last executing test programs: 8m59.11575808s ago: executing program 1 (id=16): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r3, 0x0, 0x100000000000000}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x8, 0x56, 0x0}}, 0xfffffdde) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c854}, 0x0) writev(r6, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) sendfile(r6, r3, &(0x7f0000000100)=0x2, 0xfab4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 8m58.136641052s ago: executing program 1 (id=18): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002240)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0xc) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040), 0x12) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2092) syz_fuse_handle_req(r5, &(0x7f0000002580)="5536182daefa2fc6ee10a1b2d4e27cff3c3e628d4656f7b27979e371b15b420c01ae674ddb8fff7b2bc41e7c5927065cd32f2ff7908ef7dd74cdc82f3799ab12edbbfd0b8f6d2194d7f72aec3a136e25c7bf733436bf6cbfc94431ad053a2ec4ccac5aaada8a41ac38c0e1849e599dce84e431ac501db105b4484146b338c0ae9124877ccb8273c7fbb32603251e2d66c71398a7a715bcbe5c9d87e41af55f837e2931c4c1b6b7bbc30dfedfe6e61a39e28f66bbe56496745fbe03f6035183257edac4b0fe3087e7f3e79c2152a07341f3ae9ec68e78875b6e12b5a2a1abbcca4d7963be818a7a31290cad5a025ccd05b609c7ac49ea85d49f354c1e76091a917966665e77471005a46a195b290c01bb7ddf4709e94543471d87a0a5047d3631b00862e1e9a00c60b83371cc16ba087463122a892a1b21786fe3d450c7ba97799d88126f09a698a421242e9c67c981ebc576f57ba3df22e0071db74fa22e97b0fbe589894931a4c4e0eda8bb9533c4ce503fba218d0ae43ab4b4d0c705e04442d093ca5299ae8499c6db904bda6c68105bc2a1cd8e16067215476e573745d1e99daa73400567a9978dd7bffb21429479ace30c95afdfaebd7faf74343cd58e14ce6d2fada5a1c665049eeaa717ee681666c8b63c6d54e66df86144f85d80dcaa3ae7a13b58d5f2b607029efbbf8593afc75e0ce0a875a5fbedecb425a22624a0bb8e2fd06212a1fdafb92430d309f8f68504484fb1246f3d7b0893d3dc9d0b6c8d7476b6aea871eb4f32c283e22435fccb221484409cc28a6609dd869b99547fc81b2e517809a5b77783f9fc11b5fe584b9f64c0fec35d3db21ae30d0b8b88d722dea4a376d2a610f0a9d08b311e2ed3ef5d72d0e040e41d3dc45e5a17d740c67db88d95b18c8610fed3302aef0c3c1871ff8a5ae1908bf9668f0bc8e5867f56cc59cd303bafabde6a4034a96ba66b98a910dfaaff712673dcbf84c5354f066126068de620f08be67e6034138dd9a312f9ff197fca56a77bad46e59edfd79dfa3aee4582bfe01ce2201f6569178be7a4bdd28e495114944e538ee7b8f11e0812d9f822cd9760316809eccb9b0bbc5f0630224a1534f88600bbb2af2882562e76d149b44780380b62241829e5734fdfff1a2b3a052f3504dffe04d4632e9fef82762fe1950fbaceeb961464dfe2699f0a898fc8783cfdde45ecc3a16f052c4777beb1fddb080fc802a8cc760d1a0d4606b669e78ee9ba1ac398914ed5096850dedc513e5c71eca19d51af9075151f4ca3d8a841b7b1d205f5f3d223f7e48685daa0836f93017935ad1d942c7392667145ccc1d4700f5d8fb2fc218fd6d70357667d339a28dba3360761857b19f9f91e56a0e0281af1042a409a4e2839f3d21b73a5c352b22e4ff06e563e92c00b48e7f8bcdbbbd398c65331298f779dafe875854e301394b0faac2126138908fa8598b4f5e58ed1ac451eb0187e20077099d12d745fcff0b7fb5e8b9fa65ac617ea6c953e8786229b67a604c46810876650f919e6bc6792db22ec0be29cff94e9c24eb6e1830f890bb4b6bcd74b39060506095b99b95f2a8addfb8dfe11f47479fd23cc7c0701ae00774c430b3b9f52ab2579d47a2c2095365aa569f55a1431f93e651c01f0d67ff9337708a72e352c0e699f14bf07f9b9c056897c78edcf34ade3dfd17a04446d565fb6e7c701a237fe1a3d932371654a43b56e7f5ccdadc0f506d746c3f0047b69c0c174cbbfe092f139c09c0e2e76d9a777142813cb78174630ea8d73301e3343b94856fe610777468a9fb4518a0cf68243a4bd715e38e3431a811f962edb1306d76d89e0aad9be5800e7bebb82ccaec2382c9c114c91aee013acca2d8ddf99465e760bd185453a9eb4e5a78383094603b749c6242ad227124ef4b7ec7506b8a76f714099c954f0b2f2d427af0451a7ea3d1dbfa8a3e644c3640d397de3ce942311deb73fad3a76cba773f416314e81e70bda715b342113a18a249300b43250cb3b3aa46ecabe42d0e8c1dc4be286e539c71f0d1c0b0e1795ae7428a3887f36b79e9c76401a5dd460f45b9d8277e04c7c1e615fb33d0fbc444421f3fd0bff4e045d790610aaa2b62945e4b398024c75680b5e12235c35f5b23ddd99454fe527acad6d08fb37c35d9ecc0a8b10e2c31fac786666eb2ad499ddb7d06c7526fb1c5412f6a0df003410e69b81fe523057b6b73cdecf0e5bc4d3b87757889fe49dbdb3ec79c7eb3a868480fc87528e80400de837cccd4a6345508386ada1833f57a20c56e973569bc7821088d343e80009b7b35390975323d24e764aa6c90d3dd5fdec08ed363dc9ab57de949282994cd3858f829c7e5e9a745261383db27c9c53e9e98e109fda6cbb88649ba40b5067470d73b7471d406e5ea8041f9fa25f5b6c919aef84f7595511141e9f090ee103b20a13b22c9a88348ed6d284c0d7a58326e0c4c9626d9a5390bae2be199b201ea136a9aac76e6125db9bf58f61e6a46f8145a9df1305415989435f51529da03f09a67e3629e6f6cb6b70407d9d848f554f1a7e63602e678e62d3b41b4bf4ddda713ed2c291536d8cc12a16bde144ef56acc17778b1aa8eeeeeb60c781365b615be4435c7158d926351cdb46b89fa82acb384c7318dcb2e51db8bdb223aff2c8f36d9e6b1135ad18f7e0b9d91a76972c3140f8e21dc71422de12a4f5d08624bdaeb983619a5ff82cf788c6b8a5fbf0f78e61ae4058d6e03a3d5130646dfc13686e356a1325434caac94ced659529181561fee7ce4f7e1e7945f119ad8474ea6b00257ceb7af2d9b3f9ad5782cd986f1b097d61bf26a6c48c3ab597e4678d609f3050eec9f3bbea1bc67314407521950526e6d71e34e35392067ac84b66badc82a54bb0dc8ed2f1050711ef2d47af5252075c0441aad6900539fcc649c1b1ffc70a1cc39e0c2136c764ba718d50f4800dc29769c4bc9a2fd0f43eb6ffb717a473ccb14ccd58bd506c4e4a0f4ea1158b59b3d6bf1a2d010c456c1f099bff69add46cc60fd2d9779f603ebb943ab8eb02627ac8aebdd52f25b069f64a61e90fa9ac979cb4c6cf0ebcd070099a1a6e6a747e8989e84afe090390953f988f2dcee405086ce51b1d2d8d249f45899b4e862008d28efad8aa5abd0912fa456aa9d3a918a0dd3420d7c4b04b9e3d65c41a1548b7caeef5fbcededf64697786a0bae73d2c5352658b871c806bd150c91bbf8f4735dddee9cfd3e152b5d44cbcce912a2809760e225b9018fa498c86ccb2359cb0834bcefab92c0468522648fbefbe25cf8d82b897371b5369e8f2972502574c0a3235066969c4d5d67fc312d6631702f66a113d22063ba2ac7d9ab387ad1e115e9c98275f3e0dacd2e8f0843f24687b297bf42bca11b89c6db2fc7026d364486ef2d614bc45d5cff0758d69fd48ea06b8a97667e4d7d30bf7f1c30b62287637f50468bf144fd177fdabcbd0d12b50c9cbd052dcd66993c72f48bd6086412ed5f9af3d44dffdf7c012aadd5cf7bd3b314f236660fa1c0e4773a4e9ccc36fd130ffda59a9bf41f7fbf79e5e3333365a3ed2e7714e50805bc70bc6fd20203cacbbeecb8e01a2ce626756cdbd01c53717c2e7b56b47e21f13209c2bf2b1b251e7a93f8a085dcc61d9ae82303a962441372ff7c0b8b8ba75bbf5b861ff7ddbc9781d40c90ae467bdeddfdf949e9a8b8c9fb7db3a9323d05d15bef19ce2e7634b84ac082d50e84b66f99f34b2f852fefe67faa403e848f3de110eb1d9faefa176c3cacd20c7f87d74e858a1a7bfc2c9e895541f691f99a2b8771c8755300ee74e3d6a048b30d02ca16202ecfc207a0b29302aabc1c5b57c7d0d31d43be5cb1f7230dc238fb701e7037aa00c9b57c6fc85baccaa56754d27b975872051566187b0983d93b9ec052edf3b33f7ddab343eac6f7aed97771e708e40a4cc6797f85d91a0debd5c6169895e895f67a10685af5e0b80b0e728731cbffbff8be603469d03bd47dbca4456108c79c029af16482c5c2590c1e0673c7e943699ea107d906a3e667fe7b2afaeb489548b6a11d9862e86a0b549a42b607ffeda6e3ba0f567b63b0be6edb9098cf3a44e6864c5e99fa5f475acb57e2b7343eb7fe3e8c139b515348b188defd2d3021fd27950d822f6df5f9c93584fd95f3f88c85231943ed4d511249f96447f7903779e4d8c4a680661fe5133d415b862e668441e8077bfb827293a9eb733e914f37a19e01ad4b014ef87ed5a5817ab8123af9fd863090b8e9a50ce29cf706b2182fd79660cbdbb53ba71b750e71a21d0ed01db3335cad91d5cb4d4648f46468b6e51f63e4088386913ae6b6cbf103947c32d25a8a825118cd6ce23f53ffe3c087114700e9a5932faf3d844fc6b323b3e722ed3ed75037bd9a7fd9d256b2b9a168e66802e284853a0d6b47d39675900f02f005050425731f9c2cb329f70d7a5ce2ee256212bf8b2ba9ece0df39c58f0fbac06c4da946787abf19dadb536bddbf7e51d89f22413575e064c6482d936a89d48be159aeb5055feb0577ced6c5334411d1d58a7e6d02eca6164d90fda39685fd619269fea7f21db51f6aa6961250e03c9e00788c178dabeb68f13dea29f8cdcf30478dbca15c4519bb342ba8b201019061bf8317022dbc5673fb4ed92ef1a1dea0a1a00cb3cbca291f7ebcbec27ea5e824f04b82f5644d4368cdf8026550bc2f86b83da6a265357eb548a9eec6622204b3dcd22440fec0e12819ade4ba53b53b1e6ab906fe0cacabb9c15e8b657475a0dad62dbcb1037aa8617787abce24a0aa4cf1b5c85c030a14277832a95d8b29a4ea86fb80148ece147ce4bf386995ac28e1ad1e2072f3f4fce5c05d9bdd0af118815d6ee89aabfa3f8173e6fa59dfa4a8c1ba7641291b3c18c6ccc4c3588d56d169d397facb4e67485610cc68197b3a43fe78b9458dc47e5057d5bc6b8e3b65bf414818b65d41ed7cfd7a35fe79c9851ef39c3e059fb3dffe331a791ce75728efcd58dd9b3ed1c93b128469afa648f4f91de6e39d5bef7a0e69bdf5b2202682d857847a64b33432ea0f33bbfd1948ad0b6c66d853fef1e6c0d712b86c40f79ff4d125baebf2a4b32dfc8bed2a697f745cfeb16303b4f8e866ee0bb6a5eb6c6ce513b5cb84e2b44854c72ed0cf2e838245be8d098a6943d845f5a8c07c1036da86cab0d5be4ce29545fade4323acf2085b7645107dd12d5b3af7bb37be1b291cbd6fe297c4b4a2a23280358711be91f21305c035bf1f57467a1853c999b3fb478b11c49cfac66429a76099633a54689047d66fd8bd6eebea94fc8007d9e2765e2969608a78d0b96d6b30360e81fb9df5262c8ff15f2fd7000756d8cda1db3847d6f793bf803b159344c57b480c87702cb3d1260692a19ebdceb2e05a2fe2eb5ac5cfa76551a04795915bfaba9849a623e46ac1832157d0ea5255b5cacd4efa844b0ce5f2f0e1a9dc4fb115fce2640ec6d03c5fe15b4837bd6e6127349f2b6b0fd61c82c96531714f5b623ce4e4978c4a0c86b3c17f50acdd67d283ec934ed36ba7360a10ffeeb7864113eeaa25cccc66613e0757782381614b8da3cd0a85cef7bc384969517c920e8454a5a0f112d1653b2828e895d0614e5bf4dec0ec863432cce9337ce7c29affa7f29fff97bd54a6947cc68df8fed17850209242c1c67d0d7aced2efec4b3c006678bcb8716e8e9e40d78781fd6cc5b5522b8ed2ec8cecb677849b778c0a2a17817a3dd2278080e109906dd4e99b772d5911893fa09ade4296876921d1e009e714df7e4973ab1d2e593d88ecf2151e97ec66176549d3af66652c8377e162454ce7cc8ab34397d31978e84aea92a3c0a8106a2a31e33a8dfe942819fa1f2c1272d0f3cbd7dae820642cbc00202455ab7fb81857ef050a1965a291001874b38397ed9a8e8106dcfcdfd80d0f5d0ef0d5775e53cc5aeb1d6bc13886f8f3491cd6af5dd77ace3689fa2bf56e9b4d1e4964f8fd8f0a4a8b5d7fb678f0f3adcb4a19b5168ac5aeee6f087af15af3bde52a9be0f550b21b10ce98da70445284d9db9416732e63b6efb3ced984c0df50c11aa677f822af7ad39b8b4c0d236e4b36a00ff73587b39f917d7effbb37b95a96e350a430d544d68623c80bf2cd2d689b4dc41e8ef374c393092a2619055f268fbdcb9de494e6582be90a4798bac801bcac8389c823759860e7c9d692f41ee2a6b9624da3c09a2c8e7cdeaa100ba8ca25a737046d8bb237b9546641cfbb2eac9bbee9e125b14dfabac642e634d32151c06ceb3ddbb3d3f038ab2efdd063152270449ed5eca2655cd0016147ebbd00003eb8cd25297350afbffae43cfd9867543b81da4510850b1afaa199d0477837017e9098bf5b3973efe218a88b3d2bb172fe77278088997758fdc1dbb0b1fb6af2ab9db1ddf3e3fbd8e8dd35f918779ccba75b3cdfa317fc6e3cbeaa8b11ce2a30cc53292bcb9dc2a18ca400c674360c041c97ee6aec1448a025c6b04ae9efb3a01d31e3f897cfd5dc94dac95c88b95a26676cc6153e203535891116a5f4ebf54c71cbbe3215a04c57c7ba874a1e203bc66d8161d5b556f661244d9d405a2e6baaedd0d0e4c7e093c2ac0e5ee83b7ddf91669dd59016f7cb53d19896fcc838dc008da4a5fdc0a4fac1a6d7f49b24bcc01467df04d8a3f3181cc4e811942a53daf784b59186a17756a8f3a41ad93035a893a4ff60dd8f54a533e94cf87864169287804df3aa38dc5ce6021a06c58d48985c562a0f51d8b32879f9fb7d4a1d3d442626810f151b161b7e35f9a0b3bec05979e381140f31c03ee6f5549e6e7f116be5e87e0a9ab71ee632f837e9a0f9ad1b4979304c26bad6e84eff0b5b79b667e3d74e354d04f5b2c237102e41a1a4dcac99cbb911d9484aebe6ab2cb539a1db3e3302fb833a44a2d725e858ea9a65d43bb7661842b655c51a1ff25207956e8c6c71667c79975d69f688dfa34c59771488028e3d7500ba0cb71ae5751a51b568e67bdf2abb63838aba5e5cfbbeaf02285f6cbe58428a92a6fc25abb01f8d55ecbd7cc0ea69cdfb188b79048dbea488493681b0e70234463ca3e425d24e2ae4d800ce3adb04ce69428b5f884f8dc83392c22e456a2e195b86d717ac45003a99ae9a59c94167eb04aba3612528f94dad3360b46bc456fbb78072eb7f96418c71bec09831b0a63e83816ffde0d9909c06e765a666c2c41b20c339e0d39107311830ae9ad912f0a85f2ec5ca66a79798a568dae14f76b6d59e6c0bc0f9ebdff29c0fce58367c9705bd4323d3c3e125cdb13da6e58f3fdb2751401014e393e3fc688f04080a90430e531767a7c4f3187ccb7b90880955e766aba6091c4e8fed36482bb5a63372350dd08fe84bf5afd1a30a0f8f4de7a640fa84b9c0447073a0b39bf875d0377c8a572adefec3e033fb3dad91b22bfe22c01f23f27ab0c6a1ce19d2f4f4235281cbca15dafe50f383ba89a8c46a666b106c1ac534955df71f4c560010934fd3eb68eebd55487defa1e024f75ac30139cd190bde1dc8684936bc23a1882ae469fc4af8730d29658f996f71c219526497918e359228b55849d952f4b2996fe5f45a6cfdf87da93bfada579479b18d05c4e964c85b88a7bfc6e4f2b5d6e98e00635e8bd2ebb9eb40b99a9e9db2f688b2d94b8cc8c5fb2a1928624fa5df1c228e6499d992453772084bcd33dda984d97e3857b6fee43c6666b3206ccfe3af52debea4ee060c6edd194b90309213f5c4805f454c7e57bc759377aae9727e484391486be0849c5cdfa99c5a0d0687d6afdce97a32e01d45fef015e7c869ca190219a778b91d881a7b595313fb462e5bf78260c78285d6ccf5e4c50ed56ff28e3f49912773f0a58093f259b5cf4e7f607c51a81576fa95b97bf32d0e2e3511b5d784eba29a15246a97ccf608db456cd70adacc6c31913416f24f38dec3544ac2e88c409b5ff7771d873ea8d7a1868775c8b5502273c784cf945680fb14f143140b56462cd46874ffeacde7bf329fe8369df9c4b95a42535ea56ad6fa260f5c738eb9627f890f4a34f80bf3b8fe568d44c3895029b5f9557f17469a53fe4c0d581eb29029ff162ca906cd0e4bb81138be91a254752bf849232ed7042a82cda1e14dfbfdf74a09c17a9039749c789ab0242ed2d0249231c4ad70c23c805676968bdeb96c2d8886f784ecc3e42e6493e45aa20b6e8ede65c49136c9e9414a4371e3012bf596d55315be17ea9396b1df7f82db27f0d121f8aa66c40365fa686a46f430b4cd336da0d9937d5c26284bdcc6c4e0d5a6acc1be089e1a5d6ec422ad3961fb5c5c9836466c3366e6d3f2686b19b529549cacb6252b0d7a7f5df42ea2961ac59ba0b911311ccc4d83f8611f0c4b071544236037b2863d673303a4e3d428131b07f60eb2cd507dc43503456ce829aed8254bf0b51b38008d42e445acb0effc2ab7e4bc26ad76ffba1220f2e878fe9b5de39bf4f25a9ed468cdb100008ffac6bef401df4817b23463e771a3c834c32993274689c01004eb94b89bc44257b7d2b3936caab6d86937b5bb8f705d00fb6f091711222b6dc25eeaa0e350fe484337396162c86bf7d3a1ab82591ad35d393664617041142c0f8b528e947c092f28c3142493d056bd548910615e7300f041f5d01a2f00138ae5d7849244ef9215f5c9dd874e60ca4ad883f86e71690a510831e35c24de1e0d1261172bf4a8625af958febb7b109c5ca5bfffd4342c43ad02136c6eb117b4a6ea98c07a91279731c1228b01e6be755c1c1d095d3cdfe950ac32eee77327a0e7e342ccfc13c69ab6ab113b18c1abe72d39c03e351986cb3326b8b17ada5884aa7d0a553b0d35e32b8c09f1a4106f5d675a88a1508de4a0e9c598c082ae5b229b75579e39e297b225a852e3f6a7d0990a45fdf68771991acf9b7a5c04bc21a40c57817d500e8ebc6b5919219a4110395817c92bf9eb9c623606d4d98ed68dc0b51a0278b0addce8753f86316158bb4bd6a7a0c4c72b0d17b9545695e54826021a6ac44b4de1b4ea977b20af3c47b8860b0ed29a68c1a883777097d54b162cc58edc0f4de1afbbad7c340a5cd9f2f93133cb2a4babc2a688e2ddd580ef8d9d0846c269c265ce9d978aa233c73aa11eb78d3a67f4e7a3dd035ef5a1f832ada87c7dfa377b77215f8c23b1a78e4a7faa6d0c1a4a28a0ef7b32b36bd566d8c478d0133ab43f9c2a4829624eec535234eb89a177ca8d4e9d2d422f33a24d15044822e4a4c1bca5f470b8c8fde09fb69160297218398da27f4e80dbd480782ee75cecd20ad23fdbcc1d4a0acbc63241c1e2cf1a0b12949e42f707ba06b6fdbd8f336bd72d7f96ddf9ec2b5cfcc4c8da6e1ea573e97eeaea537511ac9fd2ae78eb18cb50c13b595f8b6d65ce8c08e9028fffff6b512080dbbd3fb5e5068538c05f73254969f9727db9bff0c6aeaaf83713812499308792a7fc8318e6b2996bcd1b072641be1eb8e028cbd6b0a5f1fa13bfe35b5cd0d2ca21d9cf8ed97f724ef73ab5a99d65befa38d636f2f827d229479377f25501f3a6ece12cb095549503b2299db7806d32751d4851d62b0c6a91e2e961d475d33a8874c96df52c75bb5a0569e892743937451f75345e0351bfa334d37aa43f01ad1ff984dec164faebc713de31470db5e536a0681a042ced0f9839d9ce89259349075961985171c27c410c99458d4c25614ea1d4252293c4f85b0d2ded9ac560cfd024c199d5f0f4bd47763690ba1bca88b8cc81059bb9fe82c955488523114db8c2caf8a63c0049e90ca524330b57edcf718f6a7aab0efe282079d198cc3c1294f35d1a1bf5f69a8838cfc5d4363f9ca9383f83e4f9576de3fac48866ddcde282e5e4ee3f852a063bd6423ac1fdc6201b1facd6c36609fa2faf96afc1c0b76fff27bce059ad6390fd1e3f735806ce654ed555a78ea8e59fb16ff5ac5ad183aab9de37c3d033b3018d591e7ff1a896de969f561260f797603df5fc232076ccdc2e1fe9fc789253a54af151dd50f89e777c2541591101720c893647bd4b3e6257de85251c9bcd700154e85db2a9e2c4d9d2e531a18bfaa05d16ce75f823e60416b3afebce16555536120d5f554fd13e861d74c4947a62d2d09473d8d75f03d354572b371b02e16f3976b1b0b235582ee38d938fe843b107c77c2acd88f34e1669816eb3867134b1c5fce5afad3c70f9bca972ed494577f2ba6362a6ee6b4720bd86938bb49490982a1b5ce6dd54b79f093ce27051530e1233f03d6641392d4fe7a1f7dcec8ba86d8f32f00f0ad50a29b1e17de07bd0205c0d893532c198f23656f7f5d178c0745b7e0b7e8afdd29c8fa1639a06039980d9a5fba11801db4e7868a9b77925a03a770aae3430b1ccbddb8bd766f51fef71ba25cf9184c9cfa6f9921d69066d09a656080f3c5fe475ccab94cdfccd76f3c7dada9236d1be861eb5fe6247ae9f97b7705bb71c375e8b98203c5bd224202c1aa714da47e0daf98fd3eca617f9a255df5dbe98a7520a1e6db9b88af893521f2ecf7fd2b08a7f3c5aeb77ebe6f52739b473840889c41315407477b82242d9a805f9aa200a129c4701d1c88ccd34871f356caf02da9937a88612a9755315914f4e8e1bf471a46c00650457cc06db168e5457fb3f9662994d901a1f58306156979aa795afacc1a7d6111cbea53e97fb71c7bbe44558fb06f8d78ee08e3678b5d218e13f79cf06f1da9f7e128647884589c487147b3edbdaffa16f9388568d3c8caa34a6b944e4f171842cdbb293474fcd5201b7440e05ddcf9e0b476773119516ef45077705e8bab5f877657205bf9eaaa7c86734b1b6c3661dfd4b9eb8590f962e17ad51b44058d558744e5b44cf9db280bff1062b2431d298064f11e7700ba4c8ece6f4df659d4880c4983db0152f1f903023672f6234620134bd5d1d888022da128a527d82e8fa1a562827a4f1592efe3b0bb78060626e8688ef3d5162afe9f1060123dbb1f93b7bdb6ad4ad6e1772bf8705cca424d9c42e4992eb5bef1ec7961bd4260d1e55e863fa9c8e0cb6d28b495fa37b5f59fd18cfcec6319288dd7363821e47ec46664e1994157319eb0d466b42fd9b5fac5ba979a9baf4f699dc539bf77852e18014074f88108b654219e4f9396696c94eb9fb9b360e59920f187029608bed76d09dd006f4033d384cd109726d51850202ba564599dbff7808591f834cc4084db29111de86a70217defa490e39c6e281650d15b1e44bb55164be0f6da58e838bf5f4d7cc2a23b818557ab1fad0fb2253c4da6af41591940b2608f6fa6bc25939ede95317ff96050bbc1f389235caa78adc0d801a56b2fb4cc41e73d5131552985b5af241722e0637f3b88e46b09ea875e5cf66f534666368ff8e46413e5ab557236134afa63478e18328d33b1a235deb2034955cdbb2bfd0e55fd885f380ae8efca1feea985a946519a712df1384f9e024efec61c30a6989aa3b5bd486366f3fccadc0add175c1cf0d2730ab97370eb47bcda4226ee140edbcd9b38b8ee913587125cb185adb4df18e80df2b0ea6e3e87dc8755fe6823ab5ee1feaebb1e6208cf3dd5ad5581f2388be92", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0x0, 