0x7f, 0xd5, 0xffffff00, 0x9, 0x8, 0x2, 0x1, 0x1, 0x7, 0x7, 0x1ff, 0x4, 0x0, 0x6, 0xa, 0x4, 0xc0000, 0x1, 0xfffffffe, 0x4, 0x9, 0x1, 0xf208, 0x4, 0x9, 0x2, 0x7, 0x3, 0x1, 0x6, 0xbb, 0x6, 0x9, 0x1bbae4e7, 0xa, 0xf, 0x1, 0xd, 0x3, 0x2, 0xb094, 0x3, 0x6, 0x2, 0x100, 0x6, 0x3, 0x9, 0x3, 0x2, 0x7, 0x8, 0x2, 0x1, 0xcd, 0x1, 0x7fffffff, 0x5f, 0x6, 0x6, 0x9, 0x3, 0xa, 0x3, 0x8, 0x0, 0x9, 0x5, 0xfff, 0x8, 0x2, 0x6, 0x8, 0x0, 0x7, 0x5, 0x8af1, 0x1, 0x7, 0xfffffff7, 0x2243, 0x9, 0x7ff, 0x5, 0x4, 0x59e, 0x1, 0x2, 0x1, 0x9, 0x7f, 0x6, 0x4, 0x4, 0x6, 0x2, 0x9, 0x4, 0x2, 0x3f171ea3, 0x3, 0x5, 0x9, 0x2, 0x80, 0x200, 0x7fffffff, 0x3, 0x4e09, 0x2, 0x1, 0x3ff, 0x1, 0x8, 0xfffffff7, 0x3, 0x0, 0xc, 0x3, 0x10001, 0x0, 0x6, 0x8000, 0x0, 0xffffffff, 0x8, 0x5, 0x9, 0x3, 0x31, 0x0, 0x0, 0x9a0, 0x81, 0xcf1, 0x23d, 0x3, 0x5, 0xa836, 0xa4f8, 0x6, 0x4, 0x6, 0x80, 0xfff, 0xffff, 0xc9, 0x8, 0xb, 0x69f, 0x0, 0x8000, 0x3, 0x800, 0x3a, 0x10000, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0xffffffff, 0x1, 0xe1, 0x0, 0x4d593afd, 0x33, 0x80, 0x0, 0x5, 0x3, 0xfff, 0x3, 0x8, 0x2c04, 0x1, 0x5, 0x7, 0x2, 0x8, 0x0, 0x4, 0x0, 0x10, 0x3, 0x10, 0xa27158fe, 0x6, 0x7, 0x4, 0x3, 0x401, 0xd6, 0xfffffe00, 0x2, 0x0, 0xc, 0x1, 0x7, 0x41ed, 0x6a, 0xb, 0x1, 0x40000, 0x3, 0x8, 0xddd8, 0x3dd, 0xff, 0x80000000, 0xc, 0x2, 0x1b, 0x0, 0x0, 0x0, 0x7f0, 0xe1, 0xd6e, 0x3, 0x8, 0x4, 0xfffffffb, 0x7fffffff, 0x2, 0x6, 0x46a0911c, 0x3b, 0x0, 0x10, 0x78, 0x6c2, 0x11, 0x157, 0xd, 0x400, 0x2, 0x4, 0x1, 0x0, 0x8000, 0xaf, 0x3ff, 0x800, 0x5, 0x80000000, 0x5, 0x1, 0x843f, 0x6, 0x100, 0x1ff, 0x4, 0x9, 0x4, 0x5, 0x5, 0x9f, 0x100, 0x0, 0x0, 0x8, 0xd7, 0xffffffff, 0x0, 0x9, 0x9, 0xfffffffc, 0x8000, 0xc, 0x7fffffff, 0x2, 0x1, 0x5, 0x2, 0x2, 0x3, 0x58, 0x1, 0xffffffff, 0x7, 0x80000000, 0x2, 0x9, 0x1000, 0x217, 0xd, 0xa, 0x3d51, 0x1, 0x7, 0x2, 0x10001, 0x6, 0x5, 0x3ff, 0x62, 0x3ff, 0x5, 0x4, 0x9, 0x2, 0x7ff, 0xffffff49, 0x6, 0x7, 0x7, 0xe4c, 0x6, 0x8, 0x3ff, 0x10, 0x1, 0x8, 0x80, 0x5, 0x1cd6, 0x4, 0x4, 0x1ff, 0x7, 0x400, 0x1, 0xd, 0x64, 0x6, 0x0, 0x4, 0xf19, 0x81, 0x8001, 0x3, 0x0, 0xffffffff, 0x8, 0x81, 0x1, 0xb5, 0xec6, 0xff, 0x3, 0x7, 0xbf7, 0xf, 0x2, 0x7, 0x1, 0x2, 0xc, 0xc, 0x7, 0x9, 0x8, 0x1000, 0x7, 0x8, 0x200, 0x101, 0x3, 0x1, 0x7fffffff, 0x81, 0x7f, 0x6, 0x5, 0x44, 0x2f4, 0xac, 0x5, 0x2, 0x4, 0x3, 0x0, 0x8, 0xde5, 0x0, 0x2, 0x6, 0x2, 0x7f, 0x8000, 0x6, 0x0, 0xffffffff, 0xd01, 0x6, 0x7, 0x6, 0x56c3f68f, 0x8f4c867, 0x3, 0x8, 0x8, 0x3, 0x5, 0x7, 0x0, 0x401, 0x2, 0x4, 0x8, 0xfff, 0x80, 0x0, 0x98, 0xb, 0xfff, 0xac1, 0x6, 0x0, 0xafd, 0x62e8, 0x0, 0x5319, 0xf45f, 0x5, 0xe5c, 0x0, 0x1, 0xfffffff7, 0x8, 0x10000, 0x101, 0x4, 0x1, 0xffff, 0x7d2, 0x8, 0x1d622135, 0x6, 0x5, 0x3, 0x7f, 0x1, 0x81, 0x0, 0x1000000, 0x3, 0xc, 0x9, 0x8, 0x7d3, 0xca, 0x1, 0x1b, 0x8, 0x8, 0x2, 0x8, 0x1, 0x4, 0x5, 0x7, 0x0, 0x101, 0x2, 0x101, 0x3, 0x7fffffff, 0x1, 0x2, 0x4ee8, 0x5, 0x8000, 0x80, 0x80, 0xfffffff9, 0x10, 0x8, 0x4e, 0x6, 0x0, 0x8, 0x200, 0xc, 0xfb7f, 0xfffffffc, 0x6, 0x5, 0x0, 0x0, 0xbcf, 0x9, 0xc, 0x80000001, 0x6, 0x9, 0x4, 0x5, 0xfffffffb, 0x9, 0x8, 0x7b48, 0x791, 0x5, 0x2, 0x5, 0x67a, 0x7ff, 0x2, 0x7, 0x0, 0x97, 0x0, 0x7, 0x1ff, 0x1, 0xc6, 0x7, 0x7fffffff, 0x1, 0x3, 0x0, 0x5, 0x5, 0x60000, 0x7, 0x5, 0x1000, 0x101, 0xfe000000, 0xea0, 0x200, 0x6, 0x7, 0x9, 0x7, 0xab, 0x41, 0x8, 0x6, 0x2, 0x401, 0x9, 0x870, 0x3e, 0x0, 0x9, 0x5, 0x7, 0x10000, 0x1, 0x0, 0x3, 0xc2, 0x1, 0x1, 0x8, 0xfffff554, 0x7, 0x2, 0x3, 0x643, 0x6, 0x45, 0x6, 0xdc8, 0x8, 0x9, 0x8, 0x8, 0x566fd19, 0x3, 0xfffffff8, 0x0, 0x7, 0x82, 0x6, 0x5, 0x2, 0x8, 0x4, 0x3, 0x59e, 0xb, 0x80000000, 0x8, 0x7ff, 0x80000001, 0x80000001, 0x2, 0x9, 0x8, 0x7, 0x6, 0x8, 0x2, 0x2, 0x7, 0xe9, 0x10001, 0x4, 0x0, 0xe0, 0x1, 0x0, 0x5, 0x8, 0xffffffff, 0x8, 0xe02, 0x5, 0xffff2e80, 0x1, 0x2db3, 0x90, 0xc6000000, 0xc47, 0x66, 0x2, 0x0, 0xfffffff9, 0xe6e, 0x6, 0x200, 0x756d, 0x5, 0x8, 0x2, 0x6, 0x200, 0xb, 0x401, 0xc05b, 0x5, 0x81, 0x9, 0x1400, 0x5, 0xfff, 0xdd, 0x9953, 0x7, 0x0, 0x9fd, 0x8, 0x7f, 0x80000001, 0x2, 0xea, 0x9, 0x8, 0x80000001, 0x8, 0x2, 0x8, 0xdb0, 0x95, 0x9, 0x5, 0x9, 0x1, 0x0, 0x2, 0x72e7, 0x40, 0x0, 0xd6, 0x3, 0x1ed6, 0x3404de16, 0x2, 0xd9, 0x6, 0xc687, 0x8, 0x3, 0x1, 0x8, 0xcd3, 0x3ff, 0xf3, 0x4, 0x6, 0x9, 0x2, 0xd3, 0x5, 0xffff, 0x17763f25, 0x6, 0x8001, 0x11, 0x6, 0x9, 0x6, 0xc, 0x10001, 0x5, 0x200, 0xfffffffc, 0x1, 0x9, 0x1, 0x7, 0x0, 0x40, 0x8, 0x0, 0x1b3, 0x0, 0x6, 0x8, 0x3, 0x10, 0x8, 0xb6be, 0x2, 0x7ff, 0xcf6d, 0xd9bb, 0x6, 0x1, 0x6, 0xaae, 0x401, 0x8, 0x7fffffff, 0x8, 0x2, 0x9, 0x4b, 0xfffffff7, 0x1, 0x7, 0x80000000, 0x7, 0x6, 0x5367, 0x5, 0xffffffff, 0x82b8, 0x2, 0x7ed, 0x48811ac2, 0x7, 0xc00000, 0xc2, 0x3, 0x9, 0x8, 0x4, 0x8, 0x0, 0xff, 0xfff, 0xfff, 0x0, 0x81, 0x1, 0x7fff, 0x5, 0x9, 0x2, 0xf0, 0xcb6, 0xaa, 0x2, 0x800, 0x400, 0x7, 0x6, 0x2, 0xece, 0x37a6e42d, 0x8001, 0x4c, 0xff, 0x80000000, 0x8, 0x1, 0x6, 0xfffffffe, 0x101, 0x5, 0x4, 0x4, 0x9, 0xcd, 0xffffffff, 0x0, 0xca, 0x0, 0x7, 0x0, 0xfffffff7, 0xd80f, 0x10000, 0x6, 0x6, 0x5, 0x9, 0x0, 0x42b, 0x7, 0x3c, 0x1, 0x1000, 0xffff, 0x7, 0x6, 0x3, 0xaccae58, 0x200, 0x8, 0x0, 0x6b, 0xf67, 0x3a8a, 0x8, 0x80000000, 0xfff, 0x3, 0x2, 0x7, 0x7, 0x8, 0x6, 0xc, 0x6, 0x7, 0x7, 0x2755, 0x688, 0x4, 0xd, 0xffffffff, 0xe, 0x5, 0x56, 0xc, 0x2e, 0x9616, 0x101, 0x4, 0x800, 0x24, 0x8, 0xaa, 0x2, 0x2, 0x48, 0x2, 0x3, 0x7a9, 0x9, 0xfffffffd, 0xe, 0x2, 0xffff, 0x3f, 0x2, 0x3b, 0x2, 0xfffff001, 0xd, 0x5, 0x3, 0x5, 0x1, 0x1, 0x2, 0x8, 0x9, 0x5, 0x442, 0x9, 0x4, 0x0, 0x0, 0x9, 0x8, 0x7, 0x4, 0x3, 0x9127, 0x877e, 0x401, 0x85bf, 0xcf9, 0x6, 0x6, 0xfffffff9, 0x1, 0x579, 0x8001, 0x8, 0x7, 0x7, 0x3ff, 0x1c00, 0x6, 0x1, 0xa00, 0xffffffff, 0x1, 0x900, 0xffffffff, 0x3, 0x8, 0xc9, 0x3, 0x6, 0x6, 0x9, 0xffffffcf, 0x9, 0x7, 0x7, 0x4, 0x32, 0x3, 0x6, 0x7, 0x0, 0x4, 0xa, 0x9, 0x2, 0x81, 0x6, 0x9, 0xa3, 0x4, 0xf, 0xffff, 0xf664, 0x9, 0x7ff, 0xfffffffb, 0x7, 0xab, 0x7, 0x9, 0x7, 0x3, 0x10, 0x5, 0x7, 0x7, 0x0, 0x2, 0x8000, 0x7, 0x9, 0x6, 0x64, 0x6c2, 0x8, 0xfffffffe, 0x5, 0x1, 0x5, 0xee, 0x3, 0x7f33, 0xbb, 0x1, 0x101, 0x5, 0x41, 0x4, 0x6, 0x6, 0x6, 0x8, 0x3, 0xf, 0x7, 0x480, 0x4, 0xbd, 0x789a, 0x6, 0x8, 0xddc4, 0x100, 0x3, 0x8001, 0x7, 0x3, 0xf, 0xfffffffd, 0x70000, 0x4, 0xd47, 0x5, 0x7, 0x3, 0x8, 0x2, 0xe00, 0xfffffff9, 0x2, 0x101, 0x9, 0x68e93b3a, 0x6604, 0x9, 0x8000, 0x8, 0x0, 0x3, 0x0, 0x3, 0x4, 0x28, 0x7ff, 0x2f4, 0x8, 0x80, 0x1, 0x8, 0x5554591, 0x3, 0x1, 0x200, 0x6, 0x38, 0x10, 0x6, 0x10000, 0x6, 0xffffffff, 0x7, 0x1, 0x5, 0x2, 0x1ff, 0x4, 0x0, 0x2, 0x3ff, 0x4, 0x8, 0x8, 0x40, 0x7, 0x4, 0x100, 0x8, 0x5, 0xfffff7bc, 0x9, 0x6, 0xffff8001, 0x7ff, 0x46aa, 0x4, 0x8, 0x2, 0x2, 0x9, 0x5, 0x1, 0x5, 0x3d19a34b, 0x5, 0x3, 0x5, 0x0, 0x8, 0x7, 0x4, 0x10001, 0x4, 0x3, 0x80, 0x6, 0x2, 0xe, 0x9, 0x8, 0x8, 0x6, 0xce8, 0x3d8, 0x100, 0x5d, 0xffffff20, 0x8000, 0x4, 0x5, 0x9, 0x5, 0xbbe, 0x9, 0x3], 0x5, 0x5}, {0x2000006, 0x0, 0x0, 0x1, 0x2}]}) 12m14.731689633s ago: executing program 2 (id=258): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x36) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r4, 0x9, 0x0, r4}) r5 = eventfd(0x0) r6 = dup3(0xffffffffffffffff, r5, 0x80000) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r5, 0x6, 0x2, r4}) socket(0x1, 0x6, 0x1a0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000280)=0xffffffef) setreuid(r7, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm-aes-ce)\x00'}, 0x58) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) mkdirat(0xffffffffffffff9c, 0x0, 0x128) 12m13.704094769s ago: executing program 2 (id=269): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x5e3b, 0x20, 0x2, 0x74}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) r4 = eventfd2(0x1, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r4, 0x1) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$fuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) rt_tgsigqueueinfo(r6, r6, 0xfffffffe, &(0x7f00000002c0)={0x33, 0xfffffff9, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r5, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 12m13.554296239s ago: executing program 2 (id=272): r0 = socket$inet6(0xa, 0x3, 0x76) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='1000000?', 0x8) r2 = socket$inet6(0xa, 0x2, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf251700000008000300", @ANYRES32=r5, @ANYBLOB="0a0006000802110000010000215f6c0def117c6e899cfd93ff7e0f77a3ace02360db9f7d662b9e2c3d551811226fc168dfc6214fb0ea9e6f0b09dc2a8f6886708d86b77ba62ad3e3ea69026a57f35be05e857bce532c338ffe774482e21233e6d3de7a8c43e5bfff7becbffbba361a14867099b4707009007ee332a68a5dff6e64db76a6f29b41a7c87b"], 0x28}, 0x1, 0x0, 0x0, 0x88050}, 0x20000000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x3, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x33}, 0x0, @in=@multicast1, 0x3502, 0x4}}, 0xe4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000300)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) close(r0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a4009b70000080003400000013014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file1'}}, {@xino_auto}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000280)={0x7, 0x80000001, 0x6, 0x5, 0x7, 0x0, 0x1}) chdir(&(0x7f00000003c0)='./bus\x00') socket$inet_udp(0x2, 0x2, 0x0) 12m13.154068547s ago: executing program 2 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 12m12.933290625s ago: executing program 2 (id=285): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_auth_payload_to={{0x9}, {0x5, 0xc9}}}}, 0x9) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x564) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000300)={0x3, 0xffffffffffffffff, 0x1}) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x59) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0xc020}, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r6 = eventfd2(0x8, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001000000080000800c000180080004"], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r6, 0x4}) splice(r1, &(0x7f0000000240)=0x62fb6f7e, r6, &(0x7f0000000280)=0x4, 0x7d, 0x8) close_range(r1, 0xffffffffffffffff, 0x200000000000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000041000100fcff07000400000001000000040048800c0001800800108004000580080002"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1f1b"], 0x22) r9 = signalfd4(r2, &(0x7f0000000340)={[0x0, 0xd82]}, 0x8, 0x100800) accept4$unix(r9, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80800) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r10, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) 12m12.824970883s ago: executing program 32 (id=285): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_auth_payload_to={{0x9}, {0x5, 0xc9}}}}, 0x9) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x564) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000300)={0x3, 0xffffffffffffffff, 0x1}) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x59) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0xc020}, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r6 = eventfd2(0x8, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001000000080000800c000180080004"], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r6, 0x4}) splice(r1, &(0x7f0000000240)=0x62fb6f7e, r6, &(0x7f0000000280)=0x4, 0x7d, 0x8) close_range(r1, 0xffffffffffffffff, 0x200000000000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000041000100fcff07000400000001000000040048800c0001800800108004000580080002"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1f1b"], 0x22) r9 = signalfd4(r2, &(0x7f0000000340)={[0x0, 0xd82]}, 0x8, 0x100800) accept4$unix(r9, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80800) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r10, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) 11m46.6922075s ago: executing program 3 (id=518): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x280020}, 0x1c, 0x0}}], 0x1, 0x20008050) sendmsg(0xffffffffffffffff, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x12) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r8, &(0x7f0000001380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@sndinfo={0x1c, 0x84, 0x2, {0x2, 0x41, 0xe8, 0x9}}], 0x1c, 0x8001}], 0x1, 0x40) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) listen(0xffffffffffffffff, 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081001000080049b4003800000000a3069078ac1414bbac1414aa070f09e00000027f00000100000000004e", @ANYRES32=0x41424344, @ANYRESOCT=r6, @ANYBLOB], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) 11m45.704224756s ago: executing program 3 (id=526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000002e00)={{0x8, 0x7, 0xa512, 0xfffdfffe, '\x00', 0x7b}, 0x0, [0x8, 0x1, 0x1000, 0x9, 0xb, 0x7fffffff, 0x6, 0x8, 0xbc0, 0x2007, 0x15b, 0x7, 0x5944, 0x5, 0x7, 0x8004a9, 0xd, 0x5, 0xb, 0x3, 0x2a, 0x400, 0x2000040, 0x10200000, 0x7, 0x0, 0x6, 0x804, 0x0, 0x3, 0x4, 0x6, 0x6, 0x7ff, 0x3ff, 0x1, 0x5, 0x3, 0xfffffeff, 0x6, 0x3, 0x0, 0xffff8007, 0x2000000e, 0xe, 0x0, 0x200002, 0x5, 0xe, 0x0, 0x9, 0x80010001, 0x400, 0x9, 0x40000009, 0xfffff647, 0xb3d, 0x4, 0x10, 0x9, 0x8, 0x9000, 0x5, 0x8, 0x98, 0xbe, 0x801, 0x1, 0x8, 0x3d, 0x1, 0xa, 0xfffffffe, 0x80000000, 0x69e, 0xb, 0x7004000, 0x0, 0x8, 0x8, 0x7, 0x9, 0x1, 0x3, 0xfffffffd, 0xffff, 0x6, 0x4, 0x100007ff, 0x4, 0xef, 0xff, 0x4, 0x3, 0x0, 0x58a0, 0xb, 0x19, 0x48895, 0x6, 0x7, 0x89, 0xfffffffe, 0xa1a9, 0xe0ae, 0x9, 0xfffff561, 0x12, 0x3, 0x3, 0xfffffffa, 0x8, 0x2, 0x1, 0xc3c, 0x1, 0x11, 0x5, 0x8, 0x2, 0xf2, 0x4, 0x621c6328, 0x7, 0xfffffffe, 0x7, 0x6, 0xff]}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200001000000d35d01"], 0x20) 11m45.08381763s ago: executing program 3 (id=534): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x280020}, 0x1c, 0x0}}], 0x1, 0x20008050) sendmsg(0xffffffffffffffff, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x12) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r8, &(0x7f0000001380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@sndinfo={0x1c, 0x84, 0x2, {0x2, 0x41, 0xe8, 0x9}}], 0x1c, 0x8001}], 0x1, 0x40) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) listen(0xffffffffffffffff, 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081001000080049b4003800000000a3069078ac1414bbac1414aa070f09e00000027f00000100000000004e", @ANYRES32=0x41424344, @ANYRESOCT=r6, @ANYBLOB], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) 11m44.01119801s ago: executing program 3 (id=543): r0 = socket$inet6(0xa, 0x3, 0x76) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='1000000?', 0x8) r2 = socket$inet6(0xa, 0x2, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf251700000008000300", @ANYRES32=r5, @ANYBLOB="0a0006000802110000010000215f6c0def117c6e899cfd93ff7e0f77a3ace02360db9f7d662b9e2c3d551811226fc168dfc6214fb0ea9e6f0b09dc2a8f6886708d86b77ba62ad3e3ea69026a57f35be05e857bce532c338ffe774482e21233e6d3de7a8c43e5bfff7becbffbba361a14867099b4707009007ee332a68a5dff6e64db76a6f29b41a7c87b"], 0x28}, 0x1, 0x0, 0x0, 0x88050}, 0x20000000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x3, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x33}, 0x0, @in=@multicast1, 0x3502, 0x4}}, 0xe4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000300)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) close(r0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a4009b70000080003400000013014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file1'}}, {@xino_auto}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000280)={0x7, 0x80000001, 0x6, 0x5, 0x7, 0x0, 0x1}) chdir(&(0x7f00000003c0)='./bus\x00') socket$inet_udp(0x2, 0x2, 0x0) 11m43.875310625s ago: executing program 3 (id=545): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.access\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)="36b29fe0a1d5a82bfcb8eb", 0xb) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000003240)=ANY=[@ANYBLOB="240000002300090425bd7000ffd3df250200000008000100ac1414bb08"], 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) 11m43.614477582s ago: executing program 3 (id=549): truncate(0x0, 0x7ffffffe) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x1, 0x2, 0x1, 0x800, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x2}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x48) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000040)='./file0\x00') bind$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 11m43.507481289s ago: executing program 33 (id=549): truncate(0x0, 0x7ffffffe) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x1, 0x2, 0x1, 0x800, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x2}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x48) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000040)='./file0\x00') bind$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 11m14.872337143s ago: executing program 1 (id=759): r0 = syz_ublk_setup_io_uring(0x397c, &(0x7f0000000500)={0x0, 0xb04, 0x800, 0x2, 0x159}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x30, 0x7fff0000}]}) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x3000)=nil) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r4, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) syz_open_procfs(0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240400c4}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2001, 0x0) read(r7, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{&(0x7f0000000240)=@in={0x2, 0x0, @multicast2}, 0x80, 0x0, 0x0, &(0x7f00000022c0)=""/170, 0xaa}, 0xffff8720}, {{&(0x7f0000002380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/229, 0xe5}, {&(0x7f0000003500)=""/7, 0x7}, {&(0x7f0000003540)=""/161, 0xa1}, {&(0x7f0000003600)=""/64, 0x40}, {0x0}, {&(0x7f00000036c0)=""/241, 0xf1}], 0x7, &(0x7f0000003800)=""/64, 0x40}, 0xffffff90}, {{0x0, 0x0, &(0x7f00000039c0)=[{0x0}, {&(0x7f0000003900)=""/158, 0x9e}], 0x2, &(0x7f0000003a00)=""/133, 0x85}, 0xcd6}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x1a5c}], 0x4, 0x12060, &(0x7f0000004f80)={0x0, 0x989680}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x7}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0xfffe, 0x5, @mcast2, 0x9}, 0x1c) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xffff, 0x8}, {0xfff1, 0xa}, {0x1, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xf, 0x2}]}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0xa}]}, {0x0, [0x2e, 0x0, 0x5f, 0x2e]}}, 0x0, 0x42, 0x0, 0x1, 0x7ea}, 0x28) 11m13.074031617s ago: executing program 1 (id=756): openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) getpeername$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000100)={0x3, 0x1000000}) io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 11m12.879758468s ago: executing program 1 (id=758): setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r0, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) sync() syz_emit_vhci(&(0x7f0000000c40)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x0, 0x2}, {0x5}}}}, 0xf) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendto$inet(r2, &(0x7f0000000280)="02", 0x1, 0x14, 0x0, 0x0) shutdown(r2, 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$AUDIT_GET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3e8, 0x400, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) splice(r2, 0x0, r4, 0x0, 0x7ffff000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 11m12.771604814s ago: executing program 1 (id=761): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x280020}, 0x1c, 0x0}}], 0x1, 0x20008050) sendmsg(0xffffffffffffffff, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x12) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2240}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x3}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000001380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@sndinfo={0x1c, 0x84, 0x2, {0x2, 0x41, 0xe8, 0x9}}], 0x1c, 0x8001}], 0x1, 0x40) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) listen(0xffffffffffffffff, 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081001000080049b4003800000000a3069078ac1414bbac1414aa070f09e00000027f00000100000000004e", @ANYRES32=0x41424344, @ANYRESOCT=r2, @ANYBLOB], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) 11m11.603570264s ago: executing program 1 (id=764): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x4, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) r3 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$DVD_WRITE_STRUCT(r3, 0x5390, &(0x7f0000000040)=@bca={0x3, 0xbc, "59e03b458d5cfb16fc6c37c29d22d6054fe5529e5179efdbd3ce1d3d92c3b8f4734e94f26fd962cd4fcaf9f0380272fd04e3fe012c5887cdd46d1d9930c7fc1d10d11f5fe1ef815768117063f9e6eb77a05ed90ebdb2aff8f6a337a9d290c85fcc146bf458c89bcc62f2fdc6d6bc312032000a6421c020dcbdb1665de6439d5b3abee82e9466fb5468d812b21c4e8c87d45faaf2cad6ced9283ae19660a9c7a7c0d3babf45d5586040ca0c085c6f1db8b5e5f41b15982ab3802ca62a"}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, 0x9, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002180), r6) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000021c0)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000004) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\b', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0500030090"], 0xe) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060102000000000000000000000000090002"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff01"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8080) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf250400000014000300fe88000000000000000000000000000114000200fe880000000000000000000000000101140006"], 0xc4}, 0x1, 0x0, 0x0, 0x40010}, 0x880) 11m11.492079842s ago: executing program 1 (id=765): syslog(0x2, &(0x7f0000000600)=""/25, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) syslog(0x2, &(0x7f0000000740)=""/158, 0x9e) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newlink={0xec, 0x10, 0xffffffffffffffff, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2021}, [@IFLA_VF_PORTS={0xc4, 0x18, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, ')-,\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xf0}, @IFLA_PORT_VF={0x8, 0x1, 0x7f}, @IFLA_PORT_PROFILE={0x6, 0x2, '\xff\xff'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x40}, @IFLA_PORT_PROFILE={0x6, 0x2, '\xff\xff'}, @IFLA_PORT_VF={0x8, 0x1, 0x8001}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c062230843e2e17b1c81cc33021cd540"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7833a2701784e2a6ad1bb77142f45c60"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xff}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "11487c4b96f23b040e6609a90735bbb6"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x3ff}]}]}, @IFLA_LINK={0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000480)={'security\x00', 0x3, [{}, {}, {}]}, 0x54) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000c2b900"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="020400100e000000000000000000000005000600000000000a00fffc00000000fe8000000000000000000000000000aa03000000000000000200010000000000ff03e90200000020050005003c0000000a004e20"], 0x70}}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f00000003c0)=@in6={0xa, 0xfffe, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x80, 0x0}, 0xe07e872404df6f4b) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd28, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) setuid(0xee00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000000040)=0x8001) r10 = getpgid(0x0) fcntl$setownex(r9, 0xf, &(0x7f0000000140)={0x1, r10}) 10m56.447772337s ago: executing program 34 (id=765): syslog(0x2, &(0x7f0000000600)=""/25, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) syslog(0x2, &(0x7f0000000740)=""/158, 0x9e) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newlink={0xec, 0x10, 0xffffffffffffffff, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2021}, [@IFLA_VF_PORTS={0xc4, 0x18, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, ')-,\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xf0}, @IFLA_PORT_VF={0x8, 0x1, 0x7f}, @IFLA_PORT_PROFILE={0x6, 0x2, '\xff\xff'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x40}, @IFLA_PORT_PROFILE={0x6, 0x2, '\xff\xff'}, @IFLA_PORT_VF={0x8, 0x1, 0x8001}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c062230843e2e17b1c81cc33021cd540"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7833a2701784e2a6ad1bb77142f45c60"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xff}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "11487c4b96f23b040e6609a90735bbb6"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x3ff}]}]}, @IFLA_LINK={0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000480)={'security\x00', 0x3, [{}, {}, {}]}, 0x54) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000c2b900"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="020400100e000000000000000000000005000600000000000a00fffc00000000fe8000000000000000000000000000aa03000000000000000200010000000000ff03e90200000020050005003c0000000a004e20"], 0x70}}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f00000003c0)=@in6={0xa, 0xfffe, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x80, 0x0}, 0xe07e872404df6f4b) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd28, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) setuid(0xee00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000000040)=0x8001) r10 = getpgid(0x0) fcntl$setownex(r9, 0xf, &(0x7f0000000140)={0x1, r10}) 7m58.73443937s ago: executing program 6 (id=2252): lsm_set_self_attr(0x0, &(0x7f0000000100)={0x6d, 0x8, 0x20}, 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) 7m58.67478614s ago: executing program 6 (id=2254): socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$ttyS3(0xffffff9c, 0x0, 0x208801, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000240)='openpromfs\x00', 0x2185048, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x68) write(r1, &(0x7f0000000200)='md0\n\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r2, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000010000000000000000000000000000000000000000000000000000000201000000000100") ioctl(r2, 0x40140921, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r3 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000900, 0x0, &(0x7f0000000440)) ioctl(r2, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006000000") ioctl(r2, 0x400c0930, &(0x7f0000000500)='\x00'/12) 7m57.61816154s ago: executing program 6 (id=2264): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./proc/1/root/var/run\x00', &(0x7f0000000140)={0x101000, 0x0, 0xa}, 0x18) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000040)=""/23) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x867db000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000520000/0x1000)=nil, 0x1000) userfaultfd(0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = open(&(0x7f0000000340)='./bus\x00', 0x14927e, 0x102) fallocate(r2, 0x0, 0x0, 0x1000f4) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000001c0)=0xa0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) 7m56.490753658s ago: executing program 6 (id=2270): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x29) write(r1, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) 7m56.106780682s ago: executing program 6 (id=2278): mkdir(&(0x7f00000002c0)='./file0\x00', 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xcc) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002100)=""/4096, 0x1000}], 0x1, 0x81, 0x14) (fail_nth: 3) 7m55.953325479s ago: executing program 6 (id=2279): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x9, 0x0, 0x7, 0x4, 0x9]}, &(0x7f0000000000)=0x54) mount(0x0, &(0x7f0000000540)='./proc/driver/rndis-000\x00', &(0x7f0000000180)='debugfs\x00', 0x922000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/driver/rndis-000\x00', 0x0, 0x0) read(r1, &(0x7f0000000400)=""/100, 0x64) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008080}, 0x18015) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x4000}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r6 = syz_usb_connect(0x4, 0x32, &(0x7f0000000140)=ANY=[@ANYRES64=r2], 0x0) syz_usb_ep_read(r6, 0x2, 0x28, &(0x7f0000000100)=""/8) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xa, 0x6, 0xa, 0x2, 0x0, 0x70bd28, 0x25dfdbfb}, 0x10}}, 0x4000000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r8, &(0x7f00000000c0)='1\x00', 0x2) 7m40.687029966s ago: executing program 35 (id=2279): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x9, 0x0, 0x7, 0x4, 0x9]}, &(0x7f0000000000)=0x54) mount(0x0, &(0x7f0000000540)='./proc/driver/rndis-000\x00', &(0x7f0000000180)='debugfs\x00', 0x922000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/driver/rndis-000\x00', 0x0, 0x0) read(r1, &(0x7f0000000400)=""/100, 0x64) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008080}, 0x18015) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x4000}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r6 = syz_usb_connect(0x4, 0x32, &(0x7f0000000140)=ANY=[@ANYRES64=r2], 0x0) syz_usb_ep_read(r6, 0x2, 0x28, &(0x7f0000000100)=""/8) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xa, 0x6, 0xa, 0x2, 0x0, 0x70bd28, 0x25dfdbfb}, 0x10}}, 0x4000000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r8, &(0x7f00000000c0)='1\x00', 0x2) 1m30.117412082s ago: executing program 0 (id=4771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) rt_sigsuspend(&(0x7f0000000080), 0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) fcntl$getflags(0xffffffffffffffff, 0xb) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1m29.215754546s ago: executing program 0 (id=4775): r0 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/rootcell\x00', 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112) write(r0, &(0x7f0000000200), 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) open(&(0x7f0000000140)='./file0\x00', 0x2a5c0, 0x113) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(r6, &(0x7f0000000580)=[{&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/95, 0x5f}], 0x2) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r8 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r8, &(0x7f0000000980), 0x2000022f) write$P9_RMKNOD(r8, 0x0, 0x0) syz_io_uring_setup(0x4038fa, &(0x7f0000000200)={0x0, 0x109943, 0x20, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) ppoll(&(0x7f0000000100)=[{r5, 