last executing test programs: 6m29.354289128s ago: executing program 3 (id=1028): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x5}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000001c0)={0x7, 0x8004, 0x9f09, 0x4, r4}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x1, 0x20}, 0xc) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5}) 6m28.666407877s ago: executing program 3 (id=1029): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000004c0)=@name={0x1e, 0x2, 0x3, {{0x40, 0xfffffffd}, 0x4}}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x5}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500090002000000", 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)=ANY=[@ANYBLOB="c00000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffe00000010c000280050001000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000002c00068014000400fc00000000000000000000000000000014000500"/192], 0xc0}}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e617404000000000000000000000000040000000003000000000000000000000200"/56], 0x44) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x43}}}, 0x10) r3 = socket(0x200000000000011, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0000080, 0x0, 0xd00}]}) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @empty, 0x4}, @l2={0x1f, 0x6, @any, 0x992}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x100000000000000, 0x0, 0x1}) r10 = socket$inet(0x2, 0x2, 0x0) getsockopt$MRT(r10, 0x0, 0xce, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xfffffe85, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0xf4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xfff1, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x21}}}, @TCA_RATE={0x6, 0x5, {0x16, 0x6}}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1, 0x4ab2, 0x5, 0x2, 0x2, 0xda0e, 0x8}}, {0x14, 0x2, [0xfff, 0x4, 0x1000, 0x1, 0x7, 0x26c, 0xa16, 0x5]}}, {{0x1c, 0x1, {0xcf, 0x0, 0x1, 0x97fa, 0x2, 0xa6f, 0x2, 0x3}}, {0xa, 0x2, [0x9, 0xfff, 0x8]}}, {{0x1c, 0x1, {0xd, 0x1, 0xff, 0x3, 0x1, 0x6, 0x81, 0x2}}, {0x8, 0x2, [0x7, 0x1]}}, {{0x1c, 0x1, {0x4, 0x2, 0x6, 0xec, 0x0, 0x2, 0xff, 0x3}}, {0xa, 0x2, [0x2, 0x1000, 0xd]}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40010}, 0x8c4) 6m23.010453734s ago: executing program 3 (id=1038): r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) syz_emit_ethernet(0x4a, &(0x7f000001f8c0)={@local, @broadcast, @void, {@ipv4={0x8864, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x21, 0x0, 0x6, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r5 = epoll_create(0x1) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000001040), &(0x7f0000001080)=0x26) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x1, &(0x7f0000000080), 0x4) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000180000000000000000000000000000ac1e0001000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa000000000000000005000600000000000a00000000000000fc020000000000000000000000000000000000000000000004000300"/179], 0xc0}}, 0x10) r8 = dup3(r4, r5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$KDGKBSENT(r8, 0x4b48, &(0x7f0000000640)={0xd, "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"}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r12 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r12, &(0x7f0000019680)=""/102392, 0x18ff8) 6m22.08387451s ago: executing program 0 (id=1041): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000951c0000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, &(0x7f0000000000), 0x0, 0x8, 0x69, &(0x7f0000000380)=""/105, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x3, 0xffff, 0x80}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440), &(0x7f0000000480)=[{0x1, 0x1, 0xb, 0x4}, {0x0, 0x1, 0x8, 0x3}, {0x4, 0x5, 0x8, 0x1}], 0x10, 0x9, @void, @value}, 0x94) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r5, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='syscall\x00') r6 = userfaultfd(0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002120001180040001"], 0xe0}}, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x46a8, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000140)) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) 6m20.060365104s ago: executing program 0 (id=1043): dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket(0xb, 0x800, 0x2010f7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x20, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x6, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x143, 0xe}, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_io_uring_setup(0x3678, &(0x7f0000000080)={0x0, 0x1ffffd, 0x10100, 0x40000000, 0x1d3}, &(0x7f0000000040), &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r11, 0x400454c9, 0xba98575a95aeb70d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000ac0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109000000000007b0ae8ff0082aa04196dc9e1ae51f2bb"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6m20.059824678s ago: executing program 3 (id=1045): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1ff, 0x1, 0x4}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x5}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x4f0602, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8040) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000004d40)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000008b80)=[{0x0, 0x3e}, {&(0x7f0000008900)='y', 0x1}], 0x2}}], 0x2, 0x4008040) 6m18.617321304s ago: executing program 0 (id=1047): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b708000000020000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x104, 0x20, 0x2, 0xcc}, &(0x7f00000002c0)=0x0, &(0x7f0000000500)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) r3 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1}) r5 = socket$inet6(0xa, 0x40000080806, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r6}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @mcast1}, 0x1c) listen(r5, 0x20000005) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r8 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r8) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000004) 6m18.585434743s ago: executing program 3 (id=1048): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$tipc(0x1e, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000200)) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x80, 0x8000000, r1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000a2000)={0x0, 0x0}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x2000000, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f00), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="3140d234229d22526d593192b1c2d1e481094b14cf973f6e571fed6015d8da75cfaf17c6118ae80810b8408a4914964bf99ace28ad1e98a7a70f47ca5474d53d", 0x40}], 0x1}}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000003100)="f4645fcf70a04ee44db82372b5a4465fd477c7b5af", 0x15}, {&(0x7f0000003140)="00a4fdaa980bd1", 0x7}, {&(0x7f0000003300)="4ed7959289a609f81c98fdb412c5d683dffec5c62d4f7fb522fd59e1c8039584b8fe0b94c41a9413c7a25c5f81d95a329f48f692847af53affc359f0a17a38abc937735aa70d210afdbe4e1457207707a1f3d01902a6cff83ab584e926542708c9a3082c4d896976acc58e4e8c995c5a5eb1000ec1f4012cf82bfd198b9d812108a5908a0493db69d7082bc10e77bddad6f1df39506efabe15f4e953212f0dbcb1a5756c", 0xa4}], 0x3}}], 0x2, 0x0) waitid(0x3, 0x0, 0x0, 0x8, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000480)={0x28, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve1\x00'}}]}]}, 0x28}}, 0x0) getdents(r1, &(0x7f0000000080)=""/81, 0x51) recvmsg$kcm(r4, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) r10 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="39000000140081ae0000dc676f97daf01e2357f900000001ffffff052101874becf798f6ba774e58edb75301546fabca1b4e8a06a6581e88370200c54c1960b89c40ebb373", 0x45}], 0x1}, 0x4c890) 6m18.143603039s ago: executing program 3 (id=1051): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e65766500006000028005000400010000001400070000000000000000000000000000000001060005004e200000050003000000000005000c000100000005000800000000000500"], 0x90}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r9 = syz_open_dev$sg(&(0x7f0000001600), 0x1, 0x2002) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB]) write$binfmt_aout(r9, &(0x7f0000000000)=ANY=[], 0x66) read(r9, 0x0, 0x0) r10 = openat$cgroup_pressure(r7, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r8}], 0x1, 0x0, 0x0, 0x0) close(r10) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, 0x0, "02b66c11beed7c64705a2327ec95767e4393a580b2c3043a2fcfb08839b8897467f4a525091f0f7d2480b2fbdcfd2a3924b674e8aed38628fb035a463934e151ef7c0289d4fd7b308135026f77657ca78a849330727be579703bef5f51cf16a7198f8eb8e962cc55e47a88645dc99b6e4dfd15399b64e979124ef3a9120208d05d9de3ff1ce9cc9e6353b97b13c914e3530a6ec5b967674f3cbc69538c66356f6777af618dd96e1730048727e1752cc8139776c1e5061154ffe7838008ce90ccbf0827c03a28016d5f3bdabbc98bee9c405509e3e094ba1677d6b347061c346722828810ba1b68424c585770f6527f3856630aedb97f2ed5ff2e013d5d412046", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r11, 0xd000943d, 0x0) r12 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r12, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x1, 0x425, 0x10001, 0xa, 0x2, 0x1, 0x3, 0x0, 0x6}}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) 6m10.38474866s ago: executing program 0 (id=1053): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x80) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$vim2m(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) mbind(&(0x7f000034f000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x4, 0x2) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfeec, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000700000000000600000000000400731ebd3701f20f280f7efd92e36337555675961a0848101b346a58e98bdce60e0f2066d0aee16ec4caa8220e3425d58ec051fe7bbf9166329d95916e16cfe2f7f8306677730244c49123d0d0f23829e268773a735e809b1a53362770ce7a816eea15495843f9f4fead62d48fc73ebb4ab0ae1181e5b4fa29503d", @ANYRESHEX=r0], 0x30}, 0x1, 0x0, 0x0, 0x20080034}, 0x4040880) 5m51.519041686s ago: executing program 0 (id=1054): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000300)={0xf, 0x8}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000080)=0x2, 0x4) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c6f00001a0001e8000000000000000200007f000060000000000000"], 0x1c}}, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) r8 = syz_open_dev$media(&(0x7f0000000000), 0x1005, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc01c7c02, 0x0) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x3) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_DEV_DESTROY(r7, 0x5502) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280040012000500160002000000060018000008000005001700"], 0x54}}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xc2) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x214, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x9c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x0, 0x0, 0x5000000}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffc}}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}]}}, @qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0xa, 0xb8, 0x0, 0x8001, 0x8004, 0x6}}, {0x10, 0x2, [0x3, 0x4, 0xd, 0x681, 0x1, 0x8001]}}, {{0x1c, 0x1, {0x4, 0xc6, 0x5, 0xc, 0x0, 0x800, 0x5, 0x3}}, {0xa, 0x2, [0x8001, 0xff, 0x2]}}, {{0x1c, 0x1, {0x6, 0x8, 0x2, 0x2, 0x1, 0xf, 0xffff, 0x2}}, {0x8, 0x2, [0x6, 0x7]}}, {{0x1c, 0x1, {0x4, 0x32, 0x56e, 0x2, 0x1, 0x5, 0x8, 0x3}}, {0xa, 0x2, [0x4, 0x2, 0x522]}}, {{0x1c, 0x1, {0x7, 0x0, 0x37b5, 0x1, 0x1, 0x8, 0x970}}, {0x4}}, {{0x1c, 0x1, {0xb, 0x7, 0xfffc, 0xa, 0x1, 0x1, 0xfffffff0, 0x7}}, {0x12, 0x2, [0x1, 0x1, 0x2, 0x2, 0x2, 0x800, 0x4]}}, {{0x1c, 0x1, {0x66, 0x0, 0x3, 0x6, 0x0, 0x2, 0xda18, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x3, 0x5, 0x4, 0x2, 0x2, 0xc, 0x8, 0x5}}, {0xe, 0x2, [0x2, 0xe4f, 0xcc, 0x6, 0x6]}}]}]}, 0x214}}, 0x0) 5m51.518566196s ago: executing program 0 (id=1055): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000e9400000100000000000000", @ANYRES32], 0x48) r2 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) dup2(r3, r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5m51.471115447s ago: executing program 32 (id=1055): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000e9400000100000000000000", @ANYRES32], 0x48) r2 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) dup2(r3, r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5m51.134171038s ago: executing program 33 (id=1051): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e65766500006000028005000400010000001400070000000000000000000000000000000001060005004e200000050003000000000005000c000100000005000800000000000500"], 0x90}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r9 = syz_open_dev$sg(&(0x7f0000001600), 0x1, 0x2002) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB]) write$binfmt_aout(r9, &(0x7f0000000000)=ANY=[], 0x66) read(r9, 0x0, 0x0) r10 = openat$cgroup_pressure(r7, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r8}], 0x1, 0x0, 0x0, 0x0) close(r10) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r11, 0xd000943d, 0x0) r12 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r12, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x1, 0x425, 0x10001, 0xa, 0x2, 0x1, 0x3, 0x0, 0x6}}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) 1m17.741816825s ago: executing program 2 (id=2502): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x8a, &(0x7f0000001640)=0x4f1d, 0x4) creat(0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000fbdbdf252e00000008000300", @ANYRES32=r7, @ANYBLOB="050034008b0200002400fe0047909e2b80c7974180dad11d4d9eaa95220f0a247d5632bb2b328b69e08494b0e6842e"], 0x48}}, 0x20000044) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$ptys(0xc, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 1m17.476427087s ago: executing program 2 (id=2503): r0 = socket(0x10, 0x4, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002"], 0x122}}, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x6c, &(0x7f00000002c0)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) pwritev2(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="d0600b401f39b97bf93ecf49759e94b4519a0de2f87e5c417273a5dce55efb335b22dce602ca972f116438489fdab766171401f130eb1c9e78ec70db15755f97ca197fc3da0b85ea0d2f7bdffcc1caa5810430b5448f4ae272489f5c7ac1e4660c4f7b0446d5457181924a3d4dbfdfee93a14379adfe7c1effdacb69a945", 0x7e}], 0x1, 0x3, 0x6e6f2b53, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmmsg$inet(r4, 0x0, 0x0, 0xff88) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e000a0000000000000000000000030005000000000002000000ac1e00010004fc010000000000000000000000000000c15700"/72], 0x50}}, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000000000000000000040000000400000003000000000000000300000004000000070000000200"/78], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1m16.76466164s ago: executing program 2 (id=2507): sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000380)="6765f082600a000f20e70f01d13667663664f019a2c73e0000640f792c0f20e06635000020000f22e0260f060f0766b96302000066b80600000066ba000000000f300f01ca", 0x45}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000380)="6765f082600a000f20e70f01d13667663664f019a2c73e0000640f792c0f20e06635000020000f22e0260f060f0766b96302000066b80600000066ba000000000f300f01ca", 0x45}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0x26d}) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0x26d}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x1, 0x0, 0x7}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r3, &(0x7f0000000540)=""/102392, 0x18ff8) (async) read$msr(r3, &(0x7f0000000540)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) gettid() (async) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0xaf4, 0x0) ioctl$VIDIOC_G_AUDIO(r6, 0x80345621, &(0x7f0000000000)) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x692, 0xfffffffffffffff8, 0x0, 0x1000000000000000, 0x0, 0x8, 0x0, 0x1000, 0x800000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfff], 0x0, 0x282254}) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m15.27899717s ago: executing program 2 (id=2517): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r2 = openat$mice(0xffffff9c, &(0x7f00000000c0), 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20000000}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000280)={r3, 0x6dae, 0x2}, 0x8) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/schedstat\x00', 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000100)={0x2, 0xa, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000005c0)='S', 0x1}], 0x1}}], 0x1, 0x4040000) sendfile(r6, r5, 0x0, 0x4000000000010046) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0xd0, r7, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x0, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0xfffffffffffffe27}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0xd0}}, 0x0) 1m14.36242226s ago: executing program 2 (id=2520): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x8a, &(0x7f0000001640)=0x4f1d, 0x4) creat(0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000fbdbdf252e00000008000300", @ANYRES32=r7, @ANYBLOB="050034008b0200002400fe0047909e2b80c7974180dad11d4d9eaa95220f0a247d5632bb2b328b69e08494b0e6842e"], 0x48}}, 0x20000044) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$ptys(0xc, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 1m14.02251934s ago: executing program 2 (id=2523): syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffd, r2, 0x1) r4 = syz_io_uring_setup(0x239, &(0x7f0000000700)={0x0, 0x1ffffc, 0x10100, 0x1, 0x28e, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0xa, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) prctl$PR_GET_KEEPCAPS(0x7) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r7 = socket(0x1e, 0x5, 0x0) connect$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r7, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1}}], 0x1, 0x0, 0x0) r8 = syz_io_uring_setup(0x82e, &(0x7f0000000300), &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x1c, 0x0, 0x1) 1m13.940012337s ago: executing program 34 (id=2523): syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffd, r2, 0x1) r4 = syz_io_uring_setup(0x239, &(0x7f0000000700)={0x0, 0x1ffffc, 0x10100, 0x1, 0x28e, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0xa, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) prctl$PR_GET_KEEPCAPS(0x7) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r7 = socket(0x1e, 0x5, 0x0) connect$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r7, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1}}], 0x1, 0x0, 0x0) r8 = syz_io_uring_setup(0x82e, &(0x7f0000000300), &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x1c, 0x0, 0x1) 1m2.232379151s ago: executing program 6 (id=2586): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000000)=""/215, &(0x7f0000000100)=0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000021c0)="ac3346722051d59063a5dc885968c9ddc50041b9dd1f60a9314daef2795f0d9586144dab47b73f2ecd1221c745ee7b7f9d99a5a27c59044dae5b4e5fff1f38374fa9bc373c7d7cf6fdaefceefcafcb2e314f3eff0afd4bc806ddbf4c70fadf53f1b9e2d2c9859743d24db45774d4934ff49390bd2dec80d1735f3c9ff3c166b8f2baef3d3b28106b5940c45121c36190d8926e05e3860cbfd2435d56197078991e1212164281c4a5df320509adf849ee0d2490af4ad69ce8acda76437d526805551409c539dc65415fc53650a9933660e9cd60c623618fd4ad92af2c91ff56cbbdabada501e04710dc1e5474095fdac622cead5e0de1bedba7ecda7fcef61b9764ef5e57ff8a018e7ecc5605cf800baed6f4f63f1445026d0608709100ed4170749782b3fed397f9f097e46c59d0ed0ea5ec8f9d0e916601df8057346be67105d806ab59c9f14d045d0a93ec925e31605bb8ddb6db5ca77447ff107aa461711ee4da0084d24d73ac5faa715e1837a75bf2f7f5bee0c31d53a71acce46fcc55c08ba46b58664ac7d2d84b2b8776acfdc401f175abf0e0ed75a4826093471c38550f1d03a2ed2816db887d071f3f92d535705f5c1b0336e0b686210cdac73fa5833691521710383a1b36db5ff4a7e38272f8e682a9bdc0dfac92b47f67950e5ffc2263a982ad517aa13b484e4d96e3429759925d57cdc0ab9146c82612776b50c4a9b2d143383dad8bdf40c7f09bb4bbfd7f1b06ba2408778d446b25a1ae602480b859369aa1cdf30d262b604da6a9a64f718c9b549f1c46a7d0d9e9ad32ce482d0d55429048af9c7d2a3da8612058045c6573da6906b5452a7dffe3637273c1dd94a22bfd07b1ec0a1924886ae26d3f371e2694dda433f7a4f90e9debbe25cc2e6f3fa33c761ff2ea65c8e111d2ea4bf25a3047e8b16a97762d27ab2ba7aee34d6dbd29b2286cd6ea24a1705d42134b6aa44d1d0d9f38f01cb948ca771a1fe6c7ef533226a09b7ab2043a7980af5b8f9a16c74f80049009ad7b737a53b50d9c752de824bdd1ce2c39ed5705a02af69e378e90698d08b9104de5989e67bd0e7c61a96ba9a0d892668bc44bd2d40ac1595de939621c1ad5255a655684444203b9111289e14096894ad7527bbcce35e4c10e4e192059fb30a1a19fd657f14dfd7463fb1e329c35e72c22c5244ef20c0d946afcbab34f71068a446905bd77573cf0694cc4cbd9f40843c3f7d404b3e47e2197d18ae13f430a1ff2128ab5885724deb3cfa0d992b13b2ce83cdd7bf7bbab34721affdcb2cddd20d16bbcfd4df844f023f8058a10d9fe6ff580c0143e89d90f3f054a74050ed0e11ee9351b15beb4312f45a4d2f05b12e550c72aa6e2afc17ad8bee41212e9beee21cdd01ee94c041b1a3e811fb5cacc63e1f9a7fbf000b2d19d67a293149ebf43d1bc4eeb4dbd634bad55913357b51f9599caecb8def99244edc00686add6b849ecacd1259a13af4490ef3c51725454f15c35c54a2b28c575b2f894329e017636dd8bd2e251dc94e0e372f89bcdaa76d2dce9ed23eed58f94cef65975ff5de07972eaec36c55e5cd13e1dcdfdec8c1f916a8530f5582b12397084537eefe26b95872e1c75b31409ffdaf10824820c3617451e73d85c31fd744f406af579aff7e3fcc2258badc503d941c75c8f24616a5a4b0f131e1da6fca05697d26f90c51e29edf4642486b14ab6a3e130487cb6fbdbfa42719ffd83fdec4f56d982772352b7df5e641565077bf0ea1762218831dba954e9aee1f1d398f6764b866ad02062429009a4d2a39fe3ff3e5b9055bc8175a968722cab2e6108cef0fb729fd28fa53c4ee19464d2fee0593440f22c2748506b4d272652d4f5a2495a573ebc55035d016cd0af190039c43ba29a1c52046c2db0233491730d487bcb6f74dc85a387bbc3b7758855e1fd52f03d3a9ff94e92c36b3dbdbdc04086b8babb777fea18c1b279f7c10975385ce5234bf9659315782c42e703ebebaa97d5184df3126120b3aed8b71c76642559a6616f6e73072a60db1aa920101797ba5a6ed5fb7bac012becaec450cd8a75599665ed1a62ac639809e220c1f9180805d3e2882ec2708b86d5eeee84f8faf72161b1bbf02f6c33b24f3af3bcd95cd0103cee0aeaf414ef6652ad1511e6fcd935c4bcef7bd59743cf8f57c3511de35c7caf230589cf95648c6293939d8d4269e292381395ce62fae575f503788877139479b81819530416e63772381d450f9fd811bd88dc76f48621663ffa13cba019b20a62a2452e31f0c3b0fe6c721fdf307193282001a7333ac31c548ea32d664f73423fb144c14ccf06dbb0180fe357d3f0cb48aaf7c8f23e6cb30faebd0c359dfdd1971cdf2b04958baf09cebae53cc83e78b88a458ee00c96858bc1a540643ab5ee7557c8e473640bda4e059656d676f48c988ba3f9683920bc5733f54525b6879206ea4098528fce2d90113c36ad2c1104add49052457dc29e1b0d615c552cf596b1f125e5a91b2b964bfc19488721d3e97eb5677a187659c09dbd282f04a2d6d61a54c2ea665c62f87c4c2875a494a733530436d14b4b60685cd6053d8ac567cfe28eec1745864d9d5453688eed7f8f8463d07a3bdb36f28f8b5ce7ff37e337cf87080f464714e864f7499fe66f40fdb249be329beab2656d1971991e4e40383f842493a07ac2e0ff6a35230800642fcd7680a471e895207228d73f61b74c763a269fe9b41ef69c6d1fdf5ed60c6e6239743138313071c23cd33e5f2df384430ae72d66cb3267c7593d0049fa21618ca62caff7c133052877170cc256975c2eaf480f0b8d122aec9ab4193d6a7e819babdd0050d4adcabb111594fc27e145012952a0e7f173f92b9a553783c682aed3560520652d100af7453f6c0d30df417c41bf7931147b43630785ed8ab3a45d393cc334b66e4eff6644183e45407ea96889bb81c7a65dd2214e56e1ce0034ac27188ad2bd584bf8d58890112dc45efdbb7d8f4ec48f2a42889fa49d43e3d96da7f3be03dea68a16a4402748668242ebef20b8d28ec8ff7714f901b6fedb8830d3705219f2f69b6038d503e3be9a1b94dee7e690d3a987cfcc93aa461d4e00905e33c30216de3b3f5cdc6833abffefbf79c5dbba5f6922f422c1a8455e3f5e64186c2be8d49905f5841ce8e12eb04995a4cc587070449139e0d89026ef192a8728765a40d8fecc7eddfc49712572087c5332c7bd2b5469397ac5dfd07939ef20bdbab4972fc7fe097fb65cfb78e700389c48aece04d8911be4454ad5c2e3a7d4ce14cd6373994e9c00bb3b7a33b06a2cf0402604cc08fd1c2df7555475f26c90ad155e4bd40d2320703c5bb73e232c2943d80ab0b86774768e2184aa59b4e632e73932f7c8dc068402265dcdcd4786b043c14780ed4503ec0e218c4fbe0a17e91e4324eea4da135fdf71cf07f489a1efffb6ff3f31377ce8fd8c296b71ab19aa1842b761cbafdf795f58ef914555323860e53cd2495df323a4542507191a40ec72c3840e564a1c87623b324163ac8096a39d90be894f5ce5f5ef520be92e1578631a4dfce159d9b2ac08afcf88a766a0c14e1643f4f6f469ebfddba84731e16bb5c86400ef5cc62c754d043ffd6cbe322ba5e71b63612ec662bcb7a5f599498ddec8f7a69037ddb992fc510c2c5a40d5841624d9f185c43b36b4d478e5b13106d7ce4077d879d3b92d438b527c56376ebaffb6453d47064fbac674de7dc0d2ff7f48f86fddc8716bbbce8d91db39f66274a6b3640b431f6a8c8813e78171a5bfec07f5feef3b446931275fd28f3cb37f73d9c4ec9501ac35ae35529d072836c9088a88bd987c2f51708e9d5630d0a9d527a7907bf0f6f1681903f632751fc2d92c1ee91a78d3749764cc9c8c8a5c06300c2a9612d655c2308063f2311decdd5307f6b682b424af94bbf8d210a504c2f36049ab21a56928a645564fcd1e8838c4d484512c212f365145543187a736f15a309182c46a1151e8ee1d93627e5bd1d79f568ebbb46957b2e24a9ee5553f2fed59363967ea2171bd922223402657e1684bde56fdd8bd04a2377f26f9ebed2e85389f8b6ccc41b34e7f0d13048b6c77f5286e97e50c3b50860517c2ecc67ef96f472e17fd486ee355b006a35074820ec477410927fe5adf2025c7024797ec9e95ff130bc107ed587260877cd5c4fccd6195d12599f9b9211d710aed91c1345179a1123a40240cf2be73f538f60b1702900e5a9f5858f77af48e76d1c379fbcf069a749fd6607cbf83b9f01b5b97a245247331193aeceab5a1a14f6be6babfdbdd090635e7ba300dad21e56444bbbfafdb3518aa77d085e287ff35e8942250c098aa10579a8a1453dba56b5c4aa2e823631db49fd90f8698b324215ff70ffff275742f15180b114e4ca1345687136ab89208a6331bc1c4d41ec642f2abe88cf8a3b762224bf4cc26ef9f13276d2bcc58e34d9d9f7ac9926e289b834d10714a9fa39b0f89fa473b02b343bcbcb786100bd7383fd4a735252876510112d0aab55792db9c1bfbadc29516d5f940e7f9c9f27663408ae33bdba686b5ebd9f82cfc6a87604c1762e00008dce4e5e96b529334d1c29a8218