0x0, {0xfffffffe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f00000022c0)={0x50, 0x0, r6, {0x7, 0x9, 0x0, 0x2321810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x79ef, @rand_addr=' \x01\x00', 0xffff}], 0x1c) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) syz_fuse_handle_req(r5, &(0x7f0000006ec0)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004640)={0x78, 0x0, 0x5, {0xee9b, 0xffff9577, 0x0, {0x5, 0x7, 0x6, 0xd0d, 0x6, 0x70000000000, 0x9, 0x1, 0xe, 0x1000, 0xffff, r7, r8, 0xa, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r11, 0x40087447, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0xce}]}) 8m57.348782551s ago: executing program 1 (id=22): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) openat$vsock(0xffffff9c, &(0x7f0000000040), 0xc0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="640000001e0001002abd7000fbdbdf25fe88000000000000000000000000000100000494b0f439cb2d15bc79640f66d60a00ff00ac1414bb000000000000080000000000010000000235000024000900a8dd000000000000350700000000000002000000"], 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x20) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f00000001c0)="bf60fc6259dc798023723ddf758f0880734684ebaf83265f14bd28d3b8", 0x1d}, {&(0x7f0000000240)="b373e3d1bb7fe75f758e385d8e078b1873adc6c448b55dfd42eebbe3f62447be9c4552a5b04210e598806e47ca06b7", 0x2f}, {&(0x7f0000000400)="10642570651f2c18d974d671695028923e79161e554b213ca2c12c20e798e089c843bc9f1105b4257a2074d120f3257cda2648054f6efced538d0f956ba7c93642ce13c7c9c7513f308490a6c401a1ab3aad6c6e2cc307bf4a2e0956f7551a841c27d34fc89ac0a026061438b5c0c62ae6da54f362fd8e65eb0cc98e01886ec8d6bca08f819df9e7d1f4f385ed1ab4527ec01aa82a62823ee8e907974b368e921fcb2dcddde06bf2e6c678912bcac6d08e6a53c6a8c2", 0xb6}, {&(0x7f00000005c0)="56dba05dbd3164f52b609decdfed66e1172919e6d95cfd8cdb652e843ba4f7c139224040ff1126b53be70046e67b4bf07b727522c696dd8986faa528bbb7a064a94f0d0a9da2fafa9680a24dae8d7b31e67be24f6219b15c578b544a427e506daacea1ed04c61fab5145f93569a05add52cf4a7c0e5f69de5e15702f93b8cd62c0a35f3878f01a3c0a30918295b4ac683e1d3f87c6f22b49f55222a97acd802404d0f434283eb6105da6478043b1cb", 0xaf}], 0x4}, 0x10800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mount$9p_rdma(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}]}}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 8m57.1759429s ago: executing program 1 (id=25): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0xfff5, 0x4e20, 0xfffe, 0x2, 0x20}, {0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0xffffffff00000000}, {0x0, 0x5, 0x203, 0x80}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0603d06, &(0x7f0000000000)={0x6, 0xb}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05033600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x1ec4c0a2a33ccff5) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r10, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r10, 0xc0485660, &(0x7f0000000380)={0x1, 0x2, @raw_data=[0x7ff, 0x0, 0x5, 0xf5088d3e, 0x3, 0x100, 0x4, 0x0, 0xffff, 0x4, 0x549, 0x8, 0x5, 0x9, 0x0, 0x6]}) mlockall(0x3) sendmsg$IPSET_CMD_LIST(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000070601040000000000000000050000d1df000100070000000900020073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) 8m55.794249363s ago: executing program 1 (id=32): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00000008c0)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x180) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000100)={'\x00', 0xc, 0xff, 0xfb3, 0x2, 0x0, 0xffffffffffffffff}) wait4(r5, &(0x7f0000000140), 0x8, &(0x7f0000000180)) 8m54.84873543s ago: executing program 1 (id=35): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000717206c76ebe250967e2dd7a42ddb04d656c1244dd133e4b28716feab5f86356fe1330fcd095bf52dc514cc825355cdc8679134eacee7666fe3aed23a659a67e67d9ec6c809d16e573b2fff6647c32d934030d9fe85dac67e74e360"], 0x50) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf251400000008001d00", @ANYRES32=r0, @ANYBLOB="0c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0c00060002000000020000000c0006000300000003000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x890) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0xffffffff, 0x1, 0xffffffffffffffff, 0x100}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x50000, &(0x7f0000000140)=ANY=[]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000013bbcadc59e02afdc3a6d7"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0x80, r8, 0x4, 0x7}, 0x38) sendfile(r7, r7, 0x0, 0x1002000ff) userfaultfd(0x80001) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x8c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 8m32.919951986s ago: executing program 32 (id=35): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000717206c76ebe250967e2dd7a42ddb04d656c1244dd133e4b28716feab5f86356fe1330fcd095bf52dc514cc825355cdc8679134eacee7666fe3aed23a659a67e67d9ec6c809d16e573b2fff6647c32d934030d9fe85dac67e74e360"], 0x50) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf251400000008001d00", @ANYRES32=r0, @ANYBLOB="0c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0c00060002000000020000000c0006000300000003000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x890) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0xffffffff, 0x1, 0xffffffffffffffff, 0x100}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x50000, &(0x7f0000000140)=ANY=[]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000013bbcadc59e02afdc3a6d7"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0x80, r8, 0x4, 0x7}, 0x38) sendfile(r7, r7, 0x0, 0x1002000ff) userfaultfd(0x80001) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x8c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 7m52.715452008s ago: executing program 3 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x1, 0x800, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={r4, @in6={{0xa, 0x4e21, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0xff, 0x103}, 0x90) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x20000000fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000100)=0x1) dup3(r2, r6, 0x80000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xfd, 0x7, 0x4}, 0x9c) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000200)="41000200010078", 0x7) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000000)={0xfff, 0x5, {0xffffffffffffffff}, {}, 0x2, 0x6}) sched_setscheduler(r8, 0x2, &(0x7f0000000040)=0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) 7m51.434709603s ago: executing program 3 (id=310): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x69}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xffffffffffffffff, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185647, &(0x7f0000000080)={0x9e0000, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980906, 0xe, '\x00', @p_u8=&(0x7f0000000000)=0x79}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d96000100000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) write$binfmt_aout(r1, &(0x7f0000000500)={{0x108, 0x1d, 0xc1, 0x141, 0x2b9, 0x10000, 0x10, 0xecf}, "4418bde4a8f73b89fb2be81b515a538836bf04c58208c1aa40bf46a7b985266b243fcafb7303acb886979c2b207f69426e905e90cfb77566e95e366fda08697774bd2add1cdcf753ac6b737682143b4ec7d3bcdc751240a2efe95cf0ed37e689a8b76eeaa30489b30133201fb31c80c9cee0fe6a53e7f1c1c2772313ab6d90acc291b726de97cf340dc7f248cb32040a62949b3405946169129b6bf9f9366510b554a78789591d00d1bc401eecc8e3070c16e10065b6415f5748128cb35a10cc6025acd297eb56a8c7112d69fbe9c84a2e4c5e86b930c7", ['\x00']}, 0x1f7) 7m51.355830709s ago: executing program 3 (id=311): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x802, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000300000000000000040000001811225b", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000183a000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000a5325000ffffffff85200000010000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', r1}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="010100"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="020000000600"/20], 0x50) syz_emit_ethernet(0x87a2f, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000002200000227bd70005fdbdf2502800007f1000003120000002d0073852a27fcc2bd9bd6d6f4d54b56f114caf9a46fa216c9ca03b4e2e6ee0191141650059c79da3af58638c3672d2e5aa23fe30f1395dfe9e5702b969cc034416e9e024276543df65ac3dfbfe538d867d88628e7599b87237f52d3f4964d53512c892cf645b9eeba75f54f13d3bf97602654a4c1a786e2df6c5d52669a9e980216dc874de21c978c4ab3ff4ffa52c160d8fab038e9911829b29da7d8f9fe4e5d420115f1995cf10c99c17fd134f651b58ef223bb6f3ae88491f045b483eb219a89b6d48e14590b14875ccb4b7eae02a8ec22"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x8) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = userfaultfd(0x80001) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40020, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSSOFTCAR(r5, 0x80047437, &(0x7f0000000000)=0xa) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000be000/0x3000)=nil, 0x3000}, 0x3}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) 7m50.425968458s ago: executing program 3 (id=312): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x42042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000100"/28], 0x48) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x40, 0x9) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x880030, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c2efb9fb0000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d381000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130000000000000000000000e6ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, 0x0) openat(r6, 0x0, 0x1, 0x48) umount2(&(0x7f0000001280)='./file2\x00', 0x0) syz_open_dev$sg(0x0, 0xd45b, 0x582) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 7m49.335658832s ago: executing program 3 (id=314): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x35314142, 0x3, 0x0, [{0x0, 0xffffffff}, {}, {}, {0xffffffff}, {0x5}]}}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x5, 0x9, 0xffffffffffffff7d, 0x4, 0x0, 0x7fff, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x3, 0x3000000000000000, 0xb3, 0x8d], 0x25000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1}, 0x0, 0x0}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000100)) r4 = syz_ublk_setup_io_uring(0x2b59, &(0x7f0000000040)={0x0, 0x30b9, 0x0, 0x8000002, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000002d00)=0x0, &(0x7f0000000140)=0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, 0x0, 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000003100)={0x0, 0x1, 0x0, 0x1, 0x254}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x2000, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0xc0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x0, 0x0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000340)=0x13e) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r12, 0x4024587b, &(0x7f0000001dc0)={{r12, &(0x7f00000003c0)='\x00', 0x10000, &(0x7f0000000400)={@align=0x80000001, {0x9, 0x6, 0x3, 0xffffffffffffffff}}, 0x6c0, &(0x7f0000000440), &(0x7f0000000500)=0xffff4460}, 0x4, &(0x7f0000001d40)=[{0x2, 0xfffffffa, &(0x7f0000000540)='/}-\x00', &(0x7f0000000a80)="bc1ac232bce4dd893ae5e14fc83f7c91840faec20fe6683462f53909a803f43178d6b49617923842a8ab8659178d9e1e67d1a760b8ca91c3a2c45830dd0db33b77bcb1ac6ed84bb4d79c2a77aea54219407278fd6d0abdd0753ea5e42c2a0a3a41e89bb138d51d134188d8117bf78a17eee4cd2f456ed14e10da62deb2f1984fd0a3a44dcf36a7aeb2ec4ae1c51d54c44b3561fc8de117745eaf63e4e1bae3b9a43222c275a68b36bb53d262eb0cd912769a80bf944424ff464235b6884b088c1bbea7b9f4bec05307015650d76107274ebc12426810a379a2a01795ae738d267f5951e68540abac5f7d0a661c6eaf1ddea1132b9a5cce728d4130777e7485e8686821e3eb0142b5a75a279accc1fa8266568c49e746cd61c8d9ce39aeb88e95e89d26e8e7b64273f9b79b4b166b0dfa8730d518f6a9b601ae91bcdaf4cbaeb6c7d123ecd3dd3e951d59dd33d11ce34b07db30cc2e82aa77d9a4b1a08d99d6b761c36d573ceaff3b7b346edf03c91271c844a1116952ee36155e330be145e8ffad9ae830e9d755b2a75a1ab434a2ccfbe1c9a71ca648182022076ba4239034e896b76f15bc9048c66308db3ffe73f8be058136d703cc763429edd0ca6f8ad8edb9616f279bb5aa14ef75d43f768931aa8e2d841b932b2a11b709cfbf452544fe3f8ac8ace8ac783dfaa3a94cca315f7d3266250671ee9be36297510fa8f001e228e46ffbc6d1326698dc49d880a51ef2ea49bd61beca598e317db923d49f905146b1a1f94c47df32a592b5c7a6b548e8bb0c6382bd8e0a54002bd70f66110f1ff34d1d5745ae9de41b580b7c9ae0f39412d31d9a678ca6b4acd115d089697b9f65c90dedb00c0ce45cbbf379e00a2b5ac70f857c3ea41e6130b43e17e3f8fa8a487cdbb8a3a19496e19cb74b987f644fd155fba0fb7b9bf777ff8af8c1e7de44b8927515f5f2fdf0bd4d7e1a4a65a9745a0fb4dc207a60be0409ec076a09ae3aa7a0336ead20e0b7bc02ff4bc2f9a1c7d28790b4956d03baee515487300ed8014e337a54513ad9dcfd01eb95dd9aea9034a187568d0020d6ec5d878b06adea04af55289badfd24563634f93d1c8103777ca9a4043fead079a8cd92d223883139b09102b1207f1e609088cd9085dcc7df0d59f40a09f0c082d2bc28643b34dbc7420cf3e8c3693b6ad20a91f37d162eedc00679b7b314202a254bd089f120c95bfc34b6089baa414e0ed36be29284ebe1f5f212f4337d6dd4be2bf4a1316f9f14f7edf86c3381171819ccff5483f0f282ba1d94d1615aa243279e77ab1746362b20f542ce7e3910b85154325c15a532e520e85fa3989f69d6946eee0cb4201d0a37c767f1c61fb5dbf273e9f0d17c7a767e48b19cc19b57f515f00de091aaf94f62bab77a8cea1faa1409058829fd0ab9cbf64f219d6a5bfce469a60e2511828147a3b643e6d5c684dec89d86feff6cef86e62c2b6823314e4406fe68c7f56fbdd8ecd03fb9e9ffbfef7c0c085b5433c06735ad96dd4a90d669604813b6c9db076ad605ddb6812dbb267b09f2959ab10e2d681364d75f4c9d01241a39e47ff857d230013f89e67ab8066f23502f0f13b3a4ba9574d3f53973ccc7f7408223d5329397eb5f3b13af126774f39b577a575b215b70b5fb3dd51743f1db6666930fe5d0d875d980ff3ebd9b331b128c0ada48ff3d8fa95a25edbd896624bbc5914498af2ed50fb0a584c69288e7ce16e07ae419bd44a595e581e690308bcce8cc07c2f25a00543e55323892cd3ba660f5f9cba45d5bb3f528e296aa9f02c76f0742c24c400c44149a5a184a6383f074ce86dc90fc80d7bd4694cb8dcbd00790ac391390b955d94c48dbee504352c06269bc424469a166adbca4ee1143033d17345682f3e28afed0b7278ed754f625aea0590fa8f22d93ddd7581918ae070fa0809f61635603c062fbb683d2fb6136bbe8f775007634412a59602286994147d96049c345a76cb6f4f255cafc99587c1d4902e38c88a1f54ffc9682cf8fd82ed0324299681443341e36a7a822d5e5597c9481d0eb498f28eda02963096cbd0c325566d77cb5462b539c74fc90f549b640b1733a8ac222098d1d7a42f1872a193db6f472d211297726adfe9bb290850ebcdb4fc2e0872b62afe09859d7097852ed972119c0e62cdaec06e033eadcfc186ca1ed62aaabe4a4e47d71ef87386f381091d9bda4f7ed47f77322863e76bca1840a23b75c41561675a33ef1de5e24e46b5cb81ffcfce32d51cc67b8f817cc2c3a21ed2178430427682cb30bf77d631b373022a1b35f351369a35c37e2b635050e0d70254890816be4934afb8ad163282b2ba6cf61d1b6ee2b29194f9e92a19d9c0c21b1f9f23d490084c8bf2a44ad0e46f8506cba926658777db7bcfdd9826ec9814170017b791a936ad3a9cc3c0fcad875ec5301ed89180f685930d22cbcec1c45090b92122a1a208c1040c38836cbda15e406d275215e1c3d30e1b7e5238193951216cd43c724b5fcc5428c8ef6eba1ccc11f9a5661ac61ed9e348df21b055cc8e02057509086ffdac36a9a0f98c1a9b13a9c907fbb9449684304776f0786188b76f37ae89d832d785ab2b7ca42a56e8bcd15125d96946ca7dcd0be190585da64275d7c58b0d95533631158fade3b347de33a62848818c2c345fe6e7b6ed7eabd0db29d3336f35afd6fe902b2bdc5b2482000df9d6acdb4bf829a3edc91c691e86deb39023763aacf182a93a2d0b9d1f28e149383f10e012813a014206a5bafa007f85fe7254330cf97d06a04e823ee68e3a4c6053cdb164aeea5a42d73cab3cfeaedc9362fb4726f8adfca1474964c66094eb2fec91e0d76560cd91b055314dcf9708f736a715bb3bf00718f13f3b3d52f7a2a1077e65b5da4e71772e77380229dac692a7e4f4c8b51a8a04afe4d5ac3a05cd69e7be42373d6545fe3c6d8731debc45eb38948b1c4ab358ba188443d0dfd4904a460c3302b140d423cd8ff80bd4dae9d3ebf45750401b3d9376cf21cfb7ee744a8329cdf36674eee54134add21df8ee647296c9534b2cc36deb47e69c37bb2aa8a7b2e677c84ae60be5342cfd6007d4235b4df71f2b060f963c0fc224a076ae81c308830118810415fcf0bdbbe14075797aa5a3ab4330b1e773ca18cd141bb5895fb8fe78c0679869f0af7305f8e2b354871206f6045787708569ef6599f4bbf80245bdd8bbf29726cb110a26d170241f048caa2d535815187294c4c6449b303f5cce2ee126fbdd9f3fedc74f54631f5a42b0b512f077124263cc0e86c759e9af2438eb7a6bc24d55d361b9364ce326f00b99c7033b39add96aea0ee5724bd3a8012a686e2a5621aae221cda4f23cb