0x80}], 0x1, 0x0, 0x0, 0x0) 1m28.283883359s ago: executing program 0 (id=4781): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x400000ac6) (async) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_setup(0x8, &(0x7f0000000600)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) (async) io_submit(r2, 0x11, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x8006, r1, 0x0, 0x0, 0xa9b}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f00000001c0)="9d6e605566f6348af1f0f0ebd7fea46168fa9f871981bd6b329265033f32e8d6ed3a53145fafb079a01afade1f850d809173fe77bd81ecf55eb9", 0x3a, 0x2, 0x0, 0x3, r3}]) shutdown(r0, 0x1) 1m27.510081766s ago: executing program 0 (id=4784): socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0, 0x0}, &(0x7f0000001380)=0xc) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0xae2e, 0xfd, 0x7, 0x800, 0x400, 0x3, 0xffff7fff}}) r4 = getgid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x0, &(0x7f0000001940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, r1, r2}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r4}}}], 0x80, 0x4000000}, 0x4800) setreuid(0x0, r1) read$FUSE(r0, &(0x7f000000a280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4c6}, 0x1c) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x3, 0x3, 0x0, 0x400000000000000, 0xfffffffd, 0x4, {0x2, 0x8, 0x0, 0x1, 0x10000, 0x0, 0x5, 0x0, 0x9, 0xc000, 0x0, r6, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x27, 0x0, 0x1001a, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f0000006280)="2538ffe2177ed9953a94e72d6f1122bfa202290214ef1ed0b586bca92b5071d9482b5d1f0919537b03645a8aba74bae6f7f9d3eb4c1b608b6e73b895a4e4b5b312650ba463b3815954fabdb6f98e0f3e67797c71d4da3dd44571e75ab21f0b05e24dfe2198577345f0e2c24afe261f8098655f279a89d023310faac811dc9a7c972cae275a4dc7d1a0e95fd8b690a5397eb6a5c38942b8c883b96feb07deef9500502b1671b18f9cdf96926b903c1f31216dd379473d42483a71f18253763ad48b4519b088b1ddd79ee5936d64ccf78680decd1937c51c1b01651a5128452d29152d76e1e84be42341fbf0bafb3bdd83476c12364fe4c4d79b9e37128f0950adcceacba16faa30a64a6bc1323e7f2a02d15aa4e1d44ab680bb1fe8e6881bef5427be38936efabb574ca9c5916dfc9d186d1ea3becac692066a6bac644f73a542ad5e81d7f321e8d02b54e1b208a2a0f18b81e2575eea09285198917f77b1ed1af1d32409a3765faa14141c2f6a929a64e9238c016a9485ede93daca6c9abed13158f761190c989e65f3f8d96f73211e9f650fe35d4ccd62ca18db24f75a3912b6a2a14fffeb4fa93f318465bc48c7a9b967f41f50b3a06298b1b7e43f1834b7072f42b629129a1a28f3d2f7964cef34a0ee916a82eb4bc3ffadb7600d2adb05ea315f52f725b962ed8f1f1f8addaf62f19edc40b9b51bcb457c2e70c395ac3ef2d0ed56d9d8317d5ab9dbc3dbaa242ee705bfbef1694005e7468e1c79f009ccdd7901a036477cbdc4e445f4e047bd0bf234030960c7de5fe1424b93953cb382ce959d9957bb56cdd93d0ae376702b4480292936ebbe7ee92f7a8f27f4912e1c5298a64fad637804403000000000000001d1bd639f9c2461430d0be4880dc6be38f4643951bbe0f895244c7661b8491e40de97ac22cf055f85a17d4317aade5244e02f561e955252b275e43abde85e1f9a5e79be9da3b883f04da73f97bd0915de894a0d94c7e7ff70c4d657c6a1003e3d5d11bc5eb614dd2b139064156fe4b8a76bc1171f6f5855c2959b42c9178e62f1449d97e722a231ae747dcf9d79d70f67f440436bd2aed9b4ae92e7848588be55d00881caae0cc51469c1f10b3f476ce338a0b84a1f36b9f4307d6469396871caca4aa52c88193cc416896879331a4e6ec9a2119e1f0a127f905deb575314f7f99fb8f29793f8d087ccbe23d40b7b08032cd340218eb8d39feb9da31ff7314b21fce6b38458db83c63a5204f1c7fee984d55af4533b41992bef5612b451ef4d90233040e5cadc479f4fea817d9c0c73f438ec06de414c0804d3bcaddd31a9f70a63159534cf27e77c3b8ddbb5ccb9fd3cdcaf03f5f39e69d54210ade8b16347b8075960b6dd26c6834b8f42f28582419724be3ac8e7448ac113fd0fe7367e841db75f2e53dcc2126eadba92ad022a351592848d7326dbd16322da3a18652380676c0390f70c35479b7c82d1ffb94c9fdd9886219464c835b8f761684dfa63f85b74a333a385d33657bb908a8f444f42a32a2d41cad5faf6bbe336144618a60bdd4b1a5bd6a9da4f8e9e111180f39207c8e6f682dac911539a539089de083a521db2ebd4a96194902a1df8079329c41ec433ad1d0b011690781c2f324caec3f11d87eebbbc219b32eb7782fb5f77d4ade32dbc87fc3c88b584aa3360f1a8d09c9d2d6fc7c55d3a7b82840bb13efb5dfc9fb0a2b308bcd363bb18ab96e55cd5bbdefa303e901a54e166e136a8abaf7fac3c1c30ab1c97d5bbeacfc1e10b4ba3d3102ed0e109ce36da2c4e6704aac598c3744d0d6db3b63f749852e8788afb21c4938f4112313bbadc2f1a6271e7118af219b179a868eefbb60c71c45982fff779fcff54d4d7b941e349596b76c832a31b541c8bc292fbeba5cbf30e69920db7309730b204747d07996b39a2d38e1d281df02d8e762e85838efe2185959719b1e7e7c168c130e78e35bd5c549bb925651d9abe7b25e3e02b88d0977261410b9b9ee90ee8c9a5144ddab6f184987556ed22cacfa97ccab6440ad34962da5e646fde4d9c20441bf50d008232ce077c7ca0e3b9706d91567e30da5710371bb870468ff97674270bd44099ae1d1d9d5ee4366a9129ee8379e1b380c0cd03eafa9afd0fcf7c6d1665f8df750bd5513f8d17bf980bfc35af3245d63bade8ec344654bca32689d2423ceb9dbbb0163eae3544f86e9132933705df95801e3fb84b234a5932f9631220759fb57ef19bb4c6ef05418eaeab2a1dcc2c340307465942bd46c6c0c2b34aef9f651e5a538695ab7bcc42ccc31bce353b404e7acc4563cb38a1ad8f7a03ce858263cd1efb80f3754ee3b98f806df30d35f91d473d2ec4a2861d1db0824de21eabc7167344712201a5905e3eb90650b39f901af9cded15cab12b62ca7de51b70269505c2a8e45af3dde07c28b5342efb1d3d48976412bcac1fa6cecea695451702fb1e5ae85f27da357c9f0ab396837f381264b8b5dd5f5a3c12d553f27fd5aab50514aef843b85362df38d02d8bf45952feae541f3f3652e86da44cb57bc3fb0c7cc168cfa99a2b3f94515c63c94ceaff005f48c45bad140b1af0d758d17133516ab10c7154d863eaa2f6954f3a0e3eb85b4b904ec37cc00282e851bd7f9c23dbf2f650516e4b0408561a3b0dd020fe95dee9a6ad4bff10a69d80e65c143dff60f61c6d852eb74adcb3a3b730e3ac27647e19d980cfea7675365da68ed542dab677ec56a098959cd5392871dd1e00851a877ce26642eab40f5cd0e56f7b1ac520a729863360b0a3e7d93962f7fc6b39f5aa2403e42e89f21d9fd853fa2df56fd2ab6305f3b8be75c174b4697d21bb38f72e83fef26ab068d5c10b7819ac50389375fd2bba3a65c4b12945a0139bfca050f90ff7e86b2e06c7c2bd867c5dc0105e6fff2086ed46a2cf89516dbd231d2a793d471888f6c5529b76144ac2d7f058bf4fa9fd55d1f8fbf8418581f14754eb1504eb81c9754fd2fee7a2b611bc50742787c05775900309e7b22ae45de32ede79b23ea4394da29158c4f930c4e0125dea338a99ccdbea3455aefc1218ff5b43cf06863a9d3d79ea9535f69d1a530421c729fd1b654586c98bb6c50c51a8e30ef6fa8ae39cf9eb42e39bf9fb2517fdafea38d1c078fbfe56705229a4013da056156f11f5cb972bf9558568a366b681ed9dc2c92f84d7a3c8d5c72f58c1ed2b3b58eff2a024c85b4482df3546a76f4066f01d91c860146c660923ffc48e7a5fffc8be7fbb08c00526e023f3c3853f1c134566bba8ec335f0bf743fb62ba9b48ed5da7076343438956599e47f803023a101597982f67a0c0facf2a80d7e15657287b23f85fcaa53c351edd957801d6e219e039a3e3d581c8a2a237b7d0320605b362c5ebef86bbe2eb679bfee06021ee3b4b3b1b0e4dd368d235aa115d0a01cb115e398c4ef569ffe55f567654e39a22acae8002f78f75a1648d9bdb45d71881cc7d02ba3bdee215895c6418728bfddccf01fd5adc51e80df398fdd6f7cb4616937ec3df8f0c781ca4e4014885b83f2d114c21dca72482e208bcf93ca98712ede65bb79c49ff6f5e190f336dae2e04b7e1a335469338ba55307dbb411254b7e45afe6cf0081b4ac87bb2da196f3f993f8096f234a32bc963ed002996ebbff07911cd796aafd766257cabcfa7e590b00b1b98b0ad0b1bf1b95adb0df7c519be3b314ea9868a9a2819a6cbdaa29a84418efaae784fa28a3079fd6e648db903fe874302f0319c4f039890655fbe242e0226642361f672dcdd6eb274b8f9bc037d4c57688253a4051326045859f4d434fa6a8a510836e220fe65f826d4e8779c487537b18a11dc6ccf48904c3041ecf2278cb9444d6a3fdbe1ebfd4b77586665bacc467130919419f48956b8923eabe7ed93f0d7096d9c5af6ac7253e01351751372fc17d26c79d49e6d874ea396470c9b34a51048c3019f7628d9dfd43fcf470103bedc2e28e38d240d38dc67a6762a5257ce83c03d6904099148ddec7e1a9cdfef54efb8e7f03a57c2c97278cd0da231de06d48698ef777b3efb33cb2869d2bbeb540b8b60c1d367364c2a1044af245a252b4ee061f69ef68e12dacb9f2104e43147a91e3358728f676a21522802e81001ccb9cea91dcfae0f8fd450c278cf76ef740b2ac539b66623b840ccb0fcbe4d9d61fef0b1bb44d60df53ed931d63a8c22d5ae595801976d2384d5cc4cea4e8e526571657de75e3571ead7f40083f307daff8f303cf0ebcecd53893a67b89843e607819c4eef6782d6cf00c9ff38ada30ef23a534853065adc0bc8da3506fb97c0118c2ac9fbef85f2fb1319f96d6f9e57b1b7ca84a1e3a50f854de846cbbd23c005ac270a7adb8b17a636a36f71bc40f5d692634f49d110be854a16622649c9e13b76cc500c732c607fb2af125410802839ce70d0885ed5944e3ea169466e9a9d9e99421e998c28a7a3f77b22a96718b513984ee87d31677230fce43adeba4464d839ddb15f21e67c7783b84de8035131df36146e7073f51abb5f8c465338ca927834a835d13b7fb10eb64881cabae97edc0b757b5bd36e7cd9dfd173b627c976d14dfe0bd242115a81f9537550e8c5d16565a2f1bceae6d5d74a86283e86196c0e5185a309ce4a71421c82e66b35e4ab5e99d53043f29d873f18f5ae2433182d5ffa713579516c4302d0b141d15f60df71ab9e0736cb38163f2b6506eb94fc47ac0f120a6083df924b0c965ebc76796a41463dbb246f64e1c048654f476f5041ccdff00faa408d8302656d77d749ccc6090de33634aae0a3af2348f61eff552538828172600e87bf64126e60b057624979ccb2359bbd9961741bade15cfbcee738d3d5a7ec86d2a0402d6afec7aea999548121cdfbb6e4afeee050b5e029d1680655df03e5fbb2f05e7677e6191f242e9df3957a094861bbeb1f0ae7b624d004cdbc7d7c1a42618157957f02789a69111fef71567e61a98b7be421666d70fa928b340eb0c16afa76ba381d0ef7a5759d772916bf596ff202c20edd7fa4b8c3469a4f5b90851a0092b6084adbe8b065eddbb94272dcd674f118cf2d9b906fb1d640e72985557c3d22ee333be8f9f37febc6dc3c02e62f51332b85645ee6f05c80fbed851d22a74623e29a379dfcfa6e427c10285306052c895bdc9a74636f09ee5233d7df25ba9ddbb6c92cb665ad5706dd03073366051e0cfd5c693a2dd41777f590c72d0126d54f98178b2fad9df19579ac231f890d4557fa568f9148919fd51010e13e41181764529e02a4c660520b3687265762cb8ff12f0fdfbe44b3acb2c7e0023f0631e015b35631a45eced9e3ad0ca4faad71c4a27e3bc04dccccff314afda0d07854de111f24221969cea2c9c8afa28f34b685a5c6367e6037c237fdc22f6ef7fac920f0b90a90982a8e27af521fcaa763f396da62977c0103a237373bd9b524c4ee20f6fa7c447e746631173be3d8e6704c42146d745b6a7f136f7e3d4c7f45d130a0934fae7bdf94cbabab1ac11dd91fb03e754ce8486bd10527ce4ced5591a472582f6a0d2e7bc3c43e8b99e03b1e9a5dd0dcf71bc0184b51f4f315ff0d77c735a7590993ab15a0974e68be335bfb9c660895880d66d28efddfbe7569abdd60168047bd57de56db0567a8e2f35715d921bbb697ab8421941b959a9db8098665ea7ae4139d709005b6fd168f8a15adfcafa3543151479ea01da612c772a48171802204cfd93a97fc665653c27ccb9c875d04cd016fda02334b36b91f97b3987af7b6d42c3e1c978f6bf0d5f1679968305c850c0fc3f246cd0a92e56bdf8bd4f9d574ee7fd199f4ab6cb34716ad2033966e69aceb1bd2b1ff6ef8cc5b4aa4aa417ab2fc4c7a83531fe4a0d697540bd8b5c33362a22d1e1088681245fa7651a2f31042f47d97c4211c36f2f3779f603278196370fe9798bedb75aa8f62b375908ac770cf002304ca0bbb3dcbdf41f1f3971868c2ee7df292160d283a4643407ea2d299fb3fcf9b63cced305bde9dbca1e28cafdc2457dc31c5d4f3b9dcbac27cd0670d727fb451f9deeb2262ad94fb6f9b73f778407cc79e642d2ee2b746a726d4c1ef4b7bbc70e53c91a32fbeea923d9eb6e81c6b4f6a83398c4b6664a3ab0cb4aec1575b0414a07285466d3045ff16540ae8d5e40bfc514b3c2eb8b60396afaa207238624178411596ee3fe200ca3956be77e32a301f66b1aa9e0e44c78d9898748f78c10d253c709228c17bfdc9e950c7108932caeabb1557e272f6064bf6a1d6c3fc6d32b5489ea0077455c51dc59699eab59bf998c7d3436e3edd3cb4251099105ded33061d151c9cd6734b99e5dcdcdbee436b9d73dd7b297b185e97c32447bbb8615a4d876dc1a8330b642c503ed157d6e3782b7c78f4ab8d39343f61143aac19d952c39005f4508daa07d95ccaa133f49e4fccad4bc3ee3861ab1cb29532dd011beb926825b285dd260342438cdd577748e28f0fd31c5018895ac7f2541f0ea5743996459891252e69bbc9743e70555902ef25a8bc082fe42539dc6500deeefc63549c02184852ae32dbb1834f4d84a399b9e0285ecba9a5b296923bb978b337cc54d81bcd07fe607b006414f59d3180e8ab1f5877a74b48592f9644d117ab4cb74f627a27062dd3da9f7e8c5326e2c3b06f79824331956343e1aa079b0b885a8725ee3434869a84ebfd605a838a35fb79bfe4f58c0dd8f81127e5db509fd92868c6bebd588e41c0cf14374d9667aa5dd58f6ac5ef7007a2b95d071f7081d5d56eb79937a37be8231c9966a77a87ab9aa17201af15a083c3311f9854244b7034279309d858798fcd8a53aeb3cb0df5bb7f0e8da8654deccc206681e52616d88736e4465bed13682eb6460caa7ef3fb32fd406b6c1a8c5b01e92c3899eb3be2d50d64d8f493ee7acd89109967e8f8473f792ae3002f373b09f4e9f286453e88f0501a9f1cca01eb689054d420f2a1952e8736e811a8087e5314261d18b3c6f49c94fd4b91edce047b8e5835ea4fc9ed8f48b3a0ada645cee3e7713f18acc56f551538a09f19217187641e1ab0b612fea29aa68cafeec294df4c6995f8cf130307089eec6597b4df44f5eb0146a271190be3538284054b0147c70b1ad9245a5417809ad80965f6f45d67c7229da95b3761cef78f6c8b01aac55fc0ce87409ae588ddb79f26bbb286f70ecb0575310029b39fc506e74371e4981c1226d2fb86c66715bc85eb7a1d80e8204cc6c0c67dfdcc0f5250cf409890a152f5a720e52b0dd485c0e061507b09f509b289034b1f308114ca0214c88216ec7895c33e9ac5f9531b0b9318b2b514511d372d8f63aca5c1d2ef1a72291a2a64c35847283ff14709582d7c70a2cd36e81edd9a4b89191ff77bbaa607aa0da229b55acd36b93eb650d3d4c5b8f5f8e3f1bf98f48e662178f90ef5510f5ac2d7241df6406009794acb0762c259a7dd330fdfa07e9b9600a3fbb227f7641cd2fd28648c3fe25e5dbdd04b45cda8da231eebd745976e00172e14870a1d1b4b0b5a483f01decda921b5ce97bd3bb3f3158686b2c02b520186966f38c2bd1b3484baa81ee4a656050a28827a5e726f658542b3bc436fbd3aa5d49be68072756b71c03a45375c37429c535c739899f43b38bbad4ac99d21a880c5af5687600611e43e4b14a206bd4ebb5368142e926a9e484fa13017499e4c90816861a8b40866af8134c7af1c53a63c33dcb6293b07858148e0bac002c62c3b344459c38996fd0ddf1004477785876bee1d5c54bf39e624cb2b4a5ec2a63f006e3f8bc6e4e4e02102d8dba21f39bcff21c913ae121b11463b6778f2274c760ea7c1f1ef846a6226304735fcb922528a9d48e8fdb9e522115e8b80aa767fac4bdcf693fbf363ee9907065d165e44336f6c334d3799364cbc82ce565a0284d0a7d44075245d2a7687f4c2e058c8ea65149d9efe252844d003d9a083103b58d72e061bd5fc2287ba66dd19bec72c84179ecd5536be99e86c5fcf280177c5059289fe1253f30514f5d5fe0b7e0940edbc9e199366e5ae2bc898db3d161a1737bd686ef32d2b05e5ec82e06bb366fa351502f79724e7842e25e797b1719e6fe2d193f8333f06e87b902622abd651e0e7e12a0fba053a34da020702d8c29d4ab2a4c7fd02e76e7977bc0d0133b11d8d5d6c3863893b1edfa6a9f4821000092182e652c104b82e103b353bbafecfc01a574dbd180fef6e502737990e4f14d048424b727219038f0553f2d44b03e64de13fbe629cb0db59a4f95cc29ac69f4194c465bc687b38ae36f40923e0a0c4a02e7c0e2b62dbb3377e04f7b997d4736ee45eeb19004fb6f5894527dd3c4e2cc30289a684fe515193a4fcbad942b45f56352c9b35b3446f53d9d4e3c6a80e39d0357e37485895df9fa6f83a8c5ca0cb995b526452fd52561400e2a07330ea21bc702c41d5fae951af9a6b7b2f369cbf132434eaf9aeee17a76cef9fe621ece8ddd5b27f24e07bdbc90b13a44bc37d6573739978a6d95641754056be4042178ac95a996df820013189c917c00bae415b0aabd9fdeda0c521ef2736473b3949cf2c5cd7bf1a3f772de325a5bc7e1c65bec2964692720161c369055d3506a912968c55cfbe398fde6db2c8eb78be0f9552b8f420301c921877b04e952a5fab6668be8b51b397757c194ac9483a348b6992ebeca48aa5ed54cb37a1e03b37f0cdc12c9146d98851f93d70dabb667658bce8a332aec5738b824d55078395c1df9fcaad9a789c0779007c088a26817684fe583c6506160b88ddba3cba2d802f4f4d099483c066f1e1fb778e58d0e68a13c40a5d05574a47e1d0d5742744d24838f563dba73bc3a85ed59ca18fd94f6f1e3354bde3684c7d47446ee0edf0f992474176a6513027824a304bff9108ef998d5831a2010801dcfb4d3c376fa59aa06761a8454fc0dce584c5bcb61d4d2deeecaad82f0f3e6bb75d6e7e165eb5cbef19f2b79fba8760923c06ac0843075437ef6bbfe14efa97ab3c774ce73a84f879f1c0a2e0166058a3a5cd375757e889ac7fbb7f9a3161b4749c3d9a2975fe83f5334b29bd433a61a2b5dcc32b6ed979498715ae096edcb94b91458832c4cd8fa18a4f0ad9d2e111623456dbe25e645620887ee16f620024f472a1aeb2fc934a621749ae86b8732178e74c153831a1d71803b2abfde37ed97731a8e100c380be12c840870ce6bbec489943748a70d21e24fc884b9908426186ecbe296686739fe77d48138a3c1ab0950316d415e9188d464312eac208b58324d4a0545cd2417c2073bf14b1ce42edfcb64cecd6a2dac4d14d2684dc7a2aca7bc3ac6d19a5bd235fdbd588bdd18e535c232927793a03019f6c7f663b39232e49f87d8bfc5f0157a65f6a350a7aacf2b7ac7e0105fefa90a6bb5ccb5eba045df968c7bc5e8daf23c2e63ed7dc61f08be3ebca10cfdf327ca05ae21dcff3d5bc63147945c87893d0125c1d91f3d91d06492a0f18412e4d8b9f46ecf7fefa130da38abc171a8778c3f196e12d6cc12597aa608bfc780b36d7c5cbba359b3b33291eddb273b7186ce9d7e5c4ef3d34bcf73b607f19bbcc29f716dfb0e3c9bbbc3f67cae6a87c0e0693fdc4c735e6119459ea8768b6b39d17ea24e5d584789042264972cd438e336947dc934ca76e826fb775105c3ebd3db8db9ff48e0c2a09189adfcd9bc1041b75230dc6a0f22c084dc31951605dfcf2e51c319320936c162dfb9a90921a057a23a558d0d325b77b50a5788a446d2cf54eaad50e810c46127c79fe04e8a560bb899af80863a20b1f96e9d2bf158dd99bbb9e107dce6de70acdb7d94269e07f859b2186931281c8476467e879b08198dfdcdbcf8e1bfed0fe60b842c066e642d616c78d5fe9cd0e6f42b6a370b2037f03111533ad168b6ede759a33d80ab572668f2c0b10f57778c59ce5defba0dde29081a660ed83de5e19fe088880e8b1ee795bdb7155da9ab6badd1e63cea6d906d054371c6ca636a7e63688cc8c361bb356d77a017e845c3cfbc1cb1d8587f585301a814b9f3f4a9add6be6f91df16cf23debdb93d08b9af2d5e5512413321631e639aa1f861249fa7e79c4afc78ad6d46082dc8989a6bacf86d6b30eb164a7f32df779f86bbba52e7cfe858a18de913f7e716f2e841342da98f069203af1bf484b805ad82e8d302c25da12bd8f2c3f2386cf0b69e5f67c4f755e29eb0269e31a82872a9e05f94dbaeb75ae605605bcd0aa37832b29b316798de11864b0c17cd53d66cd72da1b388712bd4c1f7b3d10811e26d40b7284e2ed5f5a59760de8da84b4d33f86ed3eb56b4e720ffa583179568660a4028e8f87a77b10372297a939e02c04eb125e5dd984c9b870991fe5b1507f9455de0d9a12f7cd8de0f95888ae16fa2ead45bba41f977014e0a8d0094f0df219e267007e7c7f47d497576837bd292c34f2ab54c44556af055d2c1acbbe14487a377ee6cbf85b9ec8544c088e4e63ec5ab7b26f0e2f5b11bd1025cbf4e2eb5c65c40d45132a379e247395e6479bdef84a1153ac903d5be323c036bc0c05dacd7e8e218910b94869e8f3641ddd19220892f09e9a8962926d70f8ba7d1c7f5d4e27dffb613bb0c91b90ee38b4b322b21f451c81bc360928e607df2d4d5632286ed86ec5e67c16581dfc900b24f906ac3cac3741d9d07bedbb07339bdfee68502fe669c2997ef6fcdfb65a79bad9da59335220322e8d6076083362f7997dec0006e3823b0c2b6c38d7806bf15b1354b46194d7f2e488f8e16d57b1b8f41dfb04a62629be4b231cd52455f3dc49bdebdf9fa87acffadedc867d506d28402a26368507a65885ef8b0023bd692bc2e3c28e788f8694151d63de921794e0822441953b665c2636bb3b1b1cdcdaa5bdc18a12f5edb1534c8fae0793851d91974349c9bac3edf1df378303314457e378c23dec04778e1433c31b27b23e98cafef4b189a4d52c8a455558f969107faa1f250f9d54b8104bb7165a2dc7912af71755f291238e639094ff0092295f281a1f0cae8da8c9b08d4326a84c3220ba1f27542c8d7b48162d48562fe14be4f23605c308eae74a746fbbe729e2628e16a07f67aa7480b67d59f534f6ee57209813c906431976c4665c4644a27ef6239fe73e6ba472eb35a05a87c776584bb6ddbfa1cea2bfe7d5ad16ed009e5b5724404c1dc304624043ab095f728647a6a472f4c18a0a423b602a04a65f7454b8a456890184344222ce5d942e3805216c7300ed69204b3bb3d8bc07ca4642bb3ffd85aaaefcdf7c3ce854c1d1c8fef5dc3adc85c9447c75febd7f32b6249e32189e6062af26e686563be664d02c2ea9e0168aa1493d58add45c878b8864a06ab689464baf02006c0328c5556ed14df8523b37014ea324faeb44e20030d24af3b5e985e41614d77bfc36eb39ae0c6f02252594d7ec408625207be6a0a6aaf88d52449f6f5285104702b745d59b7ca0458350b6db63a219c9c99d48298ffe6ddce6364de579fb2eb1f1d58a5cd86cacc07b862ec4e03507e12f12878a3af3b5316f8f52bdae0a2ec29651a84685e40d6e01a1adfb15e81c47c46075d", 0x2000, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0xf, 0x1, 0x200, 0xfffffffd, 0x0, 0x0, 0xa000, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x17c, r8, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xfffd}, @NL80211_ATTR_IE={0x35, 0x2a, [@prep={0x83, 0x1f, {{}, 0x4, 0x1, @broadcast, 0x3, @void, 0x5, 0x6, @device_b, 0x4}}, @gcr_ga={0xbd, 0x6, @broadcast}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x10, 0x4}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x101, 0x2a, [@erp={0x2a, 0x1}, @measure_req={0x26, 0xc8, {0x5, 0x0, 0x8, "a45050d96c3ae757b80e5944160b80096ec2ddada88d7d61ad0434a4c6378ad4588ec7a618ea679d469ff46d0f1958ed5128c0458e7213f852ea29cee5b2f0a96235e3c700f632d8ce42f460dbf64323e411989572c960788048e8b9f4c37ea1e94a5afa07fc0c4d83cf3acaedf8ea003d17fbb7f6fab25a4cc1441c53c576a7d518687158c5d93309a0f379df57cf0b657c31f04a8ce8b1e24e630c429bc9d9fa862d9054a37210ba081d8aadf12db47c39e4279d5c16f7e57caed705f815694a7a986458"}}, @mic={0x8c, 0x10, {0x2ea, "0ebbe9b0fb9f", @short="7031bedd85656295"}}, @ssid={0x0, 0x16, @random="d06931e0d45c1fae34a57fde6e380f2d4b0f3b7b358a"}, @chsw_timing={0x68, 0x4, {0x0, 0x1}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfff1}]}, 0x17c}, 0x1, 0x0, 0x0, 0x180}, 0x69fe1d9cff6feea3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) unshare(0xe020400) msgget$private(0x0, 0x351) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000500)={0x0, 0xc, 0x0, 0x2000000}, 0x10}, 0x94) 1m26.599325644s ago: executing program 0 (id=4791): r0 = gettid() r1 = gettid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c4}, 0x40000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000002c0)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c016}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000057c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000005ac0)={&(0x7f0000005800)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0x880) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) close(r7) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000009b80)=ANY=[@ANYBLOB="180000005600091082040000000000000700000001"], 0x18}], 0x1}, 0x0) ioctl$BLKDISCARD(r6, 0x1277, &(0x7f0000000000)) statx(r6, &(0x7f00000004c0)='./dev/sda\x00', 0x1000, 0x200, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='./dev/sda\x00', &(0x7f0000000480), 0x102000, &(0x7f00000006c0)=ANY=[@ANYBLOB="7472616e733da5ad69782c6d6d6e652c61010100003078303030303030303076463030303030c307b9183174dae7925d2a433d382c6e6f650d74656e642c6163636573733d636c69656e742c69676e6f726571762c69676e64726571762c6163636573733d616e792c666f776e65723e00"/123, @ANYRESDEC=r9, @ANYBLOB=',subj_user=broadcast-link\x00,appraise_type=imasig,defcontext=system_u,subj_user=\',dont_measure,\x00']) syz_pidfd_open(r0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sndpcmp(&(0x7f0000000180), 0x6, 0x4a8c40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r10, 0x0, 0xe, 0x0, &(0x7f0000000280)="54ae1f8219560625baa794a469ce", 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0x4c) 1m26.318857415s ago: executing program 0 (id=4793): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r1, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 1m26.157578669s ago: executing program 36 (id=4793): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r1, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 1m11.680381227s ago: executing program 4 (id=4837): socket$igmp(0x2, 0x3, 0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x30) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f00000001c0)=[{0x5, 0x4, 0x4}]}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0xb7d7a47922df7c14, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x10000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) fgetxattr(r6, &(0x7f0000000000)=@random={'osx.', '\xbb\xbb\xbb\xbb\xbb\xbb'}, &(0x7f0000000080)=""/175, 0xaf) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket(0x10, 0x803, 0x0) 1m10.615471339s ago: executing program 4 (id=4842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x14800, 0x20) write(r2, &(0x7f0000000180)='1', 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x43) write(r3, &(0x7f0000000200)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) ioctl$UBLK_U_IO_FETCH_REQ(0xffffffffffffffff, 0xc0107520, &(0x7f00000012c0)={0x4, 0x3ff, 0x0, &(0x7f00000002c0)=@buf_1k="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"}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f00000001c0)={"568139cb5050a7a31ebfc4330c2bf68f86101d9a301cbe14b15f4f23031ceb319db01a783479d6b9a1201fb1cc7235f57f425131b1d59b14c7588e103ad23d61fc6b05b60536a1611da4d3a6a06d308650343e59d307e34d8c2ec3ef05629a47f994dd2e9f8b9ce05b338ae7db5267bc4082bd43ca93b78947a7c79e82df466d4fee2b222f1ebde976d2272a4f52329796330ee917cc4f5b3ec45ac1ecdaaf3dffe03c40b7c209e44cfeb08aad00e1b48da4289228d7d82d4f6a661942ace64f115d3cc6ac80f74420c390d89e7ab2133567aa41047d775e333184cc0b468ec5eb9bc3cb0fa00516e5452bf32a9e760f07efd5a5e5eb37eaff28ef92bb59498369808bdd310a4a95a5414a8ff450411ff67d3167eec8372455a19c0c5a608adfebded6974660fd85308a07860e16f62963da37448d6e1218f2092fb3d1662804623b63a07f3e5e881df9a5ac27ce3f1519003118aa6170ff423eb292dc70147bde37963f72d0642660e7107753167886fc10e108631a9ea4d6752145b8646187ba7e152b6bcbcedd6b83fb9435d5c8e8d5d25a3f173745eab94a4a296572d459a50d622c8769dc57a7cdf7efe9f259dc36f538d1836362f1bcb2c4ebceae7e3655d5e98ba481906f284bd03710005994eca8cbf8302dc8e2c21736b697b5f868e8af96fa8bbb1ae56571616a70ce05970d1e4142f303f7586fd2fc6f0ee3dce1db6524dd6aa28faab046e074df38430a49e8a6dde71028f16539744b7867e19c856e670e8b799d52da435bb07beea683a52e4d13602e7d4675a798a12c898ad5b00caa34313ff8fb6c3407cf815eca9795cffd9a24959653cc816851048ebf0772bebdd3ff9b8cfbd2c65c30e41586b00a14943e4815361789158139d440c4f627edb8ed59e1ca0bb0c60106e09635fa9335677337c554db885f75b8f9fffffff1ea9796f8258de36636346ab768856bbdfc51843a53701423d75c1f43be24469aa03d366bbfb81218b31e5c0ad716efea52175c2fa78317cafb16ee173eb5e9428509ca4c8f9bf798adc7da1758a9c0334e44200c0578495ff805fce84456205caa70f0976a8603f84cb542d0df1416602321c587556785af525ddf5548b4f51113c52a7a17042faf6c8c02d8d1835e0f67f60ab392c20fc12188db029e45bb77cfccc423671d52ec5a92d08c2bb27a676b66f3b89ac084d99e3f516426a015268a1f3fb91b13c8baba49a0765a305c13cd1f47b3ea7a6393182759b614a08d36192a8b68abef6e5c16849452c74af3a9f854e1f2bc1c2eac2f055f8ffd8fdaa6bb04a68850c585f433c0e6b8dba1401fce5aab11d75d2323d8079891175096e31013ca0a3763511c86f2fbc31a33458c52059ebe253dcd3e837fed39765a11842028df450479dd56e1325cd8d088ff12a8f7dd23f200"}) sendmmsg(r0, &(0x7f0000004540)=[{{&(0x7f0000001380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @remote}, 0x4, 0x2, 0x1, 0x4}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001400)="33691ab3ccb4984c340e7d01aa52f2a11d49d4e2fccff5db7a06f820aef1213f1719357841a74d08da8acdec528f7c92eb8623a8d87453e936cc74a4ee71e6b5576dfad0a26bb268830700b4785048455434db2399b800bbf1535839df8b57abad392d25e741e5be2055bd287fc367d55e65e2e051b172fac3fda4594556ab9ae0046117614f2281b55a55", 0x8b}, {&(0x7f00000014c0)="96e4333808fcd8ef43345ec90d2a46ecd5d3f8127cbccf41c7df3d0d4dd0195a7cdaa01fdc60bb16d94ff95c70676bdebc5778dfd321c5b9abfbdd2f3edd0bde24dc6c25d78028483ecf37635597f70bdc2c396bd4aaf4fe1447517111e3880346cfdf473240def0972b2ff22743aa5d89254fec7c0495bee49ff8df534c0062cb5bb1f6020746b4f02cd26261227473e49adc", 0x93}, {&(0x7f0000001580)="ecda7b1001bcfb33a51ceeb3a29caf1d744f7ce28b7e0bc14f6732d59f2b6d6e4b2bace03e2bdd60b4e5dc5dbe4d4902be93f5911344a673dd07b4247eb2e0ac06afadb56d439d066c8358bb0f5bbe3cdada76fbf5dd1e5ffd2369fa8a1990f491670dda4b60a811f679dfde3aced50e26bee82c", 0x74}, {&(0x7f0000001600)="6159cfbf562f12e506f49331c751711bbf9e86630c3a655d5d77a443cae7ee72ee4764537ef8e7ccf10fb9ac6cb693b63d4fc7aa033162db90", 0x39}, {&(0x7f0000001640)="c972e1869842324a1b77b2f61c18c5b481", 0x11}, {&(0x7f0000001680)="ff99f5e4dfd2ba2c3f67e61965dc17075a2f8741f6a2d32cd12a559c1e0fefa0132b3472bcb5e948d19bd9a4118598d54f16a978487a0fc81e6f1483a3fe9dbf249a58638843df7f4aca6f62244c2390292a0ac45a4da8e2bd8ec1ed37960da1b583ec21c850582e2c9f66df269e9b582ffcd1700fc7d90016b757e02a9f914651c5cfa9d16e5294dd7bfb8a28bb66634bf78ec36fd444d3ffe327e25186c2ca70ef79b55580aec16869e55144a6c0049683dd2f364c349e7879d9276b34faa7b2b1a214148b0a357ebff54e221ba9aafa4af63210", 0xd5}, {&(0x7f0000001780)="459f5d62641fa517f2b2af39b2e4dac71ea382b370695becfc93fb618a08927a3ddf31e1c623c842182cd8177d5380afcf0c5cf9134ae9401cec6fc8ddf14f76fb802fc557732ae720b4ac62e2167f33e7e703a4967a7f560cf2e78cea9c880b0e8b47d58241c376e02e3b85e56d5190f067aee4bb075434b63077849cf3178a7449dfb7b3955d06192c", 0x8a}, {&(0x7f0000001840)="a280e9c1ae25ed1c2abd514c130c1171b5cd5cc4ea8306d706f1e85991c82d2206c9e047cba784b38d01b3bac4a96a859c5cc781b7f70c8ce5b6990967e541650c8362484e600a6dcf928419d8224e5581ee1c0d9415c58f6f8421b97c5f3bed8496365d0c6f6a3bb0da6d84b966c693c66cb63b2e6caabc65b8b0177ea2b1416b03a4651f165958423e0414151ba9c4cb74ce5985b05dffd0126de37573d99c58dda0a0", 0xa4}, {&(0x7f0000001900)="dab85d299ce8eb2f468f3987a4623d244b8465a8dfa24f7b03434fadeea0c4f9ad46e6192f85082a5acae37143a1936f5b2930bda6d39cebbe4d7719196d9c104863c85cb9137856fd98646da9b61b2fc0d2dc53ceab155657572057f25a", 0x5e}, {&(0x7f0000001980)="cb9db836a16e677c77ce5113164a43fc0bcad17c8185c9c75afe9ef79e8f958b70dc41ff030910a731cee74f5b4f4a82514c264e122831ae641ca791f1191b58af75e0c4142c408f0eef40f0093c97a07a71470806faea9eadb01bbb73733b642bc8b31d8bec6f02c784aceeb4ec9909ccf62c3354623735e55b493236b9956622c904a7a5411285853f03888d0267df1b0caf", 0x93}], 