089577ae8c00871330017a7637c2bfaa9c7861077da25d53341fbbbc0d90728f12a5e5f0aa18c2ab984a21b9fe381dae3c991f64d7f4ed720ff188e36792c3cd63ea827e3cbf3c95146594d683c5939b6dc2eefc8bf5675eb4e429edb7942bd06efeacb7a742f7e6a7a818308eb4c7752ed1b6191717527de3ec52fa6b2ab2ca3dbaa60a447444fc8cd65d19dcb3c7d984e96b1a74150f10342051cc28088f437a2b1e6b44d09acfa41c278974d061098b1a7b5c462ee6cc6c42213efa29cb3e639eeee4fee1a212f7b5fd650e72a7bfc9a7e3ba98744238278c1da271319af3b8b164cc95fbf32bd5274e2b15eeac5625ee292594c8f06564a3f293f6f832249e31860df3a6d1afe94b037cffd997ca86ecea28b43051fc953ec6f2b841e9bd047b9887ce7feaf53fd2b4bbcf18517a7c6b17467726ee87a865acb78b23d117675eb6906fc585afa7606a2af6a2d3e8da56a8f67374b647ac16f5a331221deb92e8b77d725db8e15984eac461566a8b4c2d8265a8c29d8e88eccc8c61a7eeb460e473586883fe0d3dbeca5c00a1126cfb4a68c7efa9b800bb3bb19331862b985f67716a4f5daa3160f5b8fcdc7fa31958ce06c4d6a01b3cb8c780453e14a9708f24cea07da625f5cb5fb8956d0f42d64fb2ea90195469b67db048060c418d68839dc5aafd8b202ac51f2fd405937d8ec0dea104dfbd691ff72d0b9cc8b56975e99317c4a9e1d962af03468da280f2795fa0e4cacab05e58bff5233bbbd480cdf0af623c2ac700fbb1edd0a18ed43c96809a916d800f67e3bf324817fb5afc8d5622f1cc31511e1a8413ec0d03a386b2176f3a9b765830d743db322cc478badb7d520434f7fa88e649268d2d66f0ccb963f4ef3420d0b0ed001440f854d4e57d30311e2c7e6a6e35d9aaa6cbc47f562a4d7f494a4d56f60dfec6a232efc46f76567ec8a4862b3ecd6550123458c422985b4d63fc60b7bb5e1689e26f90085011180486ad06ce87c2e4d1f80ff9058ad842463de5b7d02409e21e5923c01fda7f91f6bd2f045e50f58cdbc924b9d41b1252efb83abf0c9b544b17ec58dd94d7f8b9df4ae5d57a8d0d3c1eb7806c2abef59064ef5df38fad45a4d04140b76ebe56184d85e3ab6dc2550dbd5b31ad62934974d36afbb16c002887cf9042d328c8f547e5662768743a3c0b0d5d5e06a8b1217c7f48869422b683bd76a6e30536c724e39e7d2e4148081a23465731055c4341c8687ab96448f71e240f18466e4faed135fc7bbeb40ac5f0c0b5cf1011a54e62e9487896526cf1179b856231ef9596bd880410b810d2059d6d69f098d4c2ac4acdff743c193d73eae45bf4445676b0b58013cbd659189915e3004d43c6fb949c3f9a6a2e70a45c0fafb15d59b6e7b9eabcb59fa668b5dd61c7ac7a5ac5d38bd5c9f9bdacd8bd5e0c313e6efaaae56c7a7ac35908976a3dfb490313c9d880ae2fc6c0a32185f0b645d5bc64f594169b4e195e056d03198578a45d65af50f9440e0902dd9e3714233f0655c367733bcb17e7397d6786d197c548b7a395d550b788d4e9ea45e5d293326a16aa2513701e9ab59344f1676e84658704044863f8b026c5c86848dea0a0c80f46821306852933f12aa4a4806544a80bf5b1a71aabe62e6bc769fccd1ced842209cccb6a0e33a484da14a9e87186752a879266d47547ae2dc39f861040aa4878a095b5118f9e2a9cd2336c37a223bc1171895a34233014a97047eba60a05992a23f9a217ac79c5ce5ec7e898dfda35ba557d21d90d12066a0600ecfc5ec2db276ade691e3549e254929e44d8168ac45d4473c6bfcd7dc8c8ddbfb9bf53c953852c73a4d12892c7344c6eaaf00cb39b16cdcb5dfa1feedd955743bc3d27226797fe8126ce2a79d604c632e2fc880ab01acf797d3b8e4d1d069f733d742126e2dd34108129ac4971671ecebfc072dfcf512197164fd265aeffa5f1388115b42936c945bcb7214fc8744aab14b5a1f5ae856a77307699cf9e065b255611808ecc779b3785d0e2a02e14d2efd2710759f8927f67d3731c2faf24cd60a9cc9ef544ecd06a989c9c9a2b4cabf1e0cf185acd8fd0d29b1254d06692178b98b42ec047cc29b7f8aae2f56510252efcf56cfbc64efa340a47660e620d46f41a558af675bb1c876cb76fcb9b0a7abe10be02fc30441803b32bcb7f16e2c8cfb7814b016e205288ca3d6f82fedb93b419d25868ac54d36f3aa065c5d1629e7bde4e4c1c624d73278244b409ab9234fdac721a89ea14115846f95a0042d0c2730a9f5b953cee89c92462a809c7e060a70ba8b11d6fe6f1fde802d7dc0f310a4054b077b7b58cb5162b2dea217f0c0412f551068e59869c7895b5fc3058cb52e8e329d9e1fc0349d2eb6b41b0b6d884c3ac27a946d6831b310dd6876b7417fe18d4a4043ac30f3ca57b4391b6e54368bec81750047c48f018ce904cc35ff3b5f4d0806fe16a1411e3d8203c87c19037bb0cfef8d7cc3d7dd1d2a39011612d7a21fb18e3f01dcf1bc59f187b0b933d21f0dd8bdb0020fd4e825ce2ff1ef85eaa01ce50694a75d1dace1442caf51be815340659a50812dfa9adbded6d842b6e237f5a24d8f293d04d7587e7192b932f298713bd2982d7b8cb95008f57bb73b19220fa0b35f6b155f37b777b433d54d56e074b21291ff380614f88f1e070d1a5a01a665e7105a29b5995cf11949f105c9fb430616313ce835812114a1cc8b6d650c14f1d746d255707c247c02ed2341ffd35e56c3489fccb7dc70d7ab95fb7554bc237cd4d8b230b949c5ab91ff9d293e5bdd84684d48be5a653f54da840b58a34a13fddcb793a458dacd0efe01538a99fc9aa72761d67d58c415a71f0da8e1db68ecd8d8cc44e687402a1b444bf25331c4d930371dc839d37ee39bb482b2f609ecabc7b811fecf068e61ff97d2a6aa4508bd0e7ab37da45a375e0691230883274aee9351aedd43c97a157a0e3d395509c1f75c71f9e418d0458bdedf57c38da2443dc9eb49e3df340374c705af2c6ee6fa3dffc07663bc958a6a742fb591f1da426899722984045092b8cf874de4c6559baedbfc71e5a760b943535d66501aed87e037d7dc66041abdb57c554c75aebd4fd3369a65f8237af4ebba2c071a2f79208d4400170788594a229b683804018fd576ae9ebbd7114097c9f32962f2addd4396e4ffe3a6141fcd280e06f284cba9c29f2456b2400d6be2362cc2038e08b9283f283537321b0a777ad9b22a6b212e063b576d363486a9981d8291fb8d6244bf0f2973d35ebc043b232cb712e6e981f66e20d80fd68dd0936776cbcdc1e2099210c40c8164beb297b961cf0d4c1c0ee80ade20ce72a510d6944e8b144001072983858b83d6e5d53a37138f889b959ca01cfb79ed49c8b769d1a4b8e535070ef3ef449477d3715976ce8713817423552ab802e9f3578e9f2c619fa7c9f4d6fe4b4dec5b25aeea8eb927b4f6069942a35eb3c2cff547f2bd7ab6aae81c779ed0cce08686057b475b226cafedf154711fede2afe60f5f1d9d51d940a275526e13264b6dcee8e59cbaad88d33d1a68cca92059bd162ccbdba530e1d9ca825fe9d7beb4667b3907c079805e4919e5458dec077ef260d503e9f77b4f266fbdafcfed518310301f76fdc07f43bf822f24cbce12436776cc91b91133800db0b27b8a3395f43ae87ba43f68ad9265781f486bde94393835e2febd72d83ec86f77ff1784ebb0d3aa75a4f9e54af1e89a7d7781c5d059ba9353bdba54c8c5fba6428ea5724877d50d78bc5057295969776f9f8a1fbc0259f8021c2da8b78d5fba2c149b6e43be09b1b73710f8a4a66fccd11f0ea8f597bfd64f4e8f300a98071cb9843b86e128af0cb3d48c063241cc5a047b5e990ebcb10ce9b210c1c5a69c558ff32ec3787754c96a03afa05621508e873ba809b1f237dfa4804655fe00e6499d255644896831898c30e6895aad471640210d29aae55edc636c72b5554a7a503414ceae795b8f19785d5d342a16b75e73cf2f9563f011cc1730c7859a627d1274dd021f54f7435b1ce0a186394186f0358e254cd2ca5afd28791011aeda54690627f1840dcc7e7f67fe0924fda1f0f2caa92d2db0432e19df0c4e9202dd83e427dfbc40d509dd9df20fb1e577e58d0e8d3c009be0794fd4e4068ce3be9015374941991c20700eeb6cc0dec552194c6d063813837911eec8245c57f79cf321841cd216282c7b2343ad2513b9772e279fa85f20eba3dc928c568c8be5e7e70ab19f1b7a5278435138d05b1b87905cba1dc9b348497b8b615820e8a2dc01e5c92a836e39f3579e5d6d8e9f0eff8da2f6ece2dfd8b4f85c2826d18efe51400595539def01da1a317b5447bab7a521f5387ba4b524bc9119318e6885faaf0d6ab92ca0d1d255d0c1bf0aa1b3eb751e7d9f878b31762269121d6016f885d268031c09402f55d401493583f4e8e2a07fe7f449be840408f3003d537341f584741401be929a967ea0c0834d90dcdcbdd5b25fa318e39dde844c70aa2fab20f57585a63f8a076fa6802b51bb89136f3a862418247fa5203d5568b5f1ea1a43a7042a88c46c1dcd0f445cbc547d2e41a2e9858daf0baea7f681e71e76f15789dc8f62c46a1e4dc1795378ea1b38a6d3b54f515e6a41193b3654d24b63550e03d304f006e63265218c07853d289f41e1477271b29a4982072f9b17649cac0ddf198784cfb0712e66b9dd9758ec0b6d8530a30c6fa9cefc780086db3e6516688c7d4bbe5ac86ec378ad33e5e2ab92182640d06df9405858db844818a1639ae809e975f4b72cbcd1760f8a9a9ba9a10d71e08faf296c3a5d58f0c96015a8e077ae47fafa38385e7d328d547219a5b0d0761fab2b72757dc22ffa7eb29c9a7e6852672052c4d4801b02f2d5c7979d8ac1216a36fc75dbcdaf544260db188a2499351e14ea9d1e5c71293e09d3e81dfff33f4149051d536d893b8d4262769b60cbc044707d69a57ec7ef7d006f850086b34d01c21c7151962ee9b1e2a34dde11c58a92455488a7bbea356bb663cda82423d355fc516d1d2e45f89aade64d5184e7398e4aa405df6c5fba339abe5b11c1cfc74647bf24680f920a0a967023af7897437d17adbdfeb5494ef053d8041ec031f01cda05dc247bb70cf428954e039434e4383699887cae924c3312a586300299e7879c7ce19a0c95867e6bb2c17d289f6ec1e62502b74b3c27632244c46d63a81cc04d2365eced8339c3968600823bab8f838a54482357401800cc2dbd3e5e69dd70d4cfda4006063d6c04f337be8610a3997d4305c60b1383658ba66f1d731739a4f609244b92607a2c3e37276b5fe577b3555ab3bfedf407ec4dc5b017683d89a5f6d02082991c9673b98109b4bbb7a8b287784bfb6905c579dd445ec6e1810010b65d89084cdc178ac46c65b7b277dad7707515c92aeb553cf76a3aba8fc69a2313c843017e04564c2ab9354c794bac56a91c1942b5d11b6d83808b6c464c4c82ce76080f07f07fa3d29f3b692cc405051ce0ec0e899d43047965cddd45858c66b9f923d20eb5b1d74a8742223dd1b37f1c5c2d52c8735f6415b4aeccdabdc001de45cec1b3c34cbe4e60a9eac5e025588e97fbc4a056306db98931929a61fc5ff173a4a07c32d460196d914826584343659bfc97217c15c806a09cd8bc07f1334896bf302354045cd5a15f5f85115f349f3e3182c8d4edce9e57ecd83bd60512ded7d031720dfe769eea602e7fca94a9f8cba4a09d9c1f7c3b411e9485ed11efbefd5419aacd483644e5ce836026af14fb437bd589660a215ebc7a55aaf1b923ec9dd88352666897af6e059b76401b1a908d7dc1c95d8156abafb9cc0fb64d7e631a6dbf619f92fe00c15ead21d0ee81e7571db3e94d5c3617a0476f9cf01a015679fe0a547237e0fab6c742c48f03c70abfd89031c8f95c9595a903f205180b2e30b43cf4c28de5d4396417542e2ad7af9c34841af2b39096428f7a1cb60cff5e5acc678bbd5a68f2f79cc5d78eaa32e989f05332c865e7059f9d93e20defdfb04735f92cb7fa718ad82db5781ac9e7584b5dfa7c5ac736919a0eb30791e1ac58051b2f15f2988454aeea2873bb698f7726fb27718a1ebaa45c18be984d3b7969d31bbaa6db08246f72ffa4a529768f32b4b35f2d3e22d3ecb403319aa9db952e1f9f1e35f38248687617da3b22b50e7e904db6876a42b66d5f756dd90ff611eac10006ee6fc13ad7a5647573a878c4e6bf15c6b5370960426f98403e31e1a4ef705f5a9000c820927d5809d767d79a767c4318f5a9bf2f4b357147195eb2179f5dc146a488051405dae2125f9e5bb11737737a1e003001766f95ba6390b0e95da79b4c749aa6963fd1bbac3e21bb19d04a594604cec1c3ceb0c4d24b53e5543c1d5bff08f4afa07e47c1db65a58cfc2beda9fe7c7c1c003639a50863481c982d271d01bdb90905974b74d4a32cfa604453c9cb854650420d9631748a701b5af32bd7775a45ea282835a43f06db90a115566a3d36bc930ed4fc5bbbaca66cbf25e1f4d6b3218b08753c138852f9de6ad35f9267e323c220a0555e43b0303593e64ed1cfc475d0e190cd8df5386da9eedd9f619d930dec0c8bf649ea52858827c23ac8b0940d7d5e5600e30876dd46ecf85b45e8c09a3226dd1cd3030b908bb4285eff958f5e316e9d40c0f797246942950d2f8aa425eea0c3cfa6e1d89d0cbedb84f6e519a10e30d2d50cc79b522298406b6b8489c0c0ce36874148ac58331193ce44adc84cafbc8a860389615f1af01404bd8dc802414546175bb3e07db0ab3ce02a9ec0fa61e0499a50f9269e2fbc3461ab28047149af5816b5919aa01c58bb00bb5578dfbf53499a6c18f324a304d4f37f1a4fb03cffc7c5c9964cf6bb50f84b5f96e5213e2de6f2b1c3c6768dc4fa73dc61217a581c9283ff1b2a4496366ffe8eb86a7ba", 0x2000, &(0x7f0000004c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x60, 0x0, 0x0, {{0x1f, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x80800) sendmsg$kcm(r6, &(0x7f0000001880)={0x0, 0xff8d, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f00000001c0)=[@decrefs, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x5, 0x1, 0xd}, @fd={0x66642a85, 0x0, r8}, @fda={0x66646185, 0x6, 0x0, 0xb}}, &(0x7f0000000000)={0x0, 0x1c, 0x34}}, 0x40}], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000040)=[@request_death={0x400c6313, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0}) 1m1.72957393s ago: executing program 6 (id=2590): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2400000071000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100400004"], 0x24}}, 0x0) 1m1.669423195s ago: executing program 6 (id=2592): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x402) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8341) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102360, 0x18fd8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r3, 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000962000/0x3000)=nil, &(0x7f0000582000/0x2000)=nil, 0x3000}) write$binfmt_script(r4, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x46, 0x8401) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, 0x1}) 1m0.806067332s ago: executing program 6 (id=2597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005940)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000009c0)="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", 0x93b}], 0x1}}], 0x1, 0x4040060) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000012c0)=ANY=[@ANYBLOB="000086dd000011000000000000006e711fbe0f982f0100000000000000000000ffff64010100ff020000000000000000000000000001042022eb"], 0xfce) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)=0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x6, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m0.45467293s ago: executing program 6 (id=2600): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000001240)='maps\x00') syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff94ea09066dbd86dd68db834400081100fe0100000000000000000000000000bbff0200000000000000000000000000014e204e220008"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x20050800) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380)=r0, 0x12) r2 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x3ff, 0x1797, 0x0, 0x0, 0x0, 0x1], [0x20000000, 0x0, 0x2], [0x3, 0x0, 0x40000000, 0x4, 0xd2, 0x0, 0x0, 0x8]], '\x00', [{0xffffffff, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x5, 0x3}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {0x3}], '\x00', 0x6b4}) socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x400}, 0x0, [0x3, 0x10000000, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x5, 0x58, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2001, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x400], [0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x101, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7fffffff], [0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6e3a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48c, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee, 0x0, 0xfffffffd, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x4, 0xfffffffe, 0x0, 0x10000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}, 0x45c) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r3, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r4, r4, 0x0, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = openat$drirender128(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x8000000000000000, 0xfffffffffffffffb, 0x2}) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) 1m0.151620765s ago: executing program 6 (id=2603): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x104, 0x20, 0x2, 0xcc}, &(0x7f00000002c0)=0x0, &(0x7f0000000500)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1}) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00'}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @mcast1}, 0x1c) listen(r6, 0x20000005) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r8 = accept4(r6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r8) close_range(r5, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') sendmsg$key(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000004) 1m0.118598921s ago: executing program 35 (id=2603): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x104, 0x20, 0x2, 0xcc}, &(0x7f00000002c0)=0x0, &(0x7f0000000500)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1}) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00'}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @mcast1}, 0x1c) listen(r6, 0x20000005) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r8 = accept4(r6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r8) close_range(r5, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') sendmsg$key(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000004) 4.710321571s ago: executing program 4 (id=2951): openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa0003"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 3.792286224s ago: executing program 4 (id=2956): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000780)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0x10008850}, 0x8010) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000040)="82e5a666b9970000400f32660f388093080026670f797ccb000f20c06635040000000f22c066b9800000c00f326635008000000f3066b9780b00000f323e6465660ff90e0098f00fbb4bab0f01cb", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r8, 0x5101) timer_create(0x2, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000e5964a10a3424a805fd935ecdbd1d692060212eade850498e42b07404f77b8de8d355839c57019428ef3d14b68667a3e88d5963e4491371ae3348e460be21fcbbb4542e264c6882e7582b9dda6ae9560fba0ab8b67d3cf4b482f09426d4b9bbe54277b880a9526f0d38f92ae338548322ac55790e840edf563", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b70400000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r11, 0x27, 0x0, 0x120, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50) timer_getoverrun(0x0) 3.567308409s ago: executing program 5 (id=2958): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x228, 0xc8, 0xb8, 0x228, 0x2804, 0x338, 0x2e8, 0x2e8, 0x338, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x1d0, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:cpu_online_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) (async, rerun: 32) r1 = socket(0x2, 0x80805, 0x0) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6, &(0x7f0000000080), &(0x7f0000000340)=0x1b) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) r5 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) (async, rerun: 64) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async, rerun: 64) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x82, &(0x7f0000000480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x4c, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @mcast1, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x11, 0x1}]}], "fb36eeca6fad50b375a22a58"}}}}}}}, 0x0) 3.491781796s ago: executing program 5 (id=2959): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x101200, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xc, &(0x7f00000002c0)={0xfffff894, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14}}, 0x28}}, 0x904) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00') sendfile(0xffffffffffffffff, r6, 0x0, 0x4) pipe(&(0x7f0000001800)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) accept4$alg(r7, 0x0, 0x0, 0x0) 2.78209737s ago: executing program 7 (id=2961): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000780)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0x10008850}, 0x8010) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000040)="82e5a666b9970000400f32660f388093080026670f797ccb000f20c06635040000000f22c066b9800000c00f326635008000000f3066b9780b00000f323e6465660ff90e0098f00fbb4bab0f01cb", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r8, 0x5101) timer_create(0x2, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000e5964a10a3424a805fd935ecdbd1d692060212eade850498e42b07404f77b8de8d355839c57019428ef3d14b68667a3e88d5963e4491371ae3348e460be21fcbbb4542e264c6882e7582b9dda6ae9560fba0ab8b67d3cf4b482f09426d4b9bbe54277b880a9526f0d38f92ae338548322ac55790e840edf563", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b70400000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r11, 0x27, 0x0, 0x120, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50) timer_getoverrun(0x0) 2.758906404s ago: executing program 4 (id=2962): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0xd) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000500)={0x0, 0x7}, 0x8) futex_waitv(&(0x7f0000001700)=[{0x8ba, &(0x7f0000000180)=0xfffffffffffffff5, 0x2}, {0x7, &(0x7f00000001c0), 0x82}, {0x7, &(0x7f0000000200)=0x66, 0x2}, {0x10000, 0x0}, {0x5, &(0x7f00000002c0)=0x2, 0x82}, {0x3, &(0x7f0000000300)=0xe5, 0x82}, {0xffff, &(0x7f0000000340)=0x3ff, 0x2}, {0x6, &(0x7f0000000380)=0x80000001, 0x82}, {0xe1b, 0x0, 0x2}, {0x9, &(0x7f0000000400)=0x9, 0x82}, {0x2, &(0x7f0000000480)=0xfff, 0x82}, {0x9, &(0x7f00000004c0)=0x69b, 0x82}, {0x0, &(0x7f0000000500)=0x6, 0x2}, {0x1, &(0x7f0000000540)=0x7, 0x2}, {0x78e55cfd, &(0x7f00000005c0)=0x1, 0x82}, {0x4, &(0x7f0000000600)=0x200, 0x82}, {0x25fa7ef3, &(0x7f0000000640)=0x2, 0x2}, {0xfff, &(0x7f00000006c0)=0x10000, 0x2}, {0xd55e, &(0x7f0000000740)=0xc, 0x82}, {0x252dedf0, 0x0}, {0xf61b, 0x0, 0x82}, {0x80000001, &(0x7f0000000800)=0xb, 0x82}, {0x2, &(0x7f0000000880)=0x3, 0x82}, {0xffffffff, 0x0, 0x82}, {0xb, 0x0, 0x82}, {0x80, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x3, &(0x7f0000000d80), 0x2}, {0x1, 0x0, 0x2}], 0x1e, 0x0, &(0x7f0000001f40), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "b4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95d83ffffa407677d18bc"}}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}}, 0x119) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) bind$inet6(r6, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r8, &(0x7f00000000c0), 0x10) 1.713576985s ago: executing program 4 (id=2964): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x7, 0x141341) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4002, 0x0, 0x3, 0x0) r1 = io_uring_setup(0x175c, &(0x7f000009df80)={0x0, 0x0, 0x1000}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000b80)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r3 = openat$ppp(0xffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000140)) r4 = syz_open_pts(r2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000080)={0x8}) dup3(r4, r2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f00000000c0)) close_range(r1, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.712870376s ago: executing program 7 (id=2965): socket(0x23, 0x5, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setreuid(0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffff9c, &(0x7f00000004c0), 0x301883, 0x0) ioctl$PPPIOCGIDLE64(r4, 0x8010743f, &(0x7f0000000500)) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0xc0045103, &(0x7f0000000040)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYRES16=r2], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0x109}, &(0x7f0000000340), &(0x7f0000000280)) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x7) r5 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0185648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x98f90d, 0x9, '\x00', @string=&(0x7f0000000140)}}) 1.62177571s ago: executing program 1 (id=2966): memfd_create(0x0, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 1.580683107s ago: executing program 1 (id=2967): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000320009000000000000000000010000000c000180060000000547000008000200cd44fda58bd1ce354ba7e404ca85a2a6496b52586de08eae6b867202340ab1d11995b225d341490001782ce74d86e3519f0175293c407ec2d9336b0ff534101afa0a3ee2f80f14054bc17f237ba54ea8ac87ae498e886e252797b16896c0916e4ff30148a1d5062783c68bd9c8a228bf9a75a767d52384d9de5632c40aedfdd285c908a4862225d284b876e172f1c70fbdd051aeab889f42c9484b6fc4eeb53dd8401e7b977c705231af9777a1c5eaf4ea2f09371e9992721d2b7f4f6cf972859fd17dfac5247de16a2ef3de0df0b5144a1fdba706cb5449cd41d21f5fa25d020ba158d541188827393d86594746be9c71e0d7969806f734464254ae0a9f9416c1c6c9a6456bff244e2b3d1a29be3ce7b18d1b", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x8a, &(0x7f0000001640)=0x4f1d, 0x4) creat(0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000fbdbdf252e00000008000300", @ANYRES32=r7, @ANYBLOB="050034008b0200002400fe0047909e2b80c7974180dad11d4d9eaa95220f0a247d5632bb2b328b69e08494b0e6842e"], 0x48}}, 0x20000044) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$ptys(0xc, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 1.52189223s ago: executing program 4 (id=2968): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x124, 0x30, 0x1, 0x0, 0x0, {}, [{0x110, 0x1, [@m_vlan={0xc4, 0xe, 0x0, 0x0, {{0x9}, {0x84, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x7f, 0x2000000c, 0x2, 0xd8e}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x200, 0x2, 0x9bc, 0x1}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x616}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8000, 0x2, 0xffffffffffffffff, 0xacb, 0x84}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xfc}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xaf2f, 0x7, 0x4, 0x10, 0x1}, 0x2}}]}, {0x17, 0x6, "e977204c73bff876ad4186e66ff65e60736fe1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@fallback, 0x32, 0x4bb11a8cf0efaf80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0xa0, &(0x7f0000000580)=""/160, 0x0, 0x51, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801c}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bond0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value}, 0x20) socket$nl_route(0x10, 0x3, 