8cccc915c0f56ea09b38277acc41dce704feea213313388ea5f43cc9bbfc1cd537d42f3177a3a0015e8716bdfb17be700ea1db73d5d9382a3b3d64cc0adfb6f69a470da8a6c22e3b78a363c2cd9dec12dad9ca20874dc36f7afee89a6149a784c398f686bc9423e10b209a0388bff9778bdfaf6d1d7fb2a2878c4f265e9984deef8e88558d5776092b4464bd3f51606ec99f1625e0f1fb845408cee8876445d84ef6e3ce2af6b652cb432582033182aa8632fe49f2b67649a2bbe3d9ec545da89a2939fcb185e3dac1c116ed45579a0c36327f41553fd5ab9f97f1f08fd25a3fd4c9a6b5fd4186873849f382819db38130391ec612c73f8db6e2e9c37de7c8b331a5f16e5945e216f22ea1d6f209c94edb04b2257364dd861382aba79c69ee4611834d37ad84bcd8d8a442978c5b59f274b3b852a54ef700e5246089dae7dc1c2497ea8d37800fc3cbc382a1da0728bb9afb0b3ed4bbcf707750a3e4801b4b8950991e3f2588009ca6e7f10596df31ec2df535d5bc24e312351e6b7825684ddfbeb54c45a1d04ce9803b0bb8ead94b2e696abcf0d11105d6c77f86349340cea2a37d7f87189052f5e71505f1328ece2df57f7f14e0b306f7b19b4e01411839da42308c39fe25c195c1de5c6faa2e0fb53d95b82189b8fe6a79ccb9474cd483cf54a852eea29ab74cb4f536e7492f1e19c0f8248440bd6af9f3ea5996f099a0f4717903c19c48499014e02f3528c69acba9fd87e080c902bb0af00b16cb383abff2070f03547ad601ac4f42941412088838551104dd69a891350ebfd6fb5b8dc9f22d4f298658e9d49694c44ee1fea5169d363d706fdce32a71eee05cf1fed2b5876411cb34435c6aa99fca6f255c0350873abb52535d16a691e3b0ad02b3b569c05d27ad785c2541994cdb6790e3d85c809a28211fd9fa8726e4081598a1cfe675771363b2004c7d7a2b4154d18052a87b6e9e06d5db00cdf4d0b0673bda1391c6eb053ca8049411184c9fd6c03a8fc4b9f29eaab9b1c748211005bb092e0dfe44c6eb4578ffc129aedd8af998ad424c6f6acd33e09e1f0b5483debd4c8f086d10a4c74f7af60f363c196c5dc8734426276fc2f5771391eb4bf7b91b89866f35f5e2fa396564a3c47d21de516e654471f172486542292675999e3fd2666f52dc52df0a0f4664f0e1da29914174aedcbe0210f462f1c5e59fb780574136aab1d7bc8ea497b551f3d65813c4d266ba4daeb93a89843011c96fed554667d914a215d4d57168d60f36ee4ad47a3d085ba5291d79afccfb705d0b65f9d6b64e6c00fdf36a2760a12e9dc64ba986e21dc15c6ae281b6e71e8171c4cd1d0fc1701d09a2429aadc38ed578a6b4e5d646466cc64087fbc1c1608b16ca2f83c4c43f0e194e7a06373f7b059a48832dc9ef94545d766801b7bc577dd689a935121e39674fe6c9eef1e6c4329307215a74104c1abdfdec8fb8a70381eec0d28a1aae75014d8657b4a9c01b38a852caa866634a993cadcbad0484f164ce1c9036682a25f13599194461eb00f975da6bcf868901858812d577644bccb15de4cc34bf82da14a34e3705d290aa3a56fa7fe7b68008d1765bd4436f2560b80dfec76329900ba0793fb5c83dddff061375bf30e95b79e29ddb6ae5d94fd27fa06cfd0aab7698962498576da33624e445f39f2948b7b4f4839d3331db973d85580eb42b0577e1f076e4cff34cea2a7aec1a63988d351e736e91ddfeec0021a57c09896593d8f9fcd6879eaea83a1d86ccaf170bea54a8186a9ae8a3275619768cc12c8b436190643bd3ee7c656abda3fa51b4ea8ae39e8b10cb5468f5c6c1c40087d8d1c1afeb60ac83e9f1cc61ab9892060c7161dae805c60778f55e6272e381c963cf636f9257978074b6f37c84b38e7dfa1a3001d7683da403e77741891f05ca5d498dd21909f298b69cc7df42dce799fd399187f51e3acabefafb49a33c26a2f13803400678076b3dcf7dd48a037c8a1fa5b597f550126bb2fe2e7f07257bac13ff0250caccbff0bb74f51fb3c3617a958f4b1f24755427a94bcf95fc0a84fc74f76b7f6166cb3f2cd8c991e9315cb12279fe6b322e9e2f1e58787cfbf3e9da70aa006749c18842664e66c3105794c6de04a29b339f26f3014e7aa4aa7b9132a9edc138c1a8155d051003c985b63cd76ab36e6022edcf1e54a46383ec2e68c86ec3acfa01a72e5266022b849c3a6ab46dae17081cb1a1347fabb22cedc163c289d136a1e80253400db034da670c2b04f72cbff8c4f0cd00822c734afa5a3c37b30c386968274f0793f5cd3b741d262625d25adaedd607de286f44cb60319cba2417e7078842a4927f67ba16824b8ef14b589c4dd94225d21842546f3958200dc188d0db882be92caf13e92e797cffe77c9a8804d553df94", 0x1000}, {0x2, 0x7fffffff, &(0x7f0000001a80)='$\x00', &(0x7f0000001ac0)="d7c1a0839bfe2949f62f23154b090a0cac6e54f85c3677820e69a90a59057a49e79df3273f9d3943b0c391d0897a3b3258387d60a4849f89ef6e315cf1a4762d4546498fe0a7404fdec5f103702a4f50", 0x50, 0x8}, {0x1, 0xb39, &(0x7f0000001b40)='/dev/kvm\x00', &(0x7f0000001b80)="034c291844f41900861105f3393fe227e5d0b3ba717ace7326deb9529d3be334074e50f3ce58903a8d505d00c3bc7ce79630eef5acf0223df0d6f578f3a36f88bc8fff74a4fef7e782453a9959f1cff5d0f063", 0x53, 0x32}, {0x1, 0x400, &(0x7f0000001c00)=']%\x00', &(0x7f0000001c40)="d51b28f18aa743c5cfed142755734d7e465d31096ca20ec7eb95312fff029eb9aaa56640dc06436e93828627c47fb6f6f5f63ce76b7eec5742ff700170882dc6814ec8cae2ff5a1f17205226db3d9cfebb7da80daad04608d759671d5f51fca42b59201ca89fb18680e1c9303a80aa0dece329c77106dcf884732258729171ab8fe76b02dc5d7eefc8f0f7891c8a82e8b2b9756162438df7b19e5ab71613a4bedf22f9bc9cbab12be63a8d5dcc904b44ec1a678face787ceb0a24be6fe8c048ccb390bff9bb03d", 0xc7, 0x1a}]}) fstat64(r13, &(0x7f0000001e00)) close(r10) openat$binderfs(0xffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0) 7m48.422862385s ago: executing program 3 (id=317): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x20, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x74c920689c38ea7e) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xe, {[@global=@item_012={0x0, 0x1, 0x5}, @main=@item_4={0x3, 0x0, 0xc, "387e6986"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_4={0x3, 0x0, 0xb, "46d02100"}, @local=@item_012={0x0, 0x2, 0x8}]}}, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000180)={0x1, 0x8}) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) r5 = openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000100)={0x1000, 0x1, 0x4, {0xd, @sliced={0xb0f6, [0x100, 0xf, 0x8, 0x0, 0x101, 0x7, 0x1, 0x0, 0x7, 0x3, 0x2, 0x7, 0x40, 0x4, 0xb730, 0x400, 0x1bad, 0x80, 0x1, 0x5, 0x1, 0x7f, 0x2, 0x7ff, 0x84, 0x8, 0x3, 0xa, 0x4, 0x6, 0x1, 0x7, 0xd56, 0x3, 0x6, 0xd, 0x3a5, 0x37, 0x3, 0x2d89, 0x6, 0x6, 0xd, 0x6, 0x1, 0x3, 0x6, 0x10], 0x8}}, 0xffff0001}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200000ffc000) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x99, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x2, 0x1, 0x8, 0xb0, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0xf75, 0xc0}, {0x6, 0x24, 0x1a, 0x0, 0x18}, [@mbim={0xc, 0x24, 0x1b, 0x8001, 0x3, 0x5, 0xfd, 0xc2e, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x3, 0xface, 0xd, 0x10, 0x98, 0x7f}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x7ff, 0x3, 0x5, 0x1ff, 0x1}, @dmm={0x7, 0x24, 0x14, 0x2, 0x101}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x38, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7f, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0xcf, 0xf4}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0xce, 0x9, 0x0, 0xff, 0xf7}, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="050f0f00a8d9a8d056b813f1ab1dce790d1bf988c1be77a28b1d46ec65c4aa506579493ff2b0f62dd84f46704b78af8a251b34c707f31431c8a6b55e906b2e5966b3370c5090cf0a2fdccf84434b5bf51b421a820188965c9483"], 0x6, [{0xfe, &(0x7f0000000640)=@string={0xfe, 0x3, "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"}}, {0xc, &(0x7f0000000740)=@string={0xc, 0x3, "fbec4e9ce9f44e06575b"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4}}, {0x3e, &(0x7f00000007c0)=@string={0x3e, 0x3, "15889b8d74e826626c641508c71412479c044b73c1180f7be2c95669cd1bcd4fe05489c4e091348178e35389cd288615868ec696110ca3ab379bacde"}}, {0xbc, &(0x7f0000000800)=@string={0xbc, 0x3, "e3c7b2d45f503dbf1b6f4fbc43d836bb236a9822fb3c3a86263c25d268a22542b79a0a02fc475b8d65dedf5d07fa392464eeacbd9309d40e32a1b51dff4dbfd80ac690e9a64290d77bfaa0d487af6258bcbbf1985575a270204917fcb222472807fad2a0992478fc232330c2d3993eeffdcc9c5104b7862f61039cf837a041eeb310cebab534ea1a328a0efd0deded908450462af30f89a4975ba573247e8dbfff1c021d95ea6bd3d6ebedfe84fb43a120d9f8cfab982febb76c"}}, {0xdd, &(0x7f00000008c0)=@string={0xdd, 0x3, "d8d2fa1320ec55fde506c9baefc3bb00b1266165837c44cf884f627730c0319c91f0e53dc37d75d6810ffb463883e6a90b280c909b434b84c1ef2b8857fdbe0b27f3132aa6fa78ae679cf2f1cec2dab40cd6be0433c3dc4e7ead44735ff561f94faeb9e7fcd4ee18dbe0158c6c7e40c1cbf28c3b5648adad2eb717ae13a408f7ea167602d633c3a63bc53d08542d8cd130bcfc19d2f1044ecec0e5f216cc2fb68cfcf035bcc29c20fbb51164020e6a13a3fa9ae815c9215eff8c7e481a4e2c4c7efb13a3dcba4d30cbe60107828f5f6d7b3b8e5bec540c8970bfa8"}}]}) sendmsg$nl_route(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xde23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000080)={0x8, 0x2, 0x1, 0x0, 0x7f}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000240)=@multiplanar_mmap={0x20, 0x2, 0x4, 0xe000, 0x1, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a950fd28"}, 0xfffffffe, 0x1, {0x0}, 0x3}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/43, 0x2b}], 0x1, 0x42, 0x116d) syz_usb_disconnect(0xffffffffffffffff) 7m33.059747317s ago: executing program 33 (id=317): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x20, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x74c920689c38ea7e) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xe, {[@global=@item_012={0x0, 0x1, 0x5}, @main=@item_4={0x3, 0x0, 0xc, "387e6986"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_4={0x3, 0x0, 0xb, "46d02100"}, @local=@item_012={0x0, 0x2, 0x8}]}}, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000180)={0x1, 0x8}) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) r5 = openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000100)={0x1000, 0x1, 0x4, {0xd, @sliced={0xb0f6, [0x100, 0xf, 0x8, 0x0, 0x101, 0x7, 0x1, 0x0, 0x7, 0x3, 0x2, 0x7, 0x40, 0x4, 0xb730, 0x400, 0x1bad, 0x80, 0x1, 0x5, 0x1, 0x7f, 0x2, 0x7ff, 0x84, 0x8, 0x3, 0xa, 0x4, 0x6, 0x1, 0x7, 0xd56, 0x3, 0x6, 0xd, 0x3a5, 0x37, 0x3, 0x2d89, 0x6, 0x6, 0xd, 0x6, 0x1, 0x3, 0x6, 0x10], 0x8}}, 0xffff0001}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200000ffc000) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x99, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x2, 0x1, 0x8, 0xb0, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0xf75, 0xc0}, {0x6, 0x24, 0x1a, 0x0, 0x18}, [@mbim={0xc, 0x24, 0x1b, 0x8001, 0x3, 0x5, 0xfd, 0xc2e, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x3, 0xface, 0xd, 0x10, 0x98, 0x7f}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x7ff, 0x3, 0x5, 0x1ff, 0x1}, @dmm={0x7, 0x24, 0x14, 0x2, 0x101}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x38, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7f, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0xcf, 0xf4}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0xce, 0x9, 0x0, 0xff, 0xf7}, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="050f0f00a8d9a8d056b813f1ab1dce790d1bf988c1be77a28b1d46ec65c4aa506579493ff2b0f62dd84f46704b78af8a251b34c707f31431c8a6b55e906b2e5966b3370c5090cf0a2fdccf84434b5bf51b421a820188965c9483"], 0x6, [{0xfe, &(0x7f0000000640)=@string={0xfe, 0x3, "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"}}, {0xc, &(0x7f0000000740)=@string={0xc, 0x3, "fbec4e9ce9f44e06575b"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4}}, {0x3e, &(0x7f00000007c0)=@string={0x3e, 0x3, "15889b8d74e826626c641508c71412479c044b73c1180f7be2c95669cd1bcd4fe05489c4e091348178e35389cd288615868ec696110ca3ab379bacde"}}, {0xbc, &(0x7f0000000800)=@string={0xbc, 0x3, "e3c7b2d45f503dbf1b6f4fbc43d836bb236a9822fb3c3a86263c25d268a22542b79a0a02fc475b8d65dedf5d07fa392464eeacbd9309d40e32a1b51dff4dbfd80ac690e9a64290d77bfaa0d487af6258bcbbf1985575a270204917fcb222472807fad2a0992478fc232330c2d3993eeffdcc9c5104b7862f61039cf837a041eeb310cebab534ea1a328a0efd0deded908450462af30f89a4975ba573247e8dbfff1c021d95ea6bd3d6ebedfe84fb43a120d9f8cfab982febb76c"}}, {0xdd, &(0x7f00000008c0)=@string={0xdd, 0x3, "d8d2fa1320ec55fde506c9baefc3bb00b1266165837c44cf884f627730c0319c91f0e53dc37d75d6810ffb463883e6a90b280c909b434b84c1ef2b8857fdbe0b27f3132aa6fa78ae679cf2f1cec2dab40cd6be0433c3dc4e7ead44735ff561f94faeb9e7fcd4ee18dbe0158c6c7e40c1cbf28c3b5648adad2eb717ae13a408f7ea167602d633c3a63bc53d08542d8cd130bcfc19d2f1044ecec0e5f216cc2fb68cfcf035bcc29c20fbb51164020e6a13a3fa9ae815c9215eff8c7e481a4e2c4c7efb13a3dcba4d30cbe60107828f5f6d7b3b8e5bec540c8970bfa8"}}]}) sendmsg$nl_route(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xde23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000080)={0x8, 0x2, 0x1, 0x0, 0x7f}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000240)=@multiplanar_mmap={0x20, 0x2, 0x4, 0xe000, 0x1, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a950fd28"}, 0xfffffffe, 0x1, {0x0}, 0x3}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/43, 0x2b}], 0x1, 0x42, 0x116d) syz_usb_disconnect(0xffffffffffffffff) 6m29.911871654s ago: executing program 4 (id=574): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001000000000000000"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$sndctrl(0x0, 0x1, 0x48001) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5ede4a12) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000003c0)=0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000006e40)=[{{&(0x7f0000000400)=@qipcrtr, 0x80, &(0x7f0000000980)=[{&(0x7f0000000480)=""/230, 0xe6}, {&(0x7f0000000640)=""/132, 0x84}, {&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f0000000900)=""/69, 0x45}], 0x4}, 0xb5e}, {{&(0x7f00000009c0)=@alg, 0x80, &(0x7f0000004240)=[{&(0x7f0000000580)=""/35, 0x23}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/82, 0x52}], 0x3, &(0x7f0000004280)=""/165, 0xa5}, 0x4}, {{&(0x7f0000004340)=@nfc, 0x80, &(0x7f0000004700)=[{&(0x7f00000043c0)=""/135, 0x87}, {&(0x7f0000004480)=""/32, 0x20}, {&(0x7f0000000700)=""/114, 0x72}, {&(0x7f0000004540)=""/8, 0x8}, {&(0x7f0000004580)=""/239, 0xef}, {&(0x7f0000004680)=""/50, 0x32}, {&(0x7f0000000780)}], 0x7, &(0x7f0000004740)=""/173, 0xad}, 0x6196}, {{&(0x7f0000004800)=@nfc_llcp, 0x80, &(0x7f0000006940)=[{&(0x7f0000004880)=""/40, 0x28}, {&(0x7f00000048c0)=""/39, 0x27}, {&(0x7f0000004900)=""/250, 0xfa}, {&(0x7f0000005880)=""/4096, 0x1000}, {&(0x7f0000006880)=""/147, 0x93}], 0x5, &(0x7f0000006980)=""/214, 0xd6}, 0x28bc8bdc}, {{0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000006a80)=""/94, 0x5e}, {&(0x7f0000006b00)=""/131, 0x83}, {&(0x7f0000006bc0)=""/136, 0x88}, {&(0x7f0000006c80)=""/159, 0x9f}], 0x4, &(0x7f0000006d80)=""/154, 0x9a}, 0xb}], 0x5, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000380), 0x0, 0x94100) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) timerfd_create(0x1, 0x80800) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000080), 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000006f00)=@delchain={0x2150, 0x65, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7, 0xd}, {0x0, 0xf}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xc}, @filter_kind_options=@f_bpf={{0x8}, {0x188c, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0x4}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x828, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x4, 0x0, 0x2, 0x4, 0x1, 0x6, 0x8, 0x6, 0x7, 0x276, 0x800, 0x8, 0x5f7, 0x1, 0x0, 0x3, 0x8, 0x3, 0x1, 0x7, 0x2, 0x552, 0x4, 0x0, 0x7, 0x8000000, 0x7, 0xb1, 0x6, 0x0, 0x3, 0x4, 0x5, 0x894e, 0xb5a, 0x97, 0x7ff, 0x0, 0x7ff, 0x7fff, 0x6, 0x7f, 0x8000, 0x0, 0x300, 0x3, 0x6, 0x1, 0xf, 0xbef, 0x76cc3240, 0x80000001, 0x7ff, 0x8, 0xffff, 0xb8f, 0x8000000, 0x2, 0x7, 0x5, 0x7, 0x100, 0x101, 0xbe, 0x400, 0x1, 0x1000, 0x49, 0x3, 0x2, 0x6, 0x5, 0xfff, 0x61, 0x2, 0x1e3, 0x2, 0x3, 0x2, 0xfffffffa, 0x1632, 0x9, 0xff, 0x5e1, 0xb876, 0x4, 0x1, 0x8276, 0xffffffda, 0x2, 0x1, 0x9, 0x0, 0x1, 0x7, 0x6, 0xd7, 0x28a4, 0x4, 0x9, 0x2, 0x2, 0x1, 0x6, 0x3, 0x0, 0x8, 0xf, 0x7445, 0x2, 0x3, 0x8000, 0x80000001, 0x3, 0x4, 0x44, 0x3, 0x5, 0x2, 0x9, 0xfffffffb, 0x3, 0x7ff, 0x200, 0x400, 0x8, 0x5, 0x55, 0x9, 0x0, 0x10000, 0x8, 0x1, 0x62e, 0x8, 0x183, 0x9, 0x40, 0x9, 0x7f, 0xa88, 0x10, 0x4, 0x8, 0x6, 0x6, 0x9, 0x0, 0x1, 0x874, 0xfff, 0x7, 0xf, 0x3, 0x8, 0xffffffff, 0x3, 0x4, 0x10, 0x5, 0x3, 0x101, 0x0, 0x2c, 0x0, 0x6, 0x1, 0xd, 0xffffffff, 0x6, 0x8, 0x8001, 0x400, 0x5, 0x9, 0x8, 0x9, 0xfffffffa, 0x7045, 0x8, 0x7, 0x3, 0x100, 0x80, 0x4, 0x5, 0x1000, 0x81, 0xffffffff, 0x80, 0xfffffffe, 0x9, 0x9, 0x3, 0x7fff, 0x7ff, 0x9, 0x25, 0xd, 0x3e7b, 0x10000, 0xfffffff7, 0xffff0000, 0x312, 0x7, 0x94fc, 0x4a0, 0x4e7, 0x46, 0x95, 0x800, 0x1000, 0xffffff7f, 0xfffffffb, 0xfffffff7, 0x39e, 0x98, 0x8, 0xe, 0x200, 0xfffffffe, 0x8, 0x2, 0x10000, 0x24e0, 0x614, 0x8, 0x0, 0x7, 0x8, 0x7, 0x3, 0xe000000, 0x8, 0x8001, 0x5, 0x6, 0x15b5, 0x4, 0xc828, 0x10000, 0x1, 0x6, 0x2, 0xffffff81, 0x4296e51d, 0x3, 0x5, 0xfffffffb, 0x80000001, 0x890, 0xfffffff8, 0x7, 0x7fffffff, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x400}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x1, 0x5, 0x10001, 0x7, 0x39, 0xc58, 0x8, 0x69df, 0x9, 0x2e, 0x10, 0x2, 0x9c8e, 0xe, 0x1, 0x6, 0x5, 0xfffffffe, 0x8, 0x6, 0x24, 0x200, 0x86a, 0x3, 0x2, 0x0, 0x288a7157, 0x7, 0x7, 0xfffffff0, 0x55, 0x8, 0x3, 0x7, 0x5, 0x3, 0x7, 0xfff, 0xd0, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x3, 0x4, 0x3ff, 0x1ff, 0x9, 0x10, 0x7, 0x40000000, 0xfffffff1, 0x94, 0xff, 0x0, 0x2, 0xffffffff, 0x5, 0xfffffffd, 0x6, 0x6, 0x4e, 0x8, 0x7, 0x99, 0x4, 0x8, 