0xa, &(0x7f0000001ac0)=ANY=[@ANYBLOB="e400000002010000ffff0000a8f0c1a5a926d0f7561a7a223292d4600fdb3efc00bb51c5b74699b15f3ff52f60f2d5d560c16bce944c4c022919525dd8cbdebeba0f34920114c55403d9b6162c51a13527f350c7b4f84b4e623410a6e088922af6aa7e47337a06b02e7aa912f9403d74f248a7cd1cd82120bbb8beb2bd6ce203507efcabb63916bae0be7b62d7c3630d706550650c293e7311d74fe6bc6f3a89ef7df8c2bf4efe400a51d7860256c697c425c5ef90f071a8cdb1b5b68e0c35eed0e20ff7b0ef15f659c15eccbe5b14176b9f6b0a74053f794b4256142244e5b80e0000000c00000088000000010000000c1000001901000000feff007a1cbcd26c8de7a71e09e78752e9986f36729f268716dc20f2188f9a714d05666488e08f254ffc932dbc0755628ae45ee26d42e5c8410590c6280800e5b3446ec5f8a647de958616ccc51033b462a55b6b585772ede78783868303eb87c42253d4eb23faa2c47bd17fd1f168b0bfa9281b913a43c874c27186e305eb96b72afbb3e052f19b8fb978359854bcbc9c1bcd019ed7e143750d5e1b616def57cd86160aee3908aa5f4fcbbddd697f79c54fbb759fab9fd0e8908687e1666b756a2e00dc2e2b54ae6b1cef1b451ce1eb53b63b984e6ded2f7b9d6b48b1600bc63959f2658c2f483fe1dedec69d09021295d504bb1e9713254ef65f4045b3f727c7e0bbf17331cfc3190f6d4cf1393ecd1a459bf5f0fd80e798ce76b50e4ad8918e8038eaa8b9a72c82017bcda2334b0de48969922c3bfe1b11bfff5ab269f6094f23ee2bd99976392b793a7522713a379e48aa908ffd4eec1fa70c9c0bc898c1b6c9857678084b00b758b1f614603b2b5eb92612aa9414bc476ea1a277270ce2d3f23bfd7ba11582c5747dc24b9a4b8548176af1e24045c771ef7ae3032da008bfc635205f76a3c0012f1d93ad6381b5abd160cd211b8aaae086421c849261cac72783cc1c803432fade3a05cf15e0722598a8aaef276b92235e6596e961f4020b0e6ffa4b0cdacf33cb1b67f4689921811a176ec763f2ac4d51442e2caa334186a7ac53a2db074dae3e7358030402f568d23293787588955bde34323c8229af75e8f750ac7f09b6d569b186adbe39ee87e74296b66615bc43eda1e6d816398a872fcbc0a64e80e4d32036ca017ee18b42ef4af9ab8a8b53f9134ecc22fe726479e4c3c74c6169dcd4c6c61584931a82592600f7169e9061dcd74aca86aed18830c51daff339b963b8da9b5eaacc8a96c731d5a84060695687553ba6ca4c80ffcab6dc6397291eda4e87bc3ff437e103ad1a328d77d1638a4785b6a09699ea46d7ffa54bf11bbd4f25b106140eed422173f04215066048a9f46c651e0abbac979c214c88fce1c3fb4c9c94fdeba51e911ed90f0dd12d4f4fdd91e77dd4e3bf66a8972506a7d00e51fb190e2197ab23f890411d4bff42abefde35c655be6f7a6c2369af60becc24f4b24afa7a4f1d6d7c65b18146be99ae855341b163e6b88572477a4dcfc6ffa5f69a22b33ff0da28ce608bebe957ba73cfda33617b7ef8a6a96bfee1bd2a7b4ea462665f3f0560cc8daa14d9b3c4cd4901aa4b7cd45f5c24a9039211a8b1beca126258a5ecfed1bcb61199574aebf154cb23b8344ec7a0d6d9bab55caf41b69a95cfc2cb5d1705831f4774466b60e5163d815a24c7088df998cd3390aa95c2d11be2f97cca01d1c44900fe1150e005d705bdc7547e3c1acf1514aeeebeb61be20e1e712eb0b95640f4ae07132ec841a934eac67f972a8caedd5853f96f8474ed517ffa2494e056986b3808654621327aeed83e3592b3f976eb1f140e39cb3374a6cd193a956b9ee1a005cc139f88295f485217e1e4db4420798bd5abcd529969e2516fa8a5cb80da068d5fe81433b8acf247de51e0e9231baf760cdf8dc45e08220d4e8b648080ee0e7b9d915933b210a98397999bc12e104276a1658532ce831e6a5cd12993994aab914529c70ec67a0eff033f7d03385c44e5dd59fe986bd528ec598236cca92c19c905af0839cc0994a81e8eed5c8a69fd030b3c93cdc9c1ea044870a95a220f53bfce2aa7492523aef32cc40279d35af40e1dad0589996990df5925ff4bc6b19746e9562e1f207269635917f9fd39550bab8b6aaa58e61cf7bca60674cf0c8f5bf78ae17040e8fe35d7359bbb2dcb9c706bdd545662df819fa0df524480f61beadc622a149a14dd68123337455117367ec2515410804c25abe4e615cc89f9d53f539be27dfaa2e9477338ed7d888be7829eb26690e4420aa80c5500e98c0c1cacf19358ded0704ee758d3a34ad3faed11782bfe4f2658a6c2f47e11e9b92fab76f4f7e7241fe153d75f1cbfb8e1180b9226de15efc7b4bc1531b3432f572c07bccfd0c7b1b80c3ab05c4dd5012e73529717abc3d98387716cfa075d944e29181312ddbe006016cb6c36801cd0057ecc12e5d076dc65143786069919c2d436896b8e656799f6de658c4914a7ec9f219f6c4ca39998e5b9b5422c2eb72ffe80599d7ff1f7ca906e249d52e16e0e01c8a45d8f883576331204e12e53009c8df1149c6e7d2d345b3ae43f67f55d8e5f4f0b2f99ca20e0307c22fbda41e4f09c920ce585d5801d5229800f72647e405837d72d924d0a67f1e8f4684198cccdd321f61f8b03f987c35f30e2e642e8b3e302f83cc0ffcd231244161c0092690fe8b59bf3dd8cca877986a1f9dad562ed2ddaa9374b9fc53abe88c3a44608c18a38bb1e99f20ef349a874a704f483932c5373db7dc8ae5e8b10c12e47fee8b255821c82ce35a805f68c9331f40394a31fc35f6b8eb57863f1cfe43536c807a9b069502a5d580f9785a3e023378a45161cfb317a6e49e8640004cc0751e6cc4a7496cb3a6971fbabd265ee4e5d60bb1c13ba687d5da9bb85c494525929e6c28ac931101b632bba2f7e9c57c1f70ef3567970e7e622ba1c82b7cec4cbc4988cf4a85510e65219eff93f01a2e68655f23ae12af29db770f080d8046e203db679d94d4ce893ceb873be4a50f01dcb9edd53f9996f9162fde0595b6744ffd1c2398668a9feecd49eeb146738efad294f37d8ba261f335d45329c4ad39e3186dfefa1ece60319fcd22e1dbfdca7cf37dc33854a15203ebd4c589fd88bb21cb359f56d1f38701fcc11218d2efc5ea8871ba2328650702efaf934f82b4f33562572147d5d4e6fd65f869c9c82d223bb955288bf8bc875e3503c6eff5f3a60f554eacd756e4802ed493f10991c0c3f7d639fbccd79e8e863521434d52e5ad65a4865bd4f6b3cd27b8f3b68bce6db60bf8fa902938f48fe230133a2969592d4dec79027b62bb0f953748822b57996335114d9407994caf57c33f5b288def9b6e512b50c22396183901da968bb1147290c731e2588da15f1452357edeaf15d54d24c1f9f7ae1ebad0c00df2b14b5964b8366c61fc8e5b8b52d859fbfcb44e45aea886a3328744c3304b832c64fef7454aea4eb5d2ffa24be31ac49dc960fa7d00f11d0a901596b0c3fcac045e06237bc9502f541a9502231ace0cbde459f73127aa81a84b11b3beb630c86c3bb71b1f12d30fad501ab37f8a621ff4bd65a0b96c8029d1412f847e70ed55f2fb7a7d3e264ead87efac9e1237fb6f89d9caade3b877b4b52114f966ab799fa192b62c28bcb5ddd09dd13cba86030089e598cca1096889753b2fde0725c7b10cb283975b50c680da744b15c2a689c5cec22ba459d8538e024b50f5f055eee2fa185eecd471445cdd120dca1dfe139d82e2c4f63a052f236a8eeb9eb315571dd876b87481e4ce03f7518eac8d1d0c61d61e3e37961101cf2bbc81df69f08477599ffcce7cae03f7ba5145266eaea75a8b39e535e9591651dc4ab7ce3b88ce91f0727e600c59baeee24a39bc8fd6e3daa1aa147a7378e573c7caa524e0e054bcbdf467d8e203cc9e0f23fd83a6f48a93e230e8f10e3770d209cc1e8ae51f478501d0bb202dacea536235f281886a45b2dfe074359f095bedf459e333901ef90d786cb980986c2a21e7dd862c0c464b0cdf2457b9618b13e725b662c82a108e7cda4212caf85a6e91057df7b73c3c398e90f2b62996b0af73683168cb34a74a7acf6092ff9c30024f4ad9d9df7c357732305d0dfc4289079031d3d5dae1d6f1ca1951408af232ffcf5c93836b80e328913741cfe5c26e6dd08f5a1c8e31b4659e9d3da7917cb75e95c6b4f931373d2fef9fe77f983ccdd954c9dde76d6f60793dd63c4e57c6b08b08ba59ec06d29dbe4d70af9843ad211ba4d68058e49d5fe4d68bfcf37932a9d5477046162087c94a40b97242ad879a9a6fc08678b0b3e277b6f8d1382e3be88626b5097e5a6e0fd3e55e62cb38311eb9f4e387ccb35585165a00d613fffeff28b008895c064e6e1bb6f1c253fab842edc27d099144d24d1eb748864f76cc349ac1473069e2428c30732a3ff2cc3778744fd224f2662829922c8a1b7ff44fe55e275304cf8b033016d4448a1e86a813f4c7606fd3407ae5c528d4e67926b90866e82e03009060f4d77bbfb22df1946abc750a8c719a9148a43553bad92b3688ff3844da6fdf34bb7a2460b8d20179c04560d117aaf987261029f7eec45419712ab676d797f55b730e0c20ab32886cf5e3e58795f89f1c29ab86c429241a387b351306653cd601a9c1baf4ba24999a34790104022580110c30a3e0b640cf5b9b9244c115acd75f5b4d02e0ee171177524a62616cc7a9d33c91d467dcc2c781fc0dac3f1d345c8a496fb7f425408768d462f07aadbe4cf6931ac9bb69ab460e74d0fcf66a8d38396cd0f0e821774dbe3d06948d55bb5ef19a113243e560107921dbd675d4b68ac07ddc621d0e410efdabc3528146486f9a0c4d8f310e1aa6e2d235dca4f69bef86c5f2944d3c9feab1ccff8c9e90cb3aa0ef61b1cdc27d264bf30bb1e2f233add6dad7453809e47fdbe5fc6779bd95a4767f36499503a87e317c1f904abae7272f0e585076f5eb16dd21015c8a5cb289cc5d3d175d712634bb6cb540891b01898244cad2c8841ee688964bc46d12f37e9a67385ee89c5b9150e8da3fc5fd336cbd40ebd08b504e7d9d24f06c12a8731c47c899134f3f35edd2025af4cc5d63aa37817a1273f0107ff8ad90e43c8801c1bc6f2febb4f79e83314e2be34680ce460640e3d44c0e0722d098e4a1736f1b312ab123d9d2104fb3363453cbae0bb0195ec57f7f951f1d913f2316bf6e42880c1fd6c7ed4820fe4ffe265bcbebed4c86cdb5b33f519508c2e9d0a4a2d6364b7e2ca57d3b2a9ca35c1f4c9e36cd08731db6e1629be1c09eb4aec032ede6d5586bd769075150a80e34553a0d5f6c4938a8d49d437ad3a38a5082264370002dfb621cf4273d36e02c942f44093f6f9afd138ea3d8ecc98b62baaf67d1bfccfaa5a2c2267a1e9da1bf456f77de809edcf2282a149ba917caadc5619659bb5770e6ca82dd6ae3bf5fb467feb7db7733baadde8f45c4c9be81b7a2d3b5e7e29ac4fc8fd3d3183e4ba81a48eb3db0a749696e136b7e2a14a5e98128b7aa4f2fe57c10ef4246e4c48a8ccd62ce62dda5c720367a9c67c414b7f931c70570a6c52875a58345f0a9e74c67e69f8d3ccf45dc92af12557f9ecc0298b867146116d6699a2a4319e88f7e990cdb0737cacd9b0d636e84db0d96555ca1da619925e12b9c785764a7d813b67151d107d67aa6b8b29d6028e9a3cb146fa1b6fbd0189c9e95a4a8d2a5122c8488ee4a6d22c802e8769c0d82281f987469d6caee611ec0a7c02ac5ae02f05596bf46a1beadab19b4a200a87c7d997ba22882218b2b6bef484e348178a7505e30acb038df41712694663e9805c8eb2dd1e99a669188f00465d3e6446a3bbc6d224ae4b6630f98f660fd9c4e7ec49eb5e0c25a8e92ef36f22dca4cd7f87aa3cd02b0f17ad21181da052d28d8ce203e177024d8fa5a87bedef04e3a3c8e43358b0343fdd703c9507563129c1fed14c0032de76ce7df4d2e10fbddde545b71756b53b3a11be9a540446d6737e030840dbccb7ca03fbba01c7c30fa289499360ed77865ac5510a5ccf18f274c91b63a2757b8c58ef3003aed2a04fb3aa9700fa18113455de1b5123be4787be23b768868517e1981a"], 0x10fc}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002bc0)="ec20a2a27954ab3011d32ea2aff558da033388c8f658c47575dfb408ee089009a0a7c7fd574fadc5a26b686c538bb4b8176dd5605eadb31d43700cb0584f126b261a0b509f01864c2163e85d5923f7400c109c31e04a926bdad9f55dad158c36ba33f00a54ebd539271affe1abdc7910abc75020d164cd4dd5eb6ec786b4d217603e35b9b9b21d6cfe930e912632602baec1", 0x92}, {&(0x7f0000002c80)="7ff4984fb90bab9b13300280f2bf3c03d0e4ec5f1b5d31cfdd56a553bf1cfc9ab8a013d44c9c383e47039d97817328778d237484a02fe2e7db2336130a33100fa1", 0x41}, {&(0x7f0000002d00)="7736a914cb219f4ccdfe7b6d40e9420ac2e804cfa230697aa4cf", 0x1a}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)="dc5062639024e129625556f07d6fa8ae498e8fefb52784c8d46e527cdfaa764eb7ecc101c1ae20607a7e064931c0d993865d1bb25993badfa335623a0995a7e012286af51c740f03a497278226f64102e943383187d67c2bff3c8d49264823b9cf49fa49639ff9ec66f0cb363ab687d5f6c4d00e4960ac4041facaa10f0d5d5b40ccb59fa0605c58c351c526b46f995163e085daf0fb3601e19bc36c96d0b61367ac9e926d8f9f8ff564478314a4a2e4b6e9053b012309c668de092762dd0a94", 0xc0}, {&(0x7f0000002e40)="a1f1b9fa73d347c6396ae4b02b826eb556df99d52a23647709ef9071042949aacfd7e007dadbee6668c0d578d48ab3ccb06bfc4a614b9e4b7c9f1e5f1188b6bbe6df600e4fbf5ce745af23134b7e76a5", 0x50}, {&(0x7f0000002ec0)="985f2d6b9531bd343aabaa038f57b3c5ca0e1267ce40f366053c9fc14b9019b422ea7cde207bc4be19c9c4890bee53a9476477a4307b4b3deb85fc644c283da33333bb0d1dad9a078f5c152d1fafdf19c29ccea2b6e1f4565af6e771f9efa23ea32d752ee624", 0x66}], 0x7, &(0x7f0000002f80)=ANY=[@ANYBLOB="1400000007010000040000003f52194ed4afc8c4e800000012010000ff000000d2b20a5d1338d4ed5b22500d313ac5f2e2f11afbc405c289ad9bb02b264492167f7e7bd913971ac838dd3db77233f4fd9b0424932bf42c1a0165c1c3f4182b07b7b99c9949f56928f7fa1460dd1d29265b8e0413bb70dd2f028fc8669830e65c582532df364fe0e06d7d3c2087a21b618c7e7a6eb986983d85b3cd6cbcf6a0e6c2f760e8b7b5ec6a46fd19d355e2235531b8dada8ceb6b7aead8d44122777079e9807c7248d616b2b900efe8f74c616407c8dcb1c959ae1ebd24eb34679e175486fec7d65ec7dc4c1ecd958811fe9b1c42b6d8eaa51dd5d764000000200000000100000006000000e2a972ba9dc29e1eab7b7818e4d543b2c4a50000680000000301000004000000aff6b5c1f12ea23db6645c1c6255a6d66a1bd49c4d9645bfab6987218d9a7a600e159cc063f50d6962839a02a0f65d7f489d547540aa21e07a74781f38811442015af745f149cb958d775a2813891bcd9ba0091c7c1e24e5655ff900bc00000013010000040000001c448afe3cdb1ce5715103ea34e51b29ae04f86b20c8c3bf5a785238f8871433f5618497ed79ce9e0d95864071217e4a5fd1b3c636e224855bc24c82c4b4c3a88b3745f2be0a303ef84113fc1a4c8e3474ec80c41851926cb0390e2c0de3481cad4d3a67d17c3e7bc57142e57efa001e42bbcf56ee61dc7afcd19aa172f4ffd96112fb91a743d32d3a8c6ec0ac1afdccf63dd6fd9e083bd09404b6b2bdaa48bae5c5999a7bb1263d56dfe1e997000000d800000001000000010000006d4624d86e0655c4437c6fb6680b84325ce5b0a706b00f31871a582f7405de73f382c0337bc9815e8a9b6316b123bbf2118a20ee0541874cc2fcf49f4eab6630b5f3114187b0060de9e93c96ebf76bb9b774d68b087fbdaa714032c4097a16eeb3ff3989e128ec584e1daca0fd8fb4f3b8ec747ab8fabc7b2d5ffc193d3487c3c408368c8154d1fe9b73862d41cb499d94628bc5db4a2a4df38fe7906a249e407f1ed9af90393bd3304fd578fe3f870a1905edbec2f9799f3ebc941032c7b933f3682fb840fe5150e3410000c000000016010000f5050000167649dafc7b0d198caa43ec456fb09512492d5b449fd94fd1957fb2c2da9ef211e6d13a4c9761520fed1aa3feae7e2029281b1e8395d2618fe8431e88ba051176e3d908db5b7aee2da517827346245c8ba9a0ff2e7326ca842500ee19662052ebd8e64a59cb7315e9954e40844a22a4dcf299671074eaf9fd75759e7ac8a93ea1884af75133ac5b60c720d659260b20b308f188cf187fbbc010947aae0200616e6c901f06974380fdbf4d79ecd4e10d4596fafa0c10000000000000c5620000f5484f6d649d367cfbeb72ce5b575f77d869381ae6cd464083b2d021c4e47655658235484099c6034664925825b7490eac949f402bfeac96584089ef7029617c9bafb4f45e226b564d498a32f98028395ca1ae8fccba863d5785eb57e960bc3ec98636ad205df06cbc81ce8edfcfbee60ebf340ca11d14a0cdd45e5d887da97f3e6ce3ea7571f6afdc8cb9dec0fbaf04ebd7f6d59a829f4e1c673186431f61222981e776fccc7c619a182ab7a1d710680cd19e7fe4d57c995240752f2a1c634c24df337860875eb567449a4d0c811d6d821df8015f5db7deb84677c8dd0a353ca8ce6120fcd5f7f2ae43d1c8f678835eeb09cfa7d02953369288df3c7f2e5c2ed0428b9a4849898a6698f9ebf4458c6beedf84e6595b08f03370c2fdd7db140ae8189bfc2461e434f482ec5903ecd0cea4832ed546d04dbabc33d90c102073c53b0b91b97e6085705b60771570c5fb5f180f35e236296c09eaafd4500d44aa762dec893ffaf058c6bc765e9be7239c8f6f195cafac5fe4fa86c16f8d50d9495d25cb53443f69d747943504179d87cefa627f04d073a739e476c203755236afc67b35b1f350a79b2bf8605477f6f3b5736c56dd2b16d61c4df71acaec913fca224fde0bea1746278c876de373dea83d8c743ffeb60d33e9ed9daa622208119394515b26d35cda4ce484d0c8ea0e0167c1e648cd8f94239f7b18af31eb2e16ca6f37d2542972443f3ccbe1c96487a1d2392069a99b0e33428600db3773b39d842df438d6d61905b768b754471c23e2fbc813daa16b15a31ca54489fd9b5c034d3e3b34a2356c89504b7909adc5e1f22db95b35062fdbd8112b5805cd0c9bcec9f1a8687c997f6ca668f45d7e30a76dbb83e06606700c4031dc798d98227f5e780111a4619c4873622b5f181a95449ae7f5f2c40c7f43eb002f881d247440fe046aa9177463f3defd872d01f4fdf57a700c6829c57eadd6e5f3b0e4b73dd8b2327ffaa204fd880642d8cfc5a8aabc5026d9e284ebad082be6f460e5ca6cf088277bf8582a732704e2c6795789221eb7157e6b4730c055fb28684cb5560c0a6f249043cdbfca5b10843a934266d3c23f7fd741d55239feefdd917d4010f381eaedf61853e20a236ce9aaca9a2943f5d10a064aec393634d0e46fae2f1c2427591fa49674fa9e410c96cbe81551f313df6139480adc735fbfbfe3d458452cf43d20fdfbe7cf4e78646377c451f0c1522739b7d02c4ed5f5875ddad9b75a560bbc78a49c7b632bd1f075265f65e79b0f4f2c1c854079a86d962d1e5e39242ab5b85f2301847d8adfc85c5b8f0033953a3c5e1c79dffaaa8d60e8e83702520241a0f19ef8f168bf6f069da26a0f7f9f607541a1985652b05c6d01c99a3f52f98305ad4ba435c92a17df737b2a65fc67f3bf828afbfc299d1b61e859887dccdb59cd7e90b41c3a8168f12720c8a12d4dffc0e390e720f9d5a0775e7c545e2ff8128d61ceb64dbf6980257b64ff60b4ef9cbe766235160af03d0d5a86542cbd315488655c6170c0961080b56840771a2b268e1a05ec64038fc1e088ae7b1a00800ade4f980b9d334fb89efc8bc49dbccccdc6764067a582de82bbeb6352fbc5a45fd6552eefa70368dbadf0142e20d37e3807848b7e3de778ceee96b9b05c01439e5c8e67512775e632bde1a7280cfe051ce371bb5807b35963f0f3b4615d0cce63032d0684f579791733c8dd45b632f96ffc24d104ff627500a0e2162f0232fefdd9775346faf39a23bf9861e1b4d497936bfaa010b0b50c16180ffc984fda3d65f7292ca16f5f1c7c19e9155a7d7ac256c9d9e6ba799be8584ee5d8057fde06ff323fde33eb1e81dce3502e41fc09eb4839674353a1fbc895671adc4ac9cca477c4396ebb5f8a31f41fd3d4dede4fdbe96a07d0a39231169238e8021e9684259a4a1f5dd2ab2e5ea0461b1cf1e1edc3bf89b5906e5ed6323e952f79ccd5913db7bbbc8e9449afa64a6b65b5fd7b3eba766adc9f1a29dd3739bf1d9f444b45fad858ab1aff79db298565ba7ecf025014220096d7722e9bd4a6f1a1b6006e39f3433de06da228562cbdc667b705521e5ff69dbbfd33d3cb6e01740da194a00c3eb5e7a1c04d682a346675c7427c169e414e29f6fc93c0a2603051ddf79a05df8a4ff38efc248e3b94d473749ffccbe41479c413a20b9c1aec7c64012017ac7fbc634868d2d823390aeff5f050e7841e3f7b41d4d735859b7beedeaceb6d94f68df0f5840b791ccc13a708e244424731c064fa4e356be4fda593dc795c51abbaa8a867fabbeddd139a07b959b0a34be484e57edb067ecb81ced6fec26f7b20d9005120586cdd2ec75658bafa2fda80c42dfc2d1df2a59e39edb3a4f2bae2baad9342dbc63e10dbbfeeb7ef275d175e766c89f35d977f02089c090e133598cf825af27199a274a67d5372a37d6554bc3b06b9b97e48122506d8e7a82abab2caf67e364bccaba5363ca61cf2893bc2681f45453a731ffd35e0f922fc2f789e7d5a3c9edc91482408a6d41e12f80603990bfc6dc1afe703d8e79f85c827d5fc099a4817a7ca989884153220454247d64aa6efb887196dd13a983aabd20c20521a831b19f2951ad2281fbf2b89f9eb9694bc2e28e32bb7057a941c8596b78d26f0a5cb0079bf7cf2d3d9cc6e1172824eb53588c66be8ed915f308252e4b6245c0ef29c4d5eb2272c046c840b2139b864ab0ed8f65cbd729745f8a7253cf2359cd9512fd02e0d8778d098319597fd4aac69d042f15127a0f146f49b8411b6a9513043ad61a9e2252a0517869341e3a80207004bd8bce9a21c493ae5faf2c276481291c2cc51444d5e2836f1846ce812ebe6d4826e75653992ce870763f89df0557298d95e665edd7bfe7aee927c3d34b40376bfdc4dc6bfc9f8743c8c4f394e2e52105a04a566ed7f2c271b6891e6d3a4fe6c63f317a72de7d6e7e3885cd7594866d5fc6effb072148937f15bd1450fee29db74895010187eda937ecc7b7d87e7ba23f8c3fd56a05601467831ff5bcb30318cbfb87ddec09d0a805888d159da5426d86f93b561d83d79e34ec2cd258afc91938e173c3d5e129a986212fb17bec4ddc7daeb9e65a0b7d98d29678937416a07bd4ed5630b86e3ca7b53da3efff8069a47e3dcf80b81519591d820698f91afcffcc57c38a7a594a625f186e4623b14df36c7a13077e4d1f7c9fe13f71fe068edb1cbaf80f6360740e3e385c748ae51fcc1947126648d96a92dfd73ecebfb88d475a1766874721314cefc4885eed6d728a9f3134ef043241db5af434608b79641781733ec4e90a832f61e999eddb27e4a34a8090f093169a93e0628cd964a79469bb6f591fcdfebb207912dfaaed65712318149a763091e82749f7b393c2d6feb930a9748c57d76520be0c149a62563c8b6a2f2d8c221077454264841597248266071a93e876df99093666adbbfbba5cebab34d52c47decb1dcc4ec0be6ae53810cf0be17556a1a4bf613c01e175d310fd3bdc894e0fd59bc97ea644dc14dae3b230d4fc4e69de08117e4bcd68eeca0a16c4a232e5fd4a9012b3013c09dc6e622b82c245fa30e2ac99eef3b052cbbb9b91d82f9bc076f07a072787b8311f518213eb2e699c656d38a45b10e2a953c2bcc81d64a598d9f772b9a623e2c2df1ded77482affdf00c8d5e02b0a205bc51ca270344687739acb8de247b8b81b1c89952cda31e6e499bfff0b1a1fec6beebbc1120f91c546f77dd65a19a0e6b2f62d9ced20ecf0f672c0293bf00eeb4876a7f804597b0fd3645aa9e6e7372a81c4b23d02baaba9906a9f7ef57dd831f9ba2d91d23cf7059b09bf73081ef38afebaee4814343045e6a42577f30a83f6a93ce687679cfed14b7ac6c60c327121be9478fbecf8b3ba7547d08da1520bbbe27167386abb6c2b09d2317c4d0d9b1e2618a7e332f8486608d716f42643d2c2a7e61a4aefda4ca8aff5ae8b8f30678724797c37608f2e60542ea3983f34db77a7b18905f051aabf11a18eb6563651a9ebc450c2791fe0ff2fe21469d1c2146a06742d0149f15b326e1c204575d16a7c1e6243f7cf3b2c45fae40ed9bc2a943d43002c45be63ec983fce0452cee258eeac147bf31b3966191c7828bac62e91ffd41068b83c1e55dbf538b4ab7430246f76c1eabf7977984fe8ede78a1bc07124f5b9a95587834b9c4ca705336f580ab196914e874d419606d399c4dfec1afe9e68643c016038ceb686889c4cc1fabe27c9702b9fb811118b3922dff78418570b9414d0f4561c164fdc85cf15d015d611530703cd4f854f4491e96b4ab2b3ab5709d075939e77dd64add79234b06514813d8d2e2b09fbcbb20f51aa5decbb3258fcf79a79634d186c6039ca7d16d579a78c72a53b36d54de928efb9902491f3ca88b5de77971b52c6ec7a82371ce2fe1e4664e658941c47556350c8ba346991cd47d9fde5cffed6fcbceb5e060143d2c54c94824030eccd790d9cf6a8bddfd502427ec134108feefee313ead250ea0154dee20ddff0671e24ecbe1ea4c68e50803483645af3c00f0bdab47bc9c1c4889c417f4ec62fc97a30360c96104d8f44669052626086ef16dcfe41701ef98d01a194960119324d29c52956a1c83cc0d606ae61682ff93310f4ff93dcc6decb32e8c05651d3aef1b5b6ba7c04b493a847cfcb70a8e60a369aea5e415c6359a63eaa11e82889c7decdc408d35f954f446bbdce141485c808dd173cc627b6905decf0fd65f3777226f79db440b76bcf12916c28e3bb0fe6a2f047cb6a6bf69dcfa019d33099017fdf816b9e036ea88affa5960450bfd632d0c4e75b01dc47fa9be0b636c4115e64ee5f2b2b60839d4aeccb7a86d5aa8291dbabef2a9c434cef0f89b0c693414a53f17f0ee1077dcca4655407d8fbf357d15b998c410d03848620fa7ee2787b33962015f9ffe99e37f465f1cb9c7dc50d3a1c61a9fe3a5f6502a67df07b0c557d99ed08234526fc363d9b8cd5c1fd4e4d3788291f0dedf2160861305cc88920e1a7818309d2d71de8974fe0389269abd966fa9df25dcfaf741c9e59ee611a07f627904d6e741321488e5844970e5df988b29685444ca520118ffd7c353de9b3dca6e994063a1cbdabdee7598105ce6a49939876d423836687819523e4732cb10a8535e7922126a51eaa4926b9fa58d437894d343f4330381f1d9f80e323228bc9c1fe82c439055fb9032cf4edbdc13d84ab8d5acf54e5dd9a62b48457fd2c00d157dfc4c4ded42c77eed2ca1266951ad865a6c86b79634e8aaf92839a7cbf54876418b0fcdd09c737ee17fe4258e05e4b227d1cd2d55dffaf8bc73b4e602ebdf5ea07857f36f4e31d44d7a8b06f4c30660d88ebfb3730095d203ef05bb7dfdd3ea445bd05dd1c92c8a458f164e03ce424b1a69d5dce4ea0efad1fec31a7e12fdb92d13ac40ef3effcf350f4fa30c37a8ee53e7d4bafe4221ad58009d92d0f672bd5dc5bbe9aee7d6ce266042aa6a619bd1fb7de83aa16d39c6711d019d757a2094b594f31402837fa3fc964ff651c12bb41102045e38d9a0eb4d8e348a212d29c0647114d12a2c57763895d4f0747b853c29f05bf9a50bbe006e02de253a148bfbb931b1f001c51acacf420ad3bb83bf7845827802f3acaca478efcad530fa68aa7f702666ed80bc98a553897fb2c85975838f00bfeb951b1d3dede25066a4ec3297198383358eb3a8c4741c2140aa14fd195e6b00b8a31c21cce886f53a09684677c87cd02b4fcadc27436c957ab27ae9b00000000f010000040000004c7909d475c869545aeeb78af7cee69e8048b28fe5e68e29371417ff68631147bed61c262ac2a6fb65255cbc67b4caeb3feeb69ac9d0475ce22c2dca3c787b14e92c1a16ab7ff6aec574a627373311903d94b9cf0ff9c448889b7d6096d023a5b8e8ea46914d62857097ff1969b9b95328b8b5de232b45574dfbe9b38cb246f3d66a54fdc480c8ad7607133b0bdfadc4822673e9276a3d341d0e893d9fcb2c13d7bfa58b0c01000019010000340000007dc26559696f729690b386bca76e65785eafd39015e6254eec8cc9be643feea408440fd2e10e35dff109f3eee24ec092f965ac58438022094e6e0ff047e78fc3b2fd7f130413fac30560ea388bc329bb74b2aaf17da188f30e7e120c43ba682f7619a75eb370c026c80ed4ba76d62d8617d73b21dd16badba3c21b0cc36fc4e9d67d8a9027bf94a9ea6be1d9b93b9f0e47104b8763f55a8cecf97a30997fc4967ebf08ff00ba7ac7ac888e253a35ed3fa3ea5b560d0fc9fa58d73e89983ebe778c8ca2e889b3faba850d2ad010dc771619e4a263c5f9fa6cb88fa5531427834270bea4f56afd4639ca77a488b52c736258753b766ca60d3acb6d04dafe000000000000000000"], 0x15a0}}], 0x2, 0x44044) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x89}]}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r10], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) ioctl$KVM_RUN(r7, 0xae80, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) write(r1, &(0x7f0000000280)="ff80", 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1m9.57832715s ago: executing program 4 (id=4844): syz_io_uring_setup(0x3bd4, &(0x7f0000000380)={0x0, 0xcc19, 0x130c8, 0x4, 0x30e}, &(0x7f0000000100), 0x0, 0x0) r0 = epoll_create1(0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa408069f0300000604"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/84, 0x54}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'erspan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x84, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x1e, 0x80, [@erp={0x2a, 0x1, {0x1}}, @rann={0x7e, 0x15, {{0x0, 0xb}, 0x91, 0xd3, @broadcast, 0x8, 0x1, 0x9}}]}, @NL80211_ATTR_PROBE_RESP={0x5, 0x91, 'n'}]]}, 0x84}}, 0x0) semget(0x0, 0x1, 0x206) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x20, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000001c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000003000)={0x12e0, r10, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xdd, 0x3, "1d659cb8e016e630a41c0102ae362a3cbe55e85f45b5f68af7c10a93f8bfd923945a7ee71652710b6910b51c9c7824d25d84340ce9d8e93af60e0c0e592dc2331ab0935dc31a2befc3e35ad54c796d71824274a13dafe2a5a79bcfdbfdc464c4b1483ebbe398174aef278e7f81d70f3fbe7d955af87fc1a69b53bb562686d4316880ff5214877eb06988d9c14e84248eface6634f3466b22916410c15b0415d7a43e6674736db3bbccef946bc89b2532f3a0c684aa9f4d91e475e927c836a5f70679908d2f46dd3b4a7d51adc46173af57c4ed99e4a10dee76"}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffbff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x45}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0x1124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ID={0xcc, 0x3, "cd649adebf6f0d02d7139388a9ad4b64b5bfd5c322fca3e5025970a6984a48d7ec947dd58cedbc2533b7b4ffa65ae0fbbe8201954145975c73d450119fa862663b5a71c1a99cc7215729d1e575c8c2941d112fb1126c0f2a61fdbe39240342d287f5732301101fb0f07d0e56080de63c13a34db7bdf441a02a5098ccb5cd938f0d8e958f7041fcadf853ba30de55631490743211384cd6e02828d2f8c1a03065f2327997039dc52ae952e226fb6a06c0b567af92427baee398debb682d9fad7ae326d79426b2fe6e"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "8b68db92c3cf79b3010adf3746d21b09d00fad1529de35cfd91aef7d"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x12e0}}, 0x4140) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r0, &(0x7f0000000300)={0x38000000}) 1m9.440795998s ago: executing program 4 (id=4848): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89, 0x4000c}}, 0x20}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0xfbfd, 0x2, 0x0, 0x0, 0x11, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x40}}, {{@in=@private=0xa010100, 0x0, 0x32}, 0x2, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0xe8) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f00000001c0)) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x76, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000014000800000000000000000000000000000000000c0016"], 0x34}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m9.398624138s ago: executing program 4 (id=4850): io_uring_setup(0x1d4c, &(0x7f0000000140)={0x0, 0x5921, 0x80, 0x2, 0x58}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r1, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='1\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='./file0\n', 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='1', 0x1) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='loop\n', 0x5) 1m8.319484681s ago: executing program 4 (id=4854): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900"], 0x48}}, 0x4084) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0xb402, 0x10000, 0x0, 0x381}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_PIPE={0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, {0x0, 0x0, 0x4005}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc1002}]}) shutdown(r8, 0x1) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r9 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r10 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r10, 0xffff) fcntl$addseals(r10, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r9, 0x40187542, &(0x7f0000000000)={r10, 0x1, 0x0, 0x2000}) r11 = syz_io_uring_setup(0x623, &(0x7f0000000400)={0x0, 0x800, 0x10000, 0x1, 0x91}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r12, r13, r14, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r11, 0x79b8, 0xbc7d, 0x43, 0x0, 0x0) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r16 = socket(0x400000000010, 0x3, 0x0) r17 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r18, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) 52.288440812s ago: executing program 37 (id=4854): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900"], 0x48}}, 0x4084) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0xb402, 0x10000, 0x0, 0x381}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_PIPE={0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, {0x0, 0x0, 0x4005}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc1002}]}) shutdown(r8, 0x1) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r9 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r10 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r10, 0xffff) fcntl$addseals(r10, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r9, 0x40187542, &(0x7f0000000000)={r10, 0x1, 0x0, 0x2000}) r11 = syz_io_uring_setup(0x623, &(0x7f0000000400)={0x0, 0x800, 0x10000, 0x1, 0x91}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r12, r13, r14, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r11, 0x79b8, 0xbc7d, 0x43, 0x0, 0x0) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r16 = socket(0x400000000010, 0x3, 0x0) r17 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r18, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) 5.038143675s ago: executing program 8 (id=5179): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/connector\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x1, 0x2, 0xc, 0xbc, 0x101}, 0x20) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f00000003c0)={0x1, r3, 0x9, 0x4, 0xeb0, 0x0, 0x0, 0x40, 0xffffff4f}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) setuid(0xffffffffffffffff) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.882294982s ago: executing program 8 (id=5185): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4008550d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000500)=""/188, 0xbc) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000074e4ed2000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[]) r7 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x9640, 0x0) ppoll(&(0x7f0000000180)=[{r7, 0xb40}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000240)=r6}, 0x1c) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@ptr={0x8}, @restrict={0x7, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x0, 0x61, 0x0, 0x2e, 0x2e, 0x5f]}}, &(0x7f0000000700)=""/172, 0x38, 0xac, 0x0, 0x80000000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0xa, &(0x7f0000000300)=@raw=[@jmp={0x5, 0x0, 0x1, 0xb, 0x6, 0xc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @jmp={0x5, 0x1, 0x9083a7ceb4281554, 0x2, 0xb, 0x6, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x4f3}], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0xd5, &(0x7f00000005c0)=""/213, 0x40f00, 0x1, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000800)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000900)=[r5, r1, r5, r5], &(0x7f0000000940)=[{0x4, 0x1, 0x7, 0x6}, {0x4, 0x4, 0x4, 0x5}, {0x5, 0x5, 0xa, 0x2}, {0x0, 0x5, 0x4, 0x5}, {0x4, 0x2, 0x2, 0xb}, {0x4, 0x4, 0x3}, {0x2, 0x4, 0xb, 0x6}], 0x10, 0x2}, 0x94) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) 3.240583055s ago: executing program 9 (id=5189): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f00000027c0)=""/4073, 0xfe9) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x2b, 0x2, @tid=r1}, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000000)=@canfd={{0x4, 0x1, 0x0, 0x1}, 0x36, 0x0, 0x0, 0x0, "340c1ab46fc297bdde3ba7c9570702af392df6011178fd25189d0d96940b888b558b96a55ed5dc7d850000f50541e54383d8b480bf38e28c27a49f5e822f45ff"}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) lsm_set_self_attr(0x65, 0x0, 0x0, 0x0) 3.006935162s ago: executing program 8 (id=5191): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x8002) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8) ioprio_set$uid(0x3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}, {@xino_auto}]}) chdir(&(0x7f0000000140)='./bus\x00') syz_open_procfs(0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE \''], 0x8c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000200)={0x40020100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000100)={0x801400, &(0x7f00000000c0), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff) 2.947304642s ago: executing program 7 (id=5192): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) set_mempolicy(0x8006, 0x0, 0x5) set_mempolicy(0x4000, &(0x7f00000000c0)=0xd, 0x3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) setresuid(0x0, 0xee00, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x108c) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000480)={0x4, [0x3, 0x5, 0x0, 0x1, 0x2, 0x6, 0x7, 0x3, 0x10, 0x8, 0x6, 0x9edf, 0x228, 0x385, 0xef9a, 0xfff, 0x46, 0xb2, 0x2, 0xb, 0x5, 0x4, 0x1ff, 0x0, 0x192, 0x0, 0x2, 0x10, 0x6, 0xd, 0x8d7, 0x6, 0x5, 0x7, 0x6, 0x2, 0x229e, 0x1, 0x8002, 0x9, 0x0, 0x0, 0x423, 0xfff, 0x86, 0x400, 0x7, 0x7], 0xc}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000692690d4294c7cc2523589fda1d100001000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xf0, 0x30, 0x1, 0xe501, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1001, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {}, 0x8001}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x4, 0x2, 0x0, 0x0, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) 2.538702638s ago: executing program 5 (id=5196): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f000000d300)={0x3c, r1, 0x917, 0x0, 0x3, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='bpf\x00', 0x0, 0x0) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x9, 0xc8, "0200", "2daca8", "2ea24e", "e19465", 0x81, 0x8d, 0x0, 0x7, 0x40, 0x7, 0xf, 0xffff, 0x7ffd, 0x464}}}}, 0x20) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1a8) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x44d, 0x8001008, r4, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, r6, 0x2) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) fanotify_mark(r5, 0x1, 0x800002b, r7, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config\x00', 0x201, 0x101) ioctl$TCSBRKP(r2, 0x5425, 0x800) 2.501305194s ago: executing program 8 (id=5197): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) recvmsg$kcm(r0, &(0x7f0000002840)={&(0x7f0000000200)=@pppol2tp, 0x80, &(0x7f0000002700)=[{&(0x7f0000000280)=""/60, 0x3c}, {&(0x7f00000002c0)=""/115, 0x73}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/138, 0x8a}, {&(0x7f0000001500)=""/243, 0xf3}, {&(0x7f0000001600)=""/235, 0xeb}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x7, &(0x7f0000002740)=""/243, 0xf3}, 0x3dfdbfbdd7a869e0) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r3, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e657400000005000100"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002880)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x10004017}, 0x81) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000406030000000000000000000000000005000100070000008b434b420557e3bc2663192cab715837"], 