0x0) syz_fuse_handle_req(r3, &(0x7f0000003480)="8e224cea756b806d7714bec2454fd830a24397619aa07b2863c2e4cff3710515ffc2eb2d42e10ec844a88f432edf0a0e1f15532886b8287f2141ab112b9b595a7ee3aca495175f149ba98b5b4a12fdc269f3bb4d9765d17b844c7346180a4f8b6cae9d266dc99ebbe38eba5ebb62d4ceb4097d61ca13742e40b44379fefbbb99b5c07c39fa52fc4213c48306033cb232dd94738fdefa3d76908904558b4c83c51c3bbac2ff5932623349a40998154c003ef4fb2d18ba3685a4097ae0e0e1526d60f44760f112e1fd176b7efff89128a97899982e82fd3d889dbd5faf09d1b7ee65ebb920974ccd1a44e8672954a399cd45289125198a966b2cd77560b6ff45e05af2b34105f73ee78d5972c28ff7bd5ddb3c04afddb6335bc17fe1f30c5dbcb8c39112e4f07a045066c8444d3ec349258dddd90d4efdbdd2d7d2ad8b5ad0a9d5f70f46cfabcd5eada2919e0aa2033ddb671eca5db3fa375445a6997ecc3ae8f3ef0dce2da67e6b24976edc00a20bdf90977fb32c82883e846a72fce4bff8a7cf5f5ae194396fdb77ec031636b6fb6a549df7b7b27b39a9bba7ceafc9fd468afd3b829a64c56f33908d035c9d5a6b65f7cedc921e758e28bcd3f8a90ba299b167015385aea46f906c133c62346519d6566f68869aa76c98292ff4d48e87111b824f121bdbaff5012879b6090b57aa5d634998cf58b1bcca41c91b4ec4e7beeac877082a9ec853286651f6fd12cc0db05a3f942d566e7d45bdbf811c551ccf9b4a2e51fa1e21eae0cea7ba59570bece24f01667e088064f3a6d256d82fcf0d80144b76485dd67051968d0c52eb1b3df70de4a9495d5da6fb6d35bc445c758235cbfdb30840c83368ae690369dfcda56b8a37876e68cd21a7cfe67b3ecf71a820df5283adf50e9150822cf9b62ac3c906c6e4b382684c61eefcb8971542d21056e938499b4dcada4d45643229f9dcfa09f4f1f6d032c996eab7dc004a75a7a9f6d1a56b0300e814490c4b8e56656e776765707fb54fc1189ed02056b5613020b28b17eca181eda3afabedb2fad7ca3a44f916c2a2fad5ed6c91b27e0c9458db70799f045aceb1e41ffd8a6e25e6d934be28bd73364358fed9cd6fcbd6def41f7b104e86f51e69507a5d293e8115e6447914e4c77f7c1b5e737e8b076a6229c2da473abb8615544e7e378f39802dd369dac53ddc9c62e86cdb7d6e036d08ea611d51ff97eb4f549b8e88c6a87ed45333df11080263e6f6fc8f2a2e4af7763d8a5d2e1b496b5fe3d1720d972ac97c93baceaebc2c90fcf2cb632854da8510fb6d9ffdd62a832d35ab0f918e56a2b7450febbd0702a64e48012e92ecfeb1f533c4eef902c02376b034ba8226b901ec8086398d50599885882698b37e4772155d1646c7bf5213eebe9c8f8ad4378d6c5d9a754f82ce9e1dba975f57799d7cf71e54387f7cb1266769087df9950f1b66ffbdd33e563122d05cd9a0f2f53479c8808b9bc07c4221dab2e86bec09d2003bf7cb75eb79d5219c8b0179a951fecc092602c7c826ffa32f721d86ed359513c10d872624e0091338d21e904853ddfe68ebbd3251ce677b64b510d32c736b1639169bbb5de52dee59cc9a594e0ae3fd9aa4ef7d0e62022084d1d7ca37e488a202621fd95f959a51ebc3d77844646f5a988913cf19250589676c4462f134a7c5a04df27a83a72088e0d43018454dd3b218397adae9710f426f82b0b0989656dd7f9a9f4e26807129f1985703a1fe64887295a1658c11fe4ea616d9a8c5ad357135df64dc2a7b41bb5f50ad994822e979607cb384ad991e1c68f707dcc38aa39658f227492a764ce3f0fe53c059fadf84c210f68f79aa5a320ae4a6e5eb804c9ae83fe8f00c3f3291e2f351b98c43bf33305caa578cd81a560f403aac675c4bd696436bfbde8bc9f9781cdeaf386b41296b9c7e01c5283ad8c51cf21b1bb679c4d89ca9e6efc404abd3628ede42f84a4a0a5892ab09e4db4b57a947f7828c8bf8e3df1d0362d6e27e3be24555563f4eebcbc53d67141a1bb0a63a420f077ee59c2e0263d80df6c16771d348c1d0f4a1afb0016b447a1b926fdc7b62b9dfedcca7064b198ce2ebd4f6386b11dadee28dcc1a09f8ce6a6febd00cc20b659bcbc7e11c2d634f22b8a1fa41727a01fda033466da37f62b355fe6ff10a603e279ec4a0be6f68718baf3f6d646a269ac9c13b98ca1de0214bea99c39425b8d6e712fbcc05494a84dfd242dfba317d5a6432f362f8fe86afaf5f5221507f83db8ec3d12b90cbd2fada5b763711a69f922604d942f4eb7cea788fb13163819ad8444787a8292870bd57f74b0b349ebde4114f3041446338696332e5de5ebccd7be714f88641d6ce7d24df0577d75823f1488158941fe6a6e62a617912f15869328beb5210f953eb61471d2e5482c5ca8b62e57d4e87ec35b5a77571251c82a774353b0bdbc64bbcc92aa709eb3c77d4b0c4c2ea664bf6c928efe50b59c7103648be6784902f3ae3586304c1d794e43b4fca0a26606a2ffd7d742742096685d46b36a465d3945f1d0309d3ddde432123a58cfa51ddda394a51e29bf1aef0141abe301f9fbb336a6b07a1bc138b5beb2859d44b9b6d61a6afd695de20e8f693d9430799a428425cdbb02bf11bb272fd19cbfd773c31a7444f7f93f877df2f1883621cc99b32351c35a661c473a12fb742f3d324cc49b81fb7e967b22956efdb84a9655eea18812d5345a896c3c8d1af765abfa64829e2ec2d5a553f3614b712048b4d9357efd88ae18471f35bf22ed008a29ecc15bdad7754b08a82f6f37174e1e541dcaa55ea31d3247aab204588ab61e96d7f85153458f7c6ad05f36095846e573d50bace4569f92bfed163473c0d668c870d5250556ca2f7727eb46811d7f343ceb0a75563ce080a73368eb4ddae46a460d85416d5ffa4971e9b43ba59a6db029258a25829f3c52c3cb7922a1901eff9a1beecb9c52b38d5778c8d204e6651c4259c2cb79bc5f6d28f37d8615b7195d7e33ae011cbc1be8e0629600cbdd23c4069c218fba10fb5db2fd366db4956b24c245861664f163d8091fa8707c7e78d2906cef0d19302a397bbaa91e4876d35e9dc58c0e21607dd03a4fbb81448548a041d90d1d9f4b4e607b6cc7747bb56a42b9027d64cda55755a142224be73c8a84cea25753ee61d34aca8d68e2a922e59f335711deeb9239b365660897e02562648fe6605c7ec02d51ba6b27ccbb8b975b6d895e5dab4ec4f238d77e354a0a540f178da1e4ca440ceea15a0d3372edb6256284cfe2e419883af7fe55bab3784237ce06bb31a6292c8ce3f278780312e56a0c57dbfee4ef31bb41147105a3a4f4aae60264e1bf4a8839bd93864210589b61cce4cfc97e798426af9d1403fe72fdccb7c490e7471e9c4c862e307a32ee077c93bbba0f234eb609877218156f06314e36cc31395d0ba1dde3da586e3f2ef416275a23c527842d93975db93887861b03c838081023ff2b808f4bfad2a116120887b5ac2791d44347a002daca6603eb9c1f42c590b690ffcd61e87c45375b6bc7b70b66f2d5e9e069c5ed22c7d0616d8bf511f899f1b0d6844cd1a295b2e78b0e5ef478fe8b3195d2b5bdcc734ddbd44c34a3085be659671c016e9691225a848debe8e97cbc4f8f1586d0b9344ac0fc0a332d2a1e96014bcfe5b9f2ae456986d91fb6681e872595876d333881c049f8694f0804b0557471f1986758e4c67a1dcd2bbb377a388969ff61a8ea175f8f8cc85cc75a15f65f0a2b6a188861dee2ed33ca4d15fe3731581e363a59d614909e30a22dd13c9e5f9189d4f094b9b58df5cb6a1587dd8c00890946bcac6d44a44b467fea25ad7176e1468704e3deef90d39937763924cc4fe80be3154cb6afd4ea2894a94556489d320644d6609f6fc138bdd195692a822a6908dd1a68e8b3b03dfc34a618803300135c147f0b6b3eb3b00b4171202a0a7f9100d3f852e71b0b87ccd76c120849d9a2013f8d224838a82e9d4ea207d6013dbf085e33ba8dddbcdf4320433cc7de8f9a5992efb3626730502f51550c15b0cfb4b135ee51e2c3a7de16cf7012d6dea4875ff2950fe41d57a565f2ad55afff2a76bad9169ca2ef2a79255acd9ff1be35681b497edc5cf505b4ef5d1cba4e3f7e9a0219bfc34bda111aab3a858ebc1753ce4c00bea26cf90a0aaa887e2cc61bd01ae2ae4606386eba28dbddcef74718144a46acdd0ebcb5d006182b3fa3941705ad90e3ab08d241dd6d9b5dc85d7043689c6e2a139f8fa4b7517dd45eb86894fea6c9785cebcfa5911f6f8a12ceb63633f85cd32588a817b7d65556587b30046093bab9dda792f159b788335981442925f0105cdecb040d3d041f828393b3ec9d2142141a47984c24343dd00442ce6700fb20f0ca88e1e93974965e974612b1bef95046b5b793c3c4bc454159eefdd68743f182e87404ca5ea62d0b387eae1874874d0dbf184dcff193ea08faf94bf9563688296fb7cefd73b8550e343a5c313d5afeebf2b3171df11fe81c873b404f7b4e8fbc1c5e08b560fa3a61929405e1bceb3b7f493072a6f16349a28d2e724a9dc1b34a073adca28c87449705392fc08203abef86e45e4c42a862df8555a9f3212107a97c0ce7b52f0137d863c694b1ab76c2a883f9b42042e7f39bb58b56c836887bca1d16a14d9b6c798501e05ac6cf3d4f198f92cd4c62fe463f7bf5fcb6e5a72abfadac8723c4e2fefe7c8e5d940131d335a9857ad8e755a8c8c7d9dc411e93661874a9a75974d215c3493ec4e8d009c84b69b34ca21735b94c67177922c51b1ddf4220f64773d00dc66183f96d679827e9e5df9f10521b8d991d30c887ba85b6ca3ff740f5ee8ee28c10d0fa79a86e84bbd3fd857bdcb6e8a84b0c18ebdb96edee9f651a577e10713d18acec00043c846e1e0f21b08377b9aa847972ba790cddc07f2d5dca5c5755f7083d2d9cb1489ac9e6aa2a071ba1d2123706e765389d5d1abbe3e9640121f57f89c385289d234ab77cb7e6f8dfda4bbd572fedf88fe777715ae0f2be3aed7061b87ba726d31926b1c045855b76774a487c59086f0105da1c184c489d427b2985e3101cf254869ac5c88ffe64916040c75bfcc1b6207f6bf6c5393a222a5539f771207edae7d81bb304444f4878e45c28920f64f8e12cecfdc401cb04786c8c01c7a72bd9b68fd4eb76d5124ffefc135747a5ad2f6d87f4f6b4e9dcdc14619e012cc11d55a8fc99d111c833653a2c6ef6deef37fb64c95f5f44c5d6cef073157fee5dbdd7d52bdda3962328ef03c351cb2c16836353f5cf6ce222d97056b072f2292281e731b61a8cd8ccfd4f6e366050e0443683c339720a71a5a79dbf70b0165c834824b027895fcdd2f1da83e94e8caada1300671cef6715856d47f31a3bee516d119ad3bb56c0b1cd97e411848ffd903ac644e886633decacf801d2cb1e5f71ac198a72bcf5610076888b35a54aaedb8d033e236c2006d2a0452d75c948b48df0ae6d2cf317eff089597d0a1df0ff82c7e8a55353a228d9a581eab4f2696e08fcd6242620466c80814e2e02beabf807c45e1180e13f82980e08e732fdfa8fe5a549be6140bd9e8c2fb2c421cd2a65eb09123bf91f150e7ab921b8474fffb82593c808053d04b9029167fdf4a9bf8c97677082f2e2fb2fc49c6a9cbf1189b35f2573eb0b7befa54c81332b9be4499032e1aa4c6cf8805a8419b2ebce50c27121eacdeee257f545f8072184449828fb22657f13cbae1618b4d83a7ffaf526572996da174ceb7b0d664735e0bfbcb4b057c4178aa7b17bd5ee1f97e43b777b983acdc7779d834049d816a413a3b4dd455669014227cfc7b144e9da89bd3b24d47260a590617e239ccec9a924f7b186afd46be93e54a47462d0e337845a7a8fa97b39eecbce8a15727e5ef10851ff3ad5b7115be73a003c5eb8d91e90a93c448f0814c6b2982bb708028662aa5773b5467ca75b6a2dcd3782c7b641dd296bc4ab9659d3fa1404d21942c9f1aa9ca37891b79a9cb934f23ac8badd95e05a70bb8723b3313702c7de71f4e6dc6998c278c168fc54e162f062a49f295d579d39e5766150475338f6c99222c78efd082d47915059e622a841a74a0bdec611f76a181758e04d544f9941bc4bddb73e334cc0526dacfa3e1d0c586d203fb79ca132aeede2e9ab5940c24e44a2eb5f062aabc85bec61419ab10f9dc1ff8fa4639463db29d8ae9dc179a11f958446b45e72fbb7cfae85711cbd50d539222c019c3f239fd80cf606cce9bb65263078c75908ea782fe4318ed74231b8021f6660d3c3604ebc81d09bce942f713cc531545445f3db201c1b52ea2eb82299a847a3e863902833472b14885d45bd380c21235bfb1a5b47638f0f375db62dabbed4a4b69d0611818e9dcec2d97b6ecb5a090ba8af0668b34b81c4c228424a66700dce0f5783525e76a2aab622209eeec441ed8f14c79fd07f738c30625df5444b447fd63d07d57d252861eb6fbd0ab9db73ccbacba6e6bf7ed97330374ab91648b67a765fbd001f87e19805aa0cb194ee536b4370eac2d1df9d261851d11cc26e65c72d56ed1cea46aa4033f2b65595c91103f90bbd5f0d9f47c2596f8fc9c47dbeb6af43a952e15688acbdf8385e4b70581cc148f3e3f7ac2480be7e65915345c85d02c07472b2edbbb91c6a927b9018c38a0498a0b5a5259322c39e6bd0b626afcb019f6ac85d80c1abb4684254f153516c9ba9ea300caf2059692cc1b89e2b33b57dd68ac3c681524acdc16328ac0abfdd06a5d7dbd892ea74f8c315da17946899a4d4e38560c802446ceddf4a5cece2b815731cd9df05c21cd87369a356a5162f06ead963262a537da0353467480e4cef1c79a5999d07c1d196edaa85b5976164272b773e1a72b000860815ccbdfd15101338c88e790bdcd30af61ca140be4baaf87d6661342216f06f0f1b633f89fd52df5aae7e7d442cdcf875a9f061649f32fb5313c4a7fdec9c11f2b13c15a224fcf9fc140bc08e50b6b9ca50957e8b37e4cdf3f7d1d6d1477dc170bcba343e94ce77ae98d05f142f466a2bf8547b2fbd271e7873da9e53b3549c74adf1650cdb0e4e0d573a76e301de69154d8b772d54fd9bcf49c24cf2b5ed431491f7e906f29cbe685eaaa7f800298d0f896548026b93a076f4846da93ea919283442af58e8ccdf98b003918c1afc63251068f29490db1bb5ab40110a1a5a7a1e3091af87c8722a213620c6a5299adb5662d0162cb2f38c128b37183ad684bb024c65dfcea30a032d943a799c377238d8427c4ccbcb2477969b26f52bb682f52b950b75929bcacfc01d36e0b7be5752bd046fbe8409c39fe7302ba3a5a6183cb57053dbd5314a0ea239c34371611cd36cbbc774cc1c9b5ca70c2383b2266660b67be583d1f68b65b8c6d9b164076fcfa28d8f189a05c22564cb7316f964534920718e2d9c33a622dbc78179d6261cb41c4e626f23b38a41f75038910f8fbfd69173890bdf4a26468fa3316e6183645ba8a5e53da153f55d32db019853a12c942f8b298e0b9c702c413ca9b9f0cbf24774f8fa794f23fa5c3a610d945337df54b57a01bc54012c7505e5a7ff415373774bc6cecce33d4648b4e50ca228fff76c3e8f0eeac5f9c9a953fe53c9f2afcf57c0ec53fa485847eef6a304f27bd0a45008129f693f73e0a784707a2cc7388f065eceeba09bc1a2a5a923436144355e8c97144c7e0b73263d4570dd2365773cf5e74b35fb4d49587585d04445f381f714e92969c499ec2fd41535753f5085216c7d67cca3df8cff08dc1a0afbc854666eeb05cd1905fce51cd3d338c743c65cd8e310d2f2ccdf3ef946907f7f5672381f655854049410bd8665f310c6f1b6498a2736e21433c4082a3e617a12b5ef44d51852ea23d27fdba3e6133a25c7aa1b588c83f6493b32bae8a01bcafd6d455876e5765df7545d6207a374e7e0963190f49230f12f1141acebbed832aaa52e96981943afc5bf7ffbae976f8cf4b2528cf6e5a3c71146599a30ade85c0cf8abc8e79c138bace31527e09efa44811d6843c970711533fa0a9f9642d491743711b29d36e07e73690dfbc3ebc9f9f88adf00b4ff773a69310eff48c87c990809fa224f324d2af49e575c7609b059e08d75bacf676566358fbe53c67f3c3a90e5e37a5cf178dd6f4f9a4cbf1602fab2ba1fb723734ac44112d98ccc4cff86ee6d5c03125936ecb82416ddd13319e3f0d0635594cb3ccd10213f7d54828986c2ed582700060cbac41abf29b0e10812ee1a15aef762976b8439a4a5306f693a338a2ae33bca1ab1927cd15586a0218591138a0974c557e571badeaf6967ec05e770560822682b3cd06947883c9ee036942e198a3f4dfe815129b4dd2e89a8f7e0a5eee6ac720f21d2adb685eb6d47925cc8fae33de0868cdac0ed6162519c9ea7b8fcccf943723d6935167fa58bfad3d2c7ba98fe63f5ad51a0af56a0a8e87c12e8823b4f43fe51f062faa853472c369bb7c941e32b9647734ce63643290eb2c5c121c5c2d206ce95b96065e836e958f1d974e9c92bed296920e24fe5d259743ef818ac4e37bfc8cfb44906c23d1a22fc55aa41ea5d8f3239f17c8c53b1875fd772d7884ebe34f166fc51138299f7b8d7481eb49467c2b09a4109b805cafc03eb42808499fd2fa071711eb17913a8307e09d6f3c65cad1d7e61abdaac272fa0dc135b997ecd196c79926865056c78a2f7adc9d02f595a4f70947161c69e1902fc8372eea292282253d10558c341b3cebf8ac137732078586d05589f35f728450f922161d8b44e8dd12832f514d7398d24e949e16f3a44a14eaad2022e7dbea589016e42a23213cb6cd19c5dfe0035ed3e65657920f31b1f985a0d3b563ba3292f3770b0de06b7333a8874d6c54d7d9fd03e04eb4633f74ab89048f6a8ccd85d90138c1210b99a5082771cb62bbfdc41ff1df8cd9bc56228f9ceb391df4ed6222ce687e984377883c0814df296040b67dd4d3d96ffa4146a8125502782cec498aebac27bb61d4521f0248db8de18c5aebe0af9a3f7e4b170c35b0ddb0e68aa869dca1cf94d0d495531853f8d1dc60b10814f68e054ab9a398da90fcce78ee34b905fc4c9d63c141e5a2fce2242ceb1072d02226a513a0dac5c087635c83c7bf748da6dfd018dd20ac54e6aef4f678cc96889aba6272099b038bfc7ac5cf0dd110d7ae16c598a67151a86330ea11eb452d3929bad80a0b364f511aecad796f816831d4c01fb2024edcd4edfe8a89dcdffe21a2abe915483920417f9d72851dc2548cd0b0e2eb861508fdf0fee72a390ab254aac7a761666fbf131cdbd6f042bef3a815948119a17629bf47706d8fb7561d9f6287b151a7eebd0a6b7911ba4b6d138ff12f0790672ba23e18b486e6c27b66213a48b979336be52e264739b378d04a6c6a747ebb7ad81351c61c018288b96ec480c0746dc3f7356be11934e9515d29358d7b79e99ad0135eebc9266ef47ca93af146931a8ecae5f53e7c3fd4ed29c49ad86bc6780ea8f1d6ab9ff59706cea012fde3459be9b406c711907066f0868ecb4231a63408d0352a114cd08c5a3d4cec75b00c5a3d9d7b98bf7f9acba21a0d646813e3fb8c31745fa7a620c9b65b7a15454bf22637881f325ee15efd0e2cd92138bf362dfd264ca470d0eae61eef10e82be6a387369b00b51e13e6c314929ac939d5ebc89e1c3cd9d8fbbbda4f15a549ffa7a3b2ca9afbc992fdd427c14a4a94aa70671dc5da974557d7cde9934871f3dea593460412b4a6ce8341536c9c7d9fe25c54531e3c9356f98902367898c129f94430d5dd0a75ff8ae310efe4ab87d7431803ecf6ffff4a4a0b7975a0cf32fc0efd75bb3042e2696064f612b87e675561aca7686cadcd2ed1cc5dcb2ed809733517ea128f1adda1b45c867f4070ab41e192b319303dcd5abfe36cd017f89a8559487c60d7a1abc627e0c5bec1134348391214ce9b2240787be4ac85db14eb308b0d2783d551f1fcc3032ae7892ae921f41664d047e4dc05e052d7d6caa4b573db9b323fc901b1481e36a0f8b82ec7befff07f4af9874463e60825d10841cbc48312dff7ffed6e57c586752b5cb747790a1f5aa501a66fe9c81c86b007c06ced409485b056e51c16e2ca5deaabe8d541a3c1911a5c0c10a5a5b6ad7a5d1ef028678abebac3de50af32cf7a45f56b40d6bd7b5dd14c07c9bc6ff772c845024aea5ff56aabdbb40a6ac35bc5c5e2b35f232c158ddce7d281fa1de64bb88e1ea0a29e1b26dbd352dcf4760a7fd69b794574e8b3d264eaa36ba3beb6de0f38af342c015600771166a8af73f4cdbe2e402d2800d3311730ebff97904d4eba3a6b4e358ecd2ca29881187ff5bab899afa0aec39c5286352bc7289d9bb89a30b6293de6043ab14e854dabee9650b8c75d5870f7a582d03a10ff2bc395efc3fa36041b3c6f0c4abce8742003e381d4c7eb16a634d7670d6b28744c15fee5502b86d6cc8cc5fc46922d20d8ceca271a95dde0e2a4ac76c283d6a28a8de7cdb07bdabbd101284748c7b65cc22eb98b79c20df8e72afd52525cd700b729abeeaac95a9ab4407e602e276c47d15cb9431f34128f97f55ac7122f8672f962429144590e54a73ec9c05c91ef9b78507d5e39b7550bbe83fef26e441866a9d57d7841f76e5da23fb81889b06e5fa2f686cfa5c3bac08677450543f77610b1f2baed696e8e603d3c25758f615a13545ffc865f0639a2c1b0e13635995066afe94c5386e772b914e3db866415500968dcf92238dba0616a1f79b853e28b52a76bd10321d0bff7ddca4021e3a8dbbcc553a35bae840e7a4c544e84dae6df28ed9ce78f06b0dbd7463241feebe3bd1a70101828cdd9566ff7c1a32acd8d760a25b820a2fee43a9253bd40dfb68c8588eba9c387c668aaa17ad1f1a791414ffac0a937de5c8204d8bc6b3cdd49524a45577caf21190681a114be5fd8062fcddc31997840f426f57e7cd78ae0776915a288db2c9f7bf041e3964bff5adab89e00411d072bd997d64534250dbcad31236816dba5f7bd3663ae3460bb15ead5b8381c12eef997ebc504abe66cafb01eab817b754e7fb24c21ee836951b2527633db0d7246473fee25d9445fcb081109eb2c5a26f4cb292260b82dfc97aeea4fb9bcac2793d831718ad48d6c767a2f654934011b5f9ec14f11ed20de9e71391493db5356a0f216e9f05cafda217b267367f8a8e2579f29b6508a9ae284c73416aae5b70cc8b35883029456fcfc547952da22f8bc09d9695b3caa8af9401019c78cb14b81988682fd6dc5ddeadd3c6479b670fea32a0ca64898ab0d94d24a4972c7975a5662ff4da0dc4e2ed9bba56b3450a6aafcc192d6d106d723294e4c644e0c9f3070a9dd1b55ab12e4be9248229014602ffba981eee68fbe70317760198432da91c2ca4fc118d017eeb2c1e93d571d8994d6550d2eaa7a5cfa06ad7ede3690a4e3be0693d9c0a0c92c4c2aae444212ac2c8bd07fff94f9e35c43523a4c2a709402d89e36c3978002f7e515205f59af5bb233f6399beb32114bd371b971a575fa26bc", 0x2000, &(0x7f0000001240)={&(0x7f0000000300)={0x50, 0x0, 0x7, {0x7, 0x29, 0x3, 0x200000, 0x5, 0x1, 0x1, 0x774}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x18, 0xfffffffffffffff5, 0xc, {0xffffffff}}, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="70000000feffffff020000000000000001000000000000008500000000000000050000001d17ffff73797a31000000000100000000000000050000000000000009000000060000006d707463705f706d000002e40700000000000000000000004cdf0000000000000000000000000080"], &(0x7f0000000b80)=ANY=[@ANYBLOB="e801000000000000000000000000000005000000000000000000000000000000246b000000000000feffffffffffffff619900000300000001000000000000000000000001000000bf0b00000000000010000000000000007300000000000000090000000000000005000000250d0000010000000010000006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0300000000000000000000000200000000000000000000800000000000000000070000000400000000000000030000000000000004000000000000000200000000000000feffffff020000000000000000000000020000000000000003000000000000000900000000000000020000000000000007000000000000000100000001000000100000000080000002000000", @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="af070000090000000000000000000000000000001000000000000000050000000300000073797a300000000000000000000000000000000000000000050000000000000009000000000000000600000002000000040000000000000000020000000000000f000000000000000500000000000000000000000000000005000000000000000500000003000000030000000060000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000200449459000000000000000f00000070fa75b8f2b0d190710000000066696c7465"], 0x0, &(0x7f0000001100)={0x20, 0x0, 0x7, {0x80000001, 0x4, 0x1, 0x10}}}) 1.321956936s ago: executing program 5 (id=2969): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d63a2000c6c651ec5fc1a124a63aee245e3b0480dced9c5bc7735a4ce92290ef5e3ebe65942fb385", @ANYRES16, @ANYBLOB], 0x1c}}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x20840, 0x0) syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x20095d3, 0x104, 0x2, 0xe7}, &(0x7f00000000c0), &(0x7f0000000140)) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) gettid() r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r6, 0x0) readv(r5, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x1) 1.296851675s ago: executing program 1 (id=2970): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007", @ANYRES32], 0x30}}, 0x0) 1.291512589s ago: executing program 7 (id=2971): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x509001, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0x3ff) r2 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x5, r2, 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2a8001, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES64=r2, @ANYRESHEX=r5, @ANYRESOCT=r6], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0904000000000000000002000000500004804c0001800a00010072616e67650000003c000280080001400000000008000240000000001c0004800f0001000bf1bf032cf7b34f9a9702009400d3f9e20000000c00038005000100430000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x2a, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b400000013"], 0x188}}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x7, 0x0, 0x7, 0x1}, 0x10) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x24}}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$inet_mptcp(0x2, 0x1, 0x106) openat$sysfs(0xffffff9c, &(0x7f0000000280)='/sys/power/image_size', 0x40, 0x0) getdents(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, 0xffffffffffffffff, 0x25549000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r8, 0x80045510, &(0x7f0000000000)={0x0, 0x10001}) 1.22189885s ago: executing program 1 (id=2972): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000200)={0x5, 0x7f, 0x9}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000140), &(0x7f00000001c0)=0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = dup(r2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$TCXONC(r3, 0x540a, 0x2) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f000000b040)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000011c0)="5f8a4626af6a7046650b045f1471213dc5cdf4827b976940bc1ae610992f394238b14d90d72496b352792b20936925793e080550ce5889a747c0c0e54523404eec6b33f0ce259848b635aede572ebbeb00e6a644a8e0f8f2f36f3198832e75503300624cbff963e8e711e9f9e5c940f5359e2557d0ee0e1bd636e78781663bc227f71ed0573fa2779f25b5d84818a5ff2829", 0x92}], 0x1, &(0x7f0000002540)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x1}}}], 0x18}}], 0x1, 0x4001c00) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xa}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={r6, 0x7}, 0x8) 1.162147284s ago: executing program 1 (id=2973): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000780)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0x10008850}, 0x8010) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000040)="82e5a666b9970000400f32660f388093080026670f797ccb000f20c06635040000000f22c066b9800000c00f326635008000000f3066b9780b00000f323e6465660ff90e0098f00fbb4bab0f01cb", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r8, 0x5101) timer_create(0x2, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000e5964a10a3424a805fd935ecdbd1d692060212eade850498e42b07404f77b8de8d355839c57019428ef3d14b68667a3e88d5963e4491371ae3348e460be21fcbbb4542e264c6882e7582b9dda6ae9560fba0ab8b67d3cf4b482f09426d4b9bbe54277b880a9526f0d38f92ae338548322ac55790e840edf563", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b70400000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r11, 0x27, 0x0, 0x120, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50) timer_getoverrun(0x0) 581.136015ms ago: executing program 4 (id=2974): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0x4}, @raw32={[0x2600]}}], 0x1c) socket$igmp(0x2, 0x3, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x220, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{0x0, 0xfffffffc}, {0x4}, {0x0, 0x5}, {0xfffffffe, 0x88}, {}, {}, {0x7}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) gettid() dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@verity_off}, {@redirect_dir_on}], [], 0x2f}) r3 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) 417.336537ms ago: executing program 5 (id=2975): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r1], 0x1c}}, 0x0) (fail_nth: 6) 351.262034ms ago: executing program 7 (id=2976): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x8}, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r3 = dup(r2) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x285c, 0x4) (async) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x104, &(0x7f0000000140)=0x7, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x61, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xc400}}) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x2, 0x6, 0x500, 0x268, 0xc8, 0x1a0, 0x0, 0x34c, 0x45c, 0x45c, 0x45c, 0x45c, 0x45c, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [0xff000000], [0x0, 0x0, 0xff], 'sit0\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x41}, 0x0, 0xa4, 0xc8, 0x0, {0x7a00000000000000}}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0xdb, 0xc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [0xffffffff], [0x0, 0xff000000, 0x0, 0xffffff00], 'syzkaller0\x00', 'team_slave_1\x00', {}, {}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x3}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x55c) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000380)='schedstat\x00') (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x17d, 0x2) (async, rerun: 32) r8 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x689, r10}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0xfffffffffffffff5, r11, {0x7, 0x1f, 0x0, 0x108a}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x0, 0x0, {0x0, 0x40000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, r12}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (rerun: 64) 350.979491ms ago: executing program 5 (id=2977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000140)='./file\x00', 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) lsm_set_self_attr(0x64, &(0x7f0000002980)={0x68, 0x8, 0xf1, 0xd1, "188aa3520e079ea4cdce3e233662ad70357d3719ed224489be4f9b43fdf4cf39d9860bc35708efe053479547c4d98b7b94161839c8aef1a33991284fd223d156030b5f2e5d67aa022d3d4dd1bbdca59406a9ad5ffea39998eab21041396595e831b3416463565cc7d70e0512305a5708121cf071c2c1bda5425f59da5e3ce9a7ee14de69497bdef396c0919c02449b11162f6d956e18eeeef523524e770c8a755f0274a1b20aa7a3717bfbdfe5d847d06d1c8733787baf8196f9eeccf7b70c6f7033a489712cc2680386c95ce39d8520bb"}, 0xf1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x9e, &(0x7f0000000740)=ANY=[@ANYRES8=r0, @ANYBLOB="c0f29048de23e32036e4c1671ce4fe17b033ceb93069272e5be0acdec7d3295ec45f7888ed061d90ab7bdbda8d22ffc0daa0b850f43cf6dc94053cefe93a800ef5bba5b220ead2db1a98f4d1b08ec2d40f04252cc4411ea6f842395b3f7222fe8851a13934a6952b23667a9a50304a0e6e8c36af52e1080c09563679cec75b4dec3c3708abf3012a82dae0e6916f5e94d6b7eeed8a4c8834ee4ea904531ae14f02af6146"], 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffff8}, 0x18) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="a8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)="ec", 0x1}], 0x1}}], 0x2, 0x4004441) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x701, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) 350.835647ms ago: executing program 7 (id=2978): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x8a, &(0x7f0000001640)=0x4f1d, 0x4) creat(0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000fbdbdf252e00000008000300", @ANYRES32=r7, @ANYBLOB="050034008b0200002400fe0047909e2b80c7974180dad11d4d9eaa95220f0a247d5632bb2b328b69e08494b0e6842e"], 0x48}}, 0x20000044) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$ptys(0xc, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 79.240829ms ago: executing program 5 (id=2979): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x101, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="210000800000000001000000000000000000000000000000001b0300ff"]) r8 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f000001a640)=""/102400, 0x19000, 0x0, 0x0, 0x40020000}, &(0x7f00000008c0)=0x24) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009104"]) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) 405.227µs ago: executing program 1 (id=2980): mkdir(&(0x7f0000000000)='./file0\x00', 0x4) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x10000011}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f00000001c0)='contention_end\x00', r3, 0x0, 0x10000}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00002) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000a80)="3dfeb167f3ccc51b8ec0ba896a6d39292279e90f7abfdaee0f52b8a3554c9122ce1f6ed327282ad8c2d74bb1a770183e755b9f37cc301f5392a0e4831635410fe4b2a8e6bdb04d5d", 0x1f00, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) r10 = io_uring_setup(0x410d, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) r11 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r10, 0x4, &(0x7f0000000000)=r11, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r10, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4096, 0x1000}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r10, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) write$nbd(r8, 0x0, 0x40) write$P9_RVERSION(r1, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) 0s ago: executing program 7 (id=2981): mount$pvfs2(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) kernel console output (not intermixed with test programs): 000000000001 RSI: 0000000020000845 RDI: 0000000020b63fe4 [ 546.901818][T16149] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 546.903885][T16149] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 546.905995][T16149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 546.908098][T16149] [ 546.974668][T16079] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 547.013536][T16079] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 547.020661][T16079] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 547.025197][T16079] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 547.070090][T16079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.078423][T16079] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.082503][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.084395][ T1220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.096099][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.098590][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.216748][T16153] netlink: 'syz.5.2620': attribute type 10 has an invalid length. [ 547.234887][T16153] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 547.246473][T16169] siw: device registration error -23 [ 547.279347][T16079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.597731][T16079] veth0_vlan: entered promiscuous mode [ 547.604775][T16079] veth1_vlan: entered promiscuous mode [ 547.617063][T16079] veth0_macvtap: entered promiscuous mode [ 547.619939][T16079] veth1_macvtap: entered promiscuous mode [ 547.637129][T16079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.639925][T16079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.643147][T16079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.652864][T16079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.656020][T16079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.659087][T16079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.662254][T16079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.665288][T16079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.669475][T16079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.672062][T16079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.674803][T16079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.677370][T16079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.680082][T16079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.683906][T16079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.691903][T16079] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.694155][T16079] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.699752][T16079] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.702064][T16079] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.764475][T10208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.773534][T10208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.794918][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.797477][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.891617][T16206] siw: device registration error -23 [ 548.000540][T16211] netlink: 'syz.7.2604': attribute type 39 has an invalid length. [ 548.006279][T16212] 9pnet_fd: Insufficient options for proto=fd [ 548.107730][T16214] FAULT_INJECTION: forcing a failure. [ 548.107730][T16214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.111189][T16214] CPU: 2 UID: 0 PID: 16214 Comm: syz.4.2627 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 548.113924][T16214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 548.116597][T16214] Call Trace: [ 548.117441][T16214] [ 548.118231][T16214] dump_stack_lvl+0x16c/0x1f0 [ 548.119461][T16214] should_fail_ex+0x497/0x5b0 [ 548.120683][T16214] _copy_from_user+0x2e/0xd0 [ 548.121893][T16214] get_compat_msghdr+0xa8/0x170 [ 548.123141][T16214] ? __pfx_get_compat_msghdr+0x10/0x10 [ 548.124558][T16214] ___sys_sendmsg+0x1b0/0x1e0 [ 548.125794][T16214] ? __pfx____sys_sendmsg+0x10/0x10 [ 548.127162][T16214] ? trace_lock_acquire+0x14e/0x1f0 [ 548.128521][T16214] ? __pfx___might_resched+0x10/0x10 [ 548.129896][T16214] __sys_sendmmsg+0x2fa/0x420 [ 548.131303][T16214] ? __pfx___sys_sendmmsg+0x10/0x10 [ 548.132737][T16214] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 548.134332][T16214] ? fput+0x67/0x440 [ 548.135380][T16214] ? ksys_write+0x1ba/0x250 [ 548.136578][T16214] ? __pfx_ksys_write+0x10/0x10 [ 548.137876][T16214] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 548.139336][T16214] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 548.141097][T16214] __do_fast_syscall_32+0x73/0x120 [ 548.142441][T16214] do_fast_syscall_32+0x32/0x80 [ 548.143721][T16214] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 548.145384][T16214] RIP: 0023:0xf7ff1579 [ 548.146487][T16214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 548.151482][T16214] RSP: 002b:00000000f513457c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 548.153671][T16214] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000100 [ 548.155732][T16214] RDX: 000000000400020d RSI: 0000000000000000 RDI: 0000000000000000 [ 548.157824][T16214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 548.159883][T16214] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 548.161980][T16214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 548.164030][T16214] [ 548.732963][T16232] FAULT_INJECTION: forcing a failure. [ 548.732963][T16232] name failslab, interval 1, probability 0, space 0, times 0 [ 548.733043][T16232] CPU: 1 UID: 0 PID: 16232 Comm: syz.1.2628 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 548.733089][T16232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 548.733102][T16232] Call Trace: [ 548.733108][T16232] [ 548.733116][T16232] dump_stack_lvl+0x16c/0x1f0 [ 548.733141][T16232] should_fail_ex+0x497/0x5b0 [ 548.733163][T16232] ? fs_reclaim_acquire+0xae/0x150 [ 548.733183][T16232] should_failslab+0xc2/0x120 [ 548.733207][T16232] __kmalloc_cache_noprof+0x68/0x420 [ 548.733234][T16232] drm_atomic_state_alloc+0xb8/0x120 [ 548.733260][T16232] drm_client_modeset_commit_atomic+0xd1/0x7f0 [ 548.733283][T16232] ? drm_client_modeset_commit_locked+0x4c/0x580 [ 548.733306][T16232] ? rcu_is_watching+0x12/0xc0 [ 548.733326][T16232] ? trace_contention_end+0xee/0x140 [ 548.733343][T16232] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 548.733364][T16232] ? __mutex_lock+0x1cc/0xa60 [ 548.733410][T16232] drm_client_modeset_commit_locked+0x14d/0x580 [ 548.733435][T16232] __drm_fb_helper_restore_fbdev_mode_unlocked+0xd2/0x180 [ 548.733457][T16232] drm_fb_helper_set_par+0xd8/0x120 [ 548.733473][T16232] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 548.733492][T16232] fb_set_var+0x7af/0x1130 [ 548.733512][T16232] ? __pfx_fb_set_var+0x10/0x10 [ 548.733535][T16232] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 548.733557][T16232] ? is_bpf_text_address+0x94/0x1a0 [ 548.733588][T16232] ? kernel_text_address+0x8d/0x100 [ 548.733613][T16232] ? __kernel_text_address+0xd/0x40 [ 548.733630][T16232] ? hlock_class+0x4e/0x130 [ 548.733651][T16232] ? mark_lock+0xb5/0xc60 [ 548.733675][T16232] ? hlock_class+0x4e/0x130 [ 548.733693][T16232] ? mark_lock+0xb5/0xc60 [ 548.733716][T16232] ? __pfx_mark_lock+0x10/0x10 [ 548.733740][T16232] ? __pfx_mark_lock+0x10/0x10 [ 548.733764][T16232] ? stack_trace_save+0x95/0xd0 [ 548.733785][T16232] ? __pfx_stack_trace_save+0x10/0x10 [ 548.733804][T16232] ? __pfx_mark_lock+0x10/0x10 [ 548.733827][T16232] ? stack_depot_save_flags+0x28/0x900 [ 548.733874][T16232] fbcon_blank+0x678/0xd10 [ 548.733894][T16232] ? __pfx_fbcon_blank+0x10/0x10 [ 548.733924][T16232] ? trace_lock_acquire+0x14e/0x1f0 [ 548.733944][T16232] ? __pfx___might_resched+0x10/0x10 [ 548.733959][T16232] ? vt_ioctl+0xd4c/0x2fd0 [ 548.733980][T16232] ? __pfx_fbcon_blank+0x10/0x10 [ 548.733997][T16232] do_unblank_screen+0x27b/0x4c0 [ 548.734020][T16232] vt_ioctl+0x1268/0x2fd0 [ 548.734041][T16232] ? __pfx_vt_ioctl+0x10/0x10 [ 548.734059][T16232] ? aa_get_newest_label+0x376/0x680 [ 548.734086][T16232] ? __pfx_aa_get_newest_label+0x10/0x10 [ 548.734111][T16232] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 548.734133][T16232] ? apparmor_capable+0x114/0x1d0 [ 548.734158][T16232] ? bpf_lsm_capable+0x9/0x10 [ 548.734174][T16232] ? security_capable+0x7e/0x260 [ 548.734201][T16232] vt_compat_ioctl+0x239/0x4e0 [ 548.734221][T16232] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 548.734249][T16232] ? __fget_files+0x206/0x3a0 [ 548.734268][T16232] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 548.734287][T16232] tty_compat_ioctl+0x2ee/0x4d0 [ 548.734310][T16232] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 548.734333][T16232] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 548.734350][T16232] __do_fast_syscall_32+0x73/0x120 [ 548.734374][T16232] do_fast_syscall_32+0x32/0x80 [ 548.734401][T16232] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 548.734429][T16232] RIP: 0023:0xf7fe5579 [ 548.734443][T16232] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 548.734458][T16232] RSP: 002b:00000000f516657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 548.734477][T16232] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000004b3a [ 548.734488][T16232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 548.734499][T16232] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 548.734509][T16232] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 548.734521][T16232] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 548.734545][T16232] [ 548.897053][ T5951] Bluetooth: hci2: command tx timeout [ 549.793218][T16272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2634'. [ 550.376509][T16292] siw: device registration error -23 [ 550.428458][T16293] 9pnet_fd: Insufficient options for proto=fd [ 550.977311][ T5951] Bluetooth: hci2: command tx timeout [ 551.327825][ T6000] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 551.496696][ T6000] usb 10-1: Using ep0 maxpacket: 16 [ 551.502019][ T6000] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.505317][ T6000] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.508703][ T6000] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 551.511716][ T6000] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.519698][ T6000] usb 10-1: config 0 descriptor?? [ 551.716839][ T8] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 551.866427][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 551.870063][ T8] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 551.872778][ T8] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 551.886973][ T8] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 551.891294][ T8] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 551.895283][ T8] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 551.918236][ T8] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 551.920960][ T8] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 551.924977][ T8] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 551.930304][ T8] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 551.934240][ T8] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 551.947592][ T8] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 551.950301][ T8] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 551.954431][ T8] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 551.963113][ T8] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 551.968212][ T8] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 551.978406][ T8] usb 9-1: string descriptor 0 read error: -22 [ 551.985142][ T8] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 551.988476][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.002436][ T8] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 552.018343][ T64] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 552.196712][ T64] usb 6-1: Using ep0 maxpacket: 16 [ 552.200234][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.206408][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.209446][ T64] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 552.212175][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.233210][ T64] usb 6-1: config 0 descriptor?? [ 552.240873][ T6000] usbhid 10-1:0.0: can't add hid device: -71 [ 552.242790][ T6000] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 552.245463][ T6000] usb 10-1: USB disconnect, device number 34 [ 552.309643][T16314] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 552.320195][T16314] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 552.366798][ T8] usb 9-1: USB disconnect, device number 25 [ 552.458176][T16318] netlink: 'syz.7.2647': attribute type 1 has an invalid length. [ 552.646891][ T6000] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 552.800884][ T6000] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 552.803983][ T6000] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 552.808995][ T6000] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 552.812061][ T6000] usb 10-1: config 0 interface 0 has no altsetting 0 [ 552.815150][ T6000] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 552.819012][ T6000] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 552.822196][ T6000] usb 10-1: config 0 interface 0 has no altsetting 0 [ 552.824781][ T6000] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 552.829790][ T6000] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 552.832773][ T6000] usb 10-1: config 0 interface 0 has no altsetting 0 [ 552.835606][ T6000] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 552.839246][ T6000] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 552.842083][ T6000] usb 10-1: config 0 interface 0 has no altsetting 0 [ 552.844893][ T6000] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 552.849431][ T6000] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 552.852710][ T6000] usb 10-1: config 0 interface 0 has no altsetting 0 [ 552.855478][ T6000] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 552.859574][ T6000] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 552.862440][ T6000] usb 10-1: config 0 interface 0 has no altsetting 0 [ 552.865467][ T6000] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 552.869961][ T6000] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 552.872811][ T6000] usb 10-1: config 0 interface 0 has no altsetting 0 [ 552.876008][ T6000] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 552.879910][ T6000] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 552.882840][ T6000] usb 10-1: config 0 interface 0 has no altsetting 0 [ 552.890419][ T6000] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 552.892841][ T6000] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 552.895081][ T6000] usb 10-1: Product: syz [ 552.896428][ T6000] usb 10-1: Manufacturer: syz [ 552.897938][ T6000] usb 10-1: SerialNumber: syz [ 552.900247][ T6000] usb 10-1: config 0 descriptor?? [ 552.904498][ T6000] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 552.996420][T16323] siw: device registration error -23 [ 553.114605][ T64] usbhid 6-1:0.0: can't add hid device: -71 [ 553.116269][ T64] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 553.122160][ T64] usb 6-1: USB disconnect, device number 33 [ 553.140197][ T6000] kernel write not supported for file /amidi2 (pid: 6000 comm: kworker/2:4) [ 553.176942][T16335] FAULT_INJECTION: forcing a failure. [ 553.176942][T16335] name failslab, interval 1, probability 0, space 0, times 0 [ 553.180126][T16335] CPU: 3 UID: 0 PID: 16335 Comm: syz.4.2651 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 553.182961][T16335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 553.185772][T16335] Call Trace: [ 553.186651][T16335] [ 553.187437][T16335] dump_stack_lvl+0x16c/0x1f0 [ 553.188639][T16335] should_fail_ex+0x497/0x5b0 [ 553.189854][T16335] ? fs_reclaim_acquire+0xae/0x150 [ 553.191189][T16335] should_failslab+0xc2/0x120 [ 553.192429][T16335] __kmalloc_noprof+0xce/0x4f0 [ 553.193660][T16335] ? hlock_class+0x4e/0x130 [ 553.194902][T16335] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 553.198560][T16335] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 553.200935][T16335] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 553.202486][T16335] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 553.204072][T16335] ? genl_get_cmd+0x195/0x580 [ 553.205310][T16335] ? bpf_lsm_capable+0x9/0x10 [ 553.206662][T16335] ? security_capable+0x7e/0x260 [ 553.207968][T16335] ? ns_capable+0xd7/0x110 [ 553.209173][T16335] genl_rcv_msg+0x565/0x800 [ 553.210361][T16335] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.211711][T16335] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 553.213125][T16335] ? __pfx_nl80211_connect+0x10/0x10 [ 553.214493][T16335] ? __pfx_nl80211_post_doit+0x10/0x10 [ 553.215923][T16335] ? __pfx___lock_acquire+0x10/0x10 [ 553.217329][T16335] netlink_rcv_skb+0x165/0x410 [ 553.218604][T16335] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.219914][T16335] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 553.221322][T16335] ? down_read+0xc9/0x330 [ 553.222477][T16335] ? __pfx_down_read+0x10/0x10 [ 553.223733][T16335] ? netlink_deliver_tap+0x1ae/0xca0 [ 553.225120][T16335] genl_rcv+0x28/0x40 [ 553.226188][T16335] netlink_unicast+0x53c/0x7f0 [ 553.227450][T16335] ? __pfx_netlink_unicast+0x10/0x10 [ 553.228840][T16335] ? __phys_addr_symbol+0x30/0x80 [ 553.230179][T16335] ? __check_object_size+0x488/0x710 [ 553.231588][T16335] netlink_sendmsg+0x8b8/0xd70 [ 553.232850][T16335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.234232][T16335] ____sys_sendmsg+0x9ae/0xb40 [ 553.235471][T16335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 553.236837][T16335] ? get_compat_msghdr+0x11b/0x170 [ 553.238179][T16335] ___sys_sendmsg+0x135/0x1e0 [ 553.239401][T16335] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.240755][T16335] ? __pfx_lock_release+0x10/0x10 [ 553.241655][T16338] bridge_slave_0: left allmulticast mode [ 553.242058][T16335] ? trace_lock_acquire+0x14e/0x1f0 [ 553.243929][T16338] bridge_slave_0: left promiscuous mode [ 553.245234][T16335] ? __fget_files+0x206/0x3a0 [ 553.247495][T16338] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.248240][T16335] __sys_sendmsg+0x16e/0x220 [ 553.251859][T16335] ? __pfx___sys_sendmsg+0x10/0x10 [ 553.253248][T16335] __do_fast_syscall_32+0x73/0x120 [ 553.254601][T16335] do_fast_syscall_32+0x32/0x80 [ 553.255902][T16335] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 553.257576][T16335] RIP: 0023:0xf7ff1579 [ 553.258655][T16335] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 553.263779][T16335] RSP: 002b:00000000f517657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 553.265987][T16335] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200001c0 [ 553.268050][T16335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 553.270123][T16335] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 553.272220][T16335] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 553.274255][T16335] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 553.276319][T16335] [ 553.282902][T16338] bridge_slave_1: left allmulticast mode [ 553.284864][T16338] bridge_slave_1: left promiscuous mode [ 553.297875][T16338] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.313487][T16338] bond0: (slave bond_slave_0): Releasing backup interface [ 553.336219][T16338] bond0: (slave bond_slave_1): Releasing backup interface [ 553.384756][T16338] team0: Port device team_slave_0 removed [ 553.407390][T16338] team0: Port device team_slave_1 removed [ 553.412026][T16338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.414819][T16338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.430826][T16338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.433801][T16338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.540574][T16341] team0: Mode changed to "broadcast" [ 553.543728][T16344] vlan0: entered promiscuous mode [ 553.557842][T16344] team0: Port device vlan0 added [ 553.866598][ T6000] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 553.959538][T16358] IPVS: length: 24 != 984 [ 554.016686][ T6000] usb 12-1: Using ep0 maxpacket: 16 [ 554.021552][ T6000] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.027666][ T6000] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.030630][ T6000] usb 12-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 554.033889][ T6000] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.039012][ T6000] usb 12-1: config 0 descriptor?? [ 554.191744][T16366] syz.1.2656 (16366): drop_caches: 2 [ 554.514301][T16368] siw: device registration error -23 [ 554.724385][T16377] syz.1.2659: attempt to access beyond end of device [ 554.724385][T16377] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 554.736727][T16377] SQUASHFS error: Failed to read block 0x0: -5 [ 554.738492][T16377] unable to read squashfs_super_block [ 554.846094][ T6000] usbhid 12-1:0.0: can't add hid device: -71 [ 554.850593][ T6000] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 554.867296][ T6000] usb 12-1: USB disconnect, device number 2 [ 555.128154][ C2] usb 10-1: yurex_control_callback - control failed: -2 [ 555.132119][ C2] usb 10-1: yurex_control_callback - control failed: -32 [ 555.136587][ T6000] usb 10-1: USB disconnect, device number 35 [ 555.140013][ T6000] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 555.519419][T16416] siw: device registration error -23 [ 556.086041][T16421] siw: device registration error -23 [ 556.458723][T16430] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 556.496892][T16433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2671'. [ 556.502536][T16433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2671'. [ 556.666410][T14860] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 556.856463][T14860] usb 12-1: Using ep0 maxpacket: 16 [ 556.859719][T14860] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.863373][T14860] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.865969][T14860] usb 12-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 556.868551][T14860] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.871544][T14860] usb 12-1: config 0 descriptor?? [ 556.969321][ T5951] block nbd5: Receive control failed (result -32) [ 556.971853][ T5945] block nbd5: Receive control failed (result -32) [ 557.060831][T16439] block nbd5: shutting down sockets [ 557.099293][T16445] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 557.105473][T16445] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 557.198319][T16449] SET target dimension over the limit! [ 557.346438][ T1017] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 557.497468][ T1017] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 557.500971][ T1017] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 557.504003][ T1017] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 557.512521][ T1017] usb 10-1: config 0 interface 0 has no altsetting 0 [ 557.523425][ T1017] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 557.525835][ T1017] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 557.530969][ T1017] usb 10-1: config 0 interface 0 has no altsetting 0 [ 557.539491][ T1017] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 557.541800][ T1017] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 557.553130][ T1017] usb 10-1: config 0 interface 0 has no altsetting 0 [ 557.560412][ T1017] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 557.562739][ T1017] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 557.576842][ T1017] usb 10-1: config 0 interface 0 has no altsetting 0 [ 557.580964][ T1017] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 557.583484][ T1017] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 557.589477][ T1017] usb 10-1: config 0 interface 0 has no altsetting 0 [ 557.595879][ T1017] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 557.599106][ T1017] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 557.602683][ T1017] usb 10-1: config 0 interface 0 has no altsetting 0 [ 557.618306][ T1017] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 557.618506][T14860] usbhid 12-1:0.0: can't add hid device: -71 [ 557.620616][ T1017] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 557.622725][T14860] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 557.625405][ T1017] usb 10-1: config 0 interface 0 has no altsetting 0 [ 557.632786][ T1017] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 557.635780][ T1017] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 557.641737][ T1017] usb 10-1: config 0 interface 0 has no altsetting 0 [ 557.651746][T14860] usb 12-1: USB disconnect, device number 3 [ 557.651875][ T1017] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 557.656242][ T1017] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 557.659002][ T1017] usb 10-1: Product: syz [ 557.661275][ T1017] usb 10-1: Manufacturer: syz [ 557.663688][ T1017] usb 10-1: SerialNumber: syz [ 557.666728][ T1017] usb 10-1: config 0 descriptor?? [ 557.670676][ T1017] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 557.674727][T16456] FAULT_INJECTION: forcing a failure. [ 557.674727][T16456] name failslab, interval 1, probability 0, space 0, times 0 [ 557.679812][T16456] CPU: 0 UID: 0 PID: 16456 Comm: syz.4.2679 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 557.683364][T16456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 557.686906][T16456] Call Trace: [ 557.688032][T16456] [ 557.689036][T16456] dump_stack_lvl+0x16c/0x1f0 [ 557.690619][T16456] should_fail_ex+0x497/0x5b0 [ 557.692215][T16456] ? fs_reclaim_acquire+0xae/0x150 [ 557.693934][T16456] should_failslab+0xc2/0x120 [ 557.695506][T16456] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 557.697429][T16456] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 557.699374][T16456] ? __alloc_skb+0x2b3/0x380 [ 557.700918][T16456] __alloc_skb+0x2b3/0x380 [ 557.702408][T16456] ? __pfx___alloc_skb+0x10/0x10 [ 557.704031][T16456] ? __pfx___nla_validate_parse+0x10/0x10 [ 557.705920][T16456] ? net_generic+0xea/0x2a0 [ 557.707412][T16456] ? __pfx_lock_release+0x10/0x10 [ 557.709081][T16456] netlink_dump+0x699/0xd00 [ 557.710591][T16456] ? __nla_parse+0x40/0x60 [ 557.712090][T16456] ? __pfx_netlink_dump+0x10/0x10 [ 557.713772][T16456] ? netlink_lookup+0x3d/0x270 [ 557.715347][T16456] __netlink_dump_start+0x6d9/0x980 [ 557.716973][T16456] ip_set_dump+0x180/0x210 [ 557.718167][T16456] ? __pfx_ip_set_dump+0x10/0x10 [ 557.719451][T16456] ? __pfx_ip_set_dump_start+0x10/0x10 [ 557.720857][T16456] ? __pfx_ip_set_dump_do+0x10/0x10 [ 557.722218][T16456] ? __pfx_ip_set_dump_done+0x10/0x10 [ 557.723613][T16456] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 557.724925][T16456] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 557.726358][T16456] ? hlock_class+0x4e/0x130 [ 557.727551][T16456] ? mark_lock+0xb5/0xc60 [ 557.728690][T16456] ? hlock_class+0x4e/0x130 [ 557.729895][T16456] ? __lock_acquire+0xcc5/0x3c40 [ 557.731194][T16456] netlink_rcv_skb+0x165/0x410 [ 557.732465][T16456] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 557.733897][T16456] ? __pfx___lock_acquire+0x10/0x10 [ 557.735251][T16456] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 557.736619][T16456] ? __pfx_aa_get_newest_label+0x10/0x10 [ 557.738309][T16456] ? bpf_lsm_capable+0x9/0x10 [ 557.739548][T16456] ? security_capable+0x7e/0x260 [ 557.740945][T16456] ? ns_capable+0xd7/0x110 [ 557.742171][T16456] nfnetlink_rcv+0x1b4/0x430 [ 557.743386][T16456] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 557.744715][T16456] ? netlink_deliver_tap+0x1ae/0xca0 [ 557.746108][T16456] netlink_unicast+0x53c/0x7f0 [ 557.747361][T16456] ? __pfx_netlink_unicast+0x10/0x10 [ 557.748749][T16456] ? __phys_addr_symbol+0x30/0x80 [ 557.749950][T16456] ? __check_object_size+0x488/0x710 [ 557.751495][T16456] netlink_sendmsg+0x8b8/0xd70 [ 557.752907][T16456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.754280][T16456] ____sys_sendmsg+0x9ae/0xb40 [ 557.755522][T16456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.756885][T16456] ? get_compat_msghdr+0x11b/0x170 [ 557.758214][T16456] ___sys_sendmsg+0x135/0x1e0 [ 557.759427][T16456] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.760775][T16456] ? __pfx_lock_release+0x10/0x10 [ 557.762090][T16456] ? trace_lock_acquire+0x14e/0x1f0 [ 557.763436][T16456] ? __fget_files+0x206/0x3a0 [ 557.764665][T16456] __sys_sendmsg+0x16e/0x220 [ 557.765885][T16456] ? __pfx___sys_sendmsg+0x10/0x10 [ 557.767217][T16456] __do_fast_syscall_32+0x73/0x120 [ 557.768542][T16456] do_fast_syscall_32+0x32/0x80 [ 557.769812][T16456] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 557.771610][T16456] RIP: 0023:0xf7ff1579 [ 557.772695][T16456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 557.778558][T16456] RSP: 002b:00000000f517657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 557.781160][T16456] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200001c0 [ 557.783601][T16456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 557.785770][T16456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 557.787906][T16456] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 557.790285][T16456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 557.792761][T16456] [ 558.059059][T16470] netlink: 'syz.1.2683': attribute type 1 has an invalid length. [ 558.061519][T16470] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2683'. [ 558.799942][T16477] FAULT_INJECTION: forcing a failure. [ 558.799942][T16477] name failslab, interval 1, probability 0, space 0, times 0 [ 558.804405][T16477] CPU: 1 UID: 0 PID: 16477 Comm: syz.4.2685 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 558.808235][T16477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 558.812010][T16477] Call Trace: [ 558.816793][T16477] [ 558.816818][T16477] dump_stack_lvl+0x16c/0x1f0 [ 558.816848][T16477] should_fail_ex+0x497/0x5b0 [ 558.816874][T16477] ? fs_reclaim_acquire+0xae/0x150 [ 558.816898][T16477] should_failslab+0xc2/0x120 [ 558.816925][T16477] __kmalloc_noprof+0xce/0x4f0 [ 558.816951][T16477] ? __pfx___mutex_trylock_common+0x10/0x10 [ 558.816969][T16477] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 558.831167][T16477] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 558.833647][T16477] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 558.835598][T16477] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 558.837771][T16477] ? genl_get_cmd+0x195/0x580 [ 558.839487][T16477] ? bpf_lsm_capable+0x9/0x10 [ 558.841177][T16477] ? security_capable+0x7e/0x260 [ 558.842963][T16477] ? ns_capable+0xd7/0x110 [ 558.844575][T16477] genl_rcv_msg+0x565/0x800 [ 558.846234][T16477] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.848001][T16477] ? __pfx_mptcp_pm_nl_set_flags_doit+0x10/0x10 [ 558.850216][T16477] ? __pfx___lock_acquire+0x10/0x10 [ 558.852124][T16477] netlink_rcv_skb+0x165/0x410 [ 558.853716][T16477] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.855521][T16477] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 558.857438][T16477] ? down_read+0xc9/0x330 [ 558.858992][T16477] ? __pfx_down_read+0x10/0x10 [ 558.860632][T16477] ? netlink_deliver_tap+0x1ae/0xca0 [ 558.862420][T16477] genl_rcv+0x28/0x40 [ 558.863873][T16477] netlink_unicast+0x53c/0x7f0 [ 558.865601][T16477] ? __pfx_netlink_unicast+0x10/0x10 [ 558.867492][T16477] ? __phys_addr_symbol+0x30/0x80 [ 558.869276][T16477] ? __check_object_size+0x4a1/0x710 [ 558.871196][T16477] netlink_sendmsg+0x8b8/0xd70 [ 558.872989][T16477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.874719][T16477] ____sys_sendmsg+0x9ae/0xb40 [ 558.876397][T16477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.878058][T16477] ? get_compat_msghdr+0x11b/0x170 [ 558.879412][T16477] ___sys_sendmsg+0x135/0x1e0 [ 558.880661][T16477] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.882033][T16477] ? __pfx_lock_release+0x10/0x10 [ 558.883358][T16477] ? trace_lock_acquire+0x14e/0x1f0 [ 558.884745][T16477] ? __fget_files+0x206/0x3a0 [ 558.886006][T16477] __sys_sendmsg+0x16e/0x220 [ 558.887232][T16477] ? __pfx___sys_sendmsg+0x10/0x10 [ 558.888597][T16477] __do_fast_syscall_32+0x73/0x120 [ 558.889954][T16477] do_fast_syscall_32+0x32/0x80 [ 558.891292][T16477] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.892967][T16477] RIP: 0023:0xf7ff1579 [ 558.894066][T16477] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 558.899045][T16477] RSP: 002b:00000000f517657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 558.901370][T16477] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000480 [ 558.903434][T16477] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.905508][T16477] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.908140][T16477] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 558.911117][T16477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.913468][T16477] [ 559.508073][T16508] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 559.513872][T16508] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 559.756487][ T35] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 559.917734][ T35] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 559.921301][ T35] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 559.924287][ T35] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 559.926757][ C0] usb 10-1: yurex_control_callback - control failed: -2 [ 559.928047][ T35] usb 12-1: config 0 interface 0 has no altsetting 0 [ 559.930166][ C0] usb 10-1: yurex_control_callback - control failed: -32 [ 559.935723][ T25] usb 10-1: USB disconnect, device number 36 [ 559.937926][ T35] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 559.937959][ T35] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 559.937982][ T35] usb 12-1: config 0 interface 0 has no altsetting 0 [ 559.948039][ T25] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 559.951962][ T35] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 559.954839][ T35] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 559.968608][ T35] usb 12-1: config 0 interface 0 has no altsetting 0 [ 559.972445][ T35] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 559.975408][ T35] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 559.979163][ T35] usb 12-1: config 0 interface 0 has no altsetting 0 [ 559.982243][ T35] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 559.985260][ T35] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 559.989090][ T35] usb 12-1: config 0 interface 0 has no altsetting 0 [ 559.992190][ T35] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 559.996922][ T35] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 560.000454][ T35] usb 12-1: config 0 interface 0 has no altsetting 0 [ 560.011093][ T35] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 560.014188][ T35] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 560.017863][ T35] usb 12-1: config 0 interface 0 has no altsetting 0 [ 560.020933][ T35] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 560.024009][ T35] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 560.028023][ T35] usb 12-1: config 0 interface 0 has no altsetting 0 [ 560.034624][ T35] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 560.043707][ T35] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 560.046817][ T35] usb 12-1: Product: syz [ 560.048358][ T35] usb 12-1: Manufacturer: syz [ 560.050007][ T35] usb 12-1: SerialNumber: syz [ 560.057165][ T35] usb 12-1: config 0 descriptor?? [ 560.063638][ T35] yurex 12-1:0.0: USB YUREX device now attached to Yurex #0 [ 560.082623][T16545] FAULT_INJECTION: forcing a failure. [ 560.082623][T16545] name failslab, interval 1, probability 0, space 0, times 0 [ 560.090252][T16545] CPU: 3 UID: 0 PID: 16545 Comm: syz.4.2696 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 560.093879][T16545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 560.097454][T16545] Call Trace: [ 560.098589][T16545] [ 560.099602][T16545] dump_stack_lvl+0x16c/0x1f0 [ 560.101206][T16545] should_fail_ex+0x497/0x5b0 [ 560.102783][T16545] ? fs_reclaim_acquire+0xae/0x150 [ 560.104497][T16545] should_failslab+0xc2/0x120 [ 560.106114][T16545] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 560.107926][T16545] ? getname_flags.part.0+0x4c/0x550 [ 560.109726][T16545] getname_flags.part.0+0x4c/0x550 [ 560.111492][T16545] getname_flags+0x93/0xf0 [ 560.113019][T16545] user_path_at+0x24/0x60 [ 560.114490][T16545] __ia32_sys_mount+0x1fb/0x310 [ 560.116150][T16545] ? __pfx___ia32_sys_mount+0x10/0x10 [ 560.117973][T16545] __do_fast_syscall_32+0x73/0x120 [ 560.119704][T16545] do_fast_syscall_32+0x32/0x80 [ 560.121360][T16545] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 560.123502][T16545] RIP: 0023:0xf7ff1579 [ 560.124905][T16545] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 560.131167][T16545] RSP: 002b:00000000f517657c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 560.133895][T16545] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000140 [ 560.136514][T16545] RDX: 0000000020003440 RSI: 0000000000000000 RDI: 00000000200001c0 [ 560.139149][T16545] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 560.141772][T16545] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 560.144406][T16545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 560.147062][T16545] [ 560.334869][T16558] input: syz0 as /devices/virtual/input/input112 [ 560.355861][T16558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2697'. [ 560.693327][T16571] can0: slcan on ptm0. [ 560.698719][T16571] netlink: 'syz.5.2700': attribute type 10 has an invalid length. [ 560.847832][T16570] can0 (unregistered): slcan off ptm0. [ 561.132634][T16589] 9pnet_fd: Insufficient options for proto=fd [ 561.204170][T16593] netlink: 'syz.4.2702': attribute type 4 has an invalid length. [ 561.206472][T16593] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2702'. [ 561.579390][T16600] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 561.589033][T16600] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 561.866739][ T6000] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 561.928119][T16604] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 561.932718][T16604] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 562.057197][ T6000] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 562.060640][ T6000] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.063664][ T6000] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.069365][ T6000] usb 6-1: config 0 interface 0 has no altsetting 0 [ 562.072561][ T6000] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.075624][ T6000] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.079552][ T6000] usb 6-1: config 0 interface 0 has no altsetting 0 [ 562.082655][ T6000] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.085688][ T6000] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.089647][ T6000] usb 6-1: config 0 interface 0 has no altsetting 0 [ 562.104394][ T6000] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.108044][ T6000] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.111693][ T6000] usb 6-1: config 0 interface 0 has no altsetting 0 [ 562.114743][ T6000] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.117855][ T6000] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.121485][ T6000] usb 6-1: config 0 interface 0 has no altsetting 0 [ 562.124574][ T6000] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.127786][ T6000] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.131373][ T6000] usb 6-1: config 0 interface 0 has no altsetting 0 [ 562.134307][ T6000] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.137481][ T6000] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.141069][ T6000] usb 6-1: config 0 interface 0 has no altsetting 0 [ 562.143967][ T6000] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.146994][ T6000] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.150544][ T6000] usb 6-1: config 0 interface 0 has no altsetting 0 [ 562.154183][ T6000] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 562.157226][ T6000] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 562.159954][ T6000] usb 6-1: Product: syz [ 562.161348][ T6000] usb 6-1: Manufacturer: syz [ 562.162887][ T6000] usb 6-1: SerialNumber: syz [ 562.165346][ T6000] usb 6-1: config 0 descriptor?? [ 562.169420][ T6000] yurex 6-1:0.0: USB YUREX device now attached to Yurex #1 [ 562.177528][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.179234][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.196427][ T5992] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 562.316406][ T35] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 562.336663][ C3] usb 12-1: yurex_control_callback - control failed: -2 [ 562.338631][ C3] usb 12-1: yurex_control_callback - control failed: -32 [ 562.341329][ T6000] usb 12-1: USB disconnect, device number 4 [ 562.343840][ T6000] yurex 12-1:0.0: USB YUREX #0 now disconnected [ 562.367137][ T5992] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 562.370674][ T5992] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.373725][ T5992] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.377699][ T5992] usb 10-1: config 0 interface 0 has no altsetting 0 [ 562.379311][ T25] usb 6-1: USB disconnect, device number 34 [ 562.380884][ T5992] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.384434][ T25] yurex 6-1:0.0: USB YUREX #1 now disconnected [ 562.384603][ T5992] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.390309][ T5992] usb 10-1: config 0 interface 0 has no altsetting 0 [ 562.393745][ T5992] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.396889][ T5992] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.400529][ T5992] usb 10-1: config 0 interface 0 has no altsetting 0 [ 562.403490][ T5992] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.406555][ T5992] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.410206][ T5992] usb 10-1: config 0 interface 0 has no altsetting 0 [ 562.413280][ T5992] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.416414][ T5992] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.420057][ T5992] usb 10-1: config 0 interface 0 has no altsetting 0 [ 562.423182][ T5992] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.426208][ T5992] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.430016][ T5992] usb 10-1: config 0 interface 0 has no altsetting 0 [ 562.433314][ T5992] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.436527][ T5992] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.439478][ T5992] usb 10-1: config 0 interface 0 has no altsetting 0 [ 562.441921][ T5992] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.444270][ T5992] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.447393][ T5992] usb 10-1: config 0 interface 0 has no altsetting 0 [ 562.450576][ T5992] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 562.452980][ T5992] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 562.455136][ T5992] usb 10-1: Product: syz [ 562.456258][ T5992] usb 10-1: Manufacturer: syz [ 562.457876][ T5992] usb 10-1: SerialNumber: syz [ 562.461039][ T5992] usb 10-1: config 0 descriptor?? [ 562.464637][ T5992] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 562.476448][ T35] usb 9-1: Using ep0 maxpacket: 16 [ 562.478995][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.481657][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.484137][ T35] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 562.487343][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.490262][ T35] usb 9-1: config 0 descriptor?? [ 562.754007][ C1] usb 10-1: yurex_control_callback - control failed: -2 [ 562.755964][ C1] usb 10-1: yurex_control_callback - control failed: -32 [ 562.759527][T15921] usb 10-1: USB disconnect, device number 37 [ 562.762000][T15921] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 562.946792][T16613] sp0: Synchronizing with TNC [ 563.457424][T16624] input: syz0 as /devices/virtual/input/input113 [ 563.497180][ T35] usbhid 9-1:0.0: can't add hid device: -71 [ 563.497331][T16624] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2710'. [ 563.498878][ T35] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 563.510942][ T35] usb 9-1: USB disconnect, device number 26 [ 563.623818][T16636] net_ratelimit: 10 callbacks suppressed [ 563.623830][T16636] openvswitch: netlink: Message has 1255 unknown bytes. [ 563.627236][T16636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.844299][T16649] syz.4.2717: attempt to access beyond end of device [ 563.844299][T16649] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 563.849170][T16649] syz.4.2717: attempt to access beyond end of device [ 563.849170][T16649] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 563.852750][T16649] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 563.855725][T16649] syz.4.2717: attempt to access beyond end of device [ 563.855725][T16649] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 563.860188][T16649] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 563.869519][T16649] syz.4.2717: attempt to access beyond end of device [ 563.869519][T16649] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 563.874804][T16649] syz.4.2717: attempt to access beyond end of device [ 563.874804][T16649] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 563.880634][T16649] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 563.888916][T16649] syz.4.2717: attempt to access beyond end of device [ 563.888916][T16649] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 563.893602][T16649] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 563.897890][T16649] syz.4.2717: attempt to access beyond end of device [ 563.897890][T16649] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 563.902577][T16649] syz.4.2717: attempt to access beyond end of device [ 563.902577][T16649] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 563.906141][T16649] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 563.909274][T16649] syz.4.2717: attempt to access beyond end of device [ 563.909274][T16649] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 563.912720][T16649] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 563.916114][T16649] syz.4.2717: attempt to access beyond end of device [ 563.916114][T16649] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 563.920399][T16649] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 563.924314][T16649] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 563.927151][T16649] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 564.707671][T16667] gtp0: entered promiscuous mode [ 564.709652][T16667] gtp0: entered allmulticast mode [ 565.677311][T16682] netlink: 'syz.5.2727': attribute type 2 has an invalid length. [ 565.677452][T16682] netlink: 'syz.5.2727': attribute type 5 has an invalid length. [ 565.882489][T16696] FAULT_INJECTION: forcing a failure. [ 565.882489][T16696] name failslab, interval 1, probability 0, space 0, times 0 [ 565.886720][T16696] CPU: 3 UID: 0 PID: 16696 Comm: syz.5.2731 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 565.889548][T16696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 565.893181][T16696] Call Trace: [ 565.894384][T16696] [ 565.895237][T16696] dump_stack_lvl+0x16c/0x1f0 [ 565.896458][T16696] should_fail_ex+0x497/0x5b0 [ 565.897634][T16696] ? fs_reclaim_acquire+0xae/0x150 [ 565.899318][T16696] should_failslab+0xc2/0x120 [ 565.901060][T16696] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 565.903092][T16696] ? __d_alloc+0x35/0x8c0 [ 565.904726][T16696] __d_alloc+0x35/0x8c0 [ 565.906302][T16696] d_alloc+0x4a/0x1e0 [ 565.907738][T16696] d_alloc_parallel+0xe9/0x12b0 [ 565.909138][T16696] ? __d_lookup+0x25c/0x4a0 [ 565.910418][T16696] ? trace_lock_acquire+0x14e/0x1f0 [ 565.912317][T16696] ? lookup_open.isra.0+0x229/0x14c0 [ 565.914218][T16696] ? __pfx_d_alloc_parallel+0x10/0x10 [ 565.915615][T16696] ? __d_lookup+0x266/0x4a0 [ 565.916794][T16696] lookup_open.isra.0+0xab5/0x14c0 [ 565.918156][T16696] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 565.919570][T16696] ? copy_huge_pmd+0x2210/0x2400 [ 565.921060][T16696] ? lock_acquire+0x2f/0xb0 [ 565.922412][T16696] ? path_openat+0x153e/0x2d60 [ 565.924133][T16696] ? copy_huge_pmd+0x2210/0x2400 [ 565.925894][T16696] ? __pfx_down_write+0x10/0x10 [ 565.927373][T16696] ? mnt_get_write_access+0x20c/0x300 [ 565.928965][T16696] path_openat+0x904/0x2d60 [ 565.930192][T16696] ? __pfx_path_openat+0x10/0x10 [ 565.931995][T16696] ? __pfx___lock_acquire+0x10/0x10 [ 565.933903][T16696] ? lock_acquire.part.0+0x11b/0x380 [ 565.935494][T16696] ? find_held_lock+0x2d/0x110 [ 565.936726][T16696] do_filp_open+0x20c/0x470 [ 565.937927][T16696] ? __pfx_do_filp_open+0x10/0x10 [ 565.939375][T16696] ? find_held_lock+0x2d/0x110 [ 565.940688][T16696] ? alloc_fd+0x41f/0x760 [ 565.941797][T16696] do_sys_openat2+0x17a/0x1e0 [ 565.943111][T16696] ? __pfx_do_sys_openat2+0x10/0x10 [ 565.944572][T16696] ? __fget_files+0x206/0x3a0 [ 565.946299][T16696] __ia32_compat_sys_openat+0x16e/0x210 [ 565.948256][T16696] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 565.950438][T16696] ? ksys_write+0x1ba/0x250 [ 565.952107][T16696] __do_fast_syscall_32+0x73/0x120 [ 565.953872][T16696] do_fast_syscall_32+0x32/0x80 [ 565.955609][T16696] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 565.957899][T16696] RIP: 0023:0xf740e579 [ 565.959380][T16696] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 565.966000][T16696] RSP: 002b:00000000f50f657c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 565.968958][T16696] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000100 [ 565.971793][T16696] RDX: 00000000000a8040 RSI: 0000000000000000 RDI: 0000000000000000 [ 565.974589][T16696] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 565.977346][T16696] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 565.979945][T16696] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 565.982800][T16696] [ 566.530595][T16707] siw: device registration error -23 [ 566.966090][T16709] netlink: 'syz.7.2735': attribute type 10 has an invalid length. [ 566.970560][T16709] bond0: (slave wlan1): Opening slave failed [ 567.157892][T16703] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 567.166641][T16703] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 567.169478][T16703] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 567.178060][T16703] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 567.180414][T16703] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 