0xfffffff7, 0xd1f, 0x100, 0x200, 0x2, 0x0, 0x9df, 0x2, 0x0, 0x7, 0x6, 0x3, 0x3, 0xb5, 0xd, 0x9, 0xe, 0x84, 0x10001, 0x6e, 0x2, 0x7f, 0x6, 0x6, 0x40, 0x2fac, 0x1000, 0x2, 0x4, 0x400, 0x0, 0xd2, 0x6, 0x8, 0x800, 0xffff, 0x6, 0xa, 0x9, 0x80, 0xa9, 0xb7, 0x81, 0x8, 0x3, 0xc5, 0x8, 0x3, 0x1, 0x2, 0x5, 0xe5, 0x0, 0x2, 0x200, 0x1, 0xff, 0x7, 0x7ff, 0x9, 0x1, 0x2, 0x8, 0x4, 0x8001, 0x2, 0xc6, 0x3, 0x51a87cf8, 0x10, 0xfffffff7, 0x5f43, 0x10001, 0x2, 0x7, 0x0, 0x0, 0x8, 0x4, 0x522, 0x3, 0x0, 0x18d, 0x4, 0x1000, 0x0, 0x2, 0x8, 0x2, 0x560, 0x6, 0x7, 0x8, 0x5, 0x10001, 0xe974, 0x5, 0xfffffffc, 0x40, 0x81, 0x5, 0x8, 0x200, 0x7ff, 0x7, 0x4, 0x9, 0x80dd, 0x2, 0x9, 0x101, 0xffff8001, 0x5b3190be, 0x3, 0x10, 0x8, 0x6, 0x0, 0x8, 0x3, 0x3ff, 0x2, 0x1b, 0x4, 0x5, 0x7f, 0xff, 0x5, 0x7, 0x10001, 0xfffffff1, 0x4, 0x8001, 0x3, 0x9, 0xfffffff8, 0xc, 0x80000000, 0x5, 0x1, 0x7, 0xfffffff1, 0x8, 0x0, 0xd, 0x62c8, 0xfffffff8, 0x7d336ede, 0xfffffff9, 0x100, 0x1eb80000, 0x0, 0x6, 0x4, 0x1, 0x1, 0xf, 0x4, 0x9, 0x3, 0x6, 0x9d, 0x6, 0x6, 0x1b2, 0x1, 0xfffffe00, 0x10000, 0x1, 0x101, 0x5, 0xb0, 0x0, 0x10, 0x9, 0x7, 0x74b2, 0x7, 0x6, 0x7, 0x200, 0x5, 0x0, 0x8, 0x8, 0xfffffffe, 0x192]}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_POLICE={0x1028, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x9, 0x20000, 0x7fffffff, 0x8, 0x5, 0xff, 0x6, 0xffffad75, 0x8001, 0x1000, 0x4, 0x9, 0x8, 0x80000000, 0x6710, 0x430, 0x2, 0xb, 0x9, 0x8, 0x9, 0x6, 0x40, 0x80000001, 0x0, 0x6, 0x9, 0xff, 0x2, 0xffc00000, 0x0, 0x800, 0x8, 0xfffffffa, 0x1, 0x19, 0x0, 0x6, 0x0, 0x7, 0x7, 0x81, 0x7, 0x1, 0x1, 0xfffffffb, 0x9, 0x2, 0x8, 0xe, 0x9, 0x1000, 0x7, 0x200, 0x9, 0x401, 0x7fffffff, 0x0, 0x6, 0xfff, 0x6, 0x3, 0xffff, 0x4, 0xa, 0x4, 0x9, 0x2, 0xf, 0x7fffffff, 0xbafdb581, 0xc, 0x2, 0x10000, 0x9, 0x7d54, 0x4, 0x0, 0x0, 0x8001, 0x43, 0x8, 0x136, 0xfffffc00, 0xfffffffc, 0x5, 0x6, 0x800000, 0x2, 0x4, 0x4, 0xfffffff9, 0x4, 0x0, 0xfff, 0x8, 0xfffffff8, 0xd, 0x7, 0xffffffff, 0x1, 0xa21, 0x8, 0x7, 0x0, 0xffffb78f, 0x401, 0x6, 0x920b, 0x1, 0x2, 0x3, 0x3, 0x8, 0x2, 0x3, 0x7, 0x0, 0x8, 0x0, 0xa, 0xfffffffa, 0x8, 0x1, 0xf, 0x5, 0x439ba269, 0x81, 0x8001, 0x8, 0xffffffff, 0x2, 0xffffffff, 0x7, 0xff, 0x0, 0xa, 0x6, 0x7f, 0x6, 0xdd, 0xeb, 0xfffffffe, 0x6522, 0x5, 0x7f, 0x7803, 0xd1d, 0x6, 0x81, 0x5, 0x5, 0x1, 0x2aa, 0x9, 0x1, 0x81, 0x3, 0x6, 0xf, 0x40, 0x592aef91, 0x3, 0x8, 0x0, 0xffff, 0x0, 0x78c, 0x9, 0x1041691, 0xa, 0x1, 0x1, 0x486, 0xffffffff, 0xf, 0x3, 0xed1c, 0x7f, 0x5, 0x3, 0x7, 0xfffffffc, 0x40, 0x9d4b, 0x46a3b90b, 0xa29, 0x200, 0x5, 0xfffffffd, 0x80000001, 0x4, 0x7ff, 0x4, 0x3, 0x9, 0xff, 0xe, 0x3ff, 0x8, 0x80000001, 0xffffffff, 0xa3, 0x1, 0x7, 0x80000000, 0x4, 0x4, 0x80, 0x81, 0x5, 0x10, 0x5, 0x0, 0x41, 0x7ff, 0x7, 0x9, 0x0, 0x7, 0x7f, 0x7f, 0xfffffff9, 0x7fff, 0x1, 0x425e, 0x6, 0x2, 0x5, 0x7fffffff, 0x6, 0x8, 0x0, 0x2, 0x3, 0x2, 0x8, 0x8, 0x8, 0x1, 0x2, 0x4, 0x3, 0x0, 0x6, 0x8, 0xfff, 0x8, 0x623, 0x4, 0x4, 0x5, 0x7, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3, 0x7ff, 0x21, 0x9, 0x4, 0xc, 0x800, 0x5102ebcc, 0x10001, 0x40, 0x3, 0x5, 0x3d9, 0x7fffffff, 0xffc00000, 0x6, 0x40, 0x5, 0x6, 0x9, 0xee, 0x5, 0x6, 0x3, 0x7, 0x6, 0x200, 0x3ff, 0x3, 0x5, 0x0, 0x9, 0xd2a, 0x8f9, 0x7, 0x2, 0x2, 0x81, 0x9, 0xffffffff, 0x100, 0x9, 0x5, 0xd, 0x1f4, 0x4, 0x7c9a, 0x0, 0xff, 0x5, 0x7, 0x1, 0x5, 0x3ff, 0x9, 0x3, 0x78, 0x6, 0x80000001, 0x4, 0x101, 0x4, 0xb299, 0x0, 0x4a, 0x3, 0x72, 0x8000, 0x92e, 0x4, 0x7, 0x1, 0x8, 0x7, 0x0, 0x7ac, 0x1, 0x800, 0xf, 0x9, 0xb4b5, 0x9, 0x6, 0x8001, 0x0, 0x800, 0x8, 0x2, 0xfffffffd, 0x5, 0x3, 0x4, 0x8, 0x5, 0x100, 0x2, 0xff, 0x10001, 0x97, 0x200, 0x418c, 0xfffffff7, 0x401, 0x5, 0x8000, 0x3, 0x5, 0x3, 0x8001, 0xb3d2, 0x1, 0x4, 0xfa9, 0x4076d3d6, 0x7026, 0x10, 0x4919, 0x5, 0x5b13, 0x401, 0xda1, 0x100, 0x0, 0x3, 0x2, 0x7, 0x9, 0x2, 0xd000, 0x2, 0x4948edb0, 0x4, 0x3, 0x9, 0x2, 0x0, 0xd0a8, 0x8, 0x7, 0x4, 0x3, 0x2, 0x9, 0x0, 0xd, 0x9, 0x77, 0xff, 0x7f, 0x1, 0x6, 0xf6d5, 0x452557ce, 0x54, 0xffffffe9, 0x8e8, 0x4, 0x1000, 0xfffffffd, 0x7, 0x6, 0xd, 0x80000001, 0x5, 0x80000000, 0xb7, 0x3, 0x40, 0x1, 0x7f, 0x90, 0xffff, 0x9, 0x9, 0x4, 0x8, 0x7fff, 0x1000, 0xd, 0x9, 0x1f86, 0xaef9, 0x4, 0xc596, 0x804, 0xffff, 0x9, 0x4, 0x6, 0x0, 0x6, 0x800, 0x6, 0x4, 0x401, 0x1524, 0x2101, 0x7, 0x0, 0xfffffffe, 0x2, 0x5, 0x0, 0x5, 0x7, 0x9, 0xe, 0x2, 0x7, 0x7, 0x1, 0x200, 0x9, 0x4, 0x8, 0x101, 0x7, 0xe, 0x101, 0x401, 0xffffff80, 0x4, 0x9, 0x5, 0x0, 0xfffffffa, 0x3, 0xf5d6dc46, 0x3c30, 0xe307, 0x2, 0xbb26, 0xffffa518, 0x1, 0x63, 0x3954, 0x8, 0x92d, 0x10000, 0x8, 0x7f, 0x1, 0x2, 0x8, 0x1, 0x4, 0x2, 0x3, 0x8, 0x1, 0xffff, 0x0, 0x10, 0x5, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xabe, 0x1, 0x3ff, 0x0, 0x7f, 0xfffff4dc, 0xfad5, 0x6, 0x3fffc000, 0x2, 0x9, 0x3ff, 0x5, 0x7092, 0x1, 0x0, 0x3, 0xffffa5bf, 0x5, 0x2d, 0xb, 0x7f, 0x4, 0x0, 0x401, 0x6, 0x4, 0xfffffffe, 0xc, 0x5800000, 0x3db, 0xc20, 0x4, 0x38, 0x5, 0x8, 0xb, 0x8, 0x2, 0xffff, 0x80, 0x7, 0x30, 0x5, 0x8001, 0x4, 0x328b9a2f, 0x1, 0x7, 0x19d0502f, 0x3ff, 0xd5b, 0x7, 0x7f, 0x5, 0x0, 0x3, 0x1, 0x9, 0x8, 0x1, 0xbb1d, 0x8000, 0x7, 0x5, 0x3ff, 0xe, 0xe, 0x80000001, 0xa0d, 0x7f, 0xc20c, 0x1, 0xc67, 0x8, 0xb, 0x6, 0x100, 0x2, 0x10, 0x1, 0x0, 0x1, 0x5, 0x10000, 0xbd, 0x0, 0x2, 0x7, 0x8, 0x9, 0x6, 0x5, 0x9, 0x1, 0x7, 0x39, 0x3, 0x3, 0x7, 0x7, 0x1, 0x2, 0x200, 0x7, 0x2, 0x3ff, 0xffffffcb, 0x0, 0xffffffff, 0xa0ff, 0x4, 0xaa, 0x1ff, 0x101, 0xe2, 0xbdea, 0x3, 0xc551, 0x1, 0x10, 0x1, 0x4, 0x408a, 0x3, 0x2d, 0x0, 0x3, 0xd7, 0x2, 0x1, 0x8001, 0x0, 0x5, 0x6, 0x0, 0x101, 0xd, 0x2, 0x9, 0x0, 0x6, 0xa000000, 0x8001, 0x3, 0xfff, 0x80, 0xd8c00000, 0xf9, 0x14f1, 0x8, 0xd, 0xb6, 0x6, 0x4, 0x200, 0x7fff, 0xfffffff4, 0x0, 0x25, 0x9, 0x101, 0x0, 0x2, 0x5, 0x7, 0x10001, 0x5, 0xbc, 0x1, 0x1, 0x0, 0x9, 0x1, 0x6, 0x660, 0x3, 0xfff, 0xc83, 0x3ff, 0x4, 0x10001, 0x5, 0x5, 0x5, 0x1, 0x1, 0x8, 0x5, 0x5, 0x1000, 0xcea, 0x7, 0xfffffffb, 0x3, 0x2, 0x8, 0xe, 0x8, 0x1, 0xffffffff, 0xffffbb2b, 0x10, 0xae, 0xdfe, 0x0, 0x4, 0x31, 0x3, 0xe, 0x3, 0xf06e, 0xf, 0x6, 0x4000, 0x8, 0x5, 0x10, 0x0, 0x6, 0xfffffff7, 0xffff7fff, 0x4, 0x7, 0x6, 0x7, 0x10000, 0xfff, 0x6, 0x401, 0x0, 0x5, 0x1, 0xfffffffa, 0x7, 0x9, 0x3, 0x0, 0x1, 0x101, 0x100, 0x5, 0x4, 0x7fffffff, 0x1, 0x8, 0x3, 0x8, 0x7, 0xffffff81, 0x1, 0x1b9, 0x6, 0x101, 0x0, 0x242b]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf4}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xfffffff9, 0x3, 0x1, 0x5, 0x6, 0x2, 0x3, 0x7, 0x6, 0x7e, 0xa, 0x2, 0x9, 0x7, 0x7d2, 0x89f, 0x4, 0x5f6b, 0x2, 0x5, 0x4, 0x7, 0x1, 0x3, 0xfffffff2, 0x0, 0x4, 0x1, 0xba9e, 0x1, 0x40, 0x6, 0x401, 0x1, 0x4, 0xd, 0x8, 0x70, 0x4, 0x7, 0xfffffffd, 0xd19, 0x7, 0x9b, 0x6, 0x2, 0x6, 0xb, 0x9, 0x6, 0x101, 0x50, 0x21, 0xd, 0x2, 0x3, 0x7, 0x7, 0x0, 0x7, 0xfffffffa, 0x0, 0x2, 0x2, 0xc, 0xfffffffe, 0x1, 0x3, 0x9, 0x0, 0x3, 0x1, 0x2, 0xffffffff, 0xfffff9d2, 0x2676ca66, 0xfffffffe, 0x5, 0x3, 0x1, 0x3, 0xffffffff, 0x2, 0xff, 0x3, 0x9e2, 0x7, 0xab, 0x7227, 0x6, 0x10000, 0x7, 0x0, 0xffff7043, 0x8001, 0xf, 0x5, 0x852, 0x1, 0x86, 0x101, 0x8, 0x8, 0x7, 0x9, 0x1, 0x9, 0x7, 0x1, 0x6, 0x0, 0x3ff, 0x3, 0x7, 0x2, 0x2, 0x3, 0x100, 0x9, 0x1000, 0x9, 0x0, 0x5, 0x1, 0xffffc066, 0x8, 0x9, 0x2, 0x1ba, 0xffff, 0x7fffffff, 0x2, 0x4, 0x61fe, 0xfffffffe, 0x3ff, 0x0, 0x6, 0x7ff, 0xb2, 0xcae, 0x80, 0xd028, 0x6, 0x9b, 0xe4, 0x0, 0xfffffffc, 0x3ff, 0xb35a, 0xfffffffb, 0x231, 0x2, 0x4, 0x4, 0x100, 0x81, 0x8, 0x8001, 0x78e, 0x9, 0x1, 0xe, 0xb, 0xfff, 0x3, 0xfff, 0x7, 0x82e5, 0x4, 0x7, 0x9, 0x1, 0xffff, 0x273, 0x6a0d, 0x2, 0x6c2, 0x9, 0x9, 0x1000, 0x3, 0x9, 0x40, 0xfffffff7, 0x2, 0xfffffff9, 0x7, 0x5, 0x7, 0x8, 0x5, 0x8, 0x9, 0x6, 0x162, 0x6, 0x50, 0xffffffff, 0xb, 0x0, 0x40, 0x8, 0x3, 0x8, 0x5, 0x9, 0x7, 0xff, 0x2, 0x8, 0x10, 0xd224, 0x6e31, 0x5, 0x5, 0x10000, 0x80, 0x400, 0x1000, 0x8, 0xff, 0x800, 0x8, 0x400, 0x4, 0x5, 0x30600d35, 0x8, 0x101, 0x2, 0x80000001, 0x9, 0x1, 0xfffffffd, 0x4, 0x24000000, 0x0, 0xffffffff, 0x10000, 0x2, 0x401, 0x7, 0x0, 0x2a2b, 0x1000, 0x401, 0x1a, 0x5, 0x8c, 0x2, 0xfffffff8, 0x7, 0xd0, 0x10001]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r6}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}, @filter_kind_options=@f_cgroup={{0xb}, {0x874, 0x2, [@TCA_CGROUP_POLICE={0x86c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x0, 0x2, 0x30, 0x5, 0x5, 0xfffffff9, 0x7, 0x23c9, 0x7ff, 0x101, 0x0, 0x2, 0x5, 0x7, 0x6, 0x2, 0x4, 0xb9c, 0x8, 0x4e08, 0x3, 0x2, 0xffff, 0x496, 0x7fffffff, 0x1, 0x2, 0x8, 0x8, 0x4, 0x2, 0xfffff8a7, 0x0, 0xa6bf, 0x2, 0x9, 0xdc, 0x158, 0x4, 0xfff, 0x1, 0x3, 0x200, 0x10, 0xb5d, 0x31, 0x9, 0x80000001, 0x7, 0xe9, 0x8, 0x5, 0xffff, 0x7179e2e3, 0x0, 0x6, 0x8, 0x8000, 0x9, 0x3, 0x8d38, 0x3, 0x100, 0x10000, 0x146c, 0x7fffffff, 0xc, 0xae, 0xa, 0x0, 0x2, 0x80000001, 0xc0, 0x1, 0x3b00000, 0x3, 0x0, 0x7, 0x10001, 0x33, 0x7fffffff, 0x6, 0x7f, 0xae, 0xe23, 0x1, 0xfffffffc, 0x400, 0x5, 0x8000, 0x0, 0x8, 0x10, 0xf6, 0xa, 0x7fffffff, 0x2, 0x3, 0x8, 0x5, 0x72, 0xa9, 0x1000, 0x1000, 0x80, 0x8001, 0xfffffffe, 0xfffffffe, 0x5, 0xd, 0xb, 0xf, 0x9, 0x8000, 0x1, 0x80, 0x4, 0x1de, 0xecc, 0x10000, 0x4, 0x2, 0x375a5481, 0x8f, 0x0, 0xd, 0x2, 0x80000001, 0x2, 0x401, 0x3, 0x8, 0x5, 0x9, 0x40, 0x78b4, 0x0, 0xd4, 0x3, 0x3, 0x8, 0x6, 0x1, 0x3ff, 0x1, 0x100, 0x2, 0x2, 0x2, 0xfff, 0xf, 0x1, 0x4, 0x7, 0x4, 0x40, 0x3ef, 0x6, 0xea4, 0x5, 0x3, 0x2, 0x9d, 0x1ff, 0x40, 0x4309, 0x144, 0x9, 0xa, 0x1, 0x4, 0x2, 0x2, 0x3, 0x3ff, 0x9be2, 0x5, 0x7, 0xd0ee, 0xa, 0x6, 0x101, 0xdb, 0x2, 0x8d, 0x8, 0x380000, 0x1, 0x3, 0xf1b, 0xf5, 0x2, 0xc, 0xcda, 0x8, 0x7, 0xffffffff, 0xff, 0x800, 0x1, 0x80000001, 0x3, 0x7, 0x9, 0x1, 0x0, 0x5, 0x20000, 0x0, 0x7, 0x6, 0x32, 0x9, 0x9, 0x0, 0x1, 0xffff0819, 0x5, 0x7, 0x3, 0x6, 0x6, 0x7, 0x3, 0x9, 0x0, 0x0, 0xffffffff, 0xfffffab0, 0x80000000, 0x7, 0xcbb5, 0x3, 0xd591, 0x2, 0xfffffff8, 0x80, 0x45, 0x1c000000, 0x0, 0x2, 0x6, 0x4, 0xc5f0, 0x5, 0x8, 0x1, 0xfffff7ac, 0xff, 0x0, 0x7fff, 0x9, 0x10000, 0x400, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1ff, 0x90, 0xd0, 0x5, 0x6, 0xf, 0xca6, 0xffff7265, 0x0, 0xe, 0x10, 0x5, 0x645, 0xf, 0x0, 0x1, 0x1c, 0x1, 0x3, 0x2, 0x4a6, 0x100, 0x0, 0x4, 0x7, 0x800, 0x1c, 0xa, 0x7, 0x4a, 0x2, 0x0, 0x8, 0xe, 0x0, 0x1, 0x1, 0x7fffffff, 0xfffffff5, 0x6, 0x6, 0x10, 0x3, 0xfff, 0x2, 0x5, 0x278b, 0x6, 0x6, 0x4959, 0x7fff, 0x81, 0x2, 0x4, 0x0, 0x8, 0x8000, 0x9, 0x5, 0x6, 0x3, 0x10, 0x0, 0x5, 0x7, 0x1, 0x8000, 0xbdd, 0x4, 0xccf0, 0x8, 0x10001, 0x1ff, 0x4, 0x4, 0xfffffff8, 0x4, 0x56, 0x7, 0x6, 0x4, 0x9, 0x8, 0x6, 0xf, 0x1, 0x6, 0x3, 0x3, 0x5, 0x313, 0x800, 0x3, 0x0, 0xd, 0x8000, 0x0, 0xb, 0x80000001, 0xe, 0x4, 0x7ff, 0x2, 0xfffffff7, 0x1, 0x9, 0x90508d1, 0x45, 0x3ff, 0x1, 0x0, 0x9, 0xa7e0, 0xb80000, 0x401, 0x9, 0x5, 0x3, 0x9, 0x20000000, 0x3, 0x6, 0xffff7fff, 0x2, 0x5, 0x10000, 0x6, 0x14, 0x8, 0x1, 0x9, 0x3, 0x8a21, 0x9, 0x3d, 0x0, 0x3ff, 0x697, 0x8, 0x7f, 0x2, 0xb42, 0xfffffffc, 0xe4, 0xa, 0x0, 0x4, 0xfffffffd, 0xb3, 0x0, 0x7, 0x80000001, 0x692a, 0x8, 0x2, 0x0, 0xb, 0x7, 0xffff, 0x8001, 0x8, 0x0, 0x8, 0x8, 0xf, 0x8, 0x70, 0x1, 0x3, 0xffff8001, 0x3, 0x8, 0x6, 0x40, 0x7f, 0x1ff, 0x1, 0xa2e, 0x2, 0x9, 0x68, 0x7, 0x7, 0x0, 0x80000000, 0x6, 0xffffff75, 0x5, 0x8, 0x100, 0x9, 0x2, 0x8, 0x81, 0x0, 0xacc, 0x7ff, 0x0, 0x3, 0x2, 0x8, 0x0, 0x0, 0x1, 0xfffffffc, 0xffff, 0xe9, 0x4, 0x9, 0x1, 0x8, 0x200, 0x0, 0xfffffffb, 0x4, 0x7f, 0xd13, 0x35, 0x4, 0x4, 0x8, 0x9d13, 0x6, 0x88c2, 0x2, 0x5, 0x4, 0xf, 0x200, 0x8, 0x708, 0x1ff, 0x1c0, 0x3, 0x2, 0x0, 0x3, 0x5, 0x9, 0x7, 0x7, 0x4, 0x8000, 0x8, 0xdf, 0x7, 0x43, 0x10000, 0x3, 0x7, 0x52d, 0x9, 0x1, 0xaa1, 0x2, 0x750]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0x7fff, 0x80000000, 0xfe000000, {0x6, 0x2, 0x8, 0x2, 0x2, 0x2}, {0x3, 0x2, 0x8, 0x8, 0x1, 0x9}, 0x6, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]}, @TCA_CGROUP_ACT={0x4}]}}]}, 0x2150}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) 6m29.011828047s ago: executing program 4 (id=578): madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) syz_open_dev$media(0x0, 0x3, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000400)={0x3, 0x0, [{0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x20000}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x1}, {0x80000001, 0x1e3, 0x7, 0x8, 0x5, 0x110, 0x3}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x185}}, 0x20) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 6m28.715291337s ago: executing program 4 (id=579): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lgetxattr(0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={r1, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}]}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0), &(0x7f0000000080)=0x4) 6m27.724843216s ago: executing program 4 (id=584): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x262) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$xdp(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000000240)="f8f112a20d9937771f54edceb3bdce1a1d51ecc9107a0724ac5861bbc7922ed581a34990edc750c01d91d3f2ffee685b8f1153a68cf9f9a0fab561a54e0f547582e71dc2ca2c82240b7f9187971cb0046c0884810a1cfcfcbebe128e4811ac9eade6fd47eef25cc86bf50957bafaccf103e8bb36d28cfe91fe48e7a017c71c5861929a25d441f48e7a51ed6de10016024c5e335e0a1bbb80e111999ad8f46e0965382e78aa61e7d45dbfaac4da7652bd118c700860c0c197b51c18147b16bfc67ac526a86993809a943acce22e913915075e0e55ce2499d91cfe93f60f48807fbab6eb188e", 0xe5}, {&(0x7f0000002640)="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", 0xf1d}], 0x2, 0x0, 0x0, 0x80}, 0x4) recvmsg$can_j1939(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001600)=""/4097, 0x1001}], 0x1}, 0x10021) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x8528, 0x7, 0x3, 0x6}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x4}) r9 = getpid() ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r10 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/reserved_size', 0x161002, 0x43) socket$nl_route(0x10, 0x3, 0x0) setxattr$incfs_metadata(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000340)="cf99c5727c0e6af44ce028c7f8c4cb61eb6eb0be9324f72b384882eda76b9ed19823503416aa82666de4a2d2371eb022f9245f69dd5056737d78b92ea059a066e39e6a87b1c669eaf0424d0a218a903d46662ce36f82d912f97c69238be732a04c8b30d9456477e8864c4ddb655e3e03c887846429438a1a7929cfa1f5825410e079ea8f26a8cd5c49e7e80c796788854dfd4372107e4d37f375479f92fc0064716f55a807722af3cac2074817a59232b66fcd995e6297cd0d1be0404ed020b1e7c11cf0cda6f4a8094b8b37d9a3e11f36954be3dcdb70f7833059a4fc5bd50a67c75947fc32fe4a212ee93a1f40", 0xee, 0x1) kcmp$KCMP_EPOLL_TFD(r9, r9, 0x7, r3, &(0x7f0000000300)={r10, 0xffffffffffffffff, 0x3}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) fsync(r0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 6m27.279903393s ago: executing program 4 (id=586): r0 = fsopen(&(0x7f00000003c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x3f, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000091f8e8d4020000004709ffff0000000010000000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r1, 0x0, 0x0, 0x800) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) syz_io_uring_setup(0x10efe, &(0x7f0000000140)={0x0, 0xd2f3, 0x10806, 0x1, 0xf7}, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000000)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) close(0x3) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000080)="e02739daf71a351238f6fbf7b9ba", 0x0, 0xe89f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0x40045542, &(0x7f0000000140)=0x200) openat$audio(0xffffff9c, &(0x7f0000000080), 0x20400, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000005fc0)={0x0, 0x0, &(0x7f0000005f80)={&(0x7f0000000000)=ANY=[@ANYBLOB="8800000041d162a3fb804da446d382c067035cc15250344094dc8cf4ddc618f6d55884fd2c9b06d6d28f91aef46978867c820a96c42eba8f7f93d90b5fff1d94b38f4054e0d578ac8d9d", @ANYRESDEC=r1], 0x88}, 0x1, 0x0, 0x0, 0x24000800}, 0x24048081) 6m26.964455965s ago: executing program 4 (id=588): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0xfffffffffffffffe, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async, rerun: 32) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) (rerun: 32) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) syz_open_procfs(0xffffffffffffffff, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000068e3034e5c94ce4500000800000a000000000095d4e01fe10000040004000800010001000004a1ca211900"], 0x24}, 0x1, 0x0, 0x0, 0x240400c4}, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2001, 0x0) read(r4, 0x0, 0x0) (async, rerun: 64) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f0000004ec0)=[{{&(0x7f0000000240)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000002280)=[{&(0x7f0000000300)}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/1, 0x1}, {&(0x7f0000002100)=""/155, 0x9b}, {&(0x7f00000021c0)=""/23, 0x17}, {&(0x7f0000002200)=""/101, 0x65}], 0x6, &(0x7f00000022c0)=""/170, 