0x1c}}, 0x40000) 2.423451182s ago: executing program 5 (id=5198): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000480)=0x0) timer_create(0x6, &(0x7f00000000c0)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000540)="63b91b26f8fa4c408abbce2bf1bcb574b9a33b8e3a804a717fca330cb5aff4534cb48a92fe928d030a53260ca5e4341c71051e92b37eb9967d9394de539fadce92121d10b8364af9744c4c6deb80447fbfba360334cf04806be461a9e436812c5b6de224788f832d707baa9a0554", &(0x7f00000005c0)}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x6) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r7 = userfaultfd(0x80801) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r8, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x45) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x800001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) lseek(r9, 0x2, 0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) fadvise64(r8, 0x9, 0xffffffff, 0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0xd, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x2, 0x7a1, 0x0, 0x0, 0x1000, 0x3ff, 0xffffffffffffffff, 0x0, 0x12}}}, &(0x7f0000000340)) r11 = getpid() sched_setaffinity(r11, 0x8, &(0x7f0000000240)=0x2) r12 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r13 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x3, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r13, r14, r15, r16, &(0x7f0000000200)={0x2e, 0x0, 0x0, r12, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x3, 0x1a5, 0x0, 0x0, 0x1000, 0xff, r0, 0x0, 0x80}}}, &(0x7f00000004c0)) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x10, 0x0, r10, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x1, 0x381, 0x0, 0x0, 0x1000, 0xffff9511, r11, 0x0, 0x1}}}, &(0x7f0000000440)) 2.31990046s ago: executing program 9 (id=5199): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) pread64(r0, &(0x7f0000000440)=""/95, 0x5f, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) lsm_set_self_attr(0x65, &(0x7f0000007000)={0x68, 0xffffffffffffffff, 0x37, 0x17, "719253c233c813bb57cc2450c9c8b97d24ecc020f50021"}, 0x37, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='nv', 0x2) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000700)='D', 0x1}], 0x1}}], 0x1, 0x40000c0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r1, 0x4010aa0a, 0x0) write(r0, &(0x7f0000001e00)="39270725d93c4ab6", 0x8) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000008240)=[{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000040)="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", 0x3d5}], 0x1, 0x0, 0x0, 0x84}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040881}], 0x2, 0x40800) 2.149381125s ago: executing program 9 (id=5200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fadvise64(r0, 0x4, 0x8001, 0x0) 2.026916491s ago: executing program 7 (id=5201): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8008640b, &(0x7f0000182900)={0x2, &(0x7f0000182780)=[{0xa000005, 0x800, &(0x7f0000000600)=[0x8001, 0x9f6, 0x1, 0xfffffc00, 0xffffffff, 0x4, 0x8, 0x9, 0x7, 0x3, 0x76, 0xeb, 0xb, 0x2, 0x2b1, 0x8000, 0x1, 0x9, 0x2, 0x7, 0x7fffffff, 0x1ff, 0x2, 0xfffff8ab, 0x3, 0x7fff, 0xfffffff7, 0x7fffffff, 0x3, 0x2, 0x4, 0x8, 0x1a7, 0x3, 0x0, 0x3, 0x401, 0x3, 0x5, 0xa, 0x1ff, 0x8, 0x9, 0x7ff, 0x8, 0x9, 0xab75, 0x81, 0x1ff, 0x80000001, 0xc4, 0x18, 0x10, 0xf, 0x5, 0x10000, 0x9414, 0xd, 0x4, 0x1, 0x401, 0x8, 0x0, 0x5, 0x8, 0x10000, 0xff, 0x92, 0x7, 0x6105a5b9, 0x77c2, 0x2, 0x1, 0x5, 0x8, 0x7fffffff, 0x8, 0x0, 0x3, 0x6, 0x7, 0x7, 0x9, 0x1, 0x1, 0x7471, 0x2, 0x9, 0x7fffffff, 0x7, 0x0, 0x5, 0xcf1, 0x8, 0xa393, 0x1, 0xe, 0x9412, 0x81, 0xfff, 0x55ec, 0xfffffffd, 0x0, 0x401, 0xc3e9, 0x1, 0x0, 0x6, 0xc, 0x1, 0x101, 0x1e, 0x7, 0x6, 0x1, 0x2, 0xd, 0x4, 0x8000, 0x49b, 0x0, 0x62154a7c, 0x4, 0x0, 0x7, 0x9, 0x7, 0xffff, 0x4b1, 0x5, 0x1268, 0x2, 0x0, 0x7, 0x3fd8, 0x3, 0x0, 0x3, 0x5, 0x101, 0xfc3, 0x401, 0xb72, 0x9, 0x4, 0x6, 0x8, 0x4, 0x4, 0x200, 0x3, 0xffff, 0x4, 0x5, 0x0, 0x621d, 0x1, 0x40, 0x966, 0x0, 0x1000, 0x7, 0x2, 0x6, 0x55e, 0x0, 0x7, 0x5, 0x5000000, 0xc, 0x2, 0x2, 0x1, 0x38af, 0x4, 0x8000, 0x0, 0xffffff01, 0x80000000, 0x7, 0xfe, 0x6, 0x7ff, 0x101, 0x1, 0x4, 0x1, 0x1, 0x9, 0x97, 0x3, 0xffff, 0x8, 0x5f76b6c6, 0xf1, 0xa4, 0x2, 0x3, 0x80, 0x1, 0xf, 0x9, 0x5, 0x6, 0x6, 0x9, 0x6, 0x3, 0x9, 0x2, 0x7fff, 0xf, 0x2b, 0xff, 0x1, 0x4, 0x5, 0x0, 0x7, 0x4, 0x0, 0x40000, 0xffff8c8c, 0xff, 0x306, 0x200, 0x1ff, 0x2, 0x7, 0xaa, 0xd, 0x5, 0x101, 0x8001, 0x6, 0x0, 0x9, 0xd, 0x0, 0x1, 0x4, 0xb46, 0x4, 0x7, 0xfffffff7, 0x9, 0x10001, 0x1, 0x5, 0x8, 0xffff, 0x80000000, 0x5c8e, 0x4, 0x3, 0x401, 0x9, 0x1, 0x0, 0x60ee, 0x6, 0x2, 0xb743, 0x5, 0x0, 0x400, 0x6, 0x1, 0x81, 0xa, 0x0, 0x0, 0xff, 0x7fff, 0x3, 0x3c654994, 0x4, 0x0, 0xfffffff8, 0x8, 0x1400000, 0x5, 0x1, 0x3, 0xf, 0xb655, 0x4, 0x7f, 0xffffffff, 0x0, 0x100, 0x52c, 0xc00000, 0x8, 0x0, 0x7, 0x7, 0x9, 0x6, 0xfffffeff, 0x40, 0x43, 0x800, 0x7, 0x8, 0x9, 0x9, 0x10000, 0xaf9, 0x9, 0x4, 0x81, 0xdf, 0x0, 0x33d6, 0x8, 0x200, 0x4, 0x40, 0x80000001, 0x1, 0x40, 0x9, 0x7, 0xa, 0xfffffff9, 0x1, 0x200, 0x5, 0x4, 0x81, 0x80000000, 0xfffff801, 0xb396, 0x1, 0x1, 0x8001, 0x100, 0x21, 0x5, 0x7b4c, 0x5, 0x0, 0x8000, 0x5, 0x9, 0x0, 0x3, 0x9, 0x81, 0x8001, 0x48c, 0x4, 0x3, 0x3, 0x8, 0x4, 0x3a8, 0x17d7cfe3, 0x4ed1, 0x10001, 0x7, 0xe, 0xba, 0x1, 0x3, 0x9, 0x2, 0x7, 0x5, 0x80000000, 0x40, 0x8, 0x1, 0xffff15ea, 0x3, 0x6, 0x8, 0x0, 0x7ff, 0x4, 0x8000, 0x80, 0x10, 0x6, 0x1, 0x9, 0x3, 0x2, 0x10000, 0x9, 0x6, 0xd7ac, 0x6, 0x1, 0x6c9, 0x2, 0x10000, 0x3, 0x5, 0x800, 0x28, 0x7, 0x1728, 0x0, 0x7fffffff, 0x4, 0x1, 0x3d3, 0xffffffff, 0x3, 0xfffffffe, 0x1, 0x319, 0x81, 0x6, 0x3, 0xfa80, 0x400, 0x7, 0x9, 0xfff, 0xb, 0x7, 0x8, 0x9, 0xd0e4, 0x8001, 0x344, 0x4, 0xffffff01, 0x5c, 0x3, 0x9, 0x81, 0x6, 0x2, 0xf840, 0x8001, 0x4, 0x5, 0x2, 0x5f25, 0x6, 0x45b, 0x6, 0xd770, 0x6, 0xf, 0xfff, 0x4, 0x6, 0xd8f, 0xb3c0, 0x0, 0x7, 0xfffffffc, 0x0, 0x8, 0x7, 0x12, 0x8, 0x3, 0xff, 0xf, 0x7, 0x10001, 0x6, 0x2, 0x80, 0x5f8, 0xfffffff7, 0x4, 0x101, 0x1, 0x1, 0xffffff00, 0x9, 0x1000, 0x4, 0x80, 0x2, 0x9, 0x7fffffff, 0x5, 0x10000, 0x8a, 0x2, 0x1, 0x2, 0xf70, 0x4, 0x7, 0x8, 0xe9be00, 0x8, 0x200, 0x5, 0x5, 0x5, 0x3, 0x5, 0x7, 0x6, 0x5, 0x5, 0x7f, 0x3, 0x7, 0x100, 0xe, 0x5, 0x6, 0x3, 0x1000000, 0xe, 0x0, 0x87cc, 0xfffffffc, 0x9, 0x0, 0x7fff, 0x0, 0x5098, 0x8001, 0x9, 0x4, 0xff, 0x1, 0x7, 0x6, 0x1, 0x9, 0x1, 0x1, 0x9, 0x2, 0x3ff, 0x6, 0x1, 0x8, 0x3, 0x300, 0xff5, 0xd, 0x17, 0x1, 0x9, 0x3, 0x8001, 0xfffffffd, 0x6, 0x4d, 0x9, 0x3, 0x200, 0x3, 0x3, 0x5, 0x9fb7, 0x3, 0xdb, 0x8, 0x80000001, 0x3, 0x9a, 0x10, 0x3, 0x10000, 0x10001, 0x7, 0x8, 0xfff, 0x9, 0x4, 0xffffffc0, 0x2, 0x2, 0x4, 0x1000, 0x40, 0x6228, 0x2, 0x7f, 0x2, 0x7, 0xff, 0x5, 0xfffffff7, 0x1, 0xdd8, 0x4, 0x4, 0x2, 0x101, 0x9, 0x7ff, 0x6, 0x9, 0x0, 0x9, 0x136, 0x6, 0x3, 0x800, 0x9, 0x13f5, 0x5, 0x6, 0x7, 0x2, 0x400, 0x8, 0x200, 0x7, 0x1, 0x80000001, 0x3, 0x8, 0x6, 0xc, 0x6, 0x4, 0x5, 0x2, 0x34a2, 0x101, 0xcd, 0x5, 0x73, 0xf, 0x4, 0x4, 0x0, 0xa, 0x4, 0xfffffffe, 0x7, 0x0, 0xfffffffc, 0x81, 0xc, 0xe8, 0x3, 0x5, 0x198, 0xf6, 0x3, 0xfffffffc, 0xf, 0x0, 0x7fff, 0x2, 0x7f, 0x8000, 0xff, 0xd9, 0x9, 0x8, 0x401, 0x5, 0x5, 0x9, 0x9, 0x1, 0xff, 0x5, 0x8, 0x3, 0x10000, 0x7fff, 0x7, 0x7, 0x8000, 0x2, 0x0, 0x5, 0x10, 0x3, 0x1, 0xab, 0xf0, 0x26af, 0x7, 0x9, 0xfb26, 0x3, 0x9, 0x5, 0x4, 0x1, 0xffffcfa7, 0x9, 0x532, 0x2, 0x1, 0xff, 0x2, 0x1eb7, 0x45e, 0x6, 0x1, 0x1, 0x4, 0x2, 0x9, 0x800, 0xfffffffe, 0x3, 0x8, 0x0, 0x3, 0x40, 0x0, 0x1, 0x8001, 0x6, 0x6, 0x40, 0x7, 0x7fff, 0x8, 0x200, 0x4, 0x1c, 0x1, 0x1, 0x2, 0x7, 0x6, 0xffff32c6, 0x6, 0x9, 0x8, 0x5, 0x5c8, 0xff, 0x6, 0x688, 0x3, 0xf31, 0x7f, 0x0, 0x7, 0x5, 0x9, 0xfffff4a6, 0xd, 0x3, 0x0, 0x7f, 0x4, 0x9, 0x8, 0xd, 0x6, 0x81, 0x5, 0x8, 0x3, 0x0, 0x40, 0xffff, 0x400, 0x3, 0x3, 0x9, 0x9, 0x6, 0x8, 0x0, 0xffff473e, 0x401, 0x1, 0x3, 0x5be0, 0x3ff, 0x8, 0xc0000, 0x644d, 0x10000, 0x8, 0xfffffff9, 0xffff, 0x3, 0x2, 0x7, 0x7ff, 0x2, 0x3, 0x1, 0x7f, 0x30000, 0x7ff, 0xffffffff, 0x80000000, 0x7fffffff, 0xac, 0x4, 0x9, 0x1000, 0xf42, 0x0, 0xc391, 0x8, 0xffff4ee1, 0x5, 0xffffffff, 0x5, 0x7ff, 0x131, 0x7fff, 0x7f, 0x2, 0x6, 0xa, 0x2, 0x5, 0x3, 0x46, 0x2, 0x80000001, 0xd0a, 0xc00, 0x2, 0x800000, 0x7, 0x7, 0x3, 0x3df, 0x3, 0xd, 0x40, 0x1000, 0xffffffff, 0x8, 0x6, 0x5b0f, 0x9, 0x7098, 0x5, 0x7fffffff, 0xfffffffe, 0xffff, 0x7f, 0xfffffff9, 0x9, 0x80, 0x8, 0x3, 0x4, 0xb0b, 0x8, 0xffff, 0x0, 0x80000001, 0x5, 0x9, 0x1400, 0x3, 0x4, 0x100, 0x200, 0x2, 0x7ff, 0x9, 0x23f, 0xfffffffe, 0xffff, 0x4, 0x9, 0x5, 0x7fffffff, 0x10, 0x9, 0x1, 0x7f, 0x98a7, 0x800, 0x4, 0x8aa, 0x6b5, 0x7, 0x7, 0x40, 0x839, 0x4, 0x1a, 0x43, 0x5, 0x200, 0x5, 0x0, 0x4, 0x8, 0x38f, 0xfffffff9, 0x80000001, 0x2, 0x1, 0x5, 0xbd, 0x9, 0x1, 0x6ea82a99, 0x9, 0xbdc2, 0x3, 0x7, 0x3, 0x10000, 0x4, 0x5d32933e, 0x5, 0x6d, 0x1, 0x1c25, 0x7, 0x7f, 0x4, 0x7, 0x4, 0x8, 0x7ce, 0x40, 0x0, 0xf, 0x7, 0x80000000, 0x3, 0x3, 0xf6, 0x4, 0x4, 0x4, 0x3, 0x401, 0x9, 0x3, 0x0, 0x100, 0x4, 0x7, 0x1ff, 0x9, 0x2, 0x9943, 0x100, 0x4, 0x2, 0x1000, 0xd02, 0x4, 0x7, 0x54, 0x0, 0x4, 0x1c83, 0x21, 0x0, 0x4, 0x5, 0x1, 0x800, 0x8, 0x3, 0x0, 0xfffffffa, 0x7, 0x9, 0x10, 0x6, 0xe0f0c66, 0x5, 0x8, 0x1, 0x8, 0xd, 0x3ff, 0x0, 0x7, 0x5, 0x7, 0x2000000, 0x7, 0x7, 0x6, 0x8d6, 0x8, 0x6593, 0xffffff81, 0x2, 0x4, 0xa05d, 0x8, 0x8, 0x3, 0x5, 0x3ff, 0x3, 0x0, 0xf, 0x6, 0x5a0, 0xbcaf, 0xfffffff8, 0x40, 0xfffff19c, 0x5, 0x0, 0xffffffff, 0x2, 0x401, 0x7, 0x9, 0x9, 0x1ff, 0x5, 0x7fff, 0x8, 0xfffff800, 0x4, 0x4, 0x4, 0xffff17a5, 0x200, 0x3, 0x9, 0x3ff, 0x1, 0x0, 0x200, 0x1ff, 0x6, 0x3, 0x232, 0x6, 0x40, 0x0, 0x7b, 0x9, 0x49a, 0x8001, 0x1, 0x0, 0x6, 0xdc, 0xfa, 0x2, 0x400, 0xfffffffb, 0x6, 0x0, 0x9, 0xbe, 0x7f, 0xd5, 0xffffff00, 0x9, 0x8, 0x2, 0x1, 0x1, 0x7, 0x7, 0x1ff, 0x4, 0x0, 0x6, 0xa, 0x4, 0xc0000, 0x1, 0xfffffffe, 0x4, 0x9, 0x1, 0xf208, 0x4, 0x9, 0x2, 0x7, 0x3, 0x1, 0x6, 0xbb, 0x6, 0x9, 0x1bbae4e7, 0xa, 0xf, 0x1, 0xd, 0x3, 0x2, 0xb094, 0x3, 0x6, 0x2, 0x100, 0x6, 0x3, 0x9, 0x3, 0x2, 0x7, 0x8, 0x2, 0x1, 0xcd, 0x1, 0x7fffffff, 0x5f, 0x6, 0x6, 0x9, 0x3, 0xa, 0x3, 0x8, 0x0, 0x9, 0x5, 0xfff, 0x8, 0x2, 0x6, 0x8, 0x0, 0x7, 0x5, 0x8af1, 0x1, 0x7, 0xfffffff7, 0x2243, 0x9, 0x7ff, 0x5, 0x4, 0x59e, 0x1, 0x2, 0x1, 0x9, 0x7f, 0x6, 0x4, 0x4, 0x6, 0x2, 0x9, 0x4, 0x2, 0x3f171ea3, 0x3, 0x5, 0x9, 0x2, 0x80, 0x200, 0x7fffffff, 0x3, 0x4e09, 0x2, 0x1, 0x3ff, 0x1, 0x8, 0xfffffff7, 0x3, 0x0, 0xc, 0x3, 0x10001, 0x0, 0x6, 0x8000, 0x0, 0xffffffff, 0x8, 0x5, 0x9, 0x3, 0x31, 0x0, 0x0, 0x9a0, 0x81, 0xcf1, 0x23d, 0x3, 0x5, 0xa836, 0xa4f8, 0x6, 0x4, 0x6, 0x80, 0xfff, 0xffff, 0xc9, 0x8, 0xb, 0x69f, 0x0, 0x8000, 0x3, 0x800, 0x3a, 0x10000, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0xffffffff, 0x1, 0xe1, 0x0, 0x4d593afd, 0x33, 0x80, 0x0, 0x5, 0x3, 0xfff, 0x3, 0x8, 0x2c04, 0x1, 0x5, 0x7, 0x2, 0x8, 0x0, 0x4, 0x0, 0x10, 0x3, 0x10, 0xa27158fe, 0x6, 0x7, 0x4, 0x3, 0x401, 0xd6, 0xfffffe00, 0x2, 0x0, 0xc, 0x1, 0x7, 0x41ed, 0x6a, 0xb, 0x1, 0x40000, 0x3, 0x8, 0xddd8, 0x3dd, 0xff, 0x80000000, 0xc, 0x2, 0x1b, 0x0, 0x0, 0x0, 0x7f0, 0xe1, 0xd6e, 0x3, 0x8, 0x4, 0xfffffffb, 0x7fffffff, 0x2, 0x6, 0x46a0911c, 0x3b, 0x0, 0x10, 0x78, 0x6c2, 0x11, 0x157, 0xd, 0x400, 0x2, 0x4, 0x1, 0x0, 0x8000, 0xaf, 0x3ff, 0x800, 0x5, 0x80000000, 0x5, 0x1, 0x843f, 0x6, 0x100, 0x1ff, 0x4, 0x9, 0x4, 0x5, 0x5, 0x9f, 0x100, 0x0, 0x0, 0x8, 0xd7, 0xffffffff, 0x0, 0x9, 0x9, 0xfffffffc, 0x8000, 0xc, 0x7fffffff, 0x2, 0x1, 0x5, 0x2, 0x2, 0x3, 0x58, 0x1, 0xffffffff, 0x7, 0x80000000, 0x2, 0x9, 0x1000, 0x217, 0xd, 0xa, 0x3d51, 0x1, 0x7, 0x2, 0x10001, 0x6, 0x5, 0x3ff, 0x62, 0x3ff, 0x5, 0x4, 0x9, 0x2, 0x7ff, 0xffffff49, 0x6, 0x7, 0x7, 0xe4c, 0x6, 0x8, 0x3ff, 0x10, 0x1, 0x8, 0x80, 0x5, 0x1cd6, 0x4, 0x4, 0x1ff, 0x7, 0x400, 0x1, 0xd, 0x64, 0x6, 0x0, 0x4, 0xf19, 0x81, 0x8001, 0x3, 0x0, 0xffffffff, 0x8, 0x81, 0x1, 0xb5, 0xec6, 0xff, 0x3, 0x7, 0xbf7, 0xf, 0x2, 0x7, 0x1, 0x2, 0xc, 0xc, 0x7, 0x9, 0x8, 0x1000, 0x7, 0x8, 0x200, 0x101, 0x3, 0x1, 0x7fffffff, 0x81, 0x7f, 0x6, 0x5, 0x44, 0x2f4, 0xac, 0x5, 0x2, 0x4, 0x3, 0x0, 0x8, 0xde5, 0x0, 0x2, 0x6, 0x2, 0x7f, 0x8000, 0x6, 0x0, 0xffffffff, 0xd01, 0x6, 0x7, 0x6, 0x56c3f68f, 0x8f4c867, 0x3, 0x8, 0x8, 0x3, 0x5, 0x7, 0x0, 0x401, 0x2, 0x4, 0x8, 0xfff, 0x80, 0x0, 0x98, 0xb, 0xfff, 0xac1, 0x6, 0x0, 0xafd, 0x62e8, 0x0, 0x5319, 0xf45f, 0x5, 0xe5c, 0x0, 0x1, 0xfffffff7, 0x8, 0x10000, 0x101, 0x4, 0x1, 0xffff, 0x7d2, 0x8, 0x1d622135, 0x6, 0x5, 0x3, 0x7f, 0x1, 0x81, 0x0, 0x1000000, 0x3, 0xc, 0x9, 0x8, 0x7d3, 0xca, 0x1, 0x1b, 0x8, 0x8, 0x2, 0x8, 0x1, 0x4, 0x5, 0x7, 0x0, 0x101, 0x2, 0x101, 0x3, 0x7fffffff, 0x1, 0x2, 0x4ee8, 0x5, 0x8000, 0x80, 0x80, 0xfffffff9, 0x10, 0x8, 0x4e, 0x6, 0x0, 0x8, 0x200, 0xc, 0xfb7f, 0xfffffffc, 0x6, 0x5, 0x0, 0x0, 0xbcf, 0x9, 0xc, 0x80000001, 0x6, 0x9, 0x4, 0x5, 0xfffffffb, 0x9, 0x8, 0x7b48, 0x791, 0x5, 0x2, 0x5, 0x67a, 0x7ff, 0x2, 0x7, 0x0, 0x97, 0x0, 0x7, 0x1ff, 0x1, 0xc6, 0x7, 0x7fffffff, 0x1, 0x3, 0x0, 0x5, 0x5, 0x60000, 0x7, 0x5, 0x1000, 0x101, 0xfe000000, 0xea0, 0x200, 0x6, 0x7, 0x9, 0x7, 0xab, 0x41, 0x8, 0x6, 0x2, 0x401, 0x9, 0x870, 0x3e, 0x0, 0x9, 0x5, 0x7, 0x10000, 0x1, 0x0, 0x3, 0xc2, 0x1, 0x1, 0x8, 0xfffff554, 0x7, 0x2, 0x3, 0x643, 0x6, 0x45, 0x6, 0xdc8, 0x8, 0x9, 0x8, 0x8, 0x566fd19, 0x3, 0xfffffff8, 0x0, 0x7, 0x82, 0x6, 0x5, 0x2, 0x8, 0x4, 0x3, 0x59e, 0xb, 0x80000000, 0x8, 0x7ff, 0x80000001, 0x80000001, 0x2, 0x9, 0x8, 0x7, 0x6, 0x8, 0x2, 0x2, 0x7, 0xe9, 0x10001, 0x4, 0x0, 0xe0, 0x1, 0x0, 0x5, 0x8, 0xffffffff, 0x8, 0xe02, 0x5, 0xffff2e80, 0x1, 0x2db3, 0x90, 0xc6000000, 0xc47, 0x66, 0x2, 0x0, 0xfffffff9, 0xe6e, 0x6, 0x200, 0x756d, 0x5, 0x8, 0x2, 0x6, 0x200, 0xb, 0x401, 0xc05b, 0x5, 0x81, 0x9, 0x1400, 0x5, 0xfff, 0xdd, 0x9953, 0x7, 0x0, 0x9fd, 0x8, 0x7f, 0x80000001, 0x2, 0xea, 0x9, 0x8, 0x80000001, 0x8, 0x2, 0x8, 0xdb0, 0x95, 0x9, 0x5, 0x9, 0x1, 0x0, 0x2, 0x72e7, 0x40, 0x0, 0xd6, 0x3, 0x1ed6, 0x3404de16, 0x2, 0xd9, 0x6, 0xc687, 0x8, 0x3, 0x1, 0x8, 0xcd3, 0x3ff, 0xf3, 0x4, 0x6, 0x9, 0x2, 0xd3, 0x5, 0xffff, 0x17763f25, 0x6, 0x8001, 0x11, 0x6, 0x9, 0x6, 0xc, 0x10001, 0x5, 0x200, 0xfffffffc, 0x1, 0x9, 0x1, 0x7, 0x0, 0x40, 0x8, 0x0, 0x1b3, 0x0, 0x6, 0x8, 0x3, 0x10, 0x8, 0xb6be, 0x2, 0x7ff, 0xcf6d, 0xd9bb, 0x6, 0x1, 0x6, 0xaae, 0x401, 0x8, 0x7fffffff, 0x8, 0x2, 0x9, 0x4b, 0xfffffff7, 0x1, 0x7, 0x80000000, 0x7, 0x6, 0x5367, 0x5, 0xffffffff, 0x82b8, 0x2, 0x7ed, 0x48811ac2, 0x7, 0xc00000, 0xc2, 0x3, 0x9, 0x8, 0x4, 0x8, 0x0, 0xff, 0xfff, 0xfff, 0x0, 0x81, 0x1, 0x7fff, 0x5, 0x9, 0x2, 0xf0, 0xcb6, 0xaa, 0x2, 0x800, 0x400, 0x7, 0x6, 0x2, 0xece, 0x37a6e42d, 0x8001, 0x4c, 0xff, 0x80000000, 0x8, 0x1, 0x6, 0xfffffffe, 0x101, 0x5, 0x4, 0x4, 0x9, 0xcd, 0xffffffff, 0x0, 0xca, 0x0, 0x7, 0x0, 0xfffffff7, 0xd80f, 0x10000, 0x6, 0x6, 0x5, 0x9, 0x0, 0x42b, 0x7, 0x3c, 0x1, 0x1000, 0xffff, 0x7, 0x6, 0x3, 0xaccae58, 0x200, 0x8, 0x0, 0x6b, 0xf67, 0x3a8a, 0x8, 0x80000000, 0xfff, 0x3, 0x2, 0x7, 0x7, 0x8, 0x6, 0xc, 0x6, 0x7, 0x7, 0x2755, 0x688, 0x4, 0xd, 0xffffffff, 0xe, 0x5, 0x56, 0xc, 0x2e, 0x9616, 0x101, 0x4, 0x800, 0x24, 0x8, 0x2, 0x2, 0x48, 0x2, 0x3, 0x7a9, 0x9, 0xfffffffd, 0xe, 0x2, 0xffff, 0x3f, 0x2, 0x3b, 0x2, 0xfffff001, 0xd, 0x5, 0x3, 0x5, 0x1, 0x1, 0x2, 0x8, 0x9, 0x5, 0x442, 0x9, 0x4, 0x0, 0x0, 0x9, 0x8, 0x7, 0x4, 0x3, 0x9127, 0x877e, 0x401, 0x85bf, 0xcf9, 0x6, 0x6, 0xfffffff9, 0x1, 0x579, 0x8001, 0x8, 0x7, 0x7, 0x3ff, 0x1c00, 0x6, 0x1, 0xa00, 0xffffffff, 0x1, 0x900, 0xffffffff, 0x3, 0x8, 0xc9, 0x3, 0x6, 0x6, 0x9, 0xffffffcf, 0x9, 0x7, 0x7, 0x4, 0x32, 0x3, 0x6, 0x7, 0x0, 0x4, 0xa, 0x9, 0x2, 0x81, 0x6, 0x9, 0xa3, 0x4, 0xf, 0xffff, 0xf664, 0x9, 0x7ff, 0xfffffffb, 0x7, 0xab, 0x7, 0x9, 0x7, 0x3, 0x10, 0x5, 0x7, 0x7, 0x0, 0x2, 0x8000, 0x7, 0x9, 0x6, 0x64, 0x6c2, 0x8, 0xfffffffe, 0x5, 0x1, 0x5, 0xee, 0x3, 0x7f33, 0xbb, 0x1, 0x101, 0x5, 0x41, 0x4, 0x6, 0x6, 0x6, 0x8, 0x3, 0xf, 0x7, 0x480, 0x4, 0xbd, 0x789a, 0x6, 0x8, 0xddc4, 0x100, 0x3, 0x8001, 0x7, 0x3, 0xf, 0xfffffffd, 0x70000, 0x4, 0xd47, 0x5, 0x8000, 0x4, 0x5, 0x9, 0x5, 0xbbe, 0x9, 0x3], 0x5, 0x5}, {0x2000006, 0x0, 0x0, 0x1, 0x2}]}) 1.918175955s ago: executing program 9 (id=5202): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x70, &(0x7f0000000100)}, 0x1c) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r3}) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000180)={0x2, 0x7, 0x2, 0xfb45, 0x3, "0d5f078393b87ad2"}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000380)={0x1, r4, r3}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES32=r3], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x7f, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b080045240028026c2dbb647d65000000069078ac1414bbac1414", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5404000090780000"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x89b0, &(0x7f0000000080)={'veth0_to_hsr\x00', &(0x7f0000000100)=@ethtool_channels={0x1, 0x1, 0x0, 0x1000, 0x0, 0xffffdffc, 0x3, 0xfffffffc}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaafffff8ffffff0800452400280068000000069078ac1414bbac1414aa00004e224f5ff0af6a20ede1dcc1f16ce08779f3845a9e2271f8eec50e89020cf995526891052930bceb4765098a1695e7837ea83f43f002ba36018026dcf991ba9ffafd08b2c7eaca0c70196f8a6903ed86891b38b980bbb9caae14f8b9bc047dd2ca99b2c98c19dfe900ede8372799a29b63e2", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5404000290780000"], 0x0) 1.917883291s ago: executing program 7 (id=5203): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000340)={0x4, 0x0, 0x3013, 0xff4f}) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000580)={0x27, 0x0, 0xffffffff, 0x3, 0x0, 0x3, "750538b0ee4b2e000200000000000051bb2cd0893b1f6a120d8be656b81cd86c00000000000000000000000000000000000200", 0x10000016}, 0x58) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="666455b7e10c58ce255f6f6ecaa1822289026fac59702acfdb25aa4b8f30e7", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 1.820986604s ago: executing program 7 (id=5204): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) (async) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000001840), 0x3b, 0x0) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000390400000000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="01990000419a0400480012800b000100697036746e6c000038000280060010000200008014000300fe800000000000000600106b39a536f425d012bf00000800000500090029000005"], 0x68}}, 0x0) (async) fsync(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x103080) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000380)={0x0, 0x9dc8, 0x0, 0x0, 0xf}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) (async) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0xa100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x2000000, 0xf8, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000000)=0x8) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) 1.690279084s ago: executing program 5 (id=5205): close(0x3) 1.687958168s ago: executing program 7 (id=5206): r0 = socket(0x10, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000003000000000005200", 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001100), 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbed4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x20, r3, 0x605, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r5 = openat$vimc0(0xffffff9c, &(0x7f0000001400), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f00000005c0)={0x3, 0x4, 0x4, {0xa, @raw_data="81299802e2b9f80ab6b2809138c6aaa79131deafd0a9322bf2a631fe4cb0df82c8425ef1717da0c87a35db74094efe18dd5eeef7bbf3a18877858eb7bb0050ebd03d7a52287e859b0142db326774f531acf949bb5f1617d15861ca05a02148b5c41eaa630c0b7946ea135bc9eaec31d6d4d26606f524f336fe66418a57c8fd0a8ab7add13e8fe42fa4b4354076bdf32a93eba41b8c3e3b68e3deaf12f9a583ec7bc68d0c1843ac0c58bb41e9b1fedc92dd8032e0c70e161615809c946750f9f44eb5368f5debe32d"}, 0x3}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8=r5, @ANYRESDEC=r5, @ANYRES64=r5], 0x26}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/tipc/key_exchange_enabled\x00', 0x1, 0x0) write(r6, &(0x7f0000000140)='1\n', 0x2) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f00000004c0)={r10, 0x0, 0x4, 0x6f47, 0x2, [0x0], [0x0, 0x0, 0x0, 0x4], [0x800, 0x0, 0xfffffffc], [0xfffffffffffffffd]}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000000)={r11}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f00000001c0)={0x0, 0x0, 0x1}) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r13 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r13, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r14, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f00000012c0)={r15, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r13, 0xc00c642d, &(0x7f0000000040)={r16}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r12, 0xc00c642d, &(0x7f0000000080)={r16}) 1.626231228s ago: executing program 5 (id=5207): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000240)={0x300, 0x1, 0x71, '\x00', &(0x7f0000000200)=0xa5}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000002000900"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4, r0}, 0xc) socket$l2tp(0x2, 0x2, 0x73) 828.546837ms ago: executing program 8 (id=5208): add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f0000000240), 0x8, 0x10800) syz_ublk_setup_io_uring(0x6a33, &(0x7f0000000080)={0x0, 0x30f8, 0x0, 0x2, 0x223}, &(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0xaa, &(0x7f0000000500)={0x0, 0xe996, 0x20800, 0x1, 0x3}, &(0x7f0000000440)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit$UBLK(0x0, 0x0, r4, &(0x7f0000001480)=@ublk_set_params_sqe={0x2e, 0x67, 0x0, 0xffffffffffffffff, 0xc0207508, 0x0, 0x0, 0x0, 0x1, 0x3ff, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001500)=@ublk_io_need_get_data_sqe={0x2e, 0x2a, 0x0, 0xffffffffffffffff, 0xc0107522, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x0, 0xc2, 0x3, 0x0}}) syz_io_uring_submit(r1, r3, 0x0, &(0x7f00000001c0)=@IORING_OP_SOCKET={0x2d, 0x4c, 0x0, 0x1, 0x1000, 0x0, 0x7, 0x0, 0x1, {0x0, 0x0, 0x9}}) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYBLOB="7e79b8", @ANYBLOB="00000000001400002400128009000100626f6e64000000001400028008000300042000000800070001000000"], 0x44}}, 0x400c080) r8 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x6a, 0x10, 0x0, &(0x7f0000000080)) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002) mmap(&(0x7f000039f000/0x4000)=nil, 0x4000, 0x9, 0x11, r9, 0x0) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r10, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="20002bbd7000fedbdf25280000000a0006005050505050500000"], 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x84) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r12 = syz_open_dev$admmidi(&(0x7f0000000140), 0xe, 0x0) readv(r12, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r13, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 794.165187ms ago: executing program 7 (id=5209): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000), 0x4) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000200)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) bind$llc(r5, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r7) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x74, r8, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004001}, 0xc0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r7, 0x0, 0xffffffff000) recvmmsg(r5, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r9, &(0x7f0000000400)='1', 0x1) r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r10, &(0x7f0000000600)='1', 0x1) 768.232697ms ago: executing program 9 (id=5210): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000cc0)={0x34, &(0x7f0000000b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r1, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000000)="46a1a0995a02", 0x0, 0x0, 0x14, 0x0, 0x0}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'aio_aio12_8\x00', [0x140, 0x0, 0xd, 0x0, 0x2, 0x4, 0x4, 0x2, 0x7, 0x2c731, 0x4000004, 0x7, 0x2009, 0x8, 0x4ce, 0x9e9b, 0x103, 0x80000006, 0x6, 0x0, 0x7, 0x2, 0x2f, 0x81, 0xffd, 0x6, 0xab, 0x1, 0x283, 0x8001, 0x400006]}) 767.418509ms ago: executing program 5 (id=5211): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0x7ffffffffc}) r1 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000240)=0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r5, &(0x7f00000002c0), 0x4001) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file1/file2\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file2\x00', 0xc0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() 317.635771ms ago: executing program 8 (id=5212): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x9, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$kcm(0x29, 0x2, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r5, &(0x7f00000014c0)=[{&(0x7f0000000800)=""/203, 0xcb}], 0x1, 0x182, 0x20010000) ptrace(0x10, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x0, 0x1, 0x7, {{0x32, 0x4, 0x3, 0x9, 0xc8, 0x65, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x27, 0xc3, [@remote, @local, @local, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}, @empty, @multicast2, @multicast2]}, @rr={0x7, 0x1b, 0x5f, [@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local, @multicast1]}, @noop, @rr={0x7, 0x1b, 0xaa, [@rand_addr=0x64010100, @empty, @private=0xa010101, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @ssrr={0x89, 0x13, 0x31, [@multicast1, @dev={0xac, 0x14, 0x14, 0xc}, @remote, @dev={0xac, 0x14, 0x14, 0xba}]}, @timestamp_addr={0x44, 0x3c, 0x37, 0x1, 0x7, [{@remote, 0x9}, {@local, 0x2}, {@rand_addr=0x64010100, 0x9}, {@empty, 0x6}, {@loopback, 0x5}, {@multicast2, 0x9}, {@multicast1, 0xfffffffc}]}, @rr={0x7, 0x7, 0xef, [@loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) r8 = socket$inet(0x2, 0x1, 0x6) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r9, 0x5411, 0xffffffffffffffff) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000f80)={0x80000000, &(0x7f00000003c0), 0x0}) bind$inet(r8, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000002d0007012bbd7000fedbdf25077c1000080001800400dd80040003803f"], 0x60}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) listen(r8, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000140)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000380)=ANY=[@ANYRES32=r5]) 240.87772ms ago: executing program 9 (id=5213): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x8002) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8) ioprio_set$uid(0x3, 0x0, 0x65000000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}, {@xino_auto}]}) chdir(&(0x7f0000000140)='./bus\x00') syz_open_procfs(0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE \''], 0x8c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) setresuid(0x0, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xffffffffffffffff) 0s ago: executing program 5 (id=5214): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = geteuid() ioprio_set$uid(0x0, r1, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ft promiscuous mode [ 732.055693][T22282] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 732.061050][T18917] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.061136][T18917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.085967][T18917] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.086114][T18917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.308614][ T5817] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 732.309152][ T5817] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 732.309227][ T5817] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 732.309265][ T5817] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 732.381549][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 732.404623][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 732.423244][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 732.427527][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 732.432029][ T5745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 732.576045][T22298] syzkaller0: entered promiscuous mode [ 732.581615][T22298] syzkaller0: entered allmulticast mode [ 733.234420][ T5611] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 733.234495][ T5611] bridge1 (unregistering): left promiscuous mode [ 733.234532][ T5611] bridge1 (unregistering): left allmulticast mode [ 733.270966][ T5611] bond0 (unregistering): Released all slaves [ 733.276724][ T5611] bond1 (unregistering): Released all slaves [ 733.289512][ T5611] bond2 (unregistering): Released all slaves [ 733.562276][ T5611] tipc: Disabling bearer [ 733.565006][ T5611] tipc: Left network mode [ 734.149429][T22291] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.149547][T22291] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.149653][T22291] bridge_slave_0: entered allmulticast mode [ 734.151591][T22291] bridge_slave_0: entered promiscuous mode [ 734.183153][T22291] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.183299][T22291] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.183437][T22291] bridge_slave_1: entered allmulticast mode [ 734.184724][T22291] bridge_slave_1: entered promiscuous mode [ 734.341513][ T5452] 8021q: adding VLAN 0 to HW filter on device eth14 [ 734.380065][T22291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.381909][T22291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.415357][T22291] team0: Port device team_slave_0 added [ 734.420163][T22291] team0: Port device team_slave_1 added [ 734.437420][T22291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.441404][T22291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.453032][T22291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.458763][T22291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.461922][T22291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.461952][T22291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.498243][ T5098] Bluetooth: hci0: command tx timeout [ 734.570974][ T5611] IPVS: stopping backup sync thread 19734 ... [ 734.580408][T22332] overlayfs: failed to resolve 'smackfsdef=': -2 [ 734.651939][T22291] hsr_slave_0: entered promiscuous mode [ 734.652835][T22291] hsr_slave_1: entered promiscuous mode [ 734.653331][T22291] debugfs: 'hsr0' already exists in 'hsr' [ 734.653349][T22291] Cannot create hsr debugfs directory [ 735.721813][ T5611] hsr_slave_0: left promiscuous mode [ 735.722454][ T5611] hsr_slave_1: left promiscuous mode [ 736.210003][ T5452] 8021q: adding VLAN 0 to HW filter on device eth15 [ 