567.251175][T16703] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 567.271149][T16715] input: syz0 as /devices/virtual/input/input114 [ 567.328852][T16716] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2737'. [ 568.406485][ T5951] Bluetooth: hci1: command 0x0c1a tx timeout [ 568.429141][T16748] FAULT_INJECTION: forcing a failure. [ 568.429141][T16748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.432713][T16748] CPU: 1 UID: 0 PID: 16748 Comm: syz.4.2745 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 568.435333][T16748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 568.438209][T16748] Call Trace: [ 568.439079][T16748] [ 568.439884][T16748] dump_stack_lvl+0x16c/0x1f0 [ 568.441219][T16748] should_fail_ex+0x497/0x5b0 [ 568.442458][T16748] _copy_to_user+0x32/0xd0 [ 568.443637][T16748] vivid_radio_rx_read+0x7c9/0xb90 [ 568.444998][T16748] ? __pfx_vivid_radio_rx_read+0x10/0x10 [ 568.446680][T16748] vivid_radio_read+0x86/0xc0 [ 568.448124][T16748] v4l2_read+0x226/0x360 [ 568.449239][T16748] ? __pfx_v4l2_read+0x10/0x10 [ 568.450462][T16748] vfs_read+0x1df/0xbe0 [ 568.451561][T16748] ? __fget_files+0x1fc/0x3a0 [ 568.452791][T16748] ? __pfx_lock_release+0x10/0x10 [ 568.454112][T16748] ? __pfx_vfs_read+0x10/0x10 [ 568.455342][T16748] ? lock_acquire+0x2f/0xb0 [ 568.456514][T16748] ? __fget_files+0x40/0x3a0 [ 568.457771][T16748] ? __fget_files+0x206/0x3a0 [ 568.459005][T16748] ksys_read+0x12b/0x250 [ 568.460115][T16748] ? __pfx_ksys_read+0x10/0x10 [ 568.461427][T16748] __do_fast_syscall_32+0x73/0x120 [ 568.462764][T16748] do_fast_syscall_32+0x32/0x80 [ 568.464033][T16748] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 568.465729][T16748] RIP: 0023:0xf7ff1579 [ 568.466858][T16748] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 568.471849][T16748] RSP: 002b:00000000f515557c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 568.474133][T16748] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002900 [ 568.476198][T16748] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 568.478254][T16748] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 568.480298][T16748] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 568.482378][T16748] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 568.484423][T16748] [ 568.592615][T16751] siw: device registration error -23 [ 569.216501][ T5951] Bluetooth: hci2: command 0x0c1a tx timeout [ 569.286559][ T5951] Bluetooth: hci3: command 0xfc11 tx timeout [ 569.288766][ T5945] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 569.374070][T16763] can0: slcan on ptm0. [ 569.379425][T16763] netlink: 'syz.1.2751': attribute type 10 has an invalid length. [ 569.527356][T16762] can0 (unregistered): slcan off ptm0. [ 569.527575][T16761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.979475][T16796] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.154619][T16796] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.257898][T16796] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.312705][T16796] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.399872][T16796] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.405516][T16796] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.418814][T16796] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.424584][T16796] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.486690][ T5945] Bluetooth: hci1: command 0x0c1a tx timeout [ 570.966515][T16826] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2764'. [ 570.968939][T16826] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2764'. [ 571.287079][ T5951] Bluetooth: hci2: command 0x0c1a tx timeout [ 571.296484][T16833] input: syz0 as /devices/virtual/input/input115 [ 571.327015][T16833] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2766'. [ 571.570271][T16836] [U] : [ 571.571858][T16836] [U] [ 571.572879][T16836] [U] [ 571.573879][T16836] [U] [ 571.574902][T16836] [U] [ 571.575908][T16836] [U] [ 571.577052][T16836] [U] [ 571.578056][T16836] [U] [ 571.594638][T16836] [U] [ 571.595689][T16836] [U] [ 571.596770][T16836] [U] [ 571.597787][T16836] [U] [ 571.598816][T16836] [U] [ 571.599818][T16836] [U] [ 571.600088][T16838] FAULT_INJECTION: forcing a failure. [ 571.600088][T16838] name failslab, interval 1, probability 0, space 0, times 0 [ 571.600853][T16836] [U] [ 571.605279][T16838] CPU: 2 UID: 0 PID: 16838 Comm: syz.5.2768 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 571.606290][T16836] [U] [ 571.610199][T16838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 571.615061][T16838] Call Trace: [ 571.616279][T16838] [ 571.617362][T16838] dump_stack_lvl+0x16c/0x1f0 [ 571.619079][T16838] should_fail_ex+0x497/0x5b0 [ 571.620793][T16838] ? fs_reclaim_acquire+0xae/0x150 [ 571.623182][T16838] should_failslab+0xc2/0x120 [ 571.624899][T16838] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 571.626832][T16838] ? skb_clone+0x190/0x3f0 [ 571.628457][T16838] skb_clone+0x190/0x3f0 [ 571.630009][T16838] nfnetlink_rcv_batch+0x1d9/0x24e0 [ 571.631929][T16838] ? hlock_class+0x4e/0x130 [ 571.633560][T16838] ? mark_lock+0xb5/0xc60 [ 571.635150][T16838] ? hlock_class+0x4e/0x130 [ 571.636273][T16836] [U] [ 571.636780][T16838] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 571.637535][T16836] [U] [ 571.639501][T16838] ? stack_depot_save_flags+0x28/0x900 [ 571.640267][T16836] [U] [ 571.642168][T16838] ? __pfx_mark_lock+0x10/0x10 [ 571.642909][T16836] [U] [ 571.644662][T16838] ? hlock_class+0x4e/0x130 [ 571.645386][T16836] [U] [ 571.646998][T16838] ? __lock_acquire+0xcc5/0x3c40 [ 571.647709][T16836] [U] [ 571.649485][T16838] ? __nla_validate_parse+0x605/0x2b10 [ 571.650177][T16836] [U] [ 571.652115][T16838] ? __pfx_aa_get_newest_label+0x10/0x10 [ 571.652822][T16836] [U] [ 571.654852][T16838] ? __pfx___nla_validate_parse+0x10/0x10 [ 571.656541][T16836] [U] [ 571.657599][T16838] ? apparmor_capable+0x114/0x1d0 [ 571.658326][T16836] [U] [ 571.660105][T16838] ? __nla_parse+0x40/0x60 [ 571.660818][T16836] [U] [ 571.662405][T16838] nfnetlink_rcv+0x3c3/0x430 [ 571.663149][T16836] [U] [ 571.664882][T16838] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 571.665631][T16836] [U] [ 571.667445][T16838] netlink_unicast+0x53c/0x7f0 [ 571.668188][T16836] [U] [ 571.669893][T16838] ? __pfx_netlink_unicast+0x10/0x10 [ 571.670602][T16836] [U] [ 571.672467][T16838] ? __phys_addr_symbol+0x30/0x80 [ 571.673460][T16836] [U] [ 571.675229][T16838] ? __check_object_size+0x4a1/0x710 [ 571.676851][T16836] [U] [ 571.678149][T16838] netlink_sendmsg+0x8b8/0xd70 [ 571.678862][T16836] [U] [ 571.680559][T16838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.681265][T16836] [U] [ 571.683185][T16838] ____sys_sendmsg+0x9ae/0xb40 [ 571.683902][T16836] [U] [ 571.685605][T16838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 571.686319][T16836] [U] [ 571.688204][T16838] ? get_compat_msghdr+0x11b/0x170 [ 571.688951][T16836] [U] [ 571.690784][T16838] ___sys_sendmsg+0x135/0x1e0 [ 571.691504][T16836] [U] [ 571.693182][T16838] ? __pfx____sys_sendmsg+0x10/0x10 [ 571.694166][T16836] [U] [ 571.695917][T16838] ? __pfx_lock_release+0x10/0x10 [ 571.697231][T16836] [U] [ 571.698676][T16838] ? trace_lock_acquire+0x14e/0x1f0 [ 571.699391][T16836] [U] [ 571.701240][T16838] ? __fget_files+0x206/0x3a0 [ 571.701969][T16836] [U] [ 571.703668][T16838] __sys_sendmsg+0x16e/0x220 [ 571.704386][T16836] [U] [ 571.706032][T16838] ? __pfx___sys_sendmsg+0x10/0x10 [ 571.706748][T16836] [U] [ 571.708579][T16838] __do_fast_syscall_32+0x73/0x120 [ 571.709274][T16836] [U] [ 571.711131][T16838] do_fast_syscall_32+0x32/0x80 [ 571.711849][T16836] [U] [ 571.713610][T16838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 571.714613][T16836] [U] [ 571.716825][T16838] RIP: 0023:0xf740e579 [ 571.717828][T16836] [U] [ 571.719016][T16838] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 571.719729][T16836] [U] [ 571.726539][T16838] RSP: 002b:00000000f50f657c EFLAGS: 00000292 [ 571.727256][T16836] [U] [ 571.727273][T16836] [U] [ 571.729447][T16838] ORIG_RAX: 0000000000000172 [ 571.730159][T16836] [U] [ 571.731124][T16838] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 571.732337][T16836] [U] [ 571.733301][T16838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 571.735304][T16836] [U] [ 571.736263][T16838] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 571.738267][T16836] [U] [ 571.739231][T16838] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 571.741377][T16836] [U] [ 571.742208][T16838] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 571.744260][T16836] [U] [ 571.745252][T16838] [ 571.747284][T16836] [U] [ 571.750282][T16836] [U] [ 571.751048][T16836] [U] [ 571.751929][T16836] [U] [ 571.752922][T16836] [U] [ 571.753910][T16836] [U] [ 571.756032][T16836] [U] [ 571.757120][T16836] [U] [ 571.758051][T16836] [U] [ 571.758999][T16836] [U] [ 571.759719][T16836] [U] [ 571.760582][T16836] [U] [ 571.761391][T16836] [U] [ 571.762111][T16836] [U] [ 571.765193][T16836] [U] [ 571.765958][T16836] [U] [ 571.766686][T16836] [U] [ 571.767415][T16836] [U] [ 571.768131][T16836] [U] [ 571.768877][T16836] [U] [ 571.769606][T16836] [U] [ 571.770328][T16836] [U] [ 571.772184][T16836] [U] [ 571.772972][T16836] [U] [ 571.773693][T16836] [U] [ 571.774409][T16836] [U] [ 571.775128][T16836] [U] [ 571.775852][T16836] [U] [ 571.776592][T16836] [U] [ 571.777060][T16844] qnx4: no qnx4 filesystem (no root dir). [ 571.777314][T16836] [U] [ 571.778629][T16836] [U] [ 571.781073][T16836] [U] [ 571.781790][T16836] [U] [ 571.782676][T16836] [U] [ 571.783384][T16836] [U] [ 571.784102][T16836] [U] [ 571.784834][T16836] [U] [ 571.785560][T16836] [U] [ 571.786303][T16836] [U] [ 571.787032][T16836] [U] [ 571.787750][T16836] [U] [ 571.788467][T16836] [U] [ 571.789188][T16836] [U] [ 571.789916][T16836] [U] [ 571.790633][T16836] [U] [ 571.791359][T16836] [U] [ 571.792288][T16836] [U] [ 571.793247][T16836] [U] [ 571.793971][T16836] [U] [ 571.794686][T16836] [U] [ 571.795600][T16836] [U] [ 571.796637][T16836] [U] [ 571.797675][T16836] [U] [ 571.798680][T16836] [U] [ 571.799918][T16836] [U] [ 571.800826][T16836] [U] [ 571.801562][T16836] [U] [ 571.802277][T16836] [U] [ 571.803033][T16836] [U] [ 571.803745][T16836] [U] [ 571.804462][T16836] [U] [ 571.805209][T16836] [U] [ 571.805983][T16836] [U] [ 571.879477][T16851] siw: device registration error -23 [ 572.124364][T16857] FAULT_INJECTION: forcing a failure. [ 572.124364][T16857] name failslab, interval 1, probability 0, space 0, times 0 [ 572.128379][T16857] CPU: 1 UID: 0 PID: 16857 Comm: syz.5.2774 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 572.131058][T16857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 572.133842][T16857] Call Trace: [ 572.134717][T16857] [ 572.135487][T16857] dump_stack_lvl+0x16c/0x1f0 [ 572.136778][T16857] should_fail_ex+0x497/0x5b0 [ 572.138007][T16857] ? fs_reclaim_acquire+0xae/0x150 [ 572.139314][T16857] should_failslab+0xc2/0x120 [ 572.140518][T16857] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 572.142007][T16857] ? __alloc_skb+0x2b3/0x380 [ 572.143183][T16857] __alloc_skb+0x2b3/0x380 [ 572.144287][T16857] ? __pfx___alloc_skb+0x10/0x10 [ 572.145555][T16857] ? __phys_addr_symbol+0x30/0x80 [ 572.146848][T16857] pfkey_sendmsg+0x47f/0x840 [ 572.148043][T16857] ____sys_sendmsg+0x9ae/0xb40 [ 572.149292][T16857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.150654][T16857] ? get_compat_msghdr+0x11b/0x170 [ 572.151981][T16857] ___sys_sendmsg+0x135/0x1e0 [ 572.153291][T16857] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.154752][T16857] ? __pfx_lock_release+0x10/0x10 [ 572.156095][T16857] ? trace_lock_acquire+0x14e/0x1f0 [ 572.157449][T16857] ? __fget_files+0x206/0x3a0 [ 572.158665][T16857] __sys_sendmsg+0x16e/0x220 [ 572.159872][T16857] ? __pfx___sys_sendmsg+0x10/0x10 [ 572.161250][T16857] __do_fast_syscall_32+0x73/0x120 [ 572.162580][T16857] do_fast_syscall_32+0x32/0x80 [ 572.163920][T16857] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 572.165580][T16857] RIP: 0023:0xf740e579 [ 572.166657][T16857] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 572.171516][T16857] RSP: 002b:00000000f50d557c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 572.173625][T16857] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 572.175633][T16857] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 572.177686][T16857] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 572.179701][T16857] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 572.181717][T16857] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 572.183715][T16857] [ 572.189044][T16866] siw: device registration error -23 [ 572.237833][T16868] can0: slcan on ptm0. [ 572.242426][T16868] netlink: 'syz.5.2775': attribute type 10 has an invalid length. [ 572.436550][T16867] can0 (unregistered): slcan off ptm0. [ 572.566809][ T5951] Bluetooth: hci1: command 0x0c1a tx timeout [ 572.796401][ T57] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 572.946442][ T57] usb 10-1: Using ep0 maxpacket: 16 [ 572.950269][ T57] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.953366][ T57] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.955623][ T57] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 572.958902][ T57] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 572.961045][ T57] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.963785][ T57] usb 10-1: config 0 descriptor?? [ 573.012546][T16897] netlink: 'syz.4.2781': attribute type 1 has an invalid length. [ 573.316609][T16909] netlink: 'syz.4.2782': attribute type 1 has an invalid length. [ 573.321065][T16909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2782'. [ 573.366501][ T5951] Bluetooth: hci2: command 0x0c1a tx timeout [ 573.379044][ T57] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 573.380700][ T57] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 573.382352][ T57] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 573.383925][ T57] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 573.385556][ T57] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 573.388241][ T57] input: HID 0955:7214 Haptics as /devices/virtual/input/input116 [ 573.410067][ T57] shield 0003:0955:7214.000E: Registered Thunderstrike controller [ 573.413982][ T57] shield 0003:0955:7214.000E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 573.583084][T14860] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 573.586943][T14860] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 573.590307][ T57] usb 10-1: USB disconnect, device number 38 [ 573.594080][T14860] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 573.598364][T14860] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 573.862518][T16921] can0: slcan on ptm0. [ 573.868776][T16921] netlink: 'syz.1.2785': attribute type 10 has an invalid length. [ 573.870718][T16917] netlink: 'syz.7.2784': attribute type 10 has an invalid length. [ 573.873349][T16917] bond0: (slave wlan1): Opening slave failed [ 574.087934][T16920] can0 (unregistered): slcan off ptm0. [ 574.266688][T16955] netlink: 'syz.4.2790': attribute type 1 has an invalid length. [ 574.381259][T16948] netlink: 'syz.7.2789': attribute type 10 has an invalid length. [ 574.383923][T16948] bond0: (slave wlan1): Opening slave failed [ 574.394785][T16962] FAULT_INJECTION: forcing a failure. [ 574.394785][T16962] name failslab, interval 1, probability 0, space 0, times 0 [ 574.398461][T16962] CPU: 0 UID: 0 PID: 16962 Comm: syz.1.2793 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 574.401200][T16962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 574.403959][T16962] Call Trace: [ 574.404822][T16962] [ 574.405583][T16962] dump_stack_lvl+0x16c/0x1f0 [ 574.406851][T16962] should_fail_ex+0x497/0x5b0 [ 574.408080][T16962] ? fs_reclaim_acquire+0xae/0x150 [ 574.409420][T16962] should_failslab+0xc2/0x120 [ 574.410650][T16962] __kmalloc_noprof+0xce/0x4f0 [ 574.411907][T16962] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 574.413360][T16962] ? tomoyo_realpath_from_path+0xbf/0x710 [ 574.414840][T16962] tomoyo_realpath_from_path+0xbf/0x710 [ 574.416266][T16962] ? tomoyo_path_number_perm+0x235/0x5b0 [ 574.417717][T16962] tomoyo_path_number_perm+0x248/0x5b0 [ 574.419118][T16962] ? tomoyo_path_number_perm+0x235/0x5b0 [ 574.420565][T16962] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 574.422129][T16962] ? __pfx_lock_release+0x10/0x10 [ 574.423414][T16962] ? trace_lock_acquire+0x14e/0x1f0 [ 574.424710][T16962] ? lock_acquire+0x2f/0xb0 [ 574.425893][T16962] ? __fget_files+0x40/0x3a0 [ 574.427048][T16962] ? __fget_files+0x206/0x3a0 [ 574.428214][T16962] security_file_ioctl_compat+0x9b/0x240 [ 574.429655][T16962] __do_compat_sys_ioctl+0x4e/0x2c0 [ 574.430998][T16962] __do_fast_syscall_32+0x73/0x120 [ 574.432338][T16962] do_fast_syscall_32+0x32/0x80 [ 574.433609][T16962] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 574.435242][T16962] RIP: 0023:0xf7fe5579 [ 574.436298][T16962] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 574.441216][T16962] RSP: 002b:00000000f516657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 574.443356][T16962] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005441 [ 574.445395][T16962] RDX: 000000000000786d RSI: 0000000000000000 RDI: 0000000000000000 [ 574.447416][T16962] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 574.449456][T16962] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 574.451495][T16962] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 574.453545][T16962] [ 574.461713][T16962] ERROR: Out of memory at tomoyo_realpath_from_path. [ 574.618652][T16972] FAULT_INJECTION: forcing a failure. [ 574.618652][T16972] name failslab, interval 1, probability 0, space 0, times 0 [ 574.625072][T16972] CPU: 2 UID: 0 PID: 16972 Comm: syz.4.2797 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 574.628230][T16972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 574.631335][T16972] Call Trace: [ 574.632409][T16972] [ 574.633239][T16972] dump_stack_lvl+0x16c/0x1f0 [ 574.634643][T16972] should_fail_ex+0x497/0x5b0 [ 574.636134][T16972] ? fs_reclaim_acquire+0xae/0x150 [ 574.637638][T16972] should_failslab+0xc2/0x120 [ 574.639141][T16972] __kmalloc_noprof+0xce/0x4f0 [ 574.640491][T16972] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 574.642241][T16972] ? tomoyo_realpath_from_path+0xbf/0x710 [ 574.643803][T16972] tomoyo_realpath_from_path+0xbf/0x710 [ 574.645532][T16972] ? tomoyo_path_number_perm+0x235/0x5b0 [ 574.647164][T16972] tomoyo_path_number_perm+0x248/0x5b0 [ 574.648931][T16972] ? tomoyo_path_number_perm+0x235/0x5b0 [ 574.650476][T16972] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 574.652426][T16972] ? __pfx_lock_release+0x10/0x10 [ 574.653861][T16972] ? trace_lock_acquire+0x14e/0x1f0 [ 574.655592][T16972] ? lock_acquire+0x2f/0xb0 [ 574.656891][T16972] ? __fget_files+0x40/0x3a0 [ 574.658452][T16972] ? __fget_files+0x206/0x3a0 [ 574.659810][T16972] security_file_ioctl_compat+0x9b/0x240 [ 574.661647][T16972] __do_compat_sys_ioctl+0x4e/0x2c0 [ 574.663210][T16972] __do_fast_syscall_32+0x73/0x120 [ 574.664972][T16972] do_fast_syscall_32+0x32/0x80 [ 574.666404][T16972] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 574.668540][T16972] RIP: 0023:0xf7ff1579 [ 574.669884][T16972] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 574.674833][T16972] RSP: 002b:00000000f517657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 574.677072][T16972] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005437 [ 574.679175][T16972] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 574.681238][T16972] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 574.683271][T16972] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 574.685311][T16972] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 574.687359][T16972] [ 574.688264][ C2] vkms_vblank_simulate: vblank timer overrun [ 574.698550][T16971] netlink: 'syz.7.2796': attribute type 4 has an invalid length. [ 574.775916][T16972] ERROR: Out of memory at tomoyo_realpath_from_path. [ 575.287767][T16994] siw: device registration error -23 [ 575.446419][ T5951] Bluetooth: hci2: command 0x0c1a tx timeout [ 575.572173][ T39] audit: type=1326 audit(1733703554.596:74398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16999 comm="syz.7.2804" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa8579 code=0x0 [ 575.628637][T16997] netlink: 'syz.5.2803': attribute type 10 has an invalid length. [ 575.822686][T17009] binder: 17008:17009 ioctl c018620c 20000500 returned -1 [ 575.867936][T17012] siw: device registration error -23 [ 576.225828][T17025] input: syz0 as /devices/virtual/input/input117 [ 576.660215][T17034] netlink: 'syz.4.2814': attribute type 10 has an invalid length. [ 576.662565][T17034] bond0: (slave wlan1): Opening slave failed [ 577.690660][T17085] input: syz0 as /devices/virtual/input/input118 [ 577.740700][T17079] netlink: 'syz.5.2826': attribute type 10 has an invalid length. [ 577.956525][ T57] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 578.152011][ T57] usb 9-1: config 0 has an invalid interface number: 241 but max is 0 [ 578.157247][ T57] usb 9-1: config 0 has no interface number 0 [ 578.159860][ T57] usb 9-1: config 0 interface 241 has no altsetting 0 [ 578.164140][ T57] usb 9-1: New USB device found, idVendor=0ace, idProduct=1611, bcdDevice=c4.63 [ 578.167933][ T57] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.170801][ T57] usb 9-1: Product: syz [ 578.172352][ T57] usb 9-1: Manufacturer: syz [ 578.174043][ T57] usb 9-1: SerialNumber: syz [ 578.187605][ T57] usb 9-1: config 0 descriptor?? [ 578.470149][T17111] FAULT_INJECTION: forcing a failure. [ 578.470149][T17111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.479869][T17111] CPU: 3 UID: 0 PID: 17111 Comm: syz.1.2831 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 578.483878][T17111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 578.487348][T17111] Call Trace: [ 578.488512][T17111] [ 578.489603][T17111] dump_stack_lvl+0x16c/0x1f0 [ 578.490999][T17111] should_fail_ex+0x497/0x5b0 [ 578.492204][T17111] _copy_from_user+0x2e/0xd0 [ 578.493418][T17111] get_compat_msghdr+0xa8/0x170 [ 578.494833][T17111] ? __pfx_get_compat_msghdr+0x10/0x10 [ 578.496790][T17111] ___sys_sendmsg+0x1b0/0x1e0 [ 578.498473][T17111] ? __pfx____sys_sendmsg+0x10/0x10 [ 578.500307][T17111] ? __pfx_lock_release+0x10/0x10 [ 578.502149][T17111] ? trace_lock_acquire+0x14e/0x1f0 [ 578.503912][T17111] ? __fget_files+0x206/0x3a0 [ 578.505597][T17111] __sys_sendmsg+0x16e/0x220 [ 578.507088][T17111] ? __pfx___sys_sendmsg+0x10/0x10 [ 578.508546][T17111] __do_fast_syscall_32+0x73/0x120 [ 578.510293][T17111] do_fast_syscall_32+0x32/0x80 [ 578.511979][T17111] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 578.514197][T17111] RIP: 0023:0xf7fe5579 [ 578.515610][T17111] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 578.521809][T17111] RSP: 002b:00000000f516657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 578.524648][T17111] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000280 [ 578.527186][T17111] RDX: 0000000004000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 578.529955][T17111] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 578.532624][T17111] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 578.535240][T17111] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.537236][T17111] [ 578.918023][ T8] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 578.974704][T17125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2834'. [ 579.076423][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 579.080655][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.083997][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.089318][ T8] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 579.093416][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.096685][ T8] usb 6-1: config 0 descriptor?? [ 579.244000][ T57] cdc_acm 9-1:0.241: skipping garbage [ 579.253450][ T57] usb 9-1: USB disconnect, device number 27 [ 579.296734][T17133] input: syz0 as /devices/virtual/input/input119 [ 579.336681][T17133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2837'. [ 579.357620][T17135] can0: slcan on ptm0. [ 579.364613][T17135] netlink: 'syz.7.2838': attribute type 10 has an invalid length. [ 579.382458][T17135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.405556][T17135] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 579.436069][T17135] batman_adv: batadv0: Adding interface: dummy0 [ 579.455228][T17135] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.514237][T17135] batman_adv: batadv0: Interface activated: dummy0 [ 579.555206][T17137] batadv0: mtu less than device minimum [ 579.578156][T17137] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 579.583306][T17137] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 579.588534][T17137] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 579.593757][T17137] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 579.598729][T17137] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 579.602462][T17137] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 579.607436][T17137] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 579.612562][T17137] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 579.618075][T17137] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 579.790236][T17134] can0 (unregistered): slcan off ptm0. [ 579.950810][T17153] xt_connbytes: Forcing CT accounting to be enabled [ 579.953439][T17153] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not '' [ 579.967960][T17153] input: syz0 as /devices/virtual/input/input120 [ 580.029319][T17156] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 580.046865][T17156] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 580.118242][ T8] usbhid 6-1:0.0: can't add hid device: -71 [ 580.119917][ T8] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 580.127260][ T8] usb 6-1: USB disconnect, device number 35 [ 580.241406][T17170] FAULT_INJECTION: forcing a failure. [ 580.241406][T17170] name failslab, interval 1, probability 0, space 0, times 0 [ 580.245778][T17170] CPU: 3 UID: 0 PID: 17170 Comm: syz.1.2846 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 580.249680][T17170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 580.253481][T17170] Call Trace: [ 580.254695][T17170] [ 580.255758][T17170] dump_stack_lvl+0x16c/0x1f0 [ 580.257428][T17170] should_fail_ex+0x497/0x5b0 [ 580.259004][T17170] ? fs_reclaim_acquire+0xae/0x150 [ 580.260746][T17170] should_failslab+0xc2/0x120 [ 580.262415][T17170] __kmalloc_noprof+0xce/0x4f0 [ 580.264156][T17170] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 580.266179][T17170] ? tomoyo_realpath_from_path+0xbf/0x710 [ 580.268227][T17170] tomoyo_realpath_from_path+0xbf/0x710 [ 580.270223][T17170] ? tomoyo_path_number_perm+0x235/0x5b0 [ 580.272229][T17170] tomoyo_path_number_perm+0x248/0x5b0 [ 580.274178][T17170] ? tomoyo_path_number_perm+0x235/0x5b0 [ 580.276175][T17170] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 580.278338][T17170] ? __pfx_lock_release+0x10/0x10 [ 580.280103][T17170] ? trace_lock_acquire+0x14e/0x1f0 [ 580.281940][T17170] ? lock_acquire+0x2f/0xb0 [ 580.283512][T17170] ? __fget_files+0x40/0x3a0 [ 580.285150][T17170] ? __fget_files+0x206/0x3a0 [ 580.286807][T17170] security_file_ioctl_compat+0x9b/0x240 [ 580.288758][T17170] __do_compat_sys_ioctl+0x4e/0x2c0 [ 580.290570][T17170] __do_fast_syscall_32+0x73/0x120 [ 580.292353][T17170] do_fast_syscall_32+0x32/0x80 [ 580.294156][T17170] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 580.296287][T17170] RIP: 0023:0xf7fe5579 [ 580.297681][T17170] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 580.304167][T17170] RSP: 002b:00000000f516657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 580.306993][T17170] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000001275 [ 580.309714][T17170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 580.312419][T17170] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 580.315117][T17170] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 580.317842][T17170] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 580.320555][T17170] [ 580.324100][T17170] ERROR: Out of memory at tomoyo_realpath_from_path. [ 580.363485][ T64] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 580.520150][ T64] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 580.524374][ T64] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.527638][ T64] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.531413][ T64] usb 10-1: config 0 interface 0 has no altsetting 0 [ 580.535155][ T64] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.538524][ T64] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.542185][ T64] usb 10-1: config 0 interface 0 has no altsetting 0 [ 580.545492][ T64] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.549570][ T64] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.553132][ T64] usb 10-1: config 0 interface 0 has no altsetting 0 [ 580.556398][ T64] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.559468][ T64] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.563037][ T64] usb 10-1: config 0 interface 0 has no altsetting 0 [ 580.566242][ T64] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.569591][ T64] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.573401][ T64] usb 10-1: config 0 interface 0 has no altsetting 0 [ 580.577093][ T64] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.580191][ T64] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.583901][ T64] usb 10-1: config 0 interface 0 has no altsetting 0 [ 580.587594][ T64] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.590727][ T64] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.594305][ T64] usb 10-1: config 0 interface 0 has no altsetting 0 [ 580.597820][ T64] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.601092][ T64] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.604693][ T64] usb 10-1: config 0 interface 0 has no altsetting 0 [ 580.609373][ T64] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 580.612491][ T64] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 580.615424][ T64] usb 10-1: Product: syz [ 580.617276][ T64] usb 10-1: Manufacturer: syz [ 580.618996][ T64] usb 10-1: SerialNumber: syz [ 580.624065][ T64] usb 10-1: config 0 descriptor?? [ 580.627448][ T64] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 581.483420][T17189] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 582.246457][ T5951] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 582.246737][ T5945] Bluetooth: hci3: command 0x1003 tx timeout [ 582.712597][T17220] input: syz0 as /devices/virtual/input/input121 [ 582.890232][ C2] usb 10-1: yurex_control_callback - control failed: -2 [ 582.893158][ C2] usb 10-1: yurex_control_callback - control failed: -32 [ 582.899043][ T8] usb 10-1: USB disconnect, device number 39 [ 582.905208][ T8] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 583.403400][T17222] netlink: 'syz.4.2860': attribute type 10 has an invalid length. [ 583.406557][T17222] bond0: (slave wlan1): Opening slave failed [ 583.499784][T17241] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 583.522990][T17241] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 583.549016][T17244] can0: slcan on ptm0. [ 583.553864][T17244] netlink: 'syz.1.2867': attribute type 10 has an invalid length. [ 583.864686][T17259] netlink: 'syz.4.2868': attribute type 10 has an invalid length. [ 583.982702][T15921] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 584.026893][T17242] can0 (unregistered): slcan off ptm0. [ 584.122603][T17269] overlay: Unknown parameter '/' [ 584.147218][T15921] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 584.151544][T15921] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 584.154872][T15921] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 584.165021][T15921] usb 10-1: config 0 interface 0 has no altsetting 0 [ 584.169631][T15921] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 584.172840][T15921] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 584.180039][T15921] usb 10-1: config 0 interface 0 has no altsetting 0 [ 584.186948][T15921] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 584.196502][T15921] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 584.200288][T15921] usb 10-1: config 0 interface 0 has no altsetting 0 [ 584.206951][T15921] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 584.212934][T15921] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 584.224297][T15921] usb 10-1: config 0 interface 0 has no altsetting 0 [ 584.239951][T15921] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 584.243103][T15921] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 584.247049][T15921] usb 10-1: config 0 interface 0 has no altsetting 0 [ 584.253004][T15921] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 584.256254][T15921] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 584.261260][T15921] usb 10-1: config 0 interface 0 has no altsetting 0 [ 584.264936][T15921] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 584.271010][T15921] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 584.279614][T15921] usb 10-1: config 0 interface 0 has no altsetting 0 [ 584.284855][T15921] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 584.290550][T15921] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 584.308137][T15921] usb 10-1: config 0 interface 0 has no altsetting 0 [ 584.318992][T15921] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 584.322339][T15921] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 584.325411][T15921] usb 10-1: Product: syz [ 584.327162][T15921] usb 10-1: Manufacturer: syz [ 584.328948][T15921] usb 10-1: SerialNumber: syz [ 584.332953][T15921] usb 10-1: config 0 descriptor?? [ 584.342618][T15921] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 584.610501][T17275] input: syz0 as /devices/virtual/input/input122 [ 584.992816][T17285] input: syz0 as /devices/virtual/input/input123 [ 585.091844][T17285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'. [ 585.398600][T17287] FAULT_INJECTION: forcing a failure. [ 585.398600][T17287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.402549][T17287] CPU: 1 UID: 0 PID: 17287 Comm: syz.4.2873 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 585.406182][T17287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 585.409914][T17287] Call Trace: [ 585.411137][T17287] [ 585.412173][T17287] dump_stack_lvl+0x16c/0x1f0 [ 585.413786][T17287] should_fail_ex+0x497/0x5b0 [ 585.415395][T17287] _copy_from_user+0x2e/0xd0 [ 585.417139][T17287] get_compat_msghdr+0xa8/0x170 [ 585.418944][T17287] ? __pfx_get_compat_msghdr+0x10/0x10 [ 585.420843][T17287] ___sys_sendmsg+0x1b0/0x1e0 [ 585.422475][T17287] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.424344][T17287] ? __pfx_lock_release+0x10/0x10 [ 585.426177][T17287] ? trace_lock_acquire+0x14e/0x1f0 [ 585.428041][T17287] ? __fget_files+0x206/0x3a0 [ 585.429651][T17287] __sys_sendmsg+0x16e/0x220 [ 585.431251][T17287] ? __pfx___sys_sendmsg+0x10/0x10 [ 585.433002][T17287] __do_fast_syscall_32+0x73/0x120 [ 585.434707][T17287] do_fast_syscall_32+0x32/0x80 [ 585.436327][T17287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 585.438424][T17287] RIP: 0023:0xf7ff1579 [ 585.439740][T17287] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 585.446024][T17287] RSP: 002b:00000000f517657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 585.448988][T17287] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000140 [ 585.451148][T17287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.453278][T17287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 585.455370][T17287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 585.458054][T17287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 585.460790][T17287] [ 585.797557][T17297] netlink: 'syz.7.2877': attribute type 1 has an invalid length. [ 586.503956][ C3] usb 10-1: yurex_control_callback - control failed: -2 [ 586.520278][T15921] usb 10-1: USB disconnect, device number 40 [ 586.526150][T15921] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 586.831041][T17316] input: syz0 as /devices/virtual/input/input124 [ 586.954861][T13485] kernel write not supported for file bpf-map (pid: 13485 comm: kworker/0:2) [ 587.120717][T17323] netlink: 'syz.1.2883': attribute type 10 has an invalid length. [ 587.124223][T17323] bond0: (slave wlan1): Opening slave failed [ 587.510096][T17329] bio_check_eod: 2 callbacks suppressed [ 587.510107][T17329] syz.1.2886: attempt to access beyond end of device [ 587.510107][T17329] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 587.515082][T17329] syz.1.2886: attempt to access beyond end of device [ 587.515082][T17329] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 587.518511][T17329] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 587.523107][T17329] syz.1.2886: attempt to access beyond end of device [ 587.523107][T17329] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 587.526844][T17329] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 587.529344][T17329] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 587.529531][T17331] netlink: 'syz.5.2887': attribute type 1 has an invalid length. [ 587.531297][T17329] UDF-fs: Scanning with blocksize 512 failed [ 587.531616][T17329] syz.1.2886: attempt to access beyond end of device [ 587.531616][T17329] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 587.539139][T17329] syz.1.2886: attempt to access beyond end of device [ 587.539139][T17329] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 587.542595][T17329] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 587.545081][T17329] syz.1.2886: attempt to access beyond end of device [ 587.545081][T17329] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 587.549156][T17329] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 587.551615][T17329] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 587.553633][T17329] UDF-fs: Scanning with blocksize 1024 failed [ 587.555445][T17329] syz.1.2886: attempt to access beyond end of device [ 587.555445][T17329] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 587.559636][T17329] syz.1.2886: attempt to access beyond end of device [ 587.559636][T17329] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 587.563018][T17329] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 587.565959][T17329] syz.1.2886: attempt to access beyond end of device [ 587.565959][T17329] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 587.569483][T17329] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 587.571984][T17329] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 587.573946][T17329] UDF-fs: Scanning with blocksize 2048 failed [ 587.575755][T17329] syz.1.2886: attempt to access beyond end of device [ 587.575755][T17329] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 587.579185][T17329] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 587.581668][T17329] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 587.584145][T17329] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 587.586161][T17329] UDF-fs: Scanning with blocksize 4096 failed [ 587.587791][T17329] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 587.682944][T17336] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 587.688848][T17336] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 587.871047][T17342] netlink: 'syz.5.2890': attribute type 1 has an invalid length. [ 587.936689][ T6000] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 588.087006][ T6000] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 588.089906][ T6000] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 588.092438][ T6000] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 588.095230][ T6000] usb 9-1: config 0 interface 0 has no altsetting 0 [ 588.097983][ T6000] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 588.100332][ T6000] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 588.103745][ T6000] usb 9-1: config 0 interface 0 has no altsetting 0 [ 588.106905][ T6000] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 588.109218][ T6000] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 588.111923][ T6000] usb 9-1: config 0 interface 0 has no altsetting 0 [ 588.114448][ T6000] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 588.116955][ T6000] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 588.119705][ T6000] usb 9-1: config 0 interface 0 has no altsetting 0 [ 588.122428][ T6000] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 588.125717][ T6000] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 588.128808][ T6000] usb 9-1: config 0 interface 0 has no altsetting 0 [ 588.131205][ T6000] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 588.133530][ T6000] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 588.136694][ T6000] usb 9-1: config 0 interface 0 has no altsetting 0 [ 588.139098][ T6000] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 588.141376][ T6000] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 588.144046][ T6000] usb 9-1: config 0 interface 0 has no altsetting 0 [ 588.147056][ T6000] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 588.149368][ T6000] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 588.152101][ T6000] usb 9-1: config 0 interface 0 has no altsetting 0 [ 588.155264][ T6000] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 588.157913][ T6000] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 588.160153][ T6000] usb 9-1: Product: syz [ 588.161310][ T6000] usb 9-1: Manufacturer: syz [ 588.162628][ T6000] usb 9-1: SerialNumber: syz [ 588.169886][ T6000] usb 9-1: config 0 descriptor?? [ 588.175276][ T6000] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 588.237257][T17349] netlink: 'syz.1.2892': attribute type 10 has an invalid length. [ 588.240039][T17349] bond0: (slave wlan1): Opening slave failed [ 588.248138][T17350] FAULT_INJECTION: forcing a failure. [ 588.248138][T17350] name failslab, interval 1, probability 0, space 0, times 0 [ 588.251139][T17350] CPU: 3 UID: 0 PID: 17350 Comm: syz.7.2893 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 588.254165][T17350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 588.257711][T17350] Call Trace: [ 588.258846][T17350] [ 588.259859][T17350] dump_stack_lvl+0x16c/0x1f0 [ 588.261443][T17350] should_fail_ex+0x497/0x5b0 [ 588.262947][T17350] ? fs_reclaim_acquire+0xae/0x150 [ 588.264623][T17350] should_failslab+0xc2/0x120 [ 588.266192][T17350] __kmalloc_node_noprof+0xd1/0x520 [ 588.267675][T17350] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 588.269002][T17350] __kvmalloc_node_noprof+0xad/0x1a0 [ 588.270277][T17350] __kvm_mmu_topup_memory_cache+0x451/0x600 [ 588.271762][T17350] mmu_topup_memory_caches+0x22/0xd0 [ 588.273096][T17350] kvm_mmu_load+0xda/0x21f0 [ 588.274192][T17350] ? kvm_lapic_sync_to_vapic+0x205/0x6c0 [ 588.275538][T17350] ? __pfx_kvm_mmu_load+0x10/0x10 [ 588.276776][T17350] ? vmx_update_cr8_intercept+0x1fc/0x370 [ 588.278145][T17350] vcpu_run+0x2e2e/0x4c00 [ 588.279202][T17350] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 588.280533][T17350] ? __pfx_vcpu_run+0x10/0x10 [ 588.281681][T17350] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 588.283059][T17350] ? rcu_is_watching+0x12/0xc0 [ 588.284210][T17350] ? trace_lock_acquire+0x14e/0x1f0 [ 588.285463][T17350] ? __local_bh_enable_ip+0xa4/0x120 [ 588.286728][T17350] ? lockdep_hardirqs_on+0x7c/0x110 [ 588.287962][T17350] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 588.289327][T17350] ? lock_acquire+0x2f/0xb0 [ 588.290415][T17350] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 588.291790][T17350] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 588.293452][T17350] kvm_vcpu_ioctl+0x6ce/0x1520 [ 588.295081][T17350] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 588.296613][T17350] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 588.297871][T17350] ? tomoyo_path_number_perm+0x190/0x5b0 [ 588.299201][T17350] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 588.300624][T17350] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 588.302035][T17350] ? do_vfs_ioctl+0x513/0x1950 [ 588.303224][T17350] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 588.304453][T17350] ? __pfx_lock_release+0x10/0x10 [ 588.305665][T17350] ? trace_lock_acquire+0x14e/0x1f0 [ 588.306952][T17350] kvm_vcpu_compat_ioctl+0x210/0x3f0 [ 588.308338][T17350] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 588.310220][T17350] ? __fget_files+0x206/0x3a0 [ 588.311814][T17350] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 588.313775][T17350] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 588.315542][T17350] __do_fast_syscall_32+0x73/0x120 [ 588.317257][T17350] do_fast_syscall_32+0x32/0x80 [ 588.318884][T17350] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 588.321021][T17350] RIP: 0023:0xf7fa8579 [ 588.322376][T17350] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 588.328600][T17350] RSP: 002b:00000000f512657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 588.331204][T17350] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 588.333772][T17350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 588.336336][T17350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 588.338968][T17350] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 588.341625][T17350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 588.344240][T17350] [ 588.453969][T17360] tipc: Enabling of bearer <dp:s> rejected, media not registered [ 588.554289][T17367] netlink: 'syz.7.2897': attribute type 1 has an invalid length. [ 588.663482][T17357] netlink: 'syz.1.2894': attribute type 1 has an invalid length. [ 589.084781][T17379] XFS (nbd7): SB validate failed with error -5. [ 589.255576][T17389] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 589.274148][T17389] evm: overlay not supported [ 589.849125][T17396] netlink: 'syz.1.2902': attribute type 10 has an invalid length. [ 589.851673][T17396] bond0: (slave wlan1): Opening slave failed [ 590.110931][T17408] can0: slcan on ptm0. [ 590.117023][T17408] netlink: 'syz.1.2907': attribute type 10 has an invalid length. [ 590.326500][T17420] netlink: 'syz.7.2908': attribute type 1 has an invalid length. [ 590.357571][T17407] can0 (unregistered): slcan off ptm0. [ 590.416740][ C2] usb 9-1: yurex_control_callback - control failed: -2 [ 590.418883][ C2] usb 9-1: yurex_control_callback - control failed: -32 [ 590.421476][ T25] usb 9-1: USB disconnect, device number 28 [ 590.423748][ T25] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 590.515279][T17430] input: syz1 as /devices/virtual/input/input125 [ 590.866138][T17436] FAULT_INJECTION: forcing a failure. [ 590.866138][T17436] name failslab, interval 1, probability 0, space 0, times 0 [ 590.871864][T17436] CPU: 2 UID: 0 PID: 17436 Comm: syz.1.2911 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 590.875440][T17436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 590.879036][T17436] Call Trace: [ 590.880163][T17436] [ 590.881452][T17436] dump_stack_lvl+0x16c/0x1f0 [ 590.883206][T17436] should_fail_ex+0x497/0x5b0 [ 590.884833][T17436] ? fs_reclaim_acquire+0xae/0x150 [ 590.886564][T17436] should_failslab+0xc2/0x120 [ 590.888167][T17436] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 590.890093][T17436] ? delete_node+0x207/0x8e0 [ 590.891609][T17436] ? __d_alloc+0x35/0x8c0 [ 590.892795][T17436] __d_alloc+0x35/0x8c0 [ 590.893883][T17436] d_alloc_pseudo+0x1c/0xc0 [ 590.895064][T17436] alloc_file_pseudo+0xd2/0x200 [ 590.896337][T17436] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 590.897764][T17436] ? __pfx_idr_alloc_u32+0x10/0x10 [ 590.899101][T17436] ? find_held_lock+0x2d/0x110 [ 590.900360][T17436] ? find_held_lock+0x2d/0x110 [ 590.901674][T17436] __anon_inode_getfile+0x136/0x3c0 [ 590.903098][T17436] ? __pfx___anon_inode_getfile+0x10/0x10 [ 590.904834][T17436] ? __local_bh_enable_ip+0xa4/0x120 [ 590.906273][T17436] bpf_link_prime+0x202/0x4d0 [ 590.907849][T17436] bpf_raw_tp_link_attach+0x28e/0x5f0 [ 590.909662][T17436] ? __pfx_lock_release+0x10/0x10 [ 590.911376][T17436] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 590.913374][T17436] ? lock_acquire+0x2f/0xb0 [ 590.914858][T17436] ? __fget_files+0x40/0x3a0 [ 590.916466][T17436] ? fput+0x67/0x440 [ 590.917814][T17436] ? __bpf_prog_get+0xa0/0x290 [ 590.919453][T17436] __sys_bpf+0x3a7/0x57a0 [ 590.920947][T17436] ? __pfx_lock_release+0x10/0x10 [ 590.922670][T17436] ? __pfx___sys_bpf+0x10/0x10 [ 590.924289][T17436] ? vfs_write+0x306/0x1150 [ 590.925844][T17436] ? __mutex_unlock_slowpath+0x164/0x690 [ 590.927826][T17436] ? fput+0x67/0x440 [ 590.929076][T17436] ? ksys_write+0x1ba/0x250 [ 590.930638][T17436] ? __pfx_ksys_write+0x10/0x10 [ 590.932355][T17436] __ia32_sys_bpf+0x76/0xe0 [ 590.933918][T17436] __do_fast_syscall_32+0x73/0x120 [ 590.935647][T17436] do_fast_syscall_32+0x32/0x80 [ 590.937313][T17436] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 590.939454][T17436] RIP: 0023:0xf7fe5579 [ 590.940840][T17436] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 590.947406][T17436] RSP: 002b:00000000f516657c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 590.949795][T17436] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000020000240 [ 590.952043][T17436] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 590.954205][T17436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 590.956650][T17436] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 590.958808][T17436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 590.960935][T17436] [ 591.495671][T17458] FAULT_INJECTION: forcing a failure. [ 591.495671][T17458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.499760][T17458] CPU: 2 UID: 0 PID: 17458 Comm: syz.1.2915 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 591.503296][T17458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 591.506939][T17458] Call Trace: [ 591.507902][T17458] [ 591.508922][T17458] dump_stack_lvl+0x16c/0x1f0 [ 591.510178][T17458] should_fail_ex+0x497/0x5b0 [ 591.511695][T17458] _copy_from_user+0x2e/0xd0 [ 591.512950][T17458] get_compat_msghdr+0xa8/0x170 [ 591.514222][T17458] ? __pfx_get_compat_msghdr+0x10/0x10 [ 591.515636][T17458] ___sys_recvmsg+0x193/0x1a0 [ 591.516877][T17458] ? __pfx____sys_recvmsg+0x10/0x10 [ 591.518217][T17458] ? __fget_files+0x1fc/0x3a0 [ 591.519440][T17458] ? trace_lock_acquire+0x14e/0x1f0 [ 591.520930][T17458] ? __fget_files+0x206/0x3a0 [ 591.522302][T17458] ? __pfx___might_resched+0x10/0x10 [ 591.523674][T17458] do_recvmmsg+0x55d/0x740 [ 591.524851][T17458] ? __pfx_do_recvmmsg+0x10/0x10 [ 591.526136][T17458] ? vfs_write+0x306/0x1150 [ 591.527324][T17458] ? __fget_files+0x206/0x3a0 [ 591.528548][T17458] __sys_recvmmsg+0x21e/0x280 [ 591.529771][T17458] ? __pfx___sys_recvmmsg+0x10/0x10 [ 591.531218][T17458] ? __pfx_ksys_write+0x10/0x10 [ 591.532482][T17458] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 591.534257][T17458] ? lockdep_hardirqs_on+0x7c/0x110 [ 