0xaa}, 0xffff8720}, {{&(0x7f0000002380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/229, 0xe5}, {&(0x7f0000003500)=""/7, 0x7}, {&(0x7f0000003540)=""/161, 0xa1}, {&(0x7f0000003600)=""/64, 0x40}, {&(0x7f0000003640)=""/126, 0x7e}, {&(0x7f00000036c0)=""/241, 0xf1}], 0x7, &(0x7f0000003800)=""/64, 0x40}, 0xffffff90}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000003840)=""/138, 0x8a}, {&(0x7f0000003900)=""/158, 0x9e}], 0x2, &(0x7f0000003a00)=""/133, 0x85}, 0xcd6}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x1a5c}], 0x4, 0x12060, &(0x7f0000004f80)={0x0, 0x989680}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0x9, &(0x7f0000000440)={0xa, 0x40000008}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async, rerun: 32) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) (rerun: 32) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x0, &(0x7f0000000140)='grpquota') (async) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) fdatasync(0xffffffffffffffff) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0x8}, {0xfff1, 0xa}, {0x1, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="000000000000516e805102d64abc6aa9ba7aadca5cf76bda8f431bf24226d9b3aacf641d1421e385be1a3472e5b863ae14eed7de6e0b2909ee1948ef5b8005d68e4a2850d386752514233648cd"], 0xf) 6m26.857450749s ago: executing program 34 (id=588): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0xfffffffffffffffe, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async, rerun: 32) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) (rerun: 32) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) syz_open_procfs(0xffffffffffffffff, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000068e3034e5c94ce4500000800000a000000000095d4e01fe10000040004000800010001000004a1ca211900"], 0x24}, 0x1, 0x0, 0x0, 0x240400c4}, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2001, 0x0) read(r4, 0x0, 0x0) (async, rerun: 64) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f0000004ec0)=[{{&(0x7f0000000240)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000002280)=[{&(0x7f0000000300)}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/1, 0x1}, {&(0x7f0000002100)=""/155, 0x9b}, {&(0x7f00000021c0)=""/23, 0x17}, {&(0x7f0000002200)=""/101, 0x65}], 0x6, &(0x7f00000022c0)=""/170, 0xaa}, 0xffff8720}, {{&(0x7f0000002380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/229, 0xe5}, {&(0x7f0000003500)=""/7, 0x7}, {&(0x7f0000003540)=""/161, 0xa1}, {&(0x7f0000003600)=""/64, 0x40}, {&(0x7f0000003640)=""/126, 0x7e}, {&(0x7f00000036c0)=""/241, 0xf1}], 0x7, &(0x7f0000003800)=""/64, 0x40}, 0xffffff90}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000003840)=""/138, 0x8a}, {&(0x7f0000003900)=""/158, 0x9e}], 0x2, &(0x7f0000003a00)=""/133, 0x85}, 0xcd6}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x1a5c}], 0x4, 0x12060, &(0x7f0000004f80)={0x0, 0x989680}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0x9, &(0x7f0000000440)={0xa, 0x40000008}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async, rerun: 32) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) (rerun: 32) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x0, &(0x7f0000000140)='grpquota') (async) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) fdatasync(0xffffffffffffffff) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0x8}, {0xfff1, 0xa}, {0x1, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="000000000000516e805102d64abc6aa9ba7aadca5cf76bda8f431bf24226d9b3aacf641d1421e385be1a3472e5b863ae14eed7de6e0b2909ee1948ef5b8005d68e4a2850d386752514233648cd"], 0xf) 2m49.959508508s ago: executing program 5 (id=1817): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x101091, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x7}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x1, 0x2}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0xaa}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40800) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x80006, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x12) 2m49.888587008s ago: executing program 5 (id=1818): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)="5278663546d6c03de7f8063f937dd4f2cc3dbe1dc5a81aa91768e36dbd92841eb1b5e97d14628766031b58f0732ec18c91d5f2a11e8c44c39e28145af893240616c5339488ce8a97d1a7c5978669", 0x4e}], 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x48850) bind$inet6(r2, 0x0, 0x0) listen(r2, 0xfffffffc) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r5, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m48.984994013s ago: executing program 5 (id=1830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x3c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (fail_nth: 4) 2m48.851021338s ago: executing program 5 (id=1833): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200349f5e72ed4b5f509c2c5a48274e1702804e33336c78ae2239a25e91bde49e0c6ee6d97412747a0e9d2b30a1daad29c979f444be03fce5e86548fedf2c1eadd51ab9f1d873c5f10e357cb30fed3fd2e4bd855c2b0c85a7567d6044cca468ef64092560ef01b1fcf052be814684c215", 0x87) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x1d, r6}, 0x10, &(0x7f0000000300)={&(0x7f00000002c0)={0x3, 0xb10, 0xfffffffe, {0x77359400}, {}, {0x2, 0x0, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "e30784a21b9f71b9"}}, 0x34}, 0x1, 0x0, 0x0, 0x4c804}, 0x805) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r7, 0x1000, 0x4, 0x0, 0x0, [], [0x7, 0x8, 0x1], [0xfffffffc, 0x0, 0x3, 0xf], [0x4000000, 0xc, 0xffff7ffffffffffc, 0x4]}) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={r7}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x0, 0x456, 0x0}) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r12, 0x402, 0x1a) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r13, 0x4030582b, &(0x7f0000000000)={0x0, 0x0, 0x7ff, 0x3, 0xb, 0x8}) close_range(r2, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) fsync(r14) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100"], 0x16) 2m48.666880802s ago: executing program 5 (id=1834): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x4480, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffbff, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x20000000) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="a00000002100010027bd7000fefffffffc020000000000000000000000000001fc020000000000000000000000000001dffc0000000000020a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000011ac1414aa000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c0000000000000002000a003e6f9be18777e900cb8cf4148df160ffe207e6e8c0f4d0c9da6aa5d5af7f48fb87a283cb94521d7e1e22ff86c351e6c8b6e76423934d3637a80930b6d97bac079519686bf8b72b16740209a9d543cee17c254230d4f13f7f36aea15ad6b372d401a518f11c40e2e311fd032a35c7eae7e6f6be1e93263d776bdffda48345"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4, 0x5}}]}, 0x34}}, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000580)=""/174, &(0x7f0000000640)=0xae) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0xfffffff5, "421ae3753785259286be000000000000004fdc9312f200fd4f00", 0xffffffffffffffff}) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r7 = open(&(0x7f0000000080)='./file0\x00', 0x20003, 0x1d4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) write(r8, &(0x7f0000000ac0)="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", 0x1000) preadv(r9, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, 0x0) 2m48.279803974s ago: executing program 5 (id=1839): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x30, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2m32.04716423s ago: executing program 35 (id=1839): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x30, 0x0, 0x500}}], 0x600, 0x0, 0x0) 1m8.35391401s ago: executing program 6 (id=2594): r0 = openat$nmem0(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r0, 0x8044610a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x2178}, 0x1, 0x0, 0x0, 0x20048801}, 0xc020) syz_open_dev$vbi(&(0x7f0000000280), 0x0, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x400000000000247, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) close(r2) prlimit64(0x0, 0x7, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x194f, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x3) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000180)={0x28, 0x0, 0x2711, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) 1m8.170953471s ago: executing program 6 (id=2597): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000240)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 1m7.238550063s ago: executing program 6 (id=2605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x10000000, 0xb2, 0x40000a8}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x0, 0x1, 0x2, 0x4, {0xa, 0x4e20, 0xf025, @remote, 0x1}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000000)="27030200dc0f14000e00000000acc10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 1m7.170424555s ago: executing program 6 (id=2607): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) socket(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x80002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x100000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x104) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000140)=""/131, 0x83}], 0xf000, 0x7, 0x0) 1m7.086900409s ago: executing program 6 (id=2609): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)={0x3c, r3, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x4, 0x700000000000000}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xf2ff, 0xfff3}, {0xd, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) getpeername$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r7 = socket$unix(0x1, 0x5, 0x0) r8 = dup2(r7, r4) close_range(r8, 0xffffffffffffffff, 0x0) 1m7.065920301s ago: executing program 6 (id=2610): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x580, 0x0, 0xffffffffffff8001}]}) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x40) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x580, 0x0, 0xffffffffffff8001}]}) (async) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x50) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x40) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) (async) 50.632034146s ago: executing program 36 (id=2610): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x580, 0x0, 0xffffffffffff8001}]}) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x40) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x580, 0x0, 0xffffffffffff8001}]}) (async) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x50) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x40) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) (async) 5.411176774s ago: executing program 2 (id=2912): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000140)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x40) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f0000000740)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xaf, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="16000000b7d40000290a00007c00000000000100", @ANYRES32=r2, @ANYBLOB="0600"/20, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="05000000040000000300"/24, @ANYRES32=r2, @ANYBLOB="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"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) getpid() pread64(0xffffffffffffffff, &(0x7f0000000040)=""/212, 0xd4, 0xba) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x4, 0xfffff010}, {0xb1, 0xe, 0x0, 0x46}, {0x6, 0x0, 0x0, 0x6ce3}]}, 0x8) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 5.306888328s ago: executing program 8 (id=2913): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='u\x01\x98\x9c=J') mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) 5.304997849s ago: executing program 8 (id=2914): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b0000611060000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x20000000fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES8=r1], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x24000845) socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x30040c00) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000440)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f00000001c0)={0x6, 0xffffffffffffffff, 0x11, {0x100, 0x3}, 0xd}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x1) 4.164905759s ago: executing program 8 (id=2916): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newtaction={0x48, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) r5 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="2a0000f128000000", 0x8}], 0x1}}], 0x1, 0x20000054) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0xf000, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfc, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x9, 0x5, 0x9, 0x10001}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x50}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40080, 0x0) ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000000c0)=0x1) splice(r8, 0x0, r7, 0x0, 0x7ffff000, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 3.598014083s ago: executing program 2 (id=2917): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x14, 0x18, 0x229, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}}, 0x20040000) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket(0x2b, 0x1, 0x1) memfd_create(&(0x7f0000000040)='#\\/(.\x00', 0x2) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000100)=0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 3.25576757s ago: executing program 0 (id=2920): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi4\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r2, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x20000000) ioctl$COMEDI_CMD(r0, 0x80406409, &(0x7f0000000040)={0x1, 0x30000, 0x20, 0xe, 0x10, 0x4, 0x40, 0x2, 0x80, 0x1, 0x4, 0xc, &(0x7f0000000080)=[0x200, 0x9, 0x1], 0x3, 0x0}) 2.758790071s ago: executing program 0 (id=2921): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, 0x0, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tgkill(0x0, 0x0, 0xa) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xe, 0x4, 0x7, 0x6, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x3, 0x5, 0x0, 0x4], 0x8000000, 0x3c4200}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000003c0)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000040)={0xfffffffffffff808, 0x6, 0x6, 0x3, 0x6, 0x9}) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xf, 0xffff, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5707}}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0x70, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setreuid(0xee01, 0x0) setreuid(0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000300)=""/184) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) 2.460760524s ago: executing program 2 (id=2922): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000240)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x28, 0x36, 0x117, 0xfffffffc, 0x814000, {0x1, 0x7c}, [@typed={0x14, 0x4, 0x0, 0x0, @ipv6=@mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.309674239s ago: executing program 7 (id=2923): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16000000000000000100000006"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x76, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}, [], "17c1ff0cb184961b71df3ceb25051a16"}}}}}}}, 0x0) userfaultfd(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x4) read$char_usb(r2, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x9f, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0x0, 0xd2}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 2.114174685s ago: executing program 8 (id=2924): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20002005}) r2 = semget(0x0, 0x2, 0x311) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000340)=""/208) semctl$GETVAL(r2, 0x0, 0xc, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000540)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0), 0x4) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 2.043894088s ago: executing program 0 (id=2925): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x2}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0xb400, 0x3}, 0x18, 0x2) landlock_restrict_self(r1, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003181a08, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee01) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000080)) landlock_restrict_self(r1, 0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x4) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r1, 0xa) landlock_restrict_self(0xffffffffffffffff, 0xa) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8, 0x4) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(r5, 0xf) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x3) syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 2.035087725s ago: executing program 7 (id=2926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xd}]}]}, 0x54}}, 0x0) (fail_nth: 8) 1.949356485s ago: executing program 7 (id=2927): syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @random="7f0a00034011", @val={@val={0x88a8, 0x7, 0x1, 0x3}, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @empty}, "090088beffff0000"}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x447}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x38a}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xd8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x609}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20044000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.948882106s ago: executing program 8 (id=2928): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f0000000100)={0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_PANTHOR_VM_GET_STATE(r0, 0xc0086444, &(0x7f0000000200)={r2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f00000003c0), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r1], &(0x7f00000001c0)=[0xd], &(0x7f0000000480)=[r3], &(0x7f0000000200)}) (async) r4 = fsopen(&(0x7f0000000140)='sysv\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x1, 0x4) fchdir(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, 0x0, 0x4008040) (async) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf251400000008000300", @ANYRES32=r9, @ANYBLOB="01000000b200b3ee"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x5d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) (async) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './bus/file0'}}]}) 1.863488634s ago: executing program 7 (id=2929): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x200003}, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r4 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000180), 0x581000, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000300)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\xed~\x97\a\xbe\xfb\v1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0fdr\xaf\xd7\x16\xf47\xf8\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?