736.466263][T22291] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 736.474034][T22291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 736.477058][T22291] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 736.518500][T22291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 736.519956][T22291] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 736.528227][T22291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 736.528967][T22291] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 736.533072][T22291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 736.578173][ T5098] Bluetooth: hci0: command tx timeout [ 737.014096][T22291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.032525][T22291] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.066203][T18916] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.066321][T18916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.083243][T14220] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.083388][T14220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.134151][ T5611] IPVS: stop unused estimator thread 0... [ 737.174445][T22291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 737.366932][ T5452] 8021q: adding VLAN 0 to HW filter on device eth16 [ 738.658485][ T5098] Bluetooth: hci0: command tx timeout [ 739.379524][ T5452] 8021q: adding VLAN 0 to HW filter on device eth17 [ 739.555395][T22291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.199816][T22291] veth0_vlan: entered promiscuous mode [ 740.224322][T22291] veth1_vlan: entered promiscuous mode [ 740.269509][T22291] veth0_macvtap: entered promiscuous mode [ 740.276508][T22291] veth1_macvtap: entered promiscuous mode [ 740.298475][T22291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.311433][T22291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.351422][ T5611] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.351497][ T5611] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.351528][ T5611] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.351557][ T5611] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.517954][T18922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.517992][T18922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.603272][T18923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.603330][T18923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.739473][ T5098] Bluetooth: hci0: command tx timeout [ 741.131865][T17759] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 741.324045][T17759] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 741.386660][T17759] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.386900][T17759] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.400237][T17759] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 741.408469][T17759] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.630555][T17759] usb 13-1: config 0 descriptor?? [ 743.150886][T17759] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 743.162125][T17759] usb 13-1: USB disconnect, device number 2 [ 743.331083][T22457] fido_id[22457]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb13/report_descriptor': No such file or directory [ 743.439690][T22459] netlink: 'syz.4.4819': attribute type 13 has an invalid length. [ 743.482562][T22459] mac80211_hwsim hwsim35 syzkaller0: Caught tx_queue_len zero misconfig [ 743.483919][T22462] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 743.487062][T22462] netlink: 'syz.5.4820': attribute type 1 has an invalid length. [ 743.511111][T22459] nbd: socks must be embedded in a SOCK_ITEM attr [ 743.516111][T22459] block nbd1: shutting down sockets [ 743.890144][T22473] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4822'. [ 743.943515][T22473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4822'. [ 743.943604][T22473] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4822'. [ 744.183669][T22476] netlink: 'syz.4.4823': attribute type 16 has an invalid length. [ 744.183720][T22476] netlink: 'syz.4.4823': attribute type 17 has an invalid length. [ 744.275176][T22476] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 744.552602][T22483] netlink: 'syz.7.4825': attribute type 1 has an invalid length. [ 745.773791][T22509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4830'. [ 745.774896][T22509] bridge_slave_1: left allmulticast mode [ 745.775234][T22509] bridge_slave_1: left promiscuous mode [ 745.777329][T22509] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.888377][T22509] bridge_slave_0: left allmulticast mode [ 745.888462][T22509] bridge_slave_0: left promiscuous mode [ 745.888722][T22509] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.824136][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.824294][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.841450][T22534] jffs2: notice: (22534) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 746.851348][T22533] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 746.851426][T22533] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 746.851548][T22533] overlayfs: failed to get uuid (105/file2, err=-13); falling back to uuid=null. [ 747.755265][T22538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.848835][T22542] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 747.852030][T22542] netlink: 'syz.4.4842': attribute type 1 has an invalid length. [ 747.987849][T22544] Bluetooth: MGMT ver 1.23 [ 748.819448][T22554] FAULT_INJECTION: forcing a failure. [ 748.819448][T22554] name failslab, interval 1, probability 0, space 0, times 0 [ 748.819533][T22554] CPU: 3 UID: 0 PID: 22554 Comm: syz.7.4845 Tainted: G L syzkaller #0 PREEMPT(full) [ 748.819579][T22554] Tainted: [L]=SOFTLOCKUP [ 748.819589][T22554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 748.819603][T22554] Call Trace: [ 748.819611][T22554] [ 748.819620][T22554] dump_stack_lvl+0x100/0x190 [ 748.819673][T22554] should_fail_ex.cold+0x5/0xa [ 748.819702][T22554] should_failslab+0xc2/0x120 [ 748.819731][T22554] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 748.819757][T22554] ? __alloc_skb+0x140/0x710 [ 748.819787][T22554] __alloc_skb+0x140/0x710 [ 748.819806][T22554] ? __alloc_skb+0x5b7/0x710 [ 748.819827][T22554] ? __pfx___alloc_skb+0x10/0x10 [ 748.819847][T22554] ? genl_rcv_msg+0x4be/0x800 [ 748.819880][T22554] netlink_ack+0x117/0xb80 [ 748.819902][T22554] ? __lock_acquire+0x4c5/0x1ec0 [ 748.819940][T22554] netlink_rcv_skb+0x333/0x420 [ 748.819961][T22554] ? __pfx_genl_rcv_msg+0x10/0x10 [ 748.819987][T22554] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 748.820021][T22554] ? netlink_deliver_tap+0x1ae/0xcc0 [ 748.820059][T22554] genl_rcv+0x28/0x40 [ 748.820082][T22554] netlink_unicast+0x585/0x850 [ 748.820110][T22554] ? __pfx_netlink_unicast+0x10/0x10 [ 748.820130][T22554] ? aa_sk_perm+0x389/0xab0 [ 748.820174][T22554] netlink_sendmsg+0x8b0/0xda0 [ 748.820201][T22554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.820225][T22554] ? apparmor_socket_sendmsg+0x165/0x280 [ 748.820255][T22554] ____sys_sendmsg+0xa4d/0xbe0 [ 748.820282][T22554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.820304][T22554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 748.820347][T22554] ___sys_sendmsg+0x190/0x1e0 [ 748.820380][T22554] ? __pfx____sys_sendmsg+0x10/0x10 [ 748.820426][T22554] ? find_held_lock+0x2b/0x80 [ 748.820468][T22554] __sys_sendmsg+0x160/0x210 [ 748.820494][T22554] ? __pfx___sys_sendmsg+0x10/0x10 [ 748.820528][T22554] ? __pfx_ksys_write+0x10/0x10 [ 748.820554][T22554] __do_fast_syscall_32+0x13a/0x8b0 [ 748.820581][T22554] ? lockdep_hardirqs_on+0x7d/0x110 [ 748.820609][T22554] do_fast_syscall_32+0x32/0x70 [ 748.820665][T22554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 748.820691][T22554] RIP: 0023:0xf7fc7fec [ 748.820715][T22554] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 748.820726][T22554] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 748.820748][T22554] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001080 [ 748.820763][T22554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 748.820776][T22554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 748.820790][T22554] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 748.820804][T22554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 748.820834][T22554] [ 748.851795][T22555] pim6reg: entered allmulticast mode [ 748.854019][T22555] pim6reg: left allmulticast mode [ 749.154859][T22570] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4851'. [ 749.173058][T22571] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4851'. [ 749.860658][T22540] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 749.992143][T22581] ima: policy update failed [ 749.992283][ T43] audit: type=1802 audit(1787997299.557:6980): pid=22581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.4852" res=0 errno=0 [ 750.289640][ T43] audit: type=1326 audit(1787997299.857:6981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22593 comm="syz.4.4854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2fec code=0x7ffc0000 [ 750.302595][ T43] audit: type=1326 audit(1787997299.867:6982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22593 comm="syz.4.4854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2fec code=0x7ffc0000 [ 750.314804][ T43] audit: type=1326 audit(1787997299.877:6983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22593 comm="syz.4.4854" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff2fec code=0x7ffc0000 [ 750.325186][ T43] audit: type=1326 audit(1787997299.887:6984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22593 comm="syz.4.4854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2fec code=0x7ffc0000 [ 750.334915][ T43] audit: type=1326 audit(1787997299.897:6985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22593 comm="syz.4.4854" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff2fec code=0x7ffc0000 [ 750.558327][ T43] audit: type=1326 audit(1787997300.127:6986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22593 comm="syz.4.4854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2fec code=0x7ffc0000 [ 750.558401][ T43] audit: type=1326 audit(1787997300.127:6987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22593 comm="syz.4.4854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2fec code=0x7ffc0000 [ 751.082447][T22621] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 751.089450][T22621] netlink: 'syz.5.4861': attribute type 1 has an invalid length. [ 752.223067][T22649] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 752.234930][T22649] netlink: 'syz.7.4868': attribute type 1 has an invalid length. [ 752.275187][T22654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4869'. [ 752.653329][T22666] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4871'. [ 753.080415][T22675] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 753.088193][T22675] netlink: 'syz.8.4874': attribute type 1 has an invalid length. [ 754.176528][T22700] FAULT_INJECTION: forcing a failure. [ 754.176528][T22700] name failslab, interval 1, probability 0, space 0, times 0 [ 754.176585][T22700] CPU: 1 UID: 0 PID: 22700 Comm: syz.8.4879 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.176646][T22700] Tainted: [L]=SOFTLOCKUP [ 754.176653][T22700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 754.176662][T22700] Call Trace: [ 754.176667][T22700] [ 754.176674][T22700] dump_stack_lvl+0x100/0x190 [ 754.176696][T22700] should_fail_ex.cold+0x5/0xa [ 754.176715][T22700] should_failslab+0xc2/0x120 [ 754.176733][T22700] kmem_cache_alloc_noprof+0x92/0x6a0 [ 754.176748][T22700] ? mas_prev+0xa4/0x100 [ 754.176766][T22700] ? vm_area_alloc+0x1f/0x160 [ 754.176786][T22700] vm_area_alloc+0x1f/0x160 [ 754.176804][T22700] __mmap_region+0x107c/0x32c0 [ 754.176826][T22700] ? __pfx___mmap_region+0x10/0x10 [ 754.176846][T22700] ? __lock_acquire+0x4c5/0x1ec0 [ 754.176871][T22700] ? do_raw_spin_lock+0x128/0x260 [ 754.176891][T22700] ? debug_object_activate+0x343/0x4b0 [ 754.176909][T22700] ? do_raw_spin_unlock+0x145/0x1e0 [ 754.176928][T22700] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 754.176948][T22700] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 754.176971][T22700] ? find_held_lock+0x2b/0x80 [ 754.177004][T22700] ? __pfx_mt_find+0x10/0x10 [ 754.177024][T22700] mmap_region+0x3db/0x6d0 [ 754.177038][T22700] ? __pfx_mmap_region+0x10/0x10 [ 754.177050][T22700] ? find_vma_intersection+0xc0/0x140 [ 754.177065][T22700] ? __pfx_find_vma_intersection+0x10/0x10 [ 754.177080][T22700] ? security_mmap_addr+0x71/0x1e0 [ 754.177098][T22700] ? __get_unmapped_area+0x255/0x3e0 [ 754.177115][T22700] do_mmap+0x12c7/0x1c30 [ 754.177134][T22700] ? lock_acquire+0x1d1/0x380 [ 754.177154][T22700] ? __pfx_do_mmap+0x10/0x10 [ 754.177170][T22700] ? futex_wait+0x11e/0x370 [ 754.177188][T22700] ? __pfx_down_write_killable+0x10/0x10 [ 754.177209][T22700] vm_mmap_pgoff+0x28d/0x470 [ 754.177225][T22700] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 754.177240][T22700] ? __pfx_do_futex+0x10/0x10 [ 754.177258][T22700] ksys_mmap_pgoff+0xe4/0x610 [ 754.177274][T22700] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 754.177292][T22700] __do_fast_syscall_32+0x13a/0x8b0 [ 754.177309][T22700] ? lockdep_hardirqs_on+0x7d/0x110 [ 754.177325][T22700] do_fast_syscall_32+0x32/0x70 [ 754.177342][T22700] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 754.177358][T22700] RIP: 0023:0xf7fa5fec [ 754.177373][T22700] Code: Unable to access opcode bytes at 0xf7fa5fc2. [ 754.177379][T22700] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 754.177392][T22700] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000001000 [ 754.177400][T22700] RDX: 0000000000000002 RSI: 0000000004199831 RDI: 00000000ffffffff [ 754.177408][T22700] RBP: 0000000010000000 R08: 0000000000000000 R09: 0000000000000000 [ 754.177415][T22700] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 754.177423][T22700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 754.177439][T22700] [ 754.219148][T22702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4880'. [ 754.317251][T22706] overlay: Unknown parameter 'obj_user' [ 754.375211][T22711] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 754.386858][T22711] netlink: 'syz.8.4883': attribute type 1 has an invalid length. [ 754.701941][T22733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4886'. [ 754.714478][T22733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4886'. [ 754.716942][T22733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4886'. [ 754.722381][T22733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4886'. [ 755.740683][T22738] syzkaller0: entered promiscuous mode [ 755.740732][T22738] syzkaller0: entered allmulticast mode [ 755.763869][ T43] audit: type=1800 audit(1787997305.327:6988): pid=22733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4886" name="file0" dev="9p" ino=79691971 res=0 errno=0 [ 756.899881][T21793] usb 12-1: new low-speed USB device number 28 using dummy_hcd [ 756.968952][T22763] binder: 22762:22763 ioctl c0306201 80000040 returned -14 [ 756.969365][T22763] binder: 22762:22763 ioctl c0306201 80000640 returned -22 [ 757.030002][T21793] usb 12-1: device descriptor read/64, error -71 [ 757.058875][T22767] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 757.060724][T22767] netlink: 'syz.5.4899': attribute type 1 has an invalid length. [ 757.278841][T21793] usb 12-1: new low-speed USB device number 29 using dummy_hcd [ 757.417928][T21793] usb 12-1: device descriptor read/64, error -71 [ 757.528299][T21793] usb usb12-port1: attempt power cycle [ 757.889823][T21793] usb 12-1: new low-speed USB device number 30 using dummy_hcd [ 757.909105][T21793] usb 12-1: device descriptor read/8, error -71 [ 758.082221][T22781] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4903'. [ 758.138151][T22778] FAULT_INJECTION: forcing a failure. [ 758.138151][T22778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 758.138224][T22778] CPU: 1 UID: 0 PID: 22778 Comm: syz.5.4902 Tainted: G L syzkaller #0 PREEMPT(full) [ 758.138256][T22778] Tainted: [L]=SOFTLOCKUP [ 758.138263][T22778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 758.138271][T22778] Call Trace: [ 758.138277][T22778] [ 758.138283][T22778] dump_stack_lvl+0x100/0x190 [ 758.138305][T22778] should_fail_ex.cold+0x5/0xa [ 758.138322][T22778] _copy_to_user+0x32/0xd0 [ 758.138339][T22778] simple_read_from_buffer+0xcb/0x170 [ 758.138354][T22778] proc_fail_nth_read+0x1af/0x230 [ 758.138376][T22778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 758.138399][T22778] ? rw_verify_area+0xce/0x6d0 [ 758.138417][T22778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 758.138438][T22778] vfs_read+0x1e4/0xb40 [ 758.138450][T22778] ? lock_acquire+0x1d1/0x380 [ 758.138468][T22778] ? __fget_files+0x34/0x3d0 [ 758.138481][T22778] ? __pfx_vfs_read+0x10/0x10 [ 758.138491][T22778] ? find_held_lock+0x2b/0x80 [ 758.138505][T22778] ? __fget_files+0x215/0x3d0 [ 758.138521][T22778] ? __fget_files+0x21f/0x3d0 [ 758.138539][T22778] ksys_read+0x12a/0x250 [ 758.138551][T22778] ? __pfx_ksys_read+0x10/0x10 [ 758.138567][T22778] do_int80_emulation+0x166/0x650 [ 758.138587][T22778] asm_int80_emulation+0x1a/0x20 [ 758.138601][T22778] RIP: 0023:0xf71175ab [ 758.138612][T22778] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 758.138625][T22778] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 758.138638][T22778] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d65d0 [ 758.138653][T22778] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 758.138661][T22778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 758.138668][T22778] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 758.138676][T22778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 758.138693][T22778] [ 758.147947][T21793] usb 12-1: new low-speed USB device number 31 using dummy_hcd [ 758.171142][T21793] usb 12-1: device descriptor read/8, error -71 [ 758.212323][ T43] audit: type=1326 audit(1787997307.777:6989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22784 comm="syz.5.4905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 758.238397][ T43] audit: type=1326 audit(1787997307.807:6990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22784 comm="syz.5.4905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 758.238443][ T43] audit: type=1326 audit(1787997307.807:6991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22784 comm="syz.5.4905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 758.240673][ T43] audit: type=1326 audit(1787997307.807:6992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22784 comm="syz.5.4905" exe="/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 758.242800][ T43] audit: type=1326 audit(1787997307.807:6993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22784 comm="syz.5.4905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 758.243593][ T43] audit: type=1326 audit(1787997307.807:6994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22784 comm="syz.5.4905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 758.243903][ T43] audit: type=1326 audit(1787997307.807:6995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22784 comm="syz.5.4905" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 758.244428][ T43] audit: type=1326 audit(1787997307.807:6996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22784 comm="syz.5.4905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 758.244832][ T43] audit: type=1326 audit(1787997307.807:6997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22784 comm="syz.5.4905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 758.288417][T21793] usb usb12-port1: unable to enumerate USB device [ 758.836778][T22788] loop9: detected capacity change from 0 to 2640 [ 758.840972][T22788] buffer_io_error: 162 callbacks suppressed [ 758.841035][T22788] Buffer I/O error on dev loop9, logical block 0, async page read [ 758.841083][T22788] Buffer I/O error on dev loop9, logical block 0, async page read [ 758.841125][T22788] Buffer I/O error on dev loop9, logical block 0, async page read [ 758.841169][T22788] Buffer I/O error on dev loop9, logical block 0, async page read [ 758.841212][T22788] Buffer I/O error on dev loop9, logical block 0, async page read [ 758.841318][T22788] Buffer I/O error on dev loop9, logical block 0, async page read [ 758.841485][T22788] Buffer I/O error on dev loop9, logical block 0, async page read [ 758.841531][T22788] Buffer I/O error on dev loop9, logical block 0, async page read [ 758.841563][T22788] ldm_validate_partition_table(): Disk read failed. [ 758.841607][T22788] Buffer I/O error on dev loop9, logical block 0, async page read [ 758.841658][T22788] Buffer I/O error on dev loop9, logical block 0, async page read [ 758.841719][T22788] Dev loop9: unable to read RDB block 0 [ 758.841886][T22788] loop9: unable to read partition table [ 758.858105][T22788] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 758.858855][T22788] FAULT_INJECTION: forcing a failure. [ 758.858855][T22788] name failslab, interval 1, probability 0, space 0, times 0 [ 758.858883][T22788] CPU: 1 UID: 0 PID: 22788 Comm: syz.5.4906 Tainted: G L syzkaller #0 PREEMPT(full) [ 758.858906][T22788] Tainted: [L]=SOFTLOCKUP [ 758.858913][T22788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 758.858928][T22788] Call Trace: [ 758.858934][T22788] [ 758.858942][T22788] dump_stack_lvl+0x100/0x190 [ 758.858969][T22788] should_fail_ex.cold+0x5/0xa [ 758.858991][T22788] should_failslab+0xc2/0x120 [ 758.859012][T22788] kmem_cache_alloc_noprof+0x92/0x6a0 [ 758.859033][T22788] ? alloc_empty_file+0x5b/0x1c0 [ 758.859062][T22788] alloc_empty_file+0x5b/0x1c0 [ 758.859087][T22788] path_openat+0xdb/0x2440 [ 758.859113][T22788] ? __pfx_path_openat+0x10/0x10 [ 758.859139][T22788] do_file_open+0x20e/0x430 [ 758.859159][T22788] ? __pfx_do_file_open+0x10/0x10 [ 758.859190][T22788] ? _raw_spin_unlock+0x28/0x50 [ 758.859222][T22788] ? alloc_fd+0x471/0x7a0 [ 758.859245][T22788] do_sys_openat2+0x10f/0x1e0 [ 758.859265][T22788] ? __pfx_do_sys_openat2+0x10/0x10 [ 758.859286][T22788] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 758.859306][T22788] ? __fget_files+0x21f/0x3d0 [ 758.859326][T22788] __ia32_compat_sys_openat+0x12d/0x210 [ 758.859348][T22788] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 758.859368][T22788] ? ksys_write+0x1ac/0x250 [ 758.859390][T22788] do_int80_emulation+0x166/0x650 [ 758.859413][T22788] asm_int80_emulation+0x1a/0x20 [ 758.859431][T22788] RIP: 0023:0xf71175ab [ 758.859445][T22788] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 758.859461][T22788] RSP: 002b:00000000f53d603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 758.859478][T22788] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53d6100 [ 758.859489][T22788] RDX: 0000000000162802 RSI: 0000000000000000 RDI: 0000000000000000 [ 758.859500][T22788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 758.859510][T22788] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 758.859521][T22788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 758.859546][T22788] [ 759.109553][T22794] fuse: Bad value for 'fd' [ 759.442578][T22799] overlayfs: missing 'workdir' [ 759.687543][T22811] FAULT_INJECTION: forcing a failure. [ 759.687543][T22811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.701978][T22811] CPU: 0 UID: 0 PID: 22811 Comm: syz.7.4915 Tainted: G L syzkaller #0 PREEMPT(full) [ 759.702017][T22811] Tainted: [L]=SOFTLOCKUP [ 759.702024][T22811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 759.702036][T22811] Call Trace: [ 759.702044][T22811] [ 759.702053][T22811] dump_stack_lvl+0x100/0x190 [ 759.702087][T22811] should_fail_ex.cold+0x5/0xa [ 759.702112][T22811] _copy_from_iter+0x1f4/0x1690 [ 759.702141][T22811] ? __pfx__copy_from_iter+0x10/0x10 [ 759.702166][T22811] ? __pfx___might_resched+0x10/0x10 [ 759.702189][T22811] ? iov_iter_revert+0x252/0x5b0 [ 759.702211][T22811] file_tty_write.isra.0+0x45b/0x890 [ 759.702241][T22811] vfs_write+0x6af/0x1050 [ 759.702260][T22811] ? __pfx_tty_write+0x10/0x10 [ 759.702282][T22811] ? __pfx_vfs_write+0x10/0x10 [ 759.702298][T22811] ? find_held_lock+0x2b/0x80 [ 759.702332][T22811] ksys_write+0x12a/0x250 [ 759.702346][T22811] ? __pfx_ksys_write+0x10/0x10 [ 759.702365][T22811] ? ksys_write+0x1ac/0x250 [ 759.702384][T22811] ? __pfx_ksys_write+0x10/0x10 [ 759.702408][T22811] __do_fast_syscall_32+0x13a/0x8b0 [ 759.702434][T22811] ? lockdep_hardirqs_on+0x7d/0x110 [ 759.702459][T22811] do_fast_syscall_32+0x32/0x70 [ 759.702483][T22811] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 759.702507][T22811] RIP: 0023:0xf7fc7fec [ 759.702533][T22811] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 759.702542][T22811] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 759.702569][T22811] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001040 [ 759.702581][T22811] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000000 [ 759.702593][T22811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 759.702604][T22811] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 759.702615][T22811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 759.702640][T22811] [ 760.933724][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 760.933919][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 761.057456][T22833] ceph: No mds server is up or the cluster is laggy [ 761.217108][T22854] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4930'. [ 761.439577][T22865] FAULT_INJECTION: forcing a failure. [ 761.439577][T22865] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 761.439644][T22865] CPU: 3 UID: 0 PID: 22865 Comm: syz.7.4933 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.439671][T22865] Tainted: [L]=SOFTLOCKUP [ 761.439677][T22865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 761.439684][T22865] Call Trace: [ 761.439689][T22865] [ 761.439694][T22865] dump_stack_lvl+0x100/0x190 [ 761.439713][T22865] should_fail_ex.cold+0x5/0xa [ 761.439725][T22865] ? prepare_alloc_pages+0x16d/0x5b0 [ 761.439741][T22865] should_fail_alloc_page+0xeb/0x140 [ 761.439757][T22865] prepare_alloc_pages+0x1f0/0x5b0 [ 761.439774][T22865] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 761.439801][T22865] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 761.439822][T22865] ? __css_rstat_updated+0x1ce/0x590 [ 761.439841][T22865] ? lock_acquire+0x1d1/0x380 [ 761.439856][T22865] ? page_table_check_set+0x11d/0x580 [ 761.439872][T22865] ? page_table_check_set+0x30f/0x580 [ 761.439886][T22865] ? page_table_check_set+0x30f/0x580 [ 761.439902][T22865] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 761.439918][T22865] ? policy_nodemask+0xed/0x4f0 [ 761.439933][T22865] alloc_pages_mpol+0x201/0x550 [ 761.439949][T22865] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 761.439962][T22865] ? swap_put_entries_cluster+0x486/0x5c0 [ 761.439977][T22865] ? swap_put_entries_cluster+0x486/0x5c0 [ 761.439994][T22865] folio_alloc_mpol_noprof+0x36/0x260 [ 761.440012][T22865] vma_alloc_folio_noprof+0xed/0x1d0 [ 761.440028][T22865] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 761.440044][T22865] ? rcu_read_unlock+0x2d/0xb0 [ 761.440060][T22865] ? rcu_read_unlock+0x2d/0xb0 [ 761.440079][T22865] do_wp_page+0x1b15/0x45c0 [ 761.440096][T22865] ? lock_acquire+0x1d1/0x380 [ 761.440110][T22865] ? __pfx_do_wp_page+0x10/0x10 [ 761.440125][T22865] ? do_raw_spin_lock+0x128/0x260 [ 761.440142][T22865] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 761.440162][T22865] __handle_mm_fault+0x1cd2/0x2f60 [ 761.440180][T22865] ? lock_vma_under_rcu+0x11d/0x590 [ 761.440195][T22865] ? __pfx___handle_mm_fault+0x10/0x10 [ 761.440214][T22865] ? lock_vma_under_rcu+0x17c/0x590 [ 761.440237][T22865] handle_mm_fault+0x363/0xa20 [ 761.440256][T22865] do_user_addr_fault+0x59c/0x12f0 [ 761.440277][T22865] exc_page_fault+0x6f/0xd0 [ 761.440292][T22865] asm_exc_page_fault+0x26/0x30 [ 761.440316][T22865] RIP: 0023:0xf71c6b52 [ 761.440325][T22865] Code: c7 cd 14 29 00 56 53 83 ec 1c 8b 6c 24 30 8b 55 1c 65 a1 68 00 00 00 39 c2 0f 84 11 01 00 00 80 7d 18 02 74 2b b8 08 00 00 00 0f c1 45 00 83 c0 08 85 c0 0f 88 0e 01 00 00 a8 01 75 7a 31 d2 [ 761.440336][T22865] RSP: 002b:00000000f5485310 EFLAGS: 00010293 [ 761.440346][T22865] RAX: 0000000000000008 RBX: 00000000f7457ff4 RCX: 00000000f72afabd [ 761.440353][T22865] RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 00000000f7457ff4 [ 761.440360][T22865] RBP: 00000000f7fb6ec0 R08: 0000000000000000 R09: 0000000000000000 [ 761.440366][T22865] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 761.440373][T22865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 761.440387][T22865] [ 761.440630][T22865] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 761.575276][T22868] overlayfs: failed to set uuid (575/file1, err=-1); falling back to uuid=null. [ 761.575308][T22868] overlayfs: failed to verify upper root origin [ 761.586531][T22868] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 761.586547][T22868] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 762.107997][ T5745] Bluetooth: hci1: command 0x0405 tx timeout [ 762.174520][T22875] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4937'. [ 762.181540][T22875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 762.191445][T22875] jfs: Unknown parameter 'discardaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa ' [ 762.191682][T22875] tipc: Can't bind to reserved service type 0 [ 762.355599][T22883] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 762.360075][T22883] netlink: 'syz.7.4943': attribute type 1 has an invalid length. [ 762.462025][T22896] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4946'. [ 762.480190][T22894] IPVS: set_ctl: invalid protocol: 137 172.30.0.6:21 [ 762.485908][T22894] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4944'. [ 762.523128][T22894] Bluetooth: MGMT ver 1.23 [ 762.679103][T22899] FAULT_INJECTION: forcing a failure. [ 762.679103][T22899] name failslab, interval 1, probability 0, space 0, times 0 [ 762.684789][T22899] CPU: 1 UID: 0 PID: 22899 Comm: syz.8.4947 Tainted: G L syzkaller #0 PREEMPT(full) [ 762.684833][T22899] Tainted: [L]=SOFTLOCKUP [ 