591.535789][T17458] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 591.537762][T17458] __do_fast_syscall_32+0x73/0x120 [ 591.539238][T17458] do_fast_syscall_32+0x32/0x80 [ 591.540710][T17458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 591.542452][T17458] RIP: 0023:0xf7fe5579 [ 591.543551][T17458] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 591.548500][T17458] RSP: 002b:00000000f514557c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 591.550687][T17458] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020002940 [ 591.552750][T17458] RDX: 000000000000f000 RSI: 0000000000010002 RDI: 0000000000000000 [ 591.554787][T17458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 591.556844][T17458] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 591.558880][T17458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 591.560941][T17458] [ 591.652160][T17464] can0: slcan on ptm0. [ 591.660144][T17464] netlink: 'syz.7.2917': attribute type 10 has an invalid length. [ 591.682942][T17468] netlink: 'syz.1.2918': attribute type 1 has an invalid length. [ 591.829138][T17463] can0 (unregistered): slcan off ptm0. [ 592.022300][T17491] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 592.028047][T17491] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 592.042695][T17492] input: syz0 as /devices/virtual/input/input126 [ 592.276427][ T5992] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 592.438171][ T5992] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 592.441880][ T5992] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 592.445077][ T5992] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 592.449090][ T5992] usb 10-1: config 0 interface 0 has no altsetting 0 [ 592.451568][ T5992] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 592.453822][ T5992] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 592.456966][ T5992] usb 10-1: config 0 interface 0 has no altsetting 0 [ 592.466980][ T5992] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 592.469271][ T5992] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 592.472013][ T5992] usb 10-1: config 0 interface 0 has no altsetting 0 [ 592.476757][ T5992] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 592.479060][ T5992] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 592.481808][ T5992] usb 10-1: config 0 interface 0 has no altsetting 0 [ 592.496465][ T5992] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 592.498773][ T5992] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 592.501529][ T5992] usb 10-1: config 0 interface 0 has no altsetting 0 [ 592.503995][ T5992] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 592.506281][ T5992] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 592.509251][ T5992] usb 10-1: config 0 interface 0 has no altsetting 0 [ 592.511745][ T5992] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 592.514059][ T5992] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 592.517084][ T5992] usb 10-1: config 0 interface 0 has no altsetting 0 [ 592.521142][ T5992] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 592.523616][ T5992] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 592.526475][ T5992] usb 10-1: config 0 interface 0 has no altsetting 0 [ 592.534484][ T5992] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 592.537296][ T5992] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 592.539483][ T5992] usb 10-1: Product: syz [ 592.540643][ T5992] usb 10-1: Manufacturer: syz [ 592.541886][ T5992] usb 10-1: SerialNumber: syz [ 592.546686][ T5992] usb 10-1: config 0 descriptor?? [ 592.551693][ T5992] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 592.622622][T17501] tipc: New replicast peer: 0.0.0.0 [ 592.626924][T17501] tipc: Enabled bearer , priority 10 [ 592.824903][T17504] vlan2: entered allmulticast mode [ 592.826856][T17504] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 592.831247][T17504] mac80211_hwsim hwsim21 wlan1: left allmulticast mode [ 593.249958][T17517] [U] [ 593.250914][T17517] [U] [ 593.251653][T17517] [U] [ 593.252383][T17517] [U] [ 593.253261][T17517] [U] [ 593.254018][T17517] [U] [ 593.254743][T17517] [U] [ 593.255480][T17517] [U] [ 593.256323][T17517] [U] [ 593.257103][T17517] [U] [ 593.257835][T17517] [U] [ 593.258559][T17517] [U] [ 593.259535][T17517] [U] [ 593.260523][T17517] [U] [ 593.261472][T17517] [U] [ 593.262417][T17517] [U] [ 593.263561][T17517] [U] [ 593.264336][T17517] [U] [ 593.265088][T17517] [U] [ 593.265811][T17517] [U] [ 593.266849][T17517] [U] [ 593.267592][T17517] [U] [ 593.268301][T17517] [U] [ 593.269048][T17517] [U] [ 593.269793][T17517] [U] [ 593.270515][T17517] [U] [ 593.271255][T17517] [U] [ 593.272174][T17517] [U] [ 593.273130][T17517] [U] [ 593.274077][T17517] [U] [ 593.275015][T17517] [U] [ 593.275947][T17517] [U] [ 593.277086][T17517] [U] [ 593.277975][T17517] [U] [ 593.278757][T17517] [U] [ 593.279485][T17517] [U] [ 593.280234][T17517] [U] [ 593.280980][T17517] [U] [ 593.281708][T17517] [U] [ 593.282460][T17517] [U] [ 593.283205][T17517] [U] [ 593.283950][T17517] [U] [ 593.284698][T17517] [U] [ 593.285421][T17517] [U] [ 593.286150][T17517] [U] [ 593.286840][T17517] [U] [ 593.287570][T17517] [U] [ 593.288300][T17517] [U] [ 593.289376][T17517] [U] [ 593.290110][T17517] [U] [ 593.290839][T17517] [U] [ 593.291583][T17517] [U] [ 593.292343][T17517] [U] [ 593.293075][T17517] [U] [ 593.293810][T17517] [U] [ 593.294533][T17517] [U] [ 593.295267][T17517] [U] [ 593.295903][T17517] [U] [ 593.296546][T17517] [U] [ 593.297231][T17517] [U] [ 593.298011][T17517] [U] [ 593.298752][T17517] [U] [ 593.299477][T17517] [U] [ 593.300213][T17517] [U] [ 593.301035][T17517] [U] [ 593.301788][T17517] [U] [ 593.302510][T17517] [U] [ 593.303187][T17517] [U] [ 593.303923][T17517] [U] [ 593.304654][T17517] [U] [ 593.305384][T17517] [U] [ 593.306104][T17517] [U] [ 593.306935][T17517] [U] [ 593.307671][T17517] [U] [ 593.308398][T17517] [U] [ 593.309123][T17517] [U] [ 593.309874][T17517] [U] [ 593.310621][T17517] [U] [ 593.311359][T17517] [U] [ 593.312111][T17517] [U] [ 593.312863][T17517] [U] [ 593.313584][T17517] [U] [ 593.314247][T17517] [U] [ 593.314895][T17517] [U] [ 593.315627][T17517] [U] [ 593.316361][T17517] [U] [ 593.317095][T17517] [U] [ 593.317831][T17517] [U] [ 593.318787][T17517] [U] [ 593.319540][T17517] [U] [ 593.320267][T17517] [U] [ 593.321000][T17517] [U] [ 593.321732][T17517] [U] [ 593.322503][T17517] [U] [ 593.323223][T17517] [U] [ 593.323948][T17517] [U] [ 593.324713][T17517] [U] [ 593.325443][T17517] [U] [ 593.326164][T17517] [U] [ 593.326896][T17517] [U] [ 593.327691][T17517] [U] [ 593.328415][T17517] [U] [ 593.329161][T17517] [U] [ 593.329881][T17517] [U] [ 593.330596][T17517] [U] [ 593.331337][T17517] [U] [ 593.332085][T17517] [U] [ 593.332817][T17517] [U] [ 593.333546][T17517] [U] [ 593.334267][T17517] [U] [ 593.334987][T17517] [U] [ 593.335728][T17517] [U] [ 593.336534][T17517] [U] [ 593.337379][T17517] [U] [ 593.338100][T17517] [U] [ 593.338826][T17517] [U] [ 593.339553][T17517] [U] [ 593.340279][T17517] [U] [ 593.341012][T17517] [U] [ 593.341739][T17517] [U] [ 593.342508][T17517] [U] [ 593.343254][T17517] [U] [ 593.343980][T17517] [U] [ 593.344712][T17517] [U] [ 593.345437][T17517] [U] [ 593.346154][T17517] [U] [ 593.346885][T17517] [U] [ 593.373723][T17516] [U] [ 593.701491][ T25] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 593.883706][ T25] usb 9-1: Using ep0 maxpacket: 16 [ 593.887371][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.890988][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.894219][ T25] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 593.897640][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.901815][ T25] usb 9-1: config 0 descriptor?? [ 593.991589][T17528] siw: device registration error -23 [ 594.627632][ T25] usbhid 9-1:0.0: can't add hid device: -71 [ 594.629277][ T25] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 594.636100][ T25] usb 9-1: USB disconnect, device number 29 [ 594.816801][ C1] usb 10-1: yurex_control_callback - control failed: -2 [ 594.818610][ C1] usb 10-1: yurex_control_callback - control failed: -32 [ 594.829756][ T64] usb 10-1: USB disconnect, device number 41 [ 594.833430][ T64] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 594.946615][T17535] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.955976][T17535] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.957931][T17535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.068965][T17544] input: syz0 as /devices/virtual/input/input127 [ 595.080289][T17544] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2935'. [ 595.297167][T17552] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 597.954952][T17604] netlink: 'syz.1.2949': attribute type 10 has an invalid length. [ 597.957560][T17604] bond0: (slave wlan1): Opening slave failed [ 598.622331][T17626] nfs4: Unknown parameter '0' [ 599.138568][T17644] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2957'. [ 599.533199][T17649] netlink: 'syz.1.2960': attribute type 1 has an invalid length. [ 600.085307][T17661] overlay: Unknown parameter '/' [ 600.355021][T17665] siw: device registration error -23 [ 601.041587][T17676] netlink: 'syz.1.2967': attribute type 1 has an invalid length. [ 601.315963][T17688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2970'. [ 601.354648][T17693] 9pnet_fd: Insufficient options for proto=fd [ 601.359963][T17692] [U]  [ 601.369675][T17685] : renamed from bond0 [ 601.407763][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2971'. [ 601.410495][T17695] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2971'. [ 602.103390][T17704] overlay: Unknown parameter '/' [ 602.268056][ T39] audit: type=1400 audit(1733703581.296:74399): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17712 comm="syz.5.2977" [ 602.269973][T17715] netlink: 'syz.7.2978': attribute type 1 has an invalid length. [ 602.593783][T17723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2980'. [ 602.626846][T17723] [ 602.627517][T17723] ====================================================== [ 602.629359][T17723] WARNING: possible circular locking dependency detected [ 602.631399][T17723] 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 Not tainted [ 602.633433][T17723] ------------------------------------------------------ [ 602.636542][T17723] syz.1.2980/17723 is trying to acquire lock: [ 602.638128][T17723] ffff888024fa8fa0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x132/0x4f0 [ 602.640647][T17723] [ 602.640647][T17723] but task is already holding lock: [ 602.642584][T17723] ffff888024fa9030 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x5c/0x4f0 [ 602.645262][T17723] [ 602.645262][T17723] which lock already depends on the new lock. [ 602.645262][T17723] [ 602.648849][T17723] [ 602.648849][T17723] the existing dependency chain (in reverse order) is: [ 602.651945][T17723] [ 602.651945][T17723] -> #5 (&q->sysfs_dir_lock){+.+.}-{4:4}: [ 602.654704][T17723] __mutex_lock+0x19b/0xa60 [ 602.656540][T17723] blk_mq_sysfs_unregister_hctxs+0x92/0x2d0 [ 602.658790][T17723] __blk_mq_update_nr_hw_queues+0x93f/0x1460 [ 602.661014][T17723] blk_mq_update_nr_hw_queues+0x2a/0x40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 602.663128][T17723] nbd_start_device+0x15b/0xd70 [ 602.665251][T17723] nbd_ioctl+0x21a/0xfd0 [ 602.666998][T17723] compat_blkdev_ioctl+0x2f7/0x750 [ 602.668967][T17723] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 602.671124][T17723] __do_fast_syscall_32+0x73/0x120 [ 602.672984][T17723] do_fast_syscall_32+0x32/0x80 [ 602.674805][T17723] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 602.677203][T17723] [ 602.677203][T17723] -> #4 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 602.680143][T17723] blk_mq_submit_bio+0x1fb6/0x24c0 [ 602.682070][T17723] __submit_bio+0x384/0x540 [ 602.683827][T17723] submit_bio_noacct_nocheck+0x698/0xd70 [ 602.685931][T17723] submit_bio_noacct+0x93a/0x1e20 [ 602.687793][T17723] block_read_full_folio+0x812/0xa50 [ 602.689844][T17723] filemap_read_folio+0xc6/0x2a0 [ 602.691745][T17723] filemap_get_pages+0x155f/0x1be0 [ 602.693656][T17723] filemap_read+0x3ca/0xd70 [ 602.695424][T17723] blkdev_read_iter+0x187/0x480 [ 602.697311][T17723] vfs_read+0x87f/0xbe0 [ 602.698952][T17723] ksys_read+0x12b/0x250 [ 602.700608][T17723] do_syscall_64+0xcd/0x250 [ 602.702362][T17723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.704549][T17723] [ 602.704549][T17723] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 602.707544][T17723] down_read+0x9a/0x330 [ 602.709188][T17723] filemap_fault+0x62c/0x2820 [ 602.711017][T17723] __do_fault+0x10a/0x490 [ 602.712739][T17723] do_pte_missing+0xebd/0x3e00 [ 602.714577][T17723] __handle_mm_fault+0x103c/0x2a40 [ 602.716526][T17723] handle_mm_fault+0x3fa/0xaa0 [ 602.718395][T17723] do_user_addr_fault+0x7a3/0x13f0 [ 602.720339][T17723] exc_page_fault+0x5c/0xc0 [ 602.721969][T17723] asm_exc_page_fault+0x26/0x30 [ 602.723770][T17723] copy_compat_iovec_from_user+0x8a/0x180 [ 602.725943][T17723] iovec_from_user.part.0+0x11e/0x130 [ 602.727895][T17723] iovec_from_user+0x70/0x90 [ 602.729627][T17723] process_vm_rw+0x2c7/0x360 [ 602.731436][T17723] __ia32_sys_process_vm_readv+0xdf/0x1b0 [ 602.733620][T17723] __do_fast_syscall_32+0x73/0x120 [ 602.735072][T17723] do_fast_syscall_32+0x32/0x80 [ 602.736793][T17723] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 602.739199][T17723] [ 602.739199][T17723] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 602.741861][T17723] __might_fault+0x11b/0x190 [ 602.743625][T17723] _copy_from_user+0x29/0xd0 [ 602.745431][T17723] __blk_trace_setup+0xa8/0x180 [ 602.747309][T17723] blk_trace_setup+0x47/0x70 [ 602.749094][T17723] sg_ioctl+0x7a3/0x26b0 [ 602.750778][T17723] compat_ptr_ioctl+0x6b/0xa0 [ 602.752624][T17723] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 602.754644][T17723] __do_fast_syscall_32+0x73/0x120 [ 602.756559][T17723] do_fast_syscall_32+0x32/0x80 [ 602.758456][T17723] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 602.760824][T17723] [ 602.760824][T17723] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 602.763502][T17723] __mutex_lock+0x19b/0xa60 [ 602.765278][T17723] blk_register_queue+0x13c/0x4f0 [ 602.767149][T17723] add_disk_fwnode+0x785/0x1300 [ 602.768963][T17723] brd_alloc.isra.0+0x50a/0x7c0 [ 602.770872][T17723] brd_init+0x12b/0x1d0 [ 602.772467][T17723] do_one_initcall+0x128/0x630 [ 602.774306][T17723] kernel_init_freeable+0x58f/0x8b0 [ 602.776291][T17723] kernel_init+0x1c/0x2b0 [ 602.778007][T17723] ret_from_fork+0x45/0x80 [ 602.779713][T17723] ret_from_fork_asm+0x1a/0x30 [ 602.781574][T17723] [ 602.781574][T17723] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 602.784195][T17723] __lock_acquire+0x249e/0x3c40 [ 602.786042][T17723] lock_acquire.part.0+0x11b/0x380 [ 602.787987][T17723] __mutex_lock+0x19b/0xa60 [ 602.789759][T17723] blk_register_queue+0x132/0x4f0 [ 602.791664][T17723] add_disk_fwnode+0x785/0x1300 [ 602.793536][T17723] nbd_dev_add+0x78b/0xbc0 [ 602.795272][T17723] nbd_genl_connect+0x8b1/0x1c00 [ 602.797251][T17723] genl_family_rcv_msg_doit+0x202/0x2f0 [ 602.798818][T17723] genl_rcv_msg+0x565/0x800 [ 602.800117][T17723] netlink_rcv_skb+0x165/0x410 [ 602.801534][T17723] genl_rcv+0x28/0x40 [ 602.802724][T17723] netlink_unicast+0x53c/0x7f0 [ 602.804092][T17723] netlink_sendmsg+0x8b8/0xd70 [ 602.805581][T17723] ____sys_sendmsg+0x9ae/0xb40 [ 602.806947][T17723] ___sys_sendmsg+0x135/0x1e0 [ 602.808293][T17723] __sys_sendmsg+0x16e/0x220 [ 602.809624][T17723] __do_fast_syscall_32+0x73/0x120 [ 602.811082][T17723] do_fast_syscall_32+0x32/0x80 [ 602.812466][T17723] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 602.814220][T17723] [ 602.814220][T17723] other info that might help us debug this: [ 602.814220][T17723] [ 602.816812][T17723] Chain exists of: [ 602.816812][T17723] &q->sysfs_lock --> &q->q_usage_counter(io)#54 --> &q->sysfs_dir_lock [ 602.816812][T17723] [ 602.820404][T17723] Possible unsafe locking scenario: [ 602.820404][T17723] [ 602.822318][T17723] CPU0 CPU1 [ 602.823698][T17723] ---- ---- [ 602.825075][T17723] lock(&q->sysfs_dir_lock); [ 602.826291][T17723] lock(&q->q_usage_counter(io)#54); [ 602.828302][T17723] lock(&q->sysfs_dir_lock); [ 602.830167][T17723] lock(&q->sysfs_lock); [ 602.831302][T17723] [ 602.831302][T17723] *** DEADLOCK *** [ 602.831302][T17723] [ 602.833371][T17723] 3 locks held by syz.1.2980/17723: [ 602.834707][T17723] #0: ffffffff8fb5c150 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 602.836822][T17723] #1: ffffffff8fb5c208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x580/0x800 [ 602.839127][T17723] #2: ffff888024fa9030 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x5c/0x4f0 [ 602.841622][T17723] [ 602.841622][T17723] stack backtrace: [ 602.843094][T17723] CPU: 3 UID: 0 PID: 17723 Comm: syz.1.2980 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 602.845697][T17723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 602.848314][T17723] Call Trace: [ 602.849161][T17723] [ 602.849919][T17723] dump_stack_lvl+0x116/0x1f0 [ 602.851120][T17723] print_circular_bug+0x41c/0x610 [ 602.852394][T17723] check_noncircular+0x31a/0x400 [ 602.853658][T17723] ? __pfx_check_noncircular+0x10/0x10 [ 602.855015][T17723] ? hlock_class+0x4e/0x130 [ 602.856190][T17723] ? lockdep_lock+0xc6/0x200 [ 602.857375][T17723] ? __pfx_lockdep_lock+0x10/0x10 [ 602.858646][T17723] __lock_acquire+0x249e/0x3c40 [ 602.859864][T17723] ? __pfx___lock_acquire+0x10/0x10 [ 602.861204][T17723] ? xa_find_after+0x291/0x480 [ 602.862420][T17723] lock_acquire.part.0+0x11b/0x380 [ 602.863739][T17723] ? blk_register_queue+0x132/0x4f0 [ 602.865046][T17723] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 602.866569][T17723] ? rcu_is_watching+0x12/0xc0 [ 602.867752][T17723] ? trace_lock_acquire+0x14e/0x1f0 [ 602.869026][T17723] ? blk_register_queue+0x132/0x4f0 [ 602.870388][T17723] ? lock_acquire+0x2f/0xb0 [ 602.871578][T17723] ? blk_register_queue+0x132/0x4f0 [ 602.872924][T17723] __mutex_lock+0x19b/0xa60 [ 602.874103][T17723] ? blk_register_queue+0x132/0x4f0 [ 602.875452][T17723] ? blk_register_queue+0x132/0x4f0 [ 602.876797][T17723] ? __pfx___mutex_lock+0x10/0x10 [ 602.878094][T17723] ? kobject_add+0x17c/0x240 [ 602.879300][T17723] ? blk_register_queue+0x132/0x4f0 [ 602.880641][T17723] blk_register_queue+0x132/0x4f0 [ 602.881942][T17723] add_disk_fwnode+0x785/0x1300 [ 602.883207][T17723] nbd_dev_add+0x78b/0xbc0 [ 602.884371][T17723] ? __pfx_nbd_dev_add+0x10/0x10 [ 602.885655][T17723] ? __mutex_lock+0x30d/0xa60 [ 602.886880][T17723] ? bpf_lsm_capable+0x9/0x10 [ 602.888099][T17723] ? __radix_tree_lookup+0x21f/0x2c0 [ 602.889472][T17723] nbd_genl_connect+0x8b1/0x1c00 [ 602.890750][T17723] ? __pfx_nbd_genl_connect+0x10/0x10 [ 602.892146][T17723] ? __nla_parse+0x40/0x60 [ 602.893315][T17723] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 602.895212][T17723] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 602.897103][T17723] genl_family_rcv_msg_doit+0x202/0x2f0 [ 602.898533][T17723] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 602.900097][T17723] ? genl_get_cmd+0x195/0x580 [ 602.901326][T17723] ? __radix_tree_lookup+0x21f/0x2c0 [ 602.902691][T17723] genl_rcv_msg+0x565/0x800 [ 602.903875][T17723] ? __pfx_genl_rcv_msg+0x10/0x10 [ 602.905194][T17723] ? __pfx_nbd_genl_connect+0x10/0x10 [ 602.906580][T17723] ? __pfx___lock_acquire+0x10/0x10 [ 602.907930][T17723] netlink_rcv_skb+0x165/0x410 [ 602.909183][T17723] ? __pfx_genl_rcv_msg+0x10/0x10 [ 602.910478][T17723] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 602.911848][T17723] ? down_read+0xc9/0x330 [ 602.913005][T17723] ? __pfx_down_read+0x10/0x10 [ 602.914247][T17723] ? netlink_deliver_tap+0x1ae/0xca0 [ 602.915614][T17723] genl_rcv+0x28/0x40 [ 602.916670][T17723] netlink_unicast+0x53c/0x7f0 [ 602.917913][T17723] ? __pfx_netlink_unicast+0x10/0x10 [ 602.919281][T17723] ? __phys_addr_symbol+0x30/0x80 [ 602.920596][T17723] ? __check_object_size+0x488/0x710 [ 602.921959][T17723] netlink_sendmsg+0x8b8/0xd70 [ 602.923173][T17723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.924539][T17723] ____sys_sendmsg+0x9ae/0xb40 [ 602.925798][T17723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 602.927121][T17723] ? get_compat_msghdr+0x11b/0x170 [ 602.928369][T17723] ___sys_sendmsg+0x135/0x1e0 [ 602.929597][T17723] ? __pfx____sys_sendmsg+0x10/0x10 [ 602.930947][T17723] ? __pfx_lock_release+0x10/0x10 [ 602.932261][T17723] ? trace_lock_acquire+0x14e/0x1f0 [ 602.933624][T17723] ? __fget_files+0x206/0x3a0 [ 602.934852][T17723] __sys_sendmsg+0x16e/0x220 [ 602.936058][T17723] ? __pfx___sys_sendmsg+0x10/0x10 [ 602.937405][T17723] ? __ia32_sys_futex_time32+0x1da/0x460 [ 602.938859][T17723] __do_fast_syscall_32+0x73/0x120 [ 602.940191][T17723] do_fast_syscall_32+0x32/0x80 [ 602.941481][T17723] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 602.943121][T17723] RIP: 0023:0xf7fe5579 [ 602.944182][T17723] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 602.949122][T17723] RSP: 002b:00000000f516657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 602.951252][T17723] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000240 [ 602.953289][T17723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 602.955333][T17723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 602.957367][T17723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.959401][T17723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 602.961488][T17723] VM DIAGNOSIS: 00:15:25 Registers: info registers vcpu 0 CPU#0 RAX=000000000007f5da RBX=0000000000000001 RCX=00000000001889ed RDX=000000000007f5db RSI=00000000000a4001 RDI=ffffffff9184fafc RBP=ffffc90002b3f9a0 RSP=ffffc90002b3f8b8 R8 =0000000000000000 R9 =ffffffff90badf88 R10=ffffc90002b3f958 R11=000000000007f5da R12=ffffc90002b3f9a8 R13=ffffc90002b3f958 R14=ffffc90002b3f98d R15=ffffffff88f5dad3 RIP=ffffffff8b2014f0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7431230 CR3=000000004ef2a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 EAX=00000000 EBX=00000001 ECX=00000000 EDX=00000000 ESI=00000003 EDI=ffba9430 EBP=ffba9448 ESP=ffba91e0 EIP=f712c8cf EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 57ca5440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 0004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005647de389000 CR3=0000000055d44000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000f1ddb4fe RBX=0000016df1ddb49e RCX=0000000000000002 RDX=000000000000016d RSI=ffffffff8bb138c0 RDI=ffffffff8bb13900 RBP=0000016df1ddaac4 RSP=ffffc900007f7b40 R8 =0000000000000001 R9 =ffffed100fde8d09 R10=ffff88807ef4684f R11=0000000000000b8f R12=0000000000000002 R13=00000000000032c9 R14=ffffffff9a3e6640 R15=0000000000014c39 RIP=ffffffff8b19cbb9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057e4c4c0 CR3=0000000063442000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffffd0 Opmask01=0000000000004211 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff62154220 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464319dde9286b4 6464319dde9368b4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464319dde9368bc 6464319dde9368bc ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64007265646e6962 000055f9baf6a07f 0000000000000031 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d002a5d392d305b 7466717761726e00 2a5d392d305b7466 71776100312d3031 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000d1 0000305f656b6972 74737265646e7568 742f796c70707573 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a263e383a3a26 39383a3a2638383a 3a263b383a3a263a 383a3a26493b3a3a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 0000000000000030 09706f001c706f19 00004e4f53411c52 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 0000000000000030 000055001c706f19 00004e4f53411c52 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85153e15 RDI=ffffffff9a6682c0 RBP=ffffffff9a668280 RSP=ffffc9000c32e810 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff85153db0 R15=0000000000000000 RIP=ffffffff85153e3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002e20dffc CR3=00000000588b6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=00000000100001ff Opmask02=00000000ffffffff Opmask03=0040020000201082 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f9baf80b20 000055f9baf80b80 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff62154b70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff62154190 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7aa7881f6fdaec6a 7373268f961e6fbc ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f716d2f37706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f646e756f732f00 682e6c6974752f64 65726168732f6372 732f2e2e2f2e2e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f716d2f37706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 0000000000003075 70632f302f716d2f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 09d4fb6c1ca99f19 000055fce56cfef2 00000000000000b1 00000065736f706d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 09d4fb6c1ca99f19 000055fce56c0c85 00000000000001e1 0000305f656b6972 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffeffffd 00007ffdffffffff 3ff4fffbffffffff 5c007ffdfd7fdcef ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a263e383a3a26 39383a3a2638383a 3a263b383a3a263a 383a3a26493b3a3a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 0000000000000030 09706f001c706f19 00004e4f53411c52 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 0000000000000030 000055001c706f19 00004e4f53411c52 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000