&(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\x00'/195, &(0x7f00000001c0)='\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xc9\xe1\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x17\x81>\t\xc30-\xe2\xb3\xb00x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) writev(r7, &(0x7f00000002c0), 0x0) close(r7) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r8, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f00000004c0)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael,\xc4\x00\x00\x00\x00\x00\x00\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x00\x00\x00\x00\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\xf9\xff\x1b\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&\xc1&A0\xa7\xef\x9cL\x8e1K', 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[], 0x14}], 0x1, 0x0, 0x0, 0x20008041}, 0xc080) write(r0, &(0x7f0000000d40)='I', 0x1) 1.592530693s ago: executing program 0 (id=2931): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000040), 0x10001, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f00000040c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x2, 0x1, 0x7, 0x81, 0x692ed035, 0x7fff, 0x0, 0x0, 0x40, 0x47}}, 0x50) truncate(&(0x7f0000000140)='./file0\x00', 0x55) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000004800)={0x2020}, 0x2020) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x5, 0x3a, '!', 0x3a, '\x9e:\xa3\x8c', 0x3a, './file0'}, 0x2c) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="2d706964732051202d086b6fc27022548ef6b691fb01dfbbd5e84462de39fc6043359f1c889e1abb77f71e2e96a9663b01e383bbb480de64331446c1edd1912a071a9086ccfe1d8f257ab08bc0c0a9a758d8442e97db2a8e1a3b9c6a7206fa2ca3911c1c9b7a8377fda06af3bdbe4b67f2f271d712a936be716bc24403c3c9c9df9568ebcf56795bd8307ed1ec67f910b6c8e13211b5ce542b8dc72b5bf1221ef97eb2edaf72d1398a7827d5d1f7f66b4d0b11e4595983dc0574a960ebb68b5ff6704f72a97b5f19e803b6d5c616ff2b888b3ce8613f71914146"], 0x6) write$cgroup_subtree(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="2b70699e6515502c950289630673464891cfd868a9c17a6eb1c296b0818046834016ae6935ccabcb8b85ef01664d61506378bda8a96176922eeea6"], 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100f2104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000700000000000a000100aaaaaaaaaa000000"], 0x48}}, 0x4c000) 1.541575924s ago: executing program 0 (id=2932): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x3, 0x0, &(0x7f0000000080)={r3, r4+60000000}, 0x0) nanosleep(&(0x7f0000000140), &(0x7f0000000180)) timer_gettime(r2, &(0x7f00000000c0)) 1.32221667s ago: executing program 2 (id=2933): r0 = socket$kcm(0x10, 0x100000000002, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1.32182778s ago: executing program 0 (id=2934): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r0, 0x0}]) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r3, 0x6, 0x9, &(0x7f0000000680)=0x80000000, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000000080000000100004000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101201, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4d0843, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'pcm3724\x00', [0x100, 0x80000000, 0x2, 0x10, 0xe, 0x5, 0x7, 0x3, 0x80008, 0x0, 0x7, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x489, 0x4, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000e80)={&(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0], &(0x7f0000000e40)=[0x0], 0x6, 0x4, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000ec0)={&(0x7f0000000240), &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000d00)=[0x0], &(0x7f0000000d40), 0x9, 0x1, 0x0, 0x0, r9}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 1.172845198s ago: executing program 2 (id=2935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x54}}, 0x0) (fail_nth: 8) 1.172238818s ago: executing program 2 (id=2936): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000240)='io.pressure\x00', 0x2, 0x0) io_setup(0xa, &(0x7f0000000080)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xf66, r3, &(0x7f0000000280)="b5460b0d0304", 0x6, 0x9, 0x0, 0x0, r2}]) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c7665"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) 627.954899ms ago: executing program 7 (id=2937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket(0x10, 0x803, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x40000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x400}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0xe20, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48800) r4 = socket$netlink(0x10, 0x3, 0x12) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) setsockopt$sock_int(r3, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4044}, 0x4810) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYRES16=r3, @ANYRESHEX], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000640)=r5, 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0700000004000000050000000a00000000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff000000000000000000000000000000000000000041b1b7af2fec1ea052e02738315685835d75dea1e64c6b3b8b83ba1b1f96fe715ba83f9c8288e8b6ee4d4de26b699a09634c01e051cb5e398ab05d9718c7d74ce0b247628fb9c9a7430b71d05222e2bb9e83a714c9acc1917c1fead8f791fd24731fcfad32df8186b0cb"], 0x50) setsockopt$inet_tcp_int(r7, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) 0s ago: executing program 7 (id=2938): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) renameat2(r0, &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f0000001340)={0x4bc, 0x1, 0x5, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [{{0x254, 0x1, {{0x2, 0x6}, 0xec, 0xaa, 0x7, 0x8, 0xd, 'syz1\x00', "b1a05c3c05d3f1d7de6a6577e6fa087b6eab38519923c05a0c9f52d18f7e3b5a", "b5f6506aa9bf58648b669be5b52759bd1ede336881cc569fe68052466f635f5c", [{0x7, 0x7, {0x0, 0xfff}}, {0x81, 0xd67, {0x2, 0x5}}, {0x8, 0x3, {0x2, 0xd}}, {0x7, 0x5, {0x3, 0x7}}, {0x8001, 0xffff, {0x2, 0x9}}, {0x200, 0x822, {0x0, 0x7}}, {0x9, 0x40, {0x2, 0xe}}, {0x4, 0x508, {0x2, 0x1000}}, {0x1, 0xf44, {0x2, 0x8}}, {0x0, 0x5, {0x2, 0x2}}, {0x8, 0x6, {0x2, 0x2}}, {0x3, 0x8, {0x1, 0x2}}, {0x3, 0x80, {0x0, 0xfff}}, {0x100, 0xa, {0x0, 0xfffffff7}}, {0xb, 0x3c, {0x3, 0x66}}, {0xb8b7, 0x4, {0x1, 0x10}}, {0x68c8, 0x6, {0x3, 0x4}}, {0x100, 0x80, {0x0, 0x5}}, {0xf98d, 0x7f, {0x3, 0x2}}, {0x8, 0x3, {0x2, 0x4}}, {0x2, 0x2, {0x0, 0x4}}, {0x5, 0x101, {0x1, 0x8}}, {0xfffc, 0x6, {0x0, 0x5}}, {0x1, 0x102a, {0x3, 0x401}}, {0x0, 0x7ff, {0x1, 0x7ff}}, {0xffff, 0xa, {0x1, 0x7b}}, {0x8, 0x7, {0x0, 0x9}}, {0x8d58, 0x8, {0x3, 0x8}}, {0xfb90, 0x2, {0x0, 0x9}}, {0x80, 0x9, {0x0, 0xac}}, {0xfff, 0x2, {0x0, 0x8}}, {0x7fff, 0xd, {0x1, 0x10001}}, {0x7, 0xffff, {0x1, 0xa}}, {0x2, 0x7, {0x2, 0xff}}, {0x9, 0x4d8, {0x1, 0x7fffffff}}, {0x9, 0x1, {0x0, 0x8}}, {0x7, 0x100, {0x1, 0x3d429eaa}}, {0x368, 0x8000, {0x1, 0x8f4}}, {0x2, 0xfff6, {0x1, 0x7f}}, {0x100, 0xffff, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x7fff}, 0xfe, 0x7f, 0x3, 0x6, 0x3, 'syz0\x00', "ad40a8c90a97237ed733a4cb34c83f8a79d5fb8e903db7b162f07298695d62c6", "00d933a29955746f12a49a094b4c91ab903621b902772a5e151b751eee510ce9", [{0xfff, 0x9d2, {0x2, 0xb5}}, {0x3, 0x7, {0x2, 0xd}}, {0x1ff, 0xfff9, {0x1, 0x6e}}, {0x56, 0x4, {0x2, 0x53}}, {0x5, 0x5, {0x3, 0x6}}, {0x4, 0x6, {0x1, 0x7fff}}, {0x0, 0x7, {0x3, 0x3}}, {0x0, 0x4, {0x0, 0x5}}, {0x200, 0x6, {0x3, 0x3}}, {0x2, 0x3ff, {0x1, 0x3}}, {0x31, 0x2, {0x3, 0x40}}, {0x1, 0xff, {0x0, 0x3}}, {0xfff, 0x5, {0x3, 0x1fc00000}}, {0x3, 0x0, {0x0, 0x7e81a00a}}, {0x0, 0x6, {0x0, 0x44}}, {0x6, 0x8}, {0x4, 0xa15, {0x0, 0x1}}, {0x8, 0x3ff, {0x0, 0x80000000}}, {0x6, 0x7, {0x2, 0x200}}, {0x5, 0x9, {0x0, 0x4}}, {0x7118, 0xfffc, {0x2, 0x4}}, {0x0, 0xb, {0x3c89479f4157a201, 0x3}}, {0x9, 0x4, {0x0, 0x1}}, {0x1, 0xfffa, {0x2, 0x9}}, {0x9, 0x0, {0x0, 0x63}}, {0xfff, 0x4, {0x2, 0xf}}, {0x9, 0x2, {0x2, 0x6}}, {0x7, 0x1, {0x1, 0xc7b}}, {0x5, 0x6, {0x1, 0x8000}}, {0x5, 0x5, {0x3, 0x7ff}}, {0x5, 0x3, {0x3, 0x268e}}, {0x9, 0xd2, {0x3, 0xe1d6}}, {0xffff, 0x0, {0x3, 0x6}}, {0x0, 0x1, {0x3, 0x80}}, {0x100, 0x1, {0x0, 0x4c}}, {0x80, 0x5, {0x3, 0x1}}, {0x9, 0x4, {0x1, 0x4}}, {0x1f62, 0x2, {0x3, 0x8}}, {0x7, 0xa, {0x1, 0x3}}, {0xc, 0x101, {0x2, 0x3}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x800}, 0x4004040) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) syz_io_uring_setup(0x80000f00, &(0x7f0000000400)={0x0, 0x5960, 0x10000, 0x0, 0x51}, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000001200)=0x8) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a000006090002007379"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000040000100feffffffffdbdf25017c0c00000042800c00018006000600800a00001c000200180006"], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) syz_genetlink_get_family_id$ipvs(0x0, r0) read$FUSE(r0, &(0x7f0000002580)={0x2020}, 0x202d) kernel console output (not intermixed with test programs): es leftover after parsing attributes in process `syz.7.2289'. [ 495.649269][T14572] netlink: 'syz.7.2289': attribute type 5 has an invalid length. [ 495.659541][T14572] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2289'. [ 495.720281][T14576] overlayfs: missing 'lowerdir' [ 495.869222][ T5531] usb 7-1: unable to get BOS descriptor or descriptor too short [ 495.918692][T14583] netlink: 'syz.6.2294': attribute type 13 has an invalid length. [ 495.932288][T14583] netlink: 'syz.6.2294': attribute type 17 has an invalid length. [ 495.933782][ T5531] usb 7-1: config 3 has an invalid interface number: 249 but max is 0 [ 495.946428][ T5531] usb 7-1: config 3 has no interface number 0 [ 495.949376][ T5531] usb 7-1: config 3 interface 249 has no altsetting 0 [ 495.961074][ T5531] usb 7-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=5a.9d [ 495.965232][ T5531] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.969333][ T5531] usb 7-1: Product: syz [ 495.971417][ T5531] usb 7-1: Manufacturer: syz [ 495.973712][ T5531] usb 7-1: SerialNumber: syz [ 496.594561][T14583] dummy0: entered promiscuous mode [ 496.629224][T14583] batadv_slave_1: left promiscuous mode [ 496.633376][T14583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.691517][ T5531] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 496.696718][ T5531] gspca_sn9c2028: read1 error -71 [ 496.700844][ T5531] gspca_sn9c2028: read1 error -71 [ 496.705344][ T5531] gspca_sn9c2028: read1 error -71 [ 496.708573][ T5531] sn9c2028 7-1:3.249: probe with driver sn9c2028 failed with error -71 [ 496.740836][ T5531] usb 7-1: USB disconnect, device number 19 [ 496.855661][T14583] veth0_macvtap: refused to change device tx_queue_len [ 496.860795][T14583] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 497.263851][T14596] FAULT_INJECTION: forcing a failure. [ 497.263851][T14596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.269005][T14596] CPU: 3 UID: 0 PID: 14596 Comm: syz.2.2298 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.269023][T14596] Tainted: [L]=SOFTLOCKUP [ 497.269027][T14596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 497.269033][T14596] Call Trace: [ 497.269037][T14596] [ 497.269042][T14596] dump_stack_lvl+0x100/0x190 [ 497.269065][T14596] should_fail_ex.cold+0x5/0xa [ 497.269079][T14596] _copy_to_user+0x32/0xd0 [ 497.269095][T14596] simple_read_from_buffer+0xcb/0x170 [ 497.269110][T14596] proc_fail_nth_read+0x1af/0x230 [ 497.269128][T14596] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 497.269146][T14596] ? rw_verify_area+0xce/0x6d0 [ 497.269157][T14596] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 497.269174][T14596] vfs_read+0x1e4/0xb30 [ 497.269193][T14596] ? __pfx_vfs_read+0x10/0x10 [ 497.269204][T14596] ? find_held_lock+0x2b/0x80 [ 497.269218][T14596] ? __fget_files+0x215/0x3d0 [ 497.269234][T14596] ? __fget_files+0x21f/0x3d0 [ 497.269250][T14596] ksys_read+0x12a/0x250 [ 497.269262][T14596] ? __pfx_ksys_read+0x10/0x10 [ 497.269274][T14596] ? rcu_is_watching+0x12/0xc0 [ 497.269287][T14596] ? rcu_is_watching+0x12/0xc0 [ 497.269301][T14596] do_int80_emulation+0x14b/0x720 [ 497.269320][T14596] asm_int80_emulation+0x1a/0x20 [ 497.269331][T14596] RIP: 0023:0xf71d61ab [ 497.269340][T14596] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 497.269350][T14596] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 497.269361][T14596] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f548d5d0 [ 497.269367][T14596] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 497.269373][T14596] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 497.269379][T14596] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 497.269385][T14596] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 497.269399][T14596] [ 497.411539][T14598] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 497.914211][ T5820] cdc_ether 5-1:1.0: missing cdc ether descriptor [ 497.944692][ T5820] usb 5-1: USB disconnect, device number 26 [ 497.962027][ T5827] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 498.137182][ T5827] usb 7-1: Using ep0 maxpacket: 8 [ 498.143741][ T5827] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 498.149918][ T5827] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 498.155956][ T5827] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 498.160687][ T5827] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 498.164965][ T5827] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.170502][ T5827] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 498.174751][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.401278][ T5827] usb 7-1: usb_control_msg returned -32 [ 498.411796][ T5827] usbtmc 7-1:16.0: can't read capabilities [ 498.435362][ T5827] usb 7-1: USB disconnect, device number 20 [ 499.023497][T14620] overlayfs: missing 'lowerdir' [ 499.491815][T14625] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2306'. [ 499.697191][T14633] overlayfs: failed to clone upperpath [ 499.737554][ T39] audit: type=1804 audit(1781391940.374:1883): pid=14635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2309" name="/newroot/67/bus/bus" dev="overlay" ino=397 res=1 errno=0 [ 499.819977][T14638] netlink: 'syz.6.2308': attribute type 4 has an invalid length. [ 499.862606][T14639] netlink: 