762.684842][T22899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 762.684853][T22899] Call Trace: [ 762.684862][T22899] [ 762.684870][T22899] dump_stack_lvl+0x100/0x190 [ 762.684896][T22899] should_fail_ex.cold+0x5/0xa [ 762.684919][T22899] should_failslab+0xc2/0x120 [ 762.684942][T22899] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 762.684963][T22899] ? __alloc_skb+0x5b7/0x710 [ 762.684983][T22899] ? __alloc_skb+0x140/0x710 [ 762.685007][T22899] __alloc_skb+0x140/0x710 [ 762.685025][T22899] ? __alloc_skb+0x5b7/0x710 [ 762.685043][T22899] ? __pfx___alloc_skb+0x10/0x10 [ 762.685059][T22899] ? process_measurement+0x1567/0x2350 [ 762.685094][T22899] alloc_skb_with_frags+0xdd/0x760 [ 762.685125][T22899] sock_alloc_send_pskb+0x801/0x980 [ 762.685145][T22899] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 762.685177][T22899] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 762.685197][T22899] ? find_held_lock+0x2b/0x80 [ 762.685217][T22899] ? dev_get_by_index+0x180/0x380 [ 762.685237][T22899] ? dev_get_by_index+0x180/0x380 [ 762.685263][T22899] isotp_sendmsg+0xa16/0x2580 [ 762.685298][T22899] ? print_kernel_ident+0x18/0x40 [ 762.685320][T22899] ? __pfx_isotp_sendmsg+0x10/0x10 [ 762.685347][T22899] ? aa_sock_msg_perm+0x11e/0x200 [ 762.685370][T22899] ? apparmor_socket_sendmsg+0x165/0x280 [ 762.685394][T22899] ____sys_sendmsg+0xa4d/0xbe0 [ 762.685418][T22899] ? __pfx_isotp_sendmsg+0x10/0x10 [ 762.685446][T22899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 762.685474][T22899] ? _kstrtoull+0x144/0x200 [ 762.685496][T22899] ? __pfx__kstrtoull+0x10/0x10 [ 762.685525][T22899] ___sys_sendmsg+0x190/0x1e0 [ 762.685556][T22899] ? __pfx____sys_sendmsg+0x10/0x10 [ 762.685581][T22899] ? __lock_acquire+0x4c5/0x1ec0 [ 762.685611][T22899] ? __fget_files+0x34/0x3d0 [ 762.685644][T22899] __sys_sendmmsg+0x309/0x440 [ 762.685668][T22899] ? __pfx___sys_sendmmsg+0x10/0x10 [ 762.685686][T22899] ? find_held_lock+0x2b/0x80 [ 762.685711][T22899] ? __mutex_unlock_slowpath+0x35d/0x930 [ 762.685765][T22899] ? fput+0x7c/0x100 [ 762.685789][T22899] ? ksys_write+0x1ac/0x250 [ 762.685810][T22899] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 762.685836][T22899] ? lockdep_hardirqs_on+0x7d/0x110 [ 762.685860][T22899] __do_fast_syscall_32+0x13a/0x8b0 [ 762.685882][T22899] ? lockdep_hardirqs_on+0x7d/0x110 [ 762.685907][T22899] do_fast_syscall_32+0x32/0x70 [ 762.685931][T22899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 762.685953][T22899] RIP: 0023:0xf7fa5fec [ 762.685974][T22899] Code: Unable to access opcode bytes at 0xf7fa5fc2. [ 762.685983][T22899] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 762.686002][T22899] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 762.686014][T22899] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 762.686025][T22899] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 762.686035][T22899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.686047][T22899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 762.686071][T22899] [ 763.510915][T22916] FAULT_INJECTION: forcing a failure. [ 763.510915][T22916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.511023][T22916] CPU: 2 UID: 0 PID: 22916 Comm: syz.5.4953 Tainted: G L syzkaller #0 PREEMPT(full) [ 763.511057][T22916] Tainted: [L]=SOFTLOCKUP [ 763.511065][T22916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 763.511075][T22916] Call Trace: [ 763.511082][T22916] [ 763.511089][T22916] dump_stack_lvl+0x100/0x190 [ 763.511116][T22916] should_fail_ex.cold+0x5/0xa [ 763.511137][T22916] _copy_to_user+0x32/0xd0 [ 763.511156][T22916] simple_read_from_buffer+0xcb/0x170 [ 763.511176][T22916] proc_fail_nth_read+0x1af/0x230 [ 763.511202][T22916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 763.511227][T22916] ? rw_verify_area+0xce/0x6d0 [ 763.511248][T22916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 763.511271][T22916] vfs_read+0x1e4/0xb40 [ 763.511286][T22916] ? lock_acquire+0x1d1/0x380 [ 763.511306][T22916] ? __fget_files+0x34/0x3d0 [ 763.511321][T22916] ? __pfx_vfs_read+0x10/0x10 [ 763.511334][T22916] ? find_held_lock+0x2b/0x80 [ 763.511350][T22916] ? __fget_files+0x215/0x3d0 [ 763.511368][T22916] ? __fget_files+0x21f/0x3d0 [ 763.511388][T22916] ksys_read+0x12a/0x250 [ 763.511401][T22916] ? __pfx_ksys_read+0x10/0x10 [ 763.511426][T22916] do_int80_emulation+0x166/0x650 [ 763.511449][T22916] asm_int80_emulation+0x1a/0x20 [ 763.511464][T22916] RIP: 0023:0xf71175ab [ 763.511478][T22916] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 763.511492][T22916] RSP: 002b:00000000f53b54bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 763.511508][T22916] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53b55d0 [ 763.511518][T22916] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 763.511527][T22916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 763.511535][T22916] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 763.511545][T22916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 763.511564][T22916] [ 763.526298][T22918] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4955'. [ 763.540365][T22918] FAULT_INJECTION: forcing a failure. [ 763.540365][T22918] name failslab, interval 1, probability 0, space 0, times 0 [ 763.540397][T22918] CPU: 0 UID: 0 PID: 22918 Comm: syz.7.4955 Tainted: G L syzkaller #0 PREEMPT(full) [ 763.540418][T22918] Tainted: [L]=SOFTLOCKUP [ 763.540425][T22918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 763.540436][T22918] Call Trace: [ 763.540442][T22918] [ 763.540450][T22918] dump_stack_lvl+0x100/0x190 [ 763.540478][T22918] should_fail_ex.cold+0x5/0xa [ 763.540501][T22918] should_failslab+0xc2/0x120 [ 763.540522][T22918] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 763.540541][T22918] ? argv_split+0x35/0x420 [ 763.540592][T22918] kstrndup+0x64/0x120 [ 763.540619][T22918] ? __pfx___trace_eprobe_create+0x10/0x10 [ 763.540634][T22918] argv_split+0x35/0x420 [ 763.540654][T22918] ? __pfx___trace_eprobe_create+0x10/0x10 [ 763.540673][T22918] trace_probe_create+0x7d/0x100 [ 763.540696][T22918] ? __pfx_trace_probe_create+0x10/0x10 [ 763.540726][T22918] create_dyn_event+0xee/0x1d0 [ 763.540741][T22918] trace_parse_run_command+0x1ab/0x3b0 [ 763.540764][T22918] ? __pfx_create_dyn_event+0x10/0x10 [ 763.540786][T22918] vfs_write+0x2aa/0x1050 [ 763.540804][T22918] ? __pfx_dyn_event_write+0x10/0x10 [ 763.540821][T22918] ? lock_acquire+0x1d1/0x380 [ 763.540840][T22918] ? __fget_files+0x34/0x3d0 [ 763.540859][T22918] ? __pfx_vfs_write+0x10/0x10 [ 763.540874][T22918] ? find_held_lock+0x2b/0x80 [ 763.540893][T22918] ? __fget_files+0x215/0x3d0 [ 763.540915][T22918] ? __fget_files+0x21f/0x3d0 [ 763.540935][T22918] ksys_write+0x12a/0x250 [ 763.540949][T22918] ? __pfx_ksys_write+0x10/0x10 [ 763.540966][T22918] ? ksys_write+0x1ac/0x250 [ 763.540981][T22918] ? __pfx_ksys_write+0x10/0x10 [ 763.541003][T22918] __do_fast_syscall_32+0x13a/0x8b0 [ 763.541023][T22918] ? lockdep_hardirqs_on+0x7d/0x110 [ 763.541045][T22918] do_fast_syscall_32+0x32/0x70 [ 763.541068][T22918] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 763.541096][T22918] RIP: 0023:0xf7fc7fec [ 763.541116][T22918] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 763.541124][T22918] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 763.541141][T22918] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000140 [ 763.541149][T22918] RDX: 000000000000001b RSI: 0000000000000000 RDI: 0000000000000000 [ 763.541157][T22918] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 763.541167][T22918] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 763.541178][T22918] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 763.541202][T22918] [ 764.887949][ T7809] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 765.048768][ T7809] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 765.057354][ T7809] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 765.057628][ T7809] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 765.061410][ T7809] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 765.061432][ T7809] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 765.065382][ T7809] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.065398][ T7809] usb 10-1: Product: syz [ 765.065406][ T7809] usb 10-1: Manufacturer: syz [ 765.065414][ T7809] usb 10-1: SerialNumber: syz [ 765.072852][ T7809] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 765.119540][ T7809] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 765.131357][ T7809] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 765.459928][T22937] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 765.990638][T22950] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 765.992210][T22950] netlink: 'syz.7.4965': attribute type 1 has an invalid length. [ 766.586333][ T5098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 766.599867][ T5098] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 766.607560][ T5098] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 766.610948][ T5098] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 766.611530][ T5098] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 766.934916][T22967] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode [ 766.937563][T22967] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode [ 767.427255][T22958] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.427456][T22958] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.430786][T22958] bridge_slave_0: entered allmulticast mode [ 767.432240][T22958] bridge_slave_0: entered promiscuous mode [ 767.434466][T22958] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.434588][T22958] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.434681][T22958] bridge_slave_1: entered allmulticast mode [ 767.435980][T22958] bridge_slave_1: entered promiscuous mode [ 767.458085][ T7809] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 767.460715][T22958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.463534][T22958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.492504][T22958] team0: Port device team_slave_0 added [ 767.494900][T22958] team0: Port device team_slave_1 added [ 767.519115][T22958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.522297][T22958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.522317][T22958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.535886][T22958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.538453][T22958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.547394][T22958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.572740][T22958] hsr_slave_0: entered promiscuous mode [ 767.575357][T22958] hsr_slave_1: entered promiscuous mode [ 767.578243][T22958] debugfs: 'hsr0' already exists in 'hsr' [ 767.580117][T22958] Cannot create hsr debugfs directory [ 767.598055][ T7809] usb 13-1: device descriptor read/64, error -71 [ 767.819391][T22958] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 767.835571][T22958] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 767.836588][T22958] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 767.852688][T22958] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 767.853575][T22958] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 767.859993][ T7809] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 767.861155][T22958] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 767.869417][T22958] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 767.880868][T22958] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 767.907569][ T35] usb 10-1: USB disconnect, device number 15 [ 767.925876][ T35] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 767.950291][ T35] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 767.954783][ T35] ti_usb_3410_5052 10-1:2.0: device disconnected [ 767.984011][T22958] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.984138][T22958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.984320][T22958] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.984406][T22958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.986559][T22998] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 767.994469][T22998] netlink: 'syz.7.4976': attribute type 1 has an invalid length. [ 768.002958][ T7809] usb 13-1: device descriptor read/64, error -71 [ 768.047081][T23005] xt_addrtype: ipv6 does not support BROADCAST matching [ 768.060573][T22958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.088556][T18917] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.094376][T18917] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.118320][ T7809] usb usb13-port1: attempt power cycle [ 768.163660][T22958] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.173323][T14199] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.173409][T14199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.177061][T14199] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.177106][T14199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.457947][ T7809] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 768.490986][ T7809] usb 13-1: device descriptor read/8, error -71 [ 768.582848][T22958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.668148][ T5745] Bluetooth: hci4: command tx timeout [ 768.738397][ T7809] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 768.758737][ T7809] usb 13-1: device descriptor read/8, error -71 [ 768.829162][T22958] veth0_vlan: entered promiscuous mode [ 768.835309][T22958] veth1_vlan: entered promiscuous mode [ 768.863889][T22958] veth0_macvtap: entered promiscuous mode [ 768.868254][ T7809] usb usb13-port1: unable to enumerate USB device [ 768.869320][T22958] veth1_macvtap: entered promiscuous mode [ 768.882244][T22958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.885698][T22958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.975097][T18917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.975196][T18917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.988157][ T5611] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.988973][ T5611] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.989282][ T5611] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.990016][ T5611] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.006063][T23041] dlm: no locking on control device [ 769.023062][T18911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.023144][T18911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.549210][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 769.549298][ T43] audit: type=1400 audit(1787997319.107:7013): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=23048 comm="syz.9.4986" name="p" offset=48 [ 769.792550][ T43] audit: type=1326 audit(1787997319.357:7014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23056 comm="syz.7.4989" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 769.792670][ T43] audit: type=1326 audit(1787997319.357:7015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23056 comm="syz.7.4989" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 769.793174][ T43] audit: type=1326 audit(1787997319.357:7016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23056 comm="syz.7.4989" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 769.793370][ T43] audit: type=1326 audit(1787997319.357:7017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23056 comm="syz.7.4989" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 769.793497][ T43] audit: type=1326 audit(1787997319.357:7018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23056 comm="syz.7.4989" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 769.793791][ T43] audit: type=1326 audit(1787997319.357:7019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23056 comm="syz.7.4989" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 769.794009][ T43] audit: type=1326 audit(1787997319.357:7020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23056 comm="syz.7.4989" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc8008 code=0x7ffc0000 [ 769.794214][ T43] audit: type=1326 audit(1787997319.357:7021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23056 comm="syz.7.4989" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc8008 code=0x7ffc0000 [ 769.794360][ T43] audit: type=1326 audit(1787997319.357:7022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23056 comm="syz.7.4989" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc8008 code=0x7ffc0000 [ 769.968746][T23057] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4989'. [ 770.739731][ T5745] Bluetooth: hci4: command tx timeout [ 770.900174][T23078] FAULT_INJECTION: forcing a failure. [ 770.900174][T23078] name failslab, interval 1, probability 0, space 0, times 0 [ 770.909371][T23078] CPU: 3 UID: 0 PID: 23078 Comm: syz.9.4996 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.909403][T23078] Tainted: [L]=SOFTLOCKUP [ 770.909408][T23078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 770.909415][T23078] Call Trace: [ 770.909420][T23078] [ 770.909425][T23078] dump_stack_lvl+0x100/0x190 [ 770.909452][T23078] should_fail_ex.cold+0x5/0xa [ 770.909474][T23078] should_failslab+0xc2/0x120 [ 770.909498][T23078] __kmalloc_cache_noprof+0x91/0x6d0 [ 770.909527][T23078] ? proc_thread_self_get_link+0x1a6/0x210 [ 770.909554][T23078] proc_thread_self_get_link+0x1a6/0x210 [ 770.909572][T23078] pick_link+0xac2/0x13c0 [ 770.909589][T23078] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 770.909604][T23078] step_into_slowpath+0x9ba/0xf90 [ 770.909624][T23078] ? __pfx_step_into_slowpath+0x10/0x10 [ 770.909644][T23078] ? lookup_fast+0x2da/0x600 [ 770.909660][T23078] ? inode_permission+0x374/0x620 [ 770.909677][T23078] link_path_walk+0xf28/0x1cc0 [ 770.909705][T23078] path_openat+0x1ac/0x2440 [ 770.909720][T23078] ? __pfx_path_openat+0x10/0x10 [ 770.909737][T23078] do_file_open+0x20e/0x430 [ 770.909750][T23078] ? __pfx_do_file_open+0x10/0x10 [ 770.909773][T23078] ? _raw_spin_unlock+0x28/0x50 [ 770.909784][T23078] ? alloc_fd+0x471/0x7a0 [ 770.909801][T23078] do_sys_openat2+0x10f/0x1e0 [ 770.909816][T23078] ? __pfx_do_sys_openat2+0x10/0x10 [ 770.909830][T23078] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 770.909847][T23078] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 770.909859][T23078] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 770.909872][T23078] __ia32_compat_sys_openat+0x12d/0x210 [ 770.909889][T23078] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 770.909910][T23078] do_int80_emulation+0x166/0x650 [ 770.909927][T23078] asm_int80_emulation+0x1a/0x20 [ 770.909939][T23078] RIP: 0023:0xf71f75ab [ 770.909949][T23078] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 770.909960][T23078] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 770.909973][T23078] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72c1b2e [ 770.909984][T23078] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 770.909994][T23078] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 770.910004][T23078] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 770.910016][T23078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 770.910040][T23078] [ 770.940319][T23078] FAULT_INJECTION: forcing a failure. [ 770.940319][T23078] name failslab, interval 1, probability 0, space 0, times 0 [ 770.940351][T23078] CPU: 2 UID: 0 PID: 23078 Comm: syz.9.4996 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.940379][T23078] Tainted: [L]=SOFTLOCKUP [ 770.940387][T23078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 770.940397][T23078] Call Trace: [ 770.940403][T23078] [ 770.940408][T23078] dump_stack_lvl+0x100/0x190 [ 770.940431][T23078] should_fail_ex.cold+0x5/0xa [ 770.940448][T23078] should_failslab+0xc2/0x120 [ 770.940466][T23078] __kmalloc_noprof+0xfc/0x840 [ 770.940481][T23078] ? tomoyo_encode2+0xfb/0x3c0 [ 770.940504][T23078] tomoyo_encode2+0xfb/0x3c0 [ 770.940552][T23078] tomoyo_encode+0x29/0x50 [ 770.940571][T23078] tomoyo_mount_acl+0x14c/0x8b0 [ 770.940590][T23078] ? is_bpf_text_address+0x8a/0x1a0 [ 770.940608][T23078] ? is_bpf_text_address+0x8a/0x1a0 [ 770.940630][T23078] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 770.940648][T23078] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 770.940674][T23078] ? kernel_text_address+0x8d/0x100 [ 770.940702][T23078] ? unwind_get_return_address+0x59/0xa0 [ 770.940719][T23078] ? arch_stack_walk+0xa6/0xf0 [ 770.940736][T23078] ? __lock_acquire+0x4c5/0x1ec0 [ 770.940763][T23078] ? tomoyo_mount_permission+0x1f6/0x460 [ 770.940784][T23078] ? tomoyo_domain+0xb2/0x150 [ 770.940797][T23078] ? tomoyo_profile+0x47/0x60 [ 770.940811][T23078] tomoyo_mount_permission+0x214/0x460 [ 770.940830][T23078] ? tomoyo_mount_permission+0x1f6/0x460 [ 770.940850][T23078] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 770.940880][T23078] security_sb_mount+0xdd/0x270 [ 770.940898][T23078] path_mount+0x158/0x24c0 [ 770.940918][T23078] ? __pfx_path_mount+0x10/0x10 [ 770.940936][T23078] ? lockdep_hardirqs_on+0x7d/0x110 [ 770.940965][T23078] ? putname+0xb1/0x110 [ 770.940979][T23078] ? kmem_cache_free+0x127/0x6c0 [ 770.941005][T23078] ? __ia32_sys_mount+0x292/0x310 [ 770.941030][T23078] __ia32_sys_mount+0x292/0x310 [ 770.941056][T23078] ? __pfx___ia32_sys_mount+0x10/0x10 [ 770.941076][T23078] ? ksys_write+0x1ac/0x250 [ 770.941088][T23078] ? __pfx_ksys_write+0x10/0x10 [ 770.941104][T23078] __do_fast_syscall_32+0x13a/0x8b0 [ 770.941128][T23078] ? lockdep_hardirqs_on+0x7d/0x110 [ 770.941146][T23078] do_fast_syscall_32+0x32/0x70 [ 770.941164][T23078] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 770.941181][T23078] RIP: 0023:0xf70befec [ 770.941197][T23078] Code: Unable to access opcode bytes at 0xf70befc2. [ 770.941204][T23078] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 770.941218][T23078] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040 [ 770.941227][T23078] RDX: 0000000000000000 RSI: 0000000000004800 RDI: 0000000000000000 [ 770.941235][T23078] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 770.941243][T23078] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 770.941251][T23078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 770.941268][T23078] [ 771.114667][T23080] FAULT_INJECTION: forcing a failure. [ 771.114667][T23080] name failslab, interval 1, probability 0, space 0, times 0 [ 771.114701][T23080] CPU: 2 UID: 0 PID: 23080 Comm: syz.8.4993 Tainted: G L syzkaller #0 PREEMPT(full) [ 771.114727][T23080] Tainted: [L]=SOFTLOCKUP [ 771.114733][T23080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 771.114744][T23080] Call Trace: [ 771.114751][T23080] [ 771.114760][T23080] dump_stack_lvl+0x100/0x190 [ 771.114790][T23080] should_fail_ex.cold+0x5/0xa [ 771.114866][T23080] should_failslab+0xc2/0x120 [ 771.114893][T23080] __kmalloc_noprof+0xfc/0x840 [ 771.114910][T23080] ? tomoyo_encode2+0xfb/0x3c0 [ 771.114937][T23080] tomoyo_encode2+0xfb/0x3c0 [ 771.114961][T23080] tomoyo_encode+0x29/0x50 [ 771.114986][T23080] tomoyo_mount_acl+0x14c/0x8b0 [ 771.115009][T23080] ? is_bpf_text_address+0x8a/0x1a0 [ 771.115032][T23080] ? is_bpf_text_address+0x8a/0x1a0 [ 771.115056][T23080] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 771.115080][T23080] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 771.115125][T23080] ? kernel_text_address+0x8d/0x100 [ 771.115153][T23080] ? unwind_get_return_address+0x59/0xa0 [ 771.115174][T23080] ? arch_stack_walk+0xa6/0xf0 [ 771.115197][T23080] ? __lock_acquire+0x4c5/0x1ec0 [ 771.115232][T23080] ? tomoyo_mount_permission+0x1f6/0x460 [ 771.115260][T23080] ? tomoyo_domain+0xb2/0x150 [ 771.115275][T23080] ? tomoyo_profile+0x47/0x60 [ 771.115292][T23080] tomoyo_mount_permission+0x214/0x460 [ 771.115316][T23080] ? tomoyo_mount_permission+0x1f6/0x460 [ 771.115347][T23080] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 771.115383][T23080] security_sb_mount+0xdd/0x270 [ 771.115404][T23080] path_mount+0x158/0x24c0 [ 771.115426][T23080] ? __pfx_path_mount+0x10/0x10 [ 771.115443][T23080] ? lockdep_hardirqs_on+0x7d/0x110 [ 771.115466][T23080] ? putname+0xb1/0x110 [ 771.115484][T23080] ? kmem_cache_free+0x127/0x6c0 [ 771.115513][T23080] ? __ia32_sys_mount+0x292/0x310 [ 771.115534][T23080] __ia32_sys_mount+0x292/0x310 [ 771.115556][T23080] ? __pfx___ia32_sys_mount+0x10/0x10 [ 771.115576][T23080] ? ksys_write+0x1ac/0x250 [ 771.115594][T23080] ? __pfx_ksys_write+0x10/0x10 [ 771.115615][T23080] __do_fast_syscall_32+0x13a/0x8b0 [ 771.115637][T23080] ? lockdep_hardirqs_on+0x7d/0x110 [ 771.115657][T23080] do_fast_syscall_32+0x32/0x70 [ 771.115680][T23080] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 771.115702][T23080] RIP: 0023:0xf7fa5fec [ 771.115726][T23080] Code: Unable to access opcode bytes at 0xf7fa5fc2. [ 771.115734][T23080] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 771.115754][T23080] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000700 [ 771.115764][T23080] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 771.115773][T23080] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 771.115784][T23080] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 771.115795][T23080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 771.115819][T23080] [ 771.222989][T23082] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 771.223017][T23082] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 771.223138][T23082] vhci_hcd vhci_hcd.0: Device attached [ 771.639650][ T7809] usb 48-1: SetAddress Request (10) to port 0 [ 771.640002][ T7809] usb 48-1: new SuperSpeed USB device number 10 using vhci_hcd [ 772.107179][T23084] vhci_hcd: connection reset by peer [ 772.110044][ T9888] vhci_hcd vhci_hcd.5: stop threads [ 772.110070][ T9888] vhci_hcd vhci_hcd.5: release socket [ 772.110111][ T9888] vhci_hcd vhci_hcd.5: disconnect device [ 772.472945][T23107] input: syz0 as /devices/virtual/input/input41 [ 772.818060][ T5745] Bluetooth: hci4: command tx timeout [ 773.574032][ T5098] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 773.580526][ T5098] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 773.583066][ T5098] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 773.586552][ T5098] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 773.617497][T21805] syz_tun (unregistering): left allmulticast mode [ 773.621755][ T5098] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 774.072181][T23143] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input42 [ 774.551569][ T5745] Bluetooth: hci1: link tx timeout [ 774.551618][ T5745] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 774.855352][T23159] ip6t_rt: too many addresses specified [ 774.898394][ T5098] Bluetooth: hci4: command tx timeout [ 775.543493][T23129] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.543689][T23129] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.543879][T23129] bridge_slave_0: entered allmulticast mode [ 775.544910][T23129] bridge_slave_0: entered promiscuous mode [ 775.551681][T23129] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.551757][T23129] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.551854][T23129] bridge_slave_1: entered allmulticast mode [ 775.552848][T23129] bridge_slave_1: entered promiscuous mode [ 775.581549][T23129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.589214][T23129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.627585][T23129] team0: Port device team_slave_0 added [ 775.630650][T23129] team0: Port device team_slave_1 added [ 775.654501][T23129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.654564][T23129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.654889][T23129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.656594][T23129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.656606][T23129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.656626][T23129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.716583][T23129] hsr_slave_0: entered promiscuous mode [ 775.717444][T23129] hsr_slave_1: entered promiscuous mode [ 775.720770][T23129] debugfs: 'hsr0' already exists in 'hsr' [ 775.720795][T23129] Cannot create hsr debugfs directory [ 775.894899][ T5098] Bluetooth: hci5: command tx timeout [ 776.262692][T23129] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 776.350246][T23169] ucma_write: process 453 (syz.5.5015) changed security contexts after opening file descriptor, this is not allowed. [ 776.410718][T23129] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 776.497591][T23129] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 776.506333][T23179] netlink: 128 bytes leftover after parsing attributes in process `syz.9.5019'. [ 776.506408][T23179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 776.578106][ T5098] Bluetooth: hci1: command 0x0405 tx timeout [ 776.747976][ T7809] usb 48-1: device descriptor read/8, error -110 [ 776.794077][T23129] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 777.004067][T23129] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 777.010826][T23129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 777.011721][T23129] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 777.019602][T23129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 777.020603][T23129] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 777.027643][T23129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 777.028751][T23129] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 777.032915][T23129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 777.102926][T23129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.114053][T23129] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.119679][T18922] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.119857][T18922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.127465][T18922] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.127565][T18922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.139191][ T7809] usb usb48-port1: attempt power cycle [ 777.712788][ T7809] usb usb48-port1: unable to enumerate USB device [ 777.717425][T23129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.947974][ T5745] Bluetooth: hci5: command tx timeout [ 778.067758][T23129] veth0_vlan: entered promiscuous mode [ 778.091253][T23129] veth1_vlan: entered promiscuous mode [ 778.137375][T23129] veth0_macvtap: entered promiscuous mode [ 778.142232][T23129] veth1_macvtap: entered promiscuous mode [ 778.159242][T23129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.167703][T23129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.308835][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.309122][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.309474][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.309524][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.356412][T18911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.356470][T18911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.462187][T14220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.462392][T14220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.418121][T23287] ptrace attach of "/syz-executor exec"[22291] was attempted by ""[23287] [ 779.451467][T23287] ptrace attach of "/syz-executor exec"[22291] was attempted by ""[23287] [ 779.784238][T23305] tipc: Enabling of bearer rejected, failed to enable media [ 779.858856][ T7809] page_pool_release_retry() stalled pool shutdown: id 212, 1 inflight 60 sec [ 779.880446][T23308] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5034'. [ 779.880545][T23308] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5034'. [ 780.005910][T23323] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5036'. [ 780.028054][ T5745] Bluetooth: hci5: command tx timeout [ 780.230883][T23317] netlink: 'syz.7.5037': attribute type 4 has an invalid length. [ 780.390848][T23332] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004 [ 780.391901][T23329] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004 [ 780.648035][T17759] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 780.808768][T17759] usb 14-1: Using ep0 maxpacket: 32 [ 780.815603][T17759] usb 14-1: unable to get BOS descriptor or descriptor too short [ 780.815689][T17759] usb 14-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 780.872782][T17759] usb 14-1: string descriptor 0 read error: -22 [ 780.872912][T17759] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.888656][T17759] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 780.891901][T17759] dw2102: su3000_power_ctrl: 1, initialized 0 [ 780.894961][T17759] dvb-usb: bulk message failed: -22 (2/0) [ 780.908031][T17759] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 780.911508][T17759] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 780.915527][T17759] usb 14-1: media controller created [ 780.917538][T17759] dvb-usb: bulk message failed: -22 (6/0) [ 780.951227][T17759] dw2102: i2c transfer failed. [ 780.959122][T17759] dvb-usb: bulk message failed: -22 (6/0) [ 780.959138][T17759] dw2102: i2c transfer failed. [ 780.959145][T17759] dvb-usb: bulk message failed: -22 (6/0) [ 780.959152][T17759] dw2102: i2c transfer failed. [ 780.959158][T17759] dvb-usb: bulk message failed: -22 (6/0) [ 780.959164][T17759] dw2102: i2c transfer failed. [ 780.959170][T17759] dvb-usb: bulk message failed: -22 (6/0) [ 780.959176][T17759] dw2102: i2c transfer failed. [ 780.959182][T17759] dvb-usb: bulk message failed: -22 (6/0) [ 780.959188][T17759] dw2102: i2c transfer failed. [ 780.959193][T17759] dvb-usb: MAC address: 02:02:02:02:02:02 [ 780.964307][T17759] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 780.972101][T17759] dvb-usb: bulk message failed: -22 (3/0) [ 780.972114][T17759] dw2102: command 0x0e transfer failed. [ 780.972118][T17759] dvb-usb: bulk message failed: -22 (3/0) [ 780.972125][T17759] dw2102: command 0x0e transfer failed. [ 781.005312][ T5745] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 781.204626][T23341] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 781.207538][T23341] netlink: 'syz.8.5042': attribute type 1 has an invalid length. [ 781.281745][T17759] dvb-usb: bulk message failed: -22 (3/0) [ 781.281794][T17759] dw2102: command 0x0e transfer failed. [ 781.288168][T17759] dvb-usb: bulk message failed: -22 (3/0) [ 781.288186][T17759] dw2102: command 0x0e transfer failed. [ 781.288204][T17759] dvb-usb: bulk message failed: -22 (1/0) [ 781.288214][T17759] dw2102: command 0x51 transfer failed. [ 781.293669][T23328] dvb-usb: bulk message failed: -22 (5/0) [ 781.293688][T23328] dw2102: i2c transfer failed. [ 781.370012][T17759] DVB: Unable to find symbol ds3000_attach() [ 781.370132][T17759] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 781.438020][T17759] rc_core: IR keymap rc-su3000 not found [ 781.438087][T17759] Registered IR keymap rc-empty [ 781.441052][T17759] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0 [ 781.446380][T17759] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0/input43 [ 781.453895][T17759] dvb-usb: schedule remote query interval to 150 msecs. [ 781.457355][T17759] dw2102: su3000_power_ctrl: 0, initialized 1 [ 781.466406][T17759] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 781.478679][T17759] usb 14-1: USB disconnect, device number 2 [ 781.518850][T17759] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 782.098450][ T5745] Bluetooth: hci5: command tx timeout [ 782.815609][T23361] ip6t_rt: too many addresses specified [ 782.886525][T23366] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5050'. [ 783.066243][T23369] netlink: 'syz.7.5051': attribute type 12 has an invalid length. [ 783.066333][T23369] netlink: 'syz.7.5051': attribute type 29 has an invalid length. [ 783.066810][T23369] netlink: 148 bytes leftover after parsing attributes in process `syz.7.5051'. [ 783.066844][T23369] netlink: 'syz.7.5051': attribute type 1 has an invalid length. [ 783.066858][T23369] netlink: 'syz.7.5051': attribute type 2 has an invalid length. [ 783.066870][T23369] netlink: 11 bytes leftover after parsing attributes in process `syz.7.5051'. [ 783.117444][T23369] netlink: 'syz.7.5051': attribute type 12 has an invalid length. [ 783.117500][T23369] netlink: 'syz.7.5051': attribute type 29 has an invalid length. [ 783.117542][T23369] netlink: 148 bytes leftover after parsing attributes in process `syz.7.5051'. [ 783.117578][T23369] netlink: 'syz.7.5051': attribute type 1 has an invalid length. [ 783.117606][T23369] netlink: 'syz.7.5051': attribute type 2 has an invalid length. [ 783.117636][T23369] netlink: 11 bytes leftover after parsing attributes in process `syz.7.5051'. [ 783.337032][T23373] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5052'. [ 783.483201][T23386] syz.7.5057 (23386): /proc/23385/oom_adj is deprecated, please use /proc/23385/oom_score_adj instead. [ 783.564452][T23373] loop9: detected capacity change from 0 to 7 [ 783.625205][T23373] Dev loop9: unable to read RDB block 7 [ 783.625258][T23373] loop9: unable to read partition table [ 783.625400][T23373] loop9: partition table beyond EOD, truncated [ 783.625447][T23373] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 783.628254][T23396] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 783.639631][T23396] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 783.639992][T23396] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 783.641490][T23396] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 783.654369][T23396] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 783.749484][T23396] pci 0000:00:01.0: Adding to iommu group 1 [ 783.790155][T23396] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 783.790182][T23396] pci 0000:00:01.0: vgaarb: bridge control possible [ 783.790193][T23396] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 783.805569][T23396] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 783.806162][T23396] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 783.853074][T23396] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 783.917382][T23396] [drm] Found bochs VGA, ID 0xb0c5. [ 783.917733][T23396] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 784.035813][T23396] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 784.358431][T23404] openvswitch: netlink: Missing valid actions attribute. [ 784.358486][T23404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 784.438341][T23408] jffs2: notice: (23408) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 784.450718][T23396] Console: switching to colour frame buffer device 160x50 [ 784.451004][T23396] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 784.672625][T23416] ucsi-stm32g0-i2c 0-0003: i2c read 03, 00 error: -95 [ 784.676368][T23416] ucsi-stm32g0-i2c 0-0003: probe with driver ucsi-stm32g0-i2c failed with error -95 [ 784.680445][T23416] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x03 [ 784.947890][T17759] usb 13-1: new full-speed USB device number 7 using dummy_hcd [ 785.098664][T17759] usb 13-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 785.103224][T17759] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 785.103270][T17759] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 785.111583][T17759] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.115132][T17759] usb 13-1: Product: syz [ 785.117025][T17759] usb 13-1: Manufacturer: syz [ 785.119550][T17759] usb 13-1: SerialNumber: syz [ 785.125151][T17759] usb 13-1: config 0 descriptor?? [ 785.128303][T17759] hub 13-1:0.0: bad descriptor, ignoring hub [ 785.128338][T17759] hub 13-1:0.0: probe with driver hub failed with error -5 [ 785.129853][T17759] input: syz syz as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input44 [ 785.535341][T20806] ffs_data_put(): freeing [ 785.666732][T23430] ip6gretap0: entered promiscuous mode [ 785.763854][T23429] ip6gretap0: left promiscuous mode [ 785.779138][ T43] kauditd_printk_skb: 752 callbacks suppressed [ 785.779224][ T43] audit: type=1800 audit(1787997335.347:7775): pid=23432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5070" name="file0" dev="overlay" ino=75 res=0 errno=0 [ 786.177951][ T35] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 786.330232][ T35] usb 10-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 786.331165][ T35] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 786.331182][ T35] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 786.331196][ T35] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 786.332770][ T35] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.332784][ T35] usb 10-1: Product: syz [ 786.332792][ T35] usb 10-1: Manufacturer: syz [ 786.332801][ T35] usb 10-1: SerialNumber: syz [ 786.346122][T23436] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 786.346179][T23436] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 786.347469][ T35] usbserial_generic 10-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 786.347489][ T35] usbserial_generic 10-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 786.347521][ T35] usbserial_generic 10-1:1.0: generic converter detected [ 786.350192][ T35] usb 10-1: generic converter now attached to ttyUSB0 [ 786.508194][ T42] usb 13-1: USB disconnect, device number 7 [ 786.641186][T23444] netlink: Setting conntrack mark requires 'commit' flag. [ 786.645270][T23444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.694824][ T35] usb 10-1: USB disconnect, device number 16 [ 786.699610][ T35] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 786.700111][ T35] usbserial_generic 10-1:1.0: device disconnected [ 786.838813][T23448] FAULT_INJECTION: forcing a failure. [ 786.838813][T23448] name failslab, interval 1, probability 0, space 0, times 0 [ 786.838906][T23448] CPU: 1 UID: 0 PID: 23448 Comm: syz.7.5075 Tainted: G L syzkaller #0 PREEMPT(full) [ 786.838947][T23448] Tainted: [L]=SOFTLOCKUP [ 786.838956][T23448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 786.838968][T23448] Call Trace: [ 786.838976][T23448] [ 786.838985][T23448] dump_stack_lvl+0x100/0x190 [ 786.839084][T23448] should_fail_ex.cold+0x5/0xa [ 786.839110][T23448] should_failslab+0xc2/0x120 [ 786.839162][T23448] __kvmalloc_node_noprof+0x113/0x9b0 [ 786.839186][T23448] ? do_raw_spin_lock+0x128/0x260 [ 786.839219][T23448] ? alloc_fdtable+0x17f/0x2d0 [ 786.839243][T23448] alloc_fdtable+0x17f/0x2d0 [ 786.839263][T23448] dup_fd+0x995/0xd10 [ 786.839283][T23448] ? do_raw_spin_unlock+0x145/0x1e0 [ 786.839313][T23448] ? _raw_spin_unlock+0x28/0x50 [ 786.839360][T23448] ? copy_fs_struct+0x2a0/0x340 [ 786.839390][T23448] ksys_unshare+0x7c7/0xa70 [ 786.839410][T23448] ? __pfx_ksys_unshare+0x10/0x10 [ 786.839439][T23448] __ia32_sys_unshare+0x30/0x40 [ 786.839458][T23448] __do_fast_syscall_32+0x13a/0x8b0 [ 786.839483][T23448] ? lockdep_hardirqs_on+0x7d/0x110 [ 786.839510][T23448] do_fast_syscall_32+0x32/0x70 [ 786.839535][T23448] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 786.839560][T23448] RIP: 0023:0xf7f56fec [ 786.839582][T23448] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 786.839590][T23448] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 786.839610][T23448] RAX: ffffffffffffffda RBX: 0000000022020600 RCX: 0000000000000000 [ 786.839632][T23448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 786.839646][T23448] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 786.839659][T23448] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 786.839671][T23448] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 786.839697][T23448] [ 786.859786][T23448] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input45 [ 787.337539][T23454] syzkaller1: entered promiscuous mode [ 787.337627][T23454] syzkaller1: entered allmulticast mode [ 787.498709][T23460] netlink: 'syz.8.5079': attribute type 2 has an invalid length. [ 787.812330][T23474] FAULT_INJECTION: forcing a failure. [ 787.812330][T23474] name failslab, interval 1, probability 0, space 0, times 0 [ 787.812468][T23474] CPU: 1 UID: 0 PID: 23474 Comm: syz.9.5080 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.812518][T23474] Tainted: [L]=SOFTLOCKUP [ 787.812529][T23474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 787.812542][T23474] Call Trace: [ 787.812550][T23474] [ 787.812559][T23474] dump_stack_lvl+0x100/0x190 [ 787.812659][T23474] should_fail_ex.cold+0x5/0xa [ 787.812678][T23474] should_failslab+0xc2/0x120 [ 787.812720][T23474] kmem_cache_alloc_noprof+0x92/0x6a0 [ 787.812736][T23474] ? security_file_alloc+0x34/0x2c0 [ 787.812760][T23474] security_file_alloc+0x34/0x2c0 [ 787.812780][T23474] init_file+0x95/0x480 [ 787.812797][T23474] alloc_empty_file+0x79/0x1c0 [ 787.812816][T23474] path_openat+0xdb/0x2440 [ 787.812834][T23474] ? __pfx_path_openat+0x10/0x10 [ 787.812850][T23474] ? stack_trace_save+0x8e/0xc0 [ 787.812867][T23474] ? __pfx_stack_trace_save+0x10/0x10 [ 787.812885][T23474] do_file_open+0x20e/0x430 [ 787.812902][T23474] ? __pfx_do_file_open+0x10/0x10 [ 787.812916][T23474] ? kasan_save_track+0x14/0x30 [ 787.812931][T23474] ? __kasan_slab_alloc+0x89/0x90 [ 787.812946][T23474] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 787.812984][T23474] do_open_execat+0xd1/0x360 [ 787.813006][T23474] ? __pfx_do_open_execat+0x10/0x10 [ 787.813029][T23474] ? __might_fault+0xc5/0x140 [ 787.813049][T23474] ? __might_fault+0xc5/0x140 [ 787.813072][T23474] alloc_bprm+0x2d/0x9e0 [ 787.813094][T23474] do_execveat_common.isra.0+0x19c/0x580 [ 787.813118][T23474] ? do_getname+0x191/0x390 [ 787.813137][T23474] __ia32_compat_sys_execveat+0xe4/0x130 [ 787.813153][T23474] __do_fast_syscall_32+0x13a/0x8b0 [ 787.813196][T23474] ? lockdep_hardirqs_on+0x7d/0x110 [ 787.813215][T23474] do_fast_syscall_32+0x32/0x70 [ 787.813234][T23474] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 787.813251][T23474] RIP: 0023:0xf70befec [ 787.813268][T23474] Code: Unable to access opcode bytes at 0xf70befc2. [ 787.813275][T23474] RSP: 002b:00000000f546b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000166 [ 787.813289][T23474] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 787.813298][T23474] RDX: 0000000080000340 RSI: 0000000080000440 RDI: 0000000000001000 [ 787.813307][T23474] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 787.813315][T23474] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 787.813323][T23474] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 787.813341][T23474] [ 788.608622][ T854] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 788.758103][ T854] usb 13-1: Using ep0 maxpacket: 32 [ 788.758892][ T854] usb 13-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 788.760076][ T854] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 788.760101][ T854] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 788.760122][ T854] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 788.760140][ T854] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 788.760161][ T854] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 788.762139][ T854] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.762157][ T854] usb 13-1: Product: syz [ 788.762167][ T854] usb 13-1: Manufacturer: syz [ 788.762174][ T854] usb 13-1: SerialNumber: syz [ 788.763797][ T854] usb 13-1: config 0 descriptor?? [ 789.060554][T23509] FAULT_INJECTION: forcing a failure. [ 789.060554][T23509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.060724][T23509] CPU: 0 UID: 0 PID: 23509 Comm: syz.5.5089 Tainted: G L syzkaller #0 PREEMPT(full) [ 789.060769][T23509] Tainted: [L]=SOFTLOCKUP [ 789.060775][T23509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 789.060783][T23509] Call Trace: [ 789.060788][T23509] [ 789.060794][T23509] dump_stack_lvl+0x100/0x190 [ 789.060816][T23509] should_fail_ex.cold+0x5/0xa [ 789.060847][T23509] _copy_to_user+0x32/0xd0 [ 789.060863][T23509] simple_read_from_buffer+0xcb/0x170 [ 789.060878][T23509] proc_fail_nth_read+0x1af/0x230 [ 789.060900][T23509] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.060923][T23509] ? rw_verify_area+0xce/0x6d0 [ 789.060949][T23509] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.060980][T23509] vfs_read+0x1e4/0xb40 [ 789.061001][T23509] ? lock_acquire+0x1d1/0x380 [ 789.061034][T23509] ? __fget_files+0x34/0x3d0 [ 789.061055][T23509] ? __pfx_vfs_read+0x10/0x10 [ 789.061072][T23509] ? find_held_lock+0x2b/0x80 [ 789.061094][T23509] ? __fget_files+0x215/0x3d0 [ 789.061121][T23509] ? __fget_files+0x21f/0x3d0 [ 789.061150][T23509] ksys_read+0x12a/0x250 [ 789.061170][T23509] ? __pfx_ksys_read+0x10/0x10 [ 789.061197][T23509] do_int80_emulation+0x166/0x650 [ 789.061228][T23509] asm_int80_emulation+0x1a/0x20 [ 789.061248][T23509] RIP: 0023:0xf71175ab [ 789.061266][T23509] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 789.061286][T23509] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 789.061304][T23509] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d65d0 [ 789.061313][T23509] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 789.061320][T23509] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 789.061328][T23509] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 789.061335][T23509] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 789.061352][T23509] [ 789.244489][T23519] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5091'. [ 789.477516][T23524] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5093'. [ 789.541337][T20806] ffs_data_put(): freeing [ 789.569734][ C2] IPv4: Oversized IP packet from 127.0.0.1 [ 789.627117][T23483] block device autoloading is deprecated and will be removed. [ 789.807895][T22451] usb 12-1: new high-speed USB device number 32 using dummy_hcd [ 789.958479][T22451] usb 12-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 789.959509][T22451] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.018946][ T854] iforce 13-1:0.0: usb_submit_urb failed: -110 [ 790.019025][ T854] input input46: Device does not respond to id packet M [ 790.026135][ T854] iforce 13-1:0.0: usb_submit_urb failed: -32 [ 790.029462][ T854] input input46: Device does not respond to id packet P [ 790.033992][ T854] iforce 13-1:0.0: usb_submit_urb failed: -32 [ 790.038183][ T854] input input46: Device does not respond to id packet B [ 790.042143][ T854] iforce 13-1:0.0: usb_submit_urb failed: -32 [ 790.042375][ T854] input input46: Device does not respond to id packet N [ 790.047467][ T854] iforce 13-1:0.0: usb_submit_urb failed: -32 [ 790.050261][ T854] iforce 13-1:0.0: usb_submit_urb failed: -32 [ 790.053123][ T854] iforce 13-1:0.0: usb_submit_urb failed: -32 [ 790.056271][ T854] iforce 13-1:0.0: usb_submit_urb failed: -32 [ 790.064691][ T854] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input46 [ 790.182529][T22451] usbhid 12-1:1.0: can't add hid device: -71 [ 790.182664][T22451] usbhid 12-1:1.0: probe with driver usbhid failed with error -71 [ 790.194016][T22451] usb 12-1: USB disconnect, device number 32 [ 790.268927][T23567] ip6gretap0: entered promiscuous mode [ 790.308705][ T42] usb 13-1: USB disconnect, device number 8 [ 790.489892][T23565] ip6gretap0: left promiscuous mode [ 790.577730][T23588] netlink: 'syz.5.5101': attribute type 1 has an invalid length. [ 790.590995][T23588] bond1: entered promiscuous mode [ 790.591234][T23588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 790.616178][T23588] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5101'. [ 790.616316][T23588] bond1: entered allmulticast mode [ 790.629070][T23588] bond1: (slave bridge0): making interface the new active one [ 790.629122][T23588] bridge0: entered promiscuous mode [ 790.629488][T23588] bridge0: entered allmulticast mode [ 790.632627][T23588] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 790.892762][ T5745] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 791.221802][T23618] binder: BINDER_SET_CONTEXT_MGR already set [ 791.221853][T23618] binder: 23616:23618 ioctl 4018620d 80000100 returned -16 [ 791.227029][T23617] binder: 23616:23617 unknown command 0 [ 791.227043][T23617] binder: 23616:23617 ioctl c0306201 800001c0 returned -22 [ 791.285857][ T43] audit: type=1326 audit(1787997340.847:7776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23620 comm="syz.5.5109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 791.286090][ T43] audit: type=1326 audit(1787997340.847:7777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23620 comm="syz.5.5109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 791.286699][ T43] audit: type=1326 audit(1787997340.847:7778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23620 comm="syz.5.5109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 791.286856][ T43] audit: type=1326 audit(1787997340.847:7779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23620 comm="syz.5.5109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 791.287192][ T43] audit: type=1326 audit(1787997340.847:7780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23620 comm="syz.5.5109" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 791.287596][ T43] audit: type=1326 audit(1787997340.847:7781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23620 comm="syz.5.5109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 791.291579][ T43] audit: type=1326 audit(1787997340.857:7782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23620 comm="syz.5.5109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 791.510280][T23628] netlink: 'syz.9.5111': attribute type 1 has an invalid length. [ 792.180966][T23655] FAULT_INJECTION: forcing a failure. [ 792.180966][T23655] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 792.181071][T23655] CPU: 1 UID: 0 PID: 23655 Comm: syz.9.5123 Tainted: G L syzkaller #0 PREEMPT(full) [ 792.181109][T23655] Tainted: [L]=SOFTLOCKUP [ 792.181117][T23655] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 792.181128][T23655] Call Trace: [ 792.181135][T23655] [ 792.181143][T23655] dump_stack_lvl+0x100/0x190 [ 792.181174][T23655] should_fail_ex.cold+0x5/0xa [ 792.181194][T23655] ? prepare_alloc_pages+0x16d/0x5b0 [ 792.181221][T23655] should_fail_alloc_page+0xeb/0x140 [ 792.181247][T23655] prepare_alloc_pages+0x1f0/0x5b0 [ 792.181275][T23655] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 792.181305][T23655] ? __lock_acquire+0x4c5/0x1ec0 [ 792.181333][T23655] ? __lock_acquire+0x4c5/0x1ec0 [ 792.181373][T23655] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 792.181407][T23655] ? __lock_acquire+0x4c5/0x1ec0 [ 792.181430][T23655] ? lock_acquire+0x1d1/0x380 [ 792.181450][T23655] ? unwind_next_frame+0xbd/0x2090 [ 792.181475][T23655] ? lock_acquire+0x1d1/0x380 [ 792.181496][T23655] ? is_bpf_text_address+0x25/0x1a0 [ 792.181520][T23655] ? find_held_lock+0x2b/0x80 [ 792.181536][T23655] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 792.181561][T23655] ? policy_nodemask+0xed/0x4f0 [ 792.181585][T23655] alloc_pages_mpol+0x201/0x550 [ 792.181608][T23655] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 792.181628][T23655] ? unwind_get_return_address+0x59/0xa0 [ 792.181647][T23655] ? arch_stack_walk+0xa6/0xf0 [ 792.181671][T23655] folio_alloc_mpol_noprof+0x36/0x260 [ 792.181697][T23655] shmem_alloc_folio+0x135/0x160 [ 792.181721][T23655] shmem_alloc_and_add_folio+0x371/0xd40 [ 792.181751][T23655] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 792.181775][T23655] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 792.181804][T23655] shmem_get_folio_gfp+0x75b/0x1980 [ 792.181835][T23655] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 792.181862][T23655] ? filemap_map_pages+0x114a/0x2100 [ 792.181889][T23655] shmem_fault+0x1fb/0xa30 [ 792.181915][T23655] ? __pfx_shmem_fault+0x10/0x10 [ 792.181942][T23655] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 792.181967][T23655] ? __pfx_filemap_map_pages+0x10/0x10 [ 792.181993][T23655] ? find_held_lock+0x2b/0x80 [ 792.182012][T23655] ? __pfx_filemap_map_pages+0x10/0x10 [ 792.182038][T23655] __do_fault+0x10b/0x440 [ 792.182057][T23655] do_fault+0xb3f/0x1830 [ 792.182077][T23655] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 792.182103][T23655] ? __pfx_do_fault+0x10/0x10 [ 792.182122][T23655] ? pgd_none+0x9f/0xe0 [ 792.182143][T23655] ? __pfx_pgd_none+0x10/0x10 [ 792.182166][T23655] ? find_held_lock+0x2b/0x80 [ 792.182185][T23655] __handle_mm_fault+0x150b/0x2f60 [ 792.182214][T23655] ? __pfx___handle_mm_fault+0x10/0x10 [ 792.182236][T23655] ? __pfx_mt_find+0x10/0x10 [ 792.182273][T23655] ? find_vma+0xbf/0x140 [ 792.182295][T23655] ? __pfx_find_vma+0x10/0x10 [ 792.182317][T23655] handle_mm_fault+0x363/0xa20 [ 792.182348][T23655] do_user_addr_fault+0x745/0x12f0 [ 792.182375][T23655] exc_page_fault+0x6f/0xd0 [ 792.182398][T23655] asm_exc_page_fault+0x26/0x30 [ 792.182417][T23655] RIP: 0010:__get_user_4+0x14/0x30 [ 792.182437][T23655] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 792.182455][T23655] RSP: 0018:ffffc900055dfc50 EFLAGS: 00050287 [ 792.182472][T23655] RAX: 0000000000000000 RBX: 00000000000007a7 RCX: 0000000000000000 [ 792.182484][T23655] RDX: 00007ffffffff000 RSI: ffffffff825f6761 RDI: ffffffff8c622280 [ 792.182497][T23655] RBP: 0000000000000000 R08: 0000000000065f0c R09: 00000000000001d5 [ 792.182507][T23655] R10: 0000000000000200 R11: 0000000000000000 R12: 1ffff92000abbf8e [ 792.182519][T23655] R13: ffff88802b0f3c00 R14: ffff888070f32100 R15: 0000000000000000 [ 792.182539][T23655] ? __might_fault+0x111/0x140 [ 792.182567][T23655] vmci_host_unlocked_ioctl+0x1b05/0x2070 [ 792.182594][T23655] ? get_pid_task+0x106/0x250 [ 792.182614][T23655] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 792.182647][T23655] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 792.182671][T23655] ? do_vfs_ioctl+0x226/0x13e0 [ 792.182697][T23655] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 792.182725][T23655] ? __fget_files+0x34/0x3d0 [ 792.182748][T23655] ? find_held_lock+0x2b/0x80 [ 792.182766][T23655] ? __fget_files+0x215/0x3d0 [ 792.182784][T23655] ? hook_file_ioctl_common+0x140/0x440 [ 792.182814][T23655] ? __fget_files+0x21f/0x3d0 [ 792.182834][T23655] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 792.182861][T23655] compat_ptr_ioctl+0x6e/0xa0 [ 792.182885][T23655] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 792.182908][T23655] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 792.182936][T23655] __do_fast_syscall_32+0x13a/0x8b0 [ 792.182957][T23655] ? lockdep_hardirqs_on+0x7d/0x110 [ 792.182979][T23655] do_fast_syscall_32+0x32/0x70 [ 792.183001][T23655] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 792.183022][T23655] RIP: 0023:0xf70befec [ 792.183049][T23655] Code: Unable to access opcode bytes at 0xf70befc2. [ 792.183064][T23655] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 792.183081][T23655] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000007a7 [ 792.183092][T23655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 792.183101][T23655] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 792.183111][T23655] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 792.183121][T23655] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 792.183143][T23655] [ 792.448118][T23675] FAULT_INJECTION: forcing a failure. [ 792.448118][T23675] name failslab, interval 1, probability 0, space 0, times 0 [ 792.448226][T23675] CPU: 1 UID: 0 PID: 23675 Comm: syz.7.5130 Tainted: G L syzkaller #0 PREEMPT(full) [ 792.448263][T23675] Tainted: [L]=SOFTLOCKUP [ 792.448272][T23675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 792.448283][T23675] Call Trace: [ 792.448290][T23675] [ 792.448297][T23675] dump_stack_lvl+0x100/0x190 [ 792.448327][T23675] should_fail_ex.cold+0x5/0xa [ 792.448345][T23675] ? __netlink_lookup+0x652/0x900 [ 792.448444][T23675] should_failslab+0xc2/0x120 [ 792.448466][T23675] kmem_cache_alloc_noprof+0x92/0x6a0 [ 792.448485][T23675] ? skb_clone+0x190/0x400 [ 792.448508][T23675] skb_clone+0x190/0x400 [ 792.448527][T23675] netlink_deliver_tap+0xaed/0xcc0 [ 792.448558][T23675] netlink_unicast+0x62b/0x850 [ 792.448576][T23675] ? __pfx_netlink_unicast+0x10/0x10 [ 792.448597][T23675] netlink_sendmsg+0x8b0/0xda0 [ 792.448616][T23675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.448634][T23675] ? apparmor_socket_sendmsg+0x165/0x280 [ 792.448658][T23675] ____sys_sendmsg+0xa4d/0xbe0 [ 792.448679][T23675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.448696][T23675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 792.448728][T23675] ___sys_sendmsg+0x190/0x1e0 [ 792.448753][T23675] ? __pfx____sys_sendmsg+0x10/0x10 [ 792.448786][T23675] ? find_held_lock+0x2b/0x80 [ 