'syz.7.2309': attribute type 4 has an invalid length. [ 500.321424][T14643] syzkaller0: entered promiscuous mode [ 500.323238][T14643] syzkaller0: entered allmulticast mode [ 500.672886][T14648] fuse: fd is not a fuse device [ 501.086195][T14667] netlink: 'syz.7.2316': attribute type 61 has an invalid length. [ 501.090259][T14665] lo speed is unknown, defaulting to 1000 [ 501.158879][ T39] audit: type=1326 audit(1781391941.693:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.7.2316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 501.185117][ T39] audit: type=1326 audit(1781391941.693:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.7.2316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 501.209913][ T39] audit: type=1326 audit(1781391941.693:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.7.2316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 501.223599][ T39] audit: type=1326 audit(1781391941.693:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.7.2316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 501.247856][ T39] audit: type=1326 audit(1781391941.693:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.7.2316" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 501.281745][ T39] audit: type=1326 audit(1781391941.693:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.7.2316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 501.322155][ T39] audit: type=1326 audit(1781391941.693:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.7.2316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 501.334259][ T39] audit: type=1326 audit(1781391941.693:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.7.2316" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 501.347118][ T39] audit: type=1326 audit(1781391941.693:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.7.2316" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 501.942255][T14690] fuse: fd is not a fuse device [ 502.905609][T14702] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2332'. [ 503.194419][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2327'. [ 503.240840][T14716] FAULT_INJECTION: forcing a failure. [ 503.240840][T14716] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 503.250055][T14716] CPU: 2 UID: 0 PID: 14716 Comm: syz.0.2336 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.250075][T14716] Tainted: [L]=SOFTLOCKUP [ 503.250078][T14716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 503.250084][T14716] Call Trace: [ 503.250089][T14716] [ 503.250094][T14716] dump_stack_lvl+0x100/0x190 [ 503.250143][T14716] should_fail_ex.cold+0x5/0xa [ 503.250155][T14716] ? prepare_alloc_pages+0x16d/0x5f0 [ 503.250170][T14716] should_fail_alloc_page+0xeb/0x140 [ 503.250184][T14716] prepare_alloc_pages+0x1f0/0x5f0 [ 503.250199][T14716] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 503.250216][T14716] ? do_user_addr_fault+0x7de/0x12f0 [ 503.250243][T14716] ? irqentry_exit+0x24d/0x970 [ 503.250263][T14716] ? lockdep_hardirqs_on+0x78/0x100 [ 503.250286][T14716] ? irqentry_exit+0x24d/0x970 [ 503.250308][T14716] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 503.250346][T14716] ? _copy_from_iter+0x350/0x1690 [ 503.250370][T14716] ? _copy_from_iter+0x270/0x1690 [ 503.250392][T14716] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 503.250416][T14716] ? policy_nodemask+0xed/0x4f0 [ 503.250439][T14716] alloc_pages_mpol+0x1fb/0x540 [ 503.250459][T14716] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 503.250486][T14716] alloc_pages_noprof+0x1a/0x160 [ 503.250508][T14716] anon_pipe_write+0xacb/0x18c0 [ 503.250540][T14716] ? __pfx_anon_pipe_write+0x10/0x10 [ 503.250581][T14716] ? apparmor_file_permission+0x13f/0x1c0 [ 503.250602][T14716] ? bpf_lsm_file_permission+0x9/0x10 [ 503.250618][T14716] ? security_file_permission+0x76/0x210 [ 503.250639][T14716] ? rw_verify_area+0xce/0x6d0 [ 503.250658][T14716] vfs_write+0x6ac/0x1070 [ 503.250676][T14716] ? __pfx_anon_pipe_write+0x10/0x10 [ 503.250698][T14716] ? __pfx_vfs_write+0x10/0x10 [ 503.250715][T14716] ? find_held_lock+0x2b/0x80 [ 503.250752][T14716] ksys_write+0x1f8/0x250 [ 503.250772][T14716] ? __pfx_ksys_write+0x10/0x10 [ 503.250789][T14716] ? ksys_write+0x1ac/0x250 [ 503.250808][T14716] ? rcu_is_watching+0x12/0xc0 [ 503.250830][T14716] __do_fast_syscall_32+0xe7/0x970 [ 503.250854][T14716] ? lockdep_hardirqs_on+0x78/0x100 [ 503.250877][T14716] do_fast_syscall_32+0x32/0x70 [ 503.250901][T14716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 503.250922][T14716] RIP: 0023:0xf7f28f7c [ 503.250935][T14716] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 503.250949][T14716] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 503.250968][T14716] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800022c0 [ 503.250978][T14716] RDX: 00000000ffffff0c RSI: 0000000000000000 RDI: 0000000000000000 [ 503.250987][T14716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 503.250996][T14716] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 503.251006][T14716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 503.251027][T14716] [ 503.383655][T14724] overlayfs: failed to clone upperpath [ 503.597053][ T6726] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 503.686286][T14739] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2348'. [ 503.760492][ T6726] usb 5-1: Using ep0 maxpacket: 16 [ 503.766744][ T6726] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 503.769565][ T6726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.772405][ T6726] usb 5-1: Product: syz [ 503.773770][ T6726] usb 5-1: Manufacturer: syz [ 503.775258][ T6726] usb 5-1: SerialNumber: syz [ 503.966176][T14748] misc userio: Invalid payload size [ 504.008478][ T6726] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 504.012856][ T6726] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 504.016365][ T6726] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 504.018947][ T6726] usb 5-1: media controller created [ 504.026145][ T6726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 504.284492][ T6726] zl10353_read_register: readreg error (reg=127, ret==-110) [ 504.453268][ T5820] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 504.480721][ T6726] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 504.488473][ T6726] usb 5-1: USB disconnect, device number 27 [ 504.677013][ T5820] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 504.693901][ T5820] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 504.717543][ T5820] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 504.736084][ T5820] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 504.742296][ T5820] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 504.751012][ T5820] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 504.753983][ T5820] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 504.756546][ T5820] usb 12-1: Product: syz [ 504.758031][ T5820] usb 12-1: Manufacturer: syz [ 504.790721][ T5820] cdc_wdm 12-1:1.0: skipping garbage [ 504.796135][ T5820] cdc_wdm 12-1:1.0: skipping garbage [ 504.813982][ T5820] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 504.816132][ T5820] cdc_wdm 12-1:1.0: Unknown control protocol [ 504.880021][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2357'. [ 505.074848][ T6726] usb 12-1: USB disconnect, device number 9 [ 505.437018][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2362'. [ 505.528098][T14778] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2362'. [ 505.531137][T14778] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 506.523061][ T5827] usb 12-1: new full-speed USB device number 10 using dummy_hcd [ 506.699096][ T5827] usb 12-1: config 0 has an invalid interface number: 205 but max is 0 [ 506.702123][ T5827] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.705959][ T5827] usb 12-1: config 0 has no interface number 0 [ 506.708437][ T5827] usb 12-1: config 0 interface 205 has no altsetting 0 [ 506.713092][ T5827] usb 12-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 506.716762][ T5827] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.720564][ T5827] usb 12-1: Product: syz [ 506.723718][ T5827] usb 12-1: Manufacturer: syz [ 506.727921][ T5827] usb 12-1: SerialNumber: syz [ 506.733650][ T5827] usb 12-1: config 0 descriptor?? [ 506.741745][ T5827] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 506.758056][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 506.795367][ T5827] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 506.798998][ T5827] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 506.803415][ T5827] usb 12-1: media controller created [ 506.816911][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 506.825056][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 506.829892][ T5827] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 506.838787][ T5827] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb12/12-1/input/input33 [ 506.855222][ T5827] dvb-usb: schedule remote query interval to 150 msecs. [ 506.861420][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 506.880699][ T5827] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 507.042697][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 507.057815][ T5827] dvb-usb: error while querying for an remote control event. [ 507.156419][T14805] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 507.224774][T14805] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 507.227403][T14805] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 507.232043][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 507.235192][ T5827] dvb-usb: error while querying for an remote control event. [ 507.292243][T14805] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 507.424900][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 507.426819][ T5827] dvb-usb: error while querying for an remote control event. [ 507.555156][T14812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.566239][T14812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.596030][ T5841] dvb-usb: bulk message failed: -22 (1/0) [ 507.598380][ T5841] dvb-usb: error while querying for an remote control event. [ 507.766406][T14787] Set syz1 is full, maxelem 65536 reached [ 507.774051][ T5841] dvb-usb: bulk message failed: -22 (1/0) [ 507.777908][ T5841] dvb-usb: error while querying for an remote control event. [ 507.823587][ T5827] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 507.953689][ T5841] dvb-usb: bulk message failed: -22 (1/0) [ 507.956232][ T5841] dvb-usb: error while querying for an remote control event. [ 507.975359][ T5827] usb 5-1: device descriptor read/64, error -71 [ 508.138930][ T5841] dvb-usb: bulk message failed: -22 (1/0) [ 508.142597][ T5841] dvb-usb: error while querying for an remote control event. [ 508.246362][ T5827] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 508.322710][ T5841] dvb-usb: bulk message failed: -22 (1/0) [ 508.325127][ T5841] dvb-usb: error while querying for an remote control event. [ 508.387187][ T5827] usb 5-1: device descriptor read/64, error -71 [ 508.507649][ T5841] dvb-usb: bulk message failed: -22 (1/0) [ 508.509521][ T5841] dvb-usb: error while querying for an remote control event. [ 508.512456][ T5827] usb usb5-port1: attempt power cycle [ 508.663322][T14825] syzkaller0: entered promiscuous mode [ 508.665082][T14825] syzkaller0: entered allmulticast mode [ 508.679910][ T5841] dvb-usb: bulk message failed: -22 (1/0) [ 508.683475][ T5841] dvb-usb: error while querying for an remote control event. [ 508.870069][ T5841] dvb-usb: bulk message failed: -22 (1/0) [ 508.872150][ T5841] dvb-usb: error while querying for an remote control event. [ 508.897103][ T5827] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 508.919565][ T5827] usb 5-1: device descriptor read/8, error -71 [ 509.037446][ T5841] dvb-usb: bulk message failed: -22 (1/0) [ 509.039268][ T5841] dvb-usb: error while querying for an remote control event. [ 509.074990][ T24] usb 12-1: USB disconnect, device number 10 [ 509.180685][ T5827] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 509.203542][ T5827] usb 5-1: device descriptor read/8, error -71 [ 509.213211][ T24] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 509.231759][T14838] openvswitch: netlink: Key 11 has unexpected len 4 expected 2 [ 509.235121][ T5753] Bluetooth: hci3: command 0x0c1a tx timeout [ 509.281287][T14840] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 509.286096][T14840] block device autoloading is deprecated and will be removed. [ 509.334562][ T5827] usb usb5-port1: unable to enumerate USB device [ 509.350007][T14844] netlink: 'syz.6.2382': attribute type 4 has an invalid length. [ 509.406327][ T5753] Bluetooth: hci4: command 0x0405 tx timeout [ 509.547484][ T39] kauditd_printk_skb: 208 callbacks suppressed [ 509.547500][ T39] audit: type=1326 audit(1781391949.435:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14848 comm="syz.6.2384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 509.556603][ T39] audit: type=1326 audit(1781391949.435:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14848 comm="syz.6.2384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 509.565085][ T39] audit: type=1326 audit(1781391949.435:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14848 comm="syz.6.2384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 509.573780][ T39] audit: type=1326 audit(1781391949.435:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14848 comm="syz.6.2384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 509.582634][ T39] audit: type=1326 audit(1781391949.435:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14848 comm="syz.6.2384" exe="/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 509.592125][ T39] audit: type=1326 audit(1781391949.435:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14848 comm="syz.6.2384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 509.599922][ T39] audit: type=1326 audit(1781391949.435:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14848 comm="syz.6.2384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 509.608902][ T39] audit: type=1326 audit(1781391949.435:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14848 comm="syz.6.2384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 509.617656][ T39] audit: type=1326 audit(1781391949.435:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14848 comm="syz.6.2384" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 509.626312][ T39] audit: type=1326 audit(1781391949.435:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14848 comm="syz.6.2384" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 510.311415][T14865] binder_alloc: 14864: binder_alloc_buf, no vma [ 510.450025][T14871] overlayfs: failed to clone upperpath [ 510.510606][T14873] netlink: 'syz.2.2392': attribute type 4 has an invalid length. [ 510.574049][T14877] netlink: 'syz.6.2393': attribute type 4 has an invalid length. [ 510.879622][T14882] overlayfs: failed to resolve './bus:/': -2 [ 511.279245][T14889] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2397'. [ 511.286539][T14889] bond0: Error: Cannot enslave bond to itself. [ 511.294371][T14889] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2397'. [ 511.366982][T14890] netlink: 260 bytes leftover after parsing attributes in process `syz.7.2397'. [ 511.660756][ T5753] Bluetooth: hci4: command 0x0405 tx timeout [ 512.360526][T14911] 8021q: VLANs not supported on ip6gre0 [ 512.922550][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2408'. [ 513.716775][T14946] fuse: fd is not a fuse device [ 513.895733][T14959] overlayfs: failed to clone upperpath [ 513.915258][ T5753] Bluetooth: hci4: command 0x0405 tx timeout [ 514.012739][T14963] netlink: 'syz.6.2420': attribute type 4 has an invalid length. [ 514.133109][T14967] FAULT_INJECTION: forcing a failure. [ 514.133109][T14967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.137995][T14967] CPU: 1 UID: 0 PID: 14967 Comm: syz.2.2422 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.138020][T14967] Tainted: [L]=SOFTLOCKUP [ 514.138026][T14967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 514.138034][T14967] Call Trace: [ 514.138040][T14967] [ 514.138046][T14967] dump_stack_lvl+0x100/0x190 [ 514.138076][T14967] should_fail_ex.cold+0x5/0xa [ 514.138095][T14967] _copy_from_user+0x2e/0xd0 [ 514.138115][T14967] get_compat_cmd+0x8d/0x4a0 [ 514.138132][T14967] ? __pfx_get_compat_cmd+0x10/0x10 [ 514.138152][T14967] ? tomoyo_path_number_perm+0x188/0x580 [ 