792.448830][T23675] __sys_sendmsg+0x160/0x210 [ 792.448850][T23675] ? __pfx___sys_sendmsg+0x10/0x10 [ 792.448874][T23675] ? __pfx_ksys_write+0x10/0x10 [ 792.448895][T23675] __do_fast_syscall_32+0x13a/0x8b0 [ 792.448918][T23675] ? lockdep_hardirqs_on+0x7d/0x110 [ 792.448939][T23675] do_fast_syscall_32+0x32/0x70 [ 792.448960][T23675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 792.448981][T23675] RIP: 0023:0xf7f56fec [ 792.449002][T23675] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 792.449009][T23675] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 792.449027][T23675] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 792.449038][T23675] RDX: 0000000004000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 792.449048][T23675] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 792.449058][T23675] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 792.449068][T23675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 792.449090][T23675] [ 792.557721][T23680] netlink: 'syz.8.5127': attribute type 1 has an invalid length. [ 792.708329][T23689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.741609][T23683] netlink: 'syz.5.5129': attribute type 1 has an invalid length. [ 795.829274][T23711] FAULT_INJECTION: forcing a failure. [ 795.829274][T23711] name failslab, interval 1, probability 0, space 0, times 0 [ 795.829320][T23711] CPU: 2 UID: 0 PID: 23711 Comm: syz.7.5136 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.829348][T23711] Tainted: [L]=SOFTLOCKUP [ 795.829353][T23711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 795.829360][T23711] Call Trace: [ 795.829365][T23711] [ 795.829370][T23711] dump_stack_lvl+0x100/0x190 [ 795.829390][T23711] should_fail_ex.cold+0x5/0xa [ 795.829406][T23711] should_failslab+0xc2/0x120 [ 795.829421][T23711] __kmalloc_noprof+0xfc/0x840 [ 795.829433][T23711] ? trace_kmalloc+0xeb/0x110 [ 795.829446][T23711] ? lsm_blob_alloc+0x68/0x90 [ 795.829459][T23711] lsm_blob_alloc+0x68/0x90 [ 795.829469][T23711] security_sk_alloc+0x2d/0x290 [ 795.829482][T23711] sk_prot_alloc+0x12a/0x2a0 [ 795.829500][T23711] sk_alloc+0x36/0xe80 [ 795.829512][T23711] bpf_prog_test_run_skb+0x4d2/0x3530 [ 795.829532][T23711] ? lock_acquire+0x1d1/0x380 [ 795.829547][T23711] ? __fget_files+0x34/0x3d0 [ 795.829559][T23711] ? find_held_lock+0x2b/0x80 [ 795.829571][T23711] ? __fget_files+0x141/0x3d0 [ 795.829585][T23711] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 795.829604][T23711] ? fput+0x7c/0x100 [ 795.829618][T23711] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 795.829636][T23711] __sys_bpf+0x2265/0x4a30 [ 795.829651][T23711] ? __pfx___sys_bpf+0x10/0x10 [ 795.829661][T23711] ? lock_acquire+0x1d1/0x380 [ 795.829675][T23711] ? get_pid_task+0x2a/0x250 [ 795.829686][T23711] ? find_held_lock+0x2b/0x80 [ 795.829700][T23711] ? get_pid_task+0xfc/0x250 [ 795.829711][T23711] ? get_pid_task+0xfc/0x250 [ 795.829725][T23711] ? proc_fail_nth_write+0x9f/0x220 [ 795.829736][T23711] ? find_held_lock+0x2b/0x80 [ 795.829750][T23711] ? rcu_read_lock_any_held+0x6a/0x90 [ 795.829762][T23711] ? find_held_lock+0x2b/0x80 [ 795.829773][T23711] ? ksys_write+0x190/0x250 [ 795.829783][T23711] ? ksys_write+0x190/0x250 [ 795.829793][T23711] ? lock_acquire+0x1d1/0x380 [ 795.829816][T23711] ? fput+0x7c/0x100 [ 795.829830][T23711] ? __ia32_sys_bpf+0xcc/0x170 [ 795.829841][T23711] __ia32_sys_bpf+0xcc/0x170 [ 795.829852][T23711] ? __do_fast_syscall_32+0xb3/0x8b0 [ 795.829868][T23711] __do_fast_syscall_32+0x13a/0x8b0 [ 795.829882][T23711] ? lockdep_hardirqs_on+0x7d/0x110 [ 795.829897][T23711] do_fast_syscall_32+0x32/0x70 [ 795.829912][T23711] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 795.829938][T23711] RIP: 0023:0xf7f56fec [ 795.829951][T23711] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 795.829956][T23711] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 795.829967][T23711] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0 [ 795.829974][T23711] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 795.829981][T23711] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 795.829987][T23711] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 795.829994][T23711] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 795.830007][T23711] [ 796.642450][T23727] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 796.651091][T23727] netlink: 'syz.7.5141': attribute type 1 has an invalid length. [ 797.748414][ T854] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 797.932045][ T854] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 797.943813][ T854] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 797.943869][ T854] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 797.943903][ T854] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 797.943987][ T854] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.972345][ T854] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 797.972447][ T854] usb 14-1: Product: syz [ 797.972494][ T854] usb 14-1: Manufacturer: syz [ 798.037147][ T854] cdc_wdm 14-1:1.0: skipping garbage [ 798.037202][ T854] cdc_wdm 14-1:1.0: skipping garbage [ 798.046233][ T854] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 798.056851][ T854] cdc_wdm 14-1:1.0: Unknown control protocol [ 798.614017][T23739] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5144'. [ 798.617415][ T12] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 798.617486][ T12] bridge2 (unregistering): left promiscuous mode [ 798.617535][ T12] bridge2 (unregistering): left allmulticast mode [ 798.718011][ T12] bond0 (unregistering): Released all slaves [ 798.727268][ T12] bond1 (unregistering): Released all slaves [ 798.755075][ T12] bond2 (unregistering): Released all slaves [ 798.793985][ T12] bond3 (unregistering): Released all slaves [ 798.813631][ T12] bond4 (unregistering): Released all slaves [ 799.134787][ T12] tipc: Disabling bearer [ 799.158893][ T12] tipc: Left network mode [ 800.205483][ T12] IPVS: stopping backup sync thread 19617 ... [ 801.015660][T22451] usb 14-1: USB disconnect, device number 3 [ 801.296437][ T12] hsr_slave_0: left promiscuous mode [ 801.310453][ T12] hsr_slave_1: left promiscuous mode [ 802.553698][T23758] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5150'. [ 802.557743][T23758] FAULT_INJECTION: forcing a failure. [ 802.557743][T23758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.565508][T23758] CPU: 3 UID: 0 PID: 23758 Comm: syz.8.5150 Tainted: G L syzkaller #0 PREEMPT(full) [ 802.565540][T23758] Tainted: [L]=SOFTLOCKUP [ 802.565546][T23758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 802.565553][T23758] Call Trace: [ 802.565559][T23758] [ 802.565566][T23758] dump_stack_lvl+0x100/0x190 [ 802.565590][T23758] should_fail_ex.cold+0x5/0xa [ 802.565605][T23758] _copy_from_user+0x2e/0xd0 [ 802.565619][T23758] do_sys_poll+0x345/0xe90 [ 802.565631][T23758] ? find_held_lock+0x2b/0x80 [ 802.565644][T23758] ? is_bpf_text_address+0x8a/0x1a0 [ 802.565660][T23758] ? is_bpf_text_address+0x8a/0x1a0 [ 802.565676][T23758] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 802.565693][T23758] ? __pfx_do_sys_poll+0x10/0x10 [ 802.565703][T23758] ? __kernel_text_address+0xd/0x30 [ 802.565730][T23758] ? lock_acquire+0x1d1/0x380 [ 802.565769][T23758] ? ksys_write+0x190/0x250 [ 802.565779][T23758] ? lock_acquire+0x1d1/0x380 [ 802.565794][T23758] ? set_compat_user_sigmask+0x1d9/0x260 [ 802.565813][T23758] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 802.565831][T23758] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 802.565850][T23758] __ia32_compat_sys_ppoll_time32+0x2b6/0x350 [ 802.565865][T23758] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 802.565878][T23758] ? fput+0x7c/0x100 [ 802.565892][T23758] ? ksys_write+0x1ac/0x250 [ 802.565902][T23758] ? __pfx_ksys_write+0x10/0x10 [ 802.565916][T23758] __do_fast_syscall_32+0x13a/0x8b0 [ 802.565931][T23758] ? lockdep_hardirqs_on+0x7d/0x110 [ 802.565947][T23758] do_fast_syscall_32+0x32/0x70 [ 802.565962][T23758] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 802.565977][T23758] RIP: 0023:0xf7fa5fec [ 802.565993][T23758] Code: Unable to access opcode bytes at 0xf7fa5fc2. [ 802.565998][T23758] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000135 [ 802.566010][T23758] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 802.566017][T23758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 802.566024][T23758] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 802.566031][T23758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 802.566037][T23758] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 802.566051][T23758] [ 802.806661][T23761] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(14) [ 802.806711][T23761] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 802.806818][T23761] vhci_hcd vhci_hcd.0: Device attached [ 802.816268][T23763] vhci_hcd: connection closed [ 802.822254][ T9888] vhci_hcd vhci_hcd.8: stop threads [ 802.822323][ T9888] vhci_hcd vhci_hcd.8: release socket [ 802.822366][ T9888] vhci_hcd vhci_hcd.8: disconnect device [ 803.262174][T23757] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5149'. [ 803.328988][ T12] IPVS: stop unused estimator thread 0... [ 803.557117][T23757] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(13) [ 803.557162][T23757] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 803.557259][T23757] vhci_hcd vhci_hcd.0: Device attached [ 803.588333][T23767] vhci_hcd: connection closed [ 803.591862][ T9888] vhci_hcd vhci_hcd.9: stop threads [ 803.597321][ T9888] vhci_hcd vhci_hcd.9: release socket [ 803.597528][ T9888] vhci_hcd vhci_hcd.9: disconnect device [ 803.727917][ T43] audit: type=1800 audit(1787997353.287:7783): pid=23756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5152" name="syzkaller0" dev="sda1" ino=2041 res=0 errno=0 [ 803.822736][ T43] audit: type=1800 audit(1787997353.387:7784): pid=23759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5152" name="syzkaller0" dev="sda1" ino=2041 res=0 errno=0 [ 803.842467][T23772] xt_TCPMSS: Only works on TCP SYN packets [ 803.861806][T23772] tipc: Started in network mode [ 803.861904][T23772] tipc: Node identity 36eaf5ffea76, cluster identity 4711 [ 803.862105][T23772] tipc: Enabled bearer , priority 0 [ 804.079213][T23772] syzkaller0: entered promiscuous mode [ 804.079317][T23772] syzkaller0: entered allmulticast mode [ 804.080000][T23772] tipc: Resetting bearer [ 804.214491][T14199] tipc: Resetting bearer [ 804.217647][T23771] tipc: Resetting bearer [ 804.496466][T23778] netlink: 'syz.9.5156': attribute type 21 has an invalid length. [ 804.496540][T23778] netlink: 128 bytes leftover after parsing attributes in process `syz.9.5156'. [ 804.548872][T23781] netlink: 'syz.9.5156': attribute type 21 has an invalid length. [ 804.548961][T23781] netlink: 128 bytes leftover after parsing attributes in process `syz.9.5156'. [ 808.262223][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.262296][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.941773][T23771] tipc: Disabling bearer [ 808.947250][T23778] netlink: 'syz.9.5156': attribute type 4 has an invalid length. [ 808.947300][T23778] netlink: 'syz.9.5156': attribute type 5 has an invalid length. [ 808.947592][T23778] netlink: 3 bytes leftover after parsing attributes in process `syz.9.5156'. [ 808.948435][T23781] netlink: 'syz.9.5156': attribute type 4 has an invalid length. [ 808.948448][T23781] netlink: 'syz.9.5156': attribute type 5 has an invalid length. [ 808.948456][T23781] netlink: 3 bytes leftover after parsing attributes in process `syz.9.5156'. [ 808.951301][ T7809] tipc: Node number set to 3701274111 [ 809.088448][T23783] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 809.088573][T23783] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 809.088612][T23783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 809.101024][T23783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 809.104574][T23783] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 809.104684][T23783] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 809.275003][T23783] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 809.496062][T22599] syz_tun (unregistering): left allmulticast mode [ 809.528919][T22599] bond2: (slave syz_tun): Removing an active aggregator [ 809.534051][T22599] bond2: (slave syz_tun): Releasing backup interface [ 809.761320][T23817] blktrace: Concurrent blktraces are not allowed on sg0 [ 809.989883][T23814] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 810.085888][T23820] tmpfs: Unknown parameter 'quotaP`05'ð]Ùt8Œ' [ 810.655598][ T5817] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 810.655675][ T5817] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 810.812253][T23831] netlink: 'syz.9.5165': attribute type 12 has an invalid length. [ 810.845771][T23820] jffs2: notice: (23820) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 810.916560][T23831] overlayfs: failed to resolve './sys/file0': -2 [ 810.928247][ T5817] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 810.928310][ T5817] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 811.137994][ T5098] Bluetooth: hci5: command 0x0c1a tx timeout [ 811.138069][ T5098] Bluetooth: hci4: command 0x0c1a tx timeout [ 811.138097][ T5745] Bluetooth: hci1: command 0x0405 tx timeout [ 811.181794][ T5817] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 811.181856][ T5817] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 811.270552][T23837] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 811.601138][ T5817] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 811.601190][ T5817] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 811.664590][T23859] netlink: 'syz.7.5169': attribute type 21 has an invalid length. [ 811.664628][T23859] netlink: 128 bytes leftover after parsing attributes in process `syz.7.5169'. [ 811.673522][T23859] netlink: 'syz.7.5169': attribute type 4 has an invalid length. [ 811.674498][T23859] netlink: 'syz.7.5169': attribute type 5 has an invalid length. [ 811.674516][T23859] netlink: 3 bytes leftover after parsing attributes in process `syz.7.5169'. [ 811.675869][T23859] netlink: 'syz.7.5169': attribute type 21 has an invalid length. [ 811.675880][T23859] netlink: 128 bytes leftover after parsing attributes in process `syz.7.5169'. [ 811.675905][T23859] netlink: 'syz.7.5169': attribute type 4 has an invalid length. [ 811.675913][T23859] netlink: 'syz.7.5169': attribute type 5 has an invalid length. [ 811.675919][T23859] netlink: 3 bytes leftover after parsing attributes in process `syz.7.5169'. [ 812.033797][ T5817] bridge_slave_1: left allmulticast mode [ 812.033848][ T5817] bridge_slave_1: left promiscuous mode [ 812.034013][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.058501][ T5817] bridge_slave_0: left allmulticast mode [ 812.058606][ T5817] bridge_slave_0: left promiscuous mode [ 812.058760][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.350565][T23882] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 812.369641][T18910] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 812.386866][T23877] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 812.622278][T23892] jffs2: notice: (23892) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 812.694869][T23896] netlink: 'syz.8.5173': attribute type 2 has an invalid length. [ 812.751563][ T5817] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 812.751620][ T5817] bridge1 (unregistering): left promiscuous mode [ 812.773659][ T5817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.783583][ T5817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.788066][ T5817] bond0 (unregistering): Released all slaves [ 812.793725][ T5817] bond1 (unregistering): Released all slaves [ 812.801214][ T5817] bond2 (unregistering): Released all slaves [ 812.811223][T23891] mac80211_hwsim hwsim45 syzkaller0: left promiscuous mode [ 812.811278][T23891] mac80211_hwsim hwsim45 syzkaller0: left allmulticast mode [ 812.937717][T23904] tmpfs: Unknown parameter 'quotaP`05'ð]Ùt8Œ' [ 812.954320][ T5817] tipc: Disabling bearer [ 812.961136][ T5817] tipc: Left network mode [ 813.232781][T16515] Bluetooth: hci4: command 0x0c1a tx timeout [ 813.232845][T16515] Bluetooth: hci5: command 0x0c1a tx timeout [ 813.329407][ T5452] 8021q: adding VLAN 0 to HW filter on device eth18 [ 813.559238][ T5817] hsr_slave_0: left promiscuous mode [ 813.567776][ T5817] hsr_slave_1: left promiscuous mode [ 813.568870][ T5817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.568908][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.573358][ T5817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.573372][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.658641][ T5817] veth1_macvtap: left promiscuous mode [ 813.658730][ T5817] veth0_macvtap: left promiscuous mode [ 813.658880][ T5817] veth1_vlan: left promiscuous mode [ 813.658981][ T5817] veth0_vlan: left promiscuous mode [ 813.943794][T23938] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5182'. [ 814.047191][ T5817] team0 (unregistering): Port device team_slave_1 removed [ 814.058292][ T5817] team0 (unregistering): Port device team_slave_0 removed [ 814.082295][T23941] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5183'. [ 814.183980][ T5452] 8021q: adding VLAN 0 to HW filter on device eth19 [ 814.585991][ T5452] 8021q: adding VLAN 0 to HW filter on device eth20 [ 814.638597][ T5817] IPVS: stop unused estimator thread 0... [ 814.732365][T23964] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5186'. [ 814.823417][T23898] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 814.893730][ T5452] 8021q: adding VLAN 0 to HW filter on device eth21 [ 814.981516][T23971] tmpfs: Bad value for 'mpol' [ 815.308010][ T5745] Bluetooth: hci4: command 0x0c1a tx timeout [ 815.308086][T16515] Bluetooth: hci5: command 0x0c1a tx timeout [ 815.493752][T23989] overlayfs: missing 'lowerdir' [ 815.567017][T23988] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5190'. [ 815.908163][T16515] Bluetooth: hci1: Unable to find connection with handle 0x00c8 [ 816.095440][T24016] pim6reg: entered allmulticast mode [ 816.128706][ T43] audit: type=1400 audit(1787997365.697:7785): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=24015 comm="syz.9.5199" [ 816.168599][T24012] pim6reg: left allmulticast mode [ 816.280405][T24020] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5197'. [ 816.297614][T24022] ublk_ctrl_add_dev: dev id not match 4294967295 255 [ 816.584746][T24034] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5204'. [ 816.751342][T24045] netlink: 'syz.7.5206': attribute type 4 has an invalid length. [ 816.754945][T24045] __nla_validate_parse: 1 callbacks suppressed [ 816.758073][T24045] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5206'. [ 816.774557][T24045] .`: renamed from bond0 (while UP) [ 818.200861][T24055] extrace-0138 ex_trace_point : Method Begin [\_SB.PCI0._PRT] execution. [ 818.391597][ T43] audit: type=1326 audit(1787997367.957:7786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24064 comm="syz.8.5212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 818.391662][ T43] audit: type=1326 audit(1787997367.957:7787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24064 comm="syz.8.5212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5fec code=0x7ffc0000 [ 818.407527][T24055] extrace-0138 ex_trace_point : Method End [\_SB.PCI0._PRT] execution. qemu-system-x86_64: vtd_irte_get: detected non-present IRTE (index=15, high=0x0, low=0x0) ** replaying previous printk message ** [ 818.433856][T24055] ------------[ cut here ]------------ [ 818.433903][T24055] remove_proc_entry: removing non-empty directory 'irq/20', leaking at least 'pc212e' [ 818.433952][T24055] WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610, CPU#0: syz.7.5209/24055 [ 818.447291][T24055] Modules linked in: [ 818.449146][T24055] CPU: 0 UID: 0 PID: 24055 Comm: syz.7.5209 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.452959][T24055] Tainted: [L]=SOFTLOCKUP [ 818.454567][T24055] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 818.458314][T24055] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 818.460490][T24055] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 99 4f 8b 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 65 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 dc 21 4b ff 48 8d 7d 18 48 b8 00 [ 818.468932][T24055] RSP: 0000:ffffc900040576a0 EFLAGS: 00010246 [ 818.470975][T24055] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88805ec78adc [ 818.474007][T24055] RDX: ffff88801e2c2adc RSI: ffffffff8c0b6540 RDI: ffffffff914b60d0 [ 818.476999][T24055] RBP: ffff88805ec78ab8 R08: ffff88805ec7871c R09: ffffed100bd8f143 [ 818.480878][T24055] R10: ffff88805ec78a1b R11: 0000000000000000 R12: ffff88805ec78a00 [ 818.484166][T24055] R13: ffff88801e2c2a00 R14: ffff88805ec786f8 R15: dffffc0000000000 [ 818.487496][T24055] FS: 0000000000000000(0000) GS:ffff888096968000(0063) knlGS:00000000f5416b40 [ 818.491339][T24055] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 818.494267][T24055] CR2: 00000000f7f0a190 CR3: 0000000072360000 CR4: 0000000000352ef0 [ 818.497950][T24055] Call Trace: [ 818.499481][T24055] [ 818.500727][T24055] ? __pfx_remove_proc_entry+0x10/0x10 [ 818.502960][T24055] ? mtree_load+0x3a4/0xb50 [ 818.504816][T24055] ? __pfx_mtree_load+0x10/0x10 [ 818.506679][T24055] ? rcu_is_watching+0x13/0xc0 [ 818.509075][T24055] unregister_irq_proc+0x206/0x2a0 [ 818.511019][T24055] ? __pfx_unregister_irq_proc+0x10/0x10 [ 818.513539][T24055] free_desc+0x89/0x330 [ 818.515620][T24055] ? __pfx_free_desc+0x10/0x10 [ 818.518150][T24055] ? kasan_quarantine_put+0x104/0x240 [ 818.520756][T24055] ? lockdep_hardirqs_on+0x7d/0x110 [ 818.523175][T24055] ? irq_domain_free_irqs+0x370/0x5c0 [ 818.525731][T24055] irq_free_descs+0x84/0xc0 [ 818.527683][T24055] irq_domain_free_irqs+0x46a/0x5c0 [ 818.530052][T24055] mp_unmap_irq+0xf8/0x130 [ 818.532054][T24055] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 818.534753][T24055] acpi_unregister_gsi_ioapic+0x40/0x60 [ 818.537395][T24055] acpi_unregister_gsi+0x25/0x40 [ 818.539348][T24055] acpi_pci_irq_disable+0x275/0x360 [ 818.541306][T24055] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 818.543491][T24055] pcibios_disable_device+0x89/0xb0 [ 818.545251][T24055] do_pci_disable_device+0x9f/0x100 [ 818.546899][T24055] ? __pfx_do_pci_disable_device+0x10/0x10 [ 818.548800][T24055] pci_disable_device+0x130/0x270 [ 818.550223][T24072] overlayfs: missing 'lowerdir' [ 818.552998][T24055] pci_device_remove+0xb2/0x1d0 [ 818.554897][T24055] ? __pfx_pci_device_remove+0x10/0x10 [ 818.557035][T24055] device_remove+0xcb/0x180 [ 818.559292][T24055] device_release_driver_internal+0x44e/0x620 [ 818.562586][T24055] pci_stop_bus_device+0x120/0x160 [ 818.565055][T24055] pci_stop_and_remove_bus_device+0x58/0xa0 [ 818.567144][T24055] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 818.570049][T24055] remove_store+0x123/0x140 [ 818.572094][T24055] ? __pfx_remove_store+0x10/0x10 [ 818.574182][T24055] ? find_held_lock+0x2b/0x80 [ 818.576095][T24055] ? sysfs_file_kobj+0xe4/0x290 [ 818.578445][T24055] ? sysfs_file_kobj+0xe4/0x290 [ 818.581471][T24055] ? __pfx_remove_store+0x10/0x10 [ 818.584013][T24055] dev_attr_store+0x58/0x80 [ 818.585958][T24055] ? __pfx_dev_attr_store+0x10/0x10 [ 818.588994][T24055] sysfs_kf_write+0xf2/0x150 [ 818.592126][T24055] kernfs_fop_write_iter+0x3e0/0x5f0 [ 818.594390][T24055] ? __pfx_sysfs_kf_write+0x10/0x10 [ 818.596706][T24055] vfs_write+0x6af/0x1050 [ 818.598816][T24055] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 818.601617][T24055] ? __pfx_vfs_write+0x10/0x10 [ 818.604057][T24055] ? find_held_lock+0x2b/0x80 [ 818.606478][T24055] ksys_write+0x12a/0x250 [ 818.608425][T24055] ? __pfx_ksys_write+0x10/0x10 [ 818.610502][T24055] __do_fast_syscall_32+0x13a/0x8b0 [ 818.612795][T24055] do_fast_syscall_32+0x32/0x70 [ 818.614822][T24055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.617536][T24055] RIP: 0023:0xf7f56fec [ 818.619599][T24055] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 818.622756][T24055] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 818.626667][T24055] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000400 [ 818.630342][T24055] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 818.633660][T24055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 818.637200][T24055] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 818.640795][T24055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 818.644366][T24055] [ 818.645852][T24055] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 818.648965][T24055] CPU: 0 UID: 0 PID: 24055 Comm: syz.7.5209 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.653490][T24055] Tainted: [L]=SOFTLOCKUP [ 818.655329][T24055] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 818.659675][T24055] Call Trace: [ 818.661411][T24055] [ 818.662997][T24055] dump_stack_lvl+0x100/0x190 [ 818.665558][T24055] vpanic+0x553/0x970 [ 818.667260][T24055] ? __pfx_vpanic+0x10/0x10 [ 818.669163][T24055] panic+0xd1/0xe0 [ 818.670753][T24055] ? __pfx_panic+0x10/0x10 [ 818.672678][T24055] check_panic_on_warn.cold+0x19/0x34 [ 818.674892][T24055] ? remove_proc_entry+0x4e7/0x610 [ 818.676813][T24055] __warn.cold+0x191/0x318 [ 818.678603][T24055] __report_bug+0x30f/0x440 [ 818.680544][T24055] ? remove_proc_entry+0x4e7/0x610 [ 818.682701][T24055] ? __pfx___report_bug+0x10/0x10 [ 818.684875][T24055] ? __do_fast_syscall_32+0x13a/0x8b0 [ 818.687222][T24055] ? do_raw_spin_lock+0x128/0x260 [ 818.689447][T24055] ? find_held_lock+0x2b/0x80 [ 818.691867][T24055] ? proc_entry_rundown+0x158/0x1e0 [ 818.694059][T24055] ? proc_entry_rundown+0x158/0x1e0 [ 818.696224][T24055] report_bug_entry+0xe2/0x290 [ 818.698078][T24055] ? remove_proc_entry+0x4f5/0x610 [ 818.699927][T24055] handle_bug+0x1cd/0x2a0 [ 818.701530][T24055] exc_invalid_op+0x17/0x50 [ 818.703140][T24055] asm_exc_invalid_op+0x1a/0x20 [ 818.704930][T24055] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 818.707201][T24055] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 99 4f 8b 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 65 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 dc 21 4b ff 48 8d 7d 18 48 b8 00 [ 818.715154][T24055] RSP: 0000:ffffc900040576a0 EFLAGS: 00010246 [ 818.717683][T24055] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88805ec78adc [ 818.721109][T24055] RDX: ffff88801e2c2adc RSI: ffffffff8c0b6540 RDI: ffffffff914b60d0 [ 818.724538][T24055] RBP: ffff88805ec78ab8 R08: ffff88805ec7871c R09: ffffed100bd8f143 [ 818.728056][T24055] R10: ffff88805ec78a1b R11: 0000000000000000 R12: ffff88805ec78a00 [ 818.731701][T24055] R13: ffff88801e2c2a00 R14: ffff88805ec786f8 R15: dffffc0000000000 [ 818.735154][T24055] ? __pfx_remove_proc_entry+0x10/0x10 [ 818.737479][T24055] ? mtree_load+0x3a4/0xb50 [ 818.739446][T24055] ? __pfx_mtree_load+0x10/0x10 [ 818.741561][T24055] ? rcu_is_watching+0x13/0xc0 [ 818.743699][T24055] unregister_irq_proc+0x206/0x2a0 [ 818.745707][T24055] ? __pfx_unregister_irq_proc+0x10/0x10 [ 818.748275][T24055] free_desc+0x89/0x330 [ 818.750407][T24055] ? __pfx_free_desc+0x10/0x10 [ 818.752982][T24055] ? kasan_quarantine_put+0x104/0x240 [ 818.755683][T24055] ? lockdep_hardirqs_on+0x7d/0x110 [ 818.758207][T24055] ? irq_domain_free_irqs+0x370/0x5c0 [ 818.760516][T24055] irq_free_descs+0x84/0xc0 [ 818.762636][T24055] irq_domain_free_irqs+0x46a/0x5c0 [ 818.765126][T24055] mp_unmap_irq+0xf8/0x130 [ 818.767076][T24055] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 818.769640][T24055] acpi_unregister_gsi_ioapic+0x40/0x60 [ 818.771441][T24055] acpi_unregister_gsi+0x25/0x40 [ 818.773430][T24055] acpi_pci_irq_disable+0x275/0x360 [ 818.775689][T24055] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 818.778219][T24055] pcibios_disable_device+0x89/0xb0 [ 818.780825][T24055] do_pci_disable_device+0x9f/0x100 [ 818.783565][T24055] ? __pfx_do_pci_disable_device+0x10/0x10 [ 818.786340][T24055] pci_disable_device+0x130/0x270 [ 818.788505][T24055] pci_device_remove+0xb2/0x1d0 [ 818.790575][T24055] ? __pfx_pci_device_remove+0x10/0x10 [ 818.793010][T24055] device_remove+0xcb/0x180 [ 818.795101][T24055] device_release_driver_internal+0x44e/0x620 [ 818.797710][T24055] pci_stop_bus_device+0x120/0x160 [ 818.799910][T24055] pci_stop_and_remove_bus_device+0x58/0xa0 [ 818.802498][T24055] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 818.805404][T24055] remove_store+0x123/0x140 [ 818.807410][T24055] ? __pfx_remove_store+0x10/0x10 [ 818.809625][T24055] ? find_held_lock+0x2b/0x80 [ 818.811163][T24055] ? sysfs_file_kobj+0xe4/0x290 [ 818.812915][T24055] ? sysfs_file_kobj+0xe4/0x290 [ 818.815045][T24055] ? __pfx_remove_store+0x10/0x10 [ 818.817224][T24055] dev_attr_store+0x58/0x80 [ 818.819187][T24055] ? __pfx_dev_attr_store+0x10/0x10 [ 818.820917][T24055] sysfs_kf_write+0xf2/0x150 [ 818.822525][T24055] kernfs_fop_write_iter+0x3e0/0x5f0 [ 818.824737][T24055] ? __pfx_sysfs_kf_write+0x10/0x10 [ 818.827128][T24055] vfs_write+0x6af/0x1050 [ 818.829124][T24055] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 818.831122][T24055] ? __pfx_vfs_write+0x10/0x10 [ 818.832829][T24055] ? find_held_lock+0x2b/0x80 [ 818.834804][T24055] ksys_write+0x12a/0x250 [ 818.836395][T24055] ? __pfx_ksys_write+0x10/0x10 [ 818.838448][T24055] __do_fast_syscall_32+0x13a/0x8b0 [ 818.840405][T24055] do_fast_syscall_32+0x32/0x70 [ 818.842328][T24055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.845114][T24055] RIP: 0023:0xf7f56fec [ 818.846798][T24055] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 818.848933][T24055] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 818.851594][T24055] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000400 [ 818.854562][T24055] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 818.857485][T24055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 818.860242][T24055] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 818.863585][T24055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 818.866574][T24055] [ 818.868330][T24055] Kernel Offset: disabled [ 818.869937][T24055] Rebooting in 86400 seconds..