514.138170][T14967] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 514.138188][T14967] comedi_compat_ioctl+0x14d/0xe20 [ 514.138209][T14967] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 514.138229][T14967] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 514.138249][T14967] ? do_vfs_ioctl+0x226/0x13e0 [ 514.138270][T14967] ? find_held_lock+0x2b/0x80 [ 514.138286][T14967] ? __fget_files+0x215/0x3d0 [ 514.138300][T14967] ? hook_file_ioctl_common+0x149/0x410 [ 514.138322][T14967] ? __fget_files+0x21f/0x3d0 [ 514.138349][T14967] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 514.138370][T14967] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 514.138386][T14967] __do_fast_syscall_32+0xe7/0x970 [ 514.138407][T14967] ? lockdep_hardirqs_on+0x78/0x100 [ 514.138428][T14967] do_fast_syscall_32+0x32/0x70 [ 514.138448][T14967] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 514.138466][T14967] RIP: 0023:0xf709ef7c [ 514.138481][T14967] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 514.138498][T14967] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 514.138514][T14967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008040640a [ 514.138523][T14967] RDX: 0000000080000700 RSI: 0000000000000000 RDI: 0000000000000000 [ 514.138532][T14967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 514.138541][T14967] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 514.138548][T14967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 514.138567][T14967] [ 515.055206][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 516.551810][T15004] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2432'. [ 516.830731][T15022] overlayfs: failed to clone upperpath [ 517.039386][T15030] netlink: 'syz.6.2438': attribute type 4 has an invalid length. [ 517.133386][ T1358] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 517.309091][ T1358] usb 12-1: Using ep0 maxpacket: 8 [ 517.313391][ T1358] usb 12-1: config 0 has an invalid interface number: 55 but max is 0 [ 517.316443][ T1358] usb 12-1: config 0 has no interface number 0 [ 517.319102][ T1358] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 517.322756][ T1358] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 517.326566][ T1358] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 252, changing to 11 [ 517.330420][ T1358] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 17528, setting to 1024 [ 517.333998][ T1358] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 517.338101][ T1358] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 517.341643][ T1358] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.345957][ T1358] usb 12-1: config 0 descriptor?? [ 517.349530][T15025] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 517.355288][ T1358] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 517.633124][T15032] openvswitch: netlink: Missing valid actions attribute. [ 517.639520][T15032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.932429][T15050] FAULT_INJECTION: forcing a failure. [ 517.932429][T15050] name failslab, interval 1, probability 0, space 0, times 0 [ 517.953150][T15050] CPU: 1 UID: 0 PID: 15050 Comm: syz.0.2446 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.953179][T15050] Tainted: [L]=SOFTLOCKUP [ 517.953186][T15050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 517.953196][T15050] Call Trace: [ 517.953217][T15050] [ 517.953224][T15050] dump_stack_lvl+0x100/0x190 [ 517.953259][T15050] should_fail_ex.cold+0x5/0xa [ 517.953282][T15050] ? p9_fcall_init+0x101/0x420 [ 517.953306][T15050] should_failslab+0xc2/0x120 [ 517.953328][T15050] __kmalloc_noprof+0xe0/0x850 [ 517.953361][T15050] p9_fcall_init+0x101/0x420 [ 517.953393][T15050] p9_tag_alloc+0x20d/0x860 [ 517.953423][T15050] ? __pfx_p9_tag_alloc+0x10/0x10 [ 517.953447][T15050] ? deactivate_locked_super+0xc1/0x1b0 [ 517.953467][T15050] ? exit_to_user_mode_loop+0x157/0x670 [ 517.953493][T15050] ? __do_fast_syscall_32+0x701/0x970 [ 517.953533][T15050] ? do_fast_syscall_32+0x32/0x70 [ 517.953557][T15050] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 517.953586][T15050] p9_client_prepare_req+0x19b/0x4e0 [ 517.953614][T15050] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 517.953651][T15050] p9_client_rpc+0x1c4/0xc80 [ 517.953679][T15050] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 517.953708][T15050] ? __pfx_p9_client_rpc+0x10/0x10 [ 517.953736][T15050] ? __lock_acquire+0x4a5/0x2630 [ 517.953769][T15050] ? destroy_inode+0x139/0x1c0 [ 517.953809][T15050] p9_client_clunk+0x93/0x170 [ 517.953840][T15050] v9fs_dentry_release+0x130/0x260 [ 517.953864][T15050] ? __pfx_v9fs_dentry_release+0x10/0x10 [ 517.953888][T15050] ? iput+0x3a/0x40 [ 517.953911][T15050] ? __pfx_v9fs_dentry_release+0x10/0x10 [ 517.953934][T15050] __dentry_kill+0x23e/0x690 [ 517.953962][T15050] finish_dput+0x76/0x480 [ 517.953989][T15050] dput.part.0+0x456/0x570 [ 517.954016][T15050] shrink_dcache_for_umount+0x15b/0x400 [ 517.954034][T15050] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 517.954065][T15050] generic_shutdown_super+0x7e/0x360 [ 517.954095][T15050] kill_anon_super+0x3a/0x60 [ 517.954122][T15050] v9fs_kill_super+0x3d/0xa0 [ 517.954148][T15050] deactivate_locked_super+0xc1/0x1b0 [ 517.954166][T15050] deactivate_super+0xe7/0x110 [ 517.954185][T15050] cleanup_mnt+0x21f/0x450 [ 517.954207][T15050] task_work_run+0x150/0x240 [ 517.954225][T15050] ? __pfx_task_work_run+0x10/0x10 [ 517.954250][T15050] exit_to_user_mode_loop+0x157/0x670 [ 517.954276][T15050] ? rcu_is_watching+0x12/0xc0 [ 517.954299][T15050] __do_fast_syscall_32+0x701/0x970 [ 517.954323][T15050] ? lockdep_hardirqs_on+0x78/0x100 [ 517.954349][T15050] do_fast_syscall_32+0x32/0x70 [ 517.954374][T15050] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 517.954400][T15050] RIP: 0023:0xf7f28f7c [ 517.954414][T15050] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 517.954429][T15050] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000034 [ 517.954446][T15050] RAX: 0000000000000000 RBX: 0000000080000200 RCX: 0000000000000008 [ 517.954456][T15050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 517.954466][T15050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 517.954475][T15050] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 517.954485][T15050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.954509][T15050] [ 518.443338][T15063] overlayfs: failed to clone upperpath [ 518.565882][T15069] FAULT_INJECTION: forcing a failure. [ 518.565882][T15069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.571926][T15069] CPU: 2 UID: 0 PID: 15069 Comm: syz.0.2454 Tainted: G L syzkaller #0 PREEMPT(full) [ 518.571955][T15069] Tainted: [L]=SOFTLOCKUP [ 518.571959][T15069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 518.571965][T15069] Call Trace: [ 518.571969][T15069] [ 518.571974][T15069] dump_stack_lvl+0x100/0x190 [ 518.571995][T15069] should_fail_ex.cold+0x5/0xa [ 518.572010][T15069] _copy_from_user+0x2e/0xd0 [ 518.572032][T15069] kstrtouint_from_user+0xd6/0x1d0 [ 518.572048][T15069] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 518.572062][T15069] ? __lock_acquire+0x4a5/0x2630 [ 518.572099][T15069] proc_fail_nth_write+0x83/0x220 [ 518.572126][T15069] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 518.572157][T15069] vfs_write+0x2aa/0x1070 [ 518.572170][T15069] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 518.572188][T15069] ? __pfx_vfs_write+0x10/0x10 [ 518.572198][T15069] ? find_held_lock+0x2b/0x80 [ 518.572211][T15069] ? __fget_files+0x215/0x3d0 [ 518.572239][T15069] ? __fget_files+0x21f/0x3d0 [ 518.572256][T15069] ksys_write+0x12a/0x250 [ 518.572270][T15069] ? __pfx_ksys_write+0x10/0x10 [ 518.572283][T15069] ? rcu_is_watching+0x12/0xc0 [ 518.572296][T15069] do_int80_emulation+0x14b/0x720 [ 518.572322][T15069] asm_int80_emulation+0x1a/0x20 [ 518.572339][T15069] RIP: 0023:0xf71261ab [ 518.572354][T15069] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 518.572389][T15069] RSP: 002b:00000000f53c54bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 518.572407][T15069] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f53c55d0 [ 518.572417][T15069] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 518.572426][T15069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 518.572435][T15069] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 518.572445][T15069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 518.572468][T15069] [ 518.637561][ C2] hpet_rtc_timer_reinit: 393 callbacks suppressed [ 518.637571][ C2] hpet: Lost 4 RTC interrupts [ 519.153837][T15094] input: syz1 as /devices/virtual/input/input34 [ 519.196283][ T39] audit: type=1400 audit(1781391958.330:2504): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 519.475634][ T5841] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 519.479074][ T5841] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 519.481289][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2467'. [ 519.482139][ T5841] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 519.482156][ T5841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.495649][T15087] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 519.503439][ T5841] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 520.061143][T15129] bridge0: port 3(erspan0) entered disabled state [ 520.118867][T15129] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.125220][ C0] ldusb 12-1:0.55: usb_submit_urb failed (-1) [ 520.127422][T15129] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.129578][ T5841] usb 12-1: USB disconnect, device number 11 [ 520.136032][ T5841] ldusb 12-1:0.55: LD USB Device #0 now disconnected [ 520.154753][T15129] syzkaller0: left promiscuous mode [ 520.157183][T15129] tipc: Resetting bearer [ 520.159756][T15129] tipc: Resetting bearer [ 520.159920][T12284] usb 7-1: USB disconnect, device number 21 [ 520.164656][T15129] bridge2: left promiscuous mode [ 520.165426][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2474'. [ 520.169182][T15129] bond2: left promiscuous mode [ 520.175381][T15129] bond5: left promiscuous mode [ 520.177346][T15129] ip6gre1: left promiscuous mode [ 520.268554][ T39] audit: type=1804 audit(1781391959.326:2505): pid=15133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2475" name="/newroot/98/bus/bus" dev="overlay" ino=571 res=1 errno=0 [ 520.904150][T15164] syzkaller0: entered promiscuous mode [ 520.907705][T15164] syzkaller0: entered allmulticast mode [ 521.669194][T15180] fuse: fd is not a fuse device [ 521.673154][T15180] fuse: fd is not a fuse device [ 521.678233][T15180] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2492'. [ 521.747459][T15182] netlink: 'syz.6.2495': attribute type 4 has an invalid length. [ 521.990146][T15195] dlm: plock device version mismatch: kernel (1.2.0), user (1.1792.0) [ 521.994279][T15195] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2500'. [ 522.444229][T15213] fuse: fd is not a fuse device [ 522.944662][T15222] fuse: fd is not a fuse device [ 523.167557][T15231] netlink: 'syz.6.2513': attribute type 5 has an invalid length. [ 523.175926][T15231] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2513'. [ 523.230965][T15233] vlan0: entered promiscuous mode [ 523.264691][T15233] team0: Port device vlan0 added [ 523.275983][T15233] tipc: Started in network mode [ 523.278914][T15233] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 523.282047][T15233] tipc: Enabled bearer , priority 0 [ 523.594127][T15241] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.899355][T15241] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.951477][T15246] binder: 15245:15246 unknown command 0 [ 523.953411][T15246] binder: 15245:15246 ioctl c0306201 80000080 returned -22 [ 524.003107][T15248] netlink: 'syz.2.2519': attribute type 1 has an invalid length. [ 524.022191][T15248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 524.073579][T15241] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.176073][T15241] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.248077][T15263] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2525'. [ 524.333778][T11417] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.350438][T11211] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.360855][T15266] netlink: 'syz.6.2526': attribute type 10 has an invalid length. [ 524.370973][T11211] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.380112][ T1358] tipc: Node number set to 11578026 [ 524.407730][T11209] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.461770][T15271] netlink: 276 bytes leftover after parsing attributes in process `syz.0.2528'. [ 524.464758][T15271] FAULT_INJECTION: forcing a failure. [ 524.464758][T15271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.468729][T15271] CPU: 0 UID: 0 PID: 15271 Comm: syz.0.2528 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.468746][T15271] Tainted: [L]=SOFTLOCKUP [ 524.468749][T15271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 524.468756][T15271] Call Trace: [ 524.468760][T15271] [ 524.468764][T15271] dump_stack_lvl+0x100/0x190 [ 524.468786][T15271] should_fail_ex.cold+0x5/0xa [ 524.468799][T15271] _copy_from_user+0x2e/0xd0 [ 524.468815][T15271] kstrtouint_from_user+0xd6/0x1d0 [ 524.468826][T15271] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 524.468836][T15271] ? __lock_acquire+0x4a5/0x2630 [ 524.468858][T15271] proc_fail_nth_write+0x83/0x220 [ 524.468875][T15271] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 524.468898][T15271] vfs_write+0x2aa/0x1070 [ 524.468911][T15271] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 524.468928][T15271] ? __pfx_vfs_write+0x10/0x10 [ 524.468939][T15271] ? find_held_lock+0x2b/0x80 [ 524.468951][T15271] ? __fget_files+0x215/0x3d0 [ 524.468966][T15271] ? __fget_files+0x21f/0x3d0 [ 524.468981][T15271] ksys_write+0x12a/0x250 [ 524.468993][T15271] ? __pfx_ksys_write+0x10/0x10 [ 524.469005][T15271] ? rcu_is_watching+0x12/0xc0 [ 524.469019][T15271] do_int80_emulation+0x14b/0x720 [ 524.469036][T15271] asm_int80_emulation+0x1a/0x20 [ 524.469047][T15271] RIP: 0023:0xf71261ab [ 524.469056][T15271] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 524.469067][T15271] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 524.469077][T15271] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53e65d0 [ 524.469083][T15271] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 524.469089][T15271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 524.469095][T15271] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 524.469101][T15271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 524.469114][T15271] [ 524.575547][T15276] GUP no longer grows the stack in syz.6.2530 (15276): 80009000-8000a000 (80005000) [ 524.581620][T15276] CPU: 1 UID: 0 PID: 15276 Comm: syz.6.2530 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.581639][T15276] Tainted: [L]=SOFTLOCKUP [ 524.581643][T15276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 524.581648][T15276] Call Trace: [ 524.581652][T15276] [ 524.581656][T15276] dump_stack_lvl+0x100/0x190 [ 524.581679][T15276] gup_vma_lookup.cold+0x83/0x96 [ 524.581695][T15276] __get_user_pages+0x241/0x32a0 [ 524.581712][T15276] ? down_read_killable+0x307/0x4b0 [ 524.581722][T15276] ? __kernel_text_address+0xd/0x30 [ 524.581733][T15276] ? __pfx___get_user_pages+0x10/0x10 [ 524.581749][T15276] __gup_longterm_locked+0x87d/0x16f0 [ 524.581766][T15276] ? __pfx___gup_longterm_locked+0x10/0x10 [ 524.581780][T15276] ? lock_acquire+0x1b1/0x370 [ 524.581801][T15276] gup_fast_fallback+0x16dc/0x2790 [ 524.581824][T15276] ? __pfx_gup_fast_fallback+0x10/0x10 [ 524.581838][T15276] ? __lock_acquire+0x4a5/0x2630 [ 524.581854][T15276] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 524.581868][T15276] ? lockdep_hardirqs_on+0x78/0x100 [ 524.581886][T15276] get_user_pages_fast+0xa7/0xf0 [ 524.581900][T15276] ? __pfx_get_user_pages_fast+0x10/0x10 [ 524.581913][T15276] ? iov_iter_advance+0xac/0x6d0 [ 524.581929][T15276] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 524.581947][T15276] ? pipe_lock+0x69/0x80 [ 524.581960][T15276] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 524.581975][T15276] ? __pfx___mutex_lock+0x10/0x10 [ 524.582005][T15276] ? iovec_from_user+0xda/0x140 [ 524.582023][T15276] iov_iter_get_pages2+0xa3/0x100 [ 524.582037][T15276] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 524.582051][T15276] ? wait_for_space+0x2ca/0x3b0 [ 524.582066][T15276] __do_sys_vmsplice+0x7dd/0x13c0 [ 524.582085][T15276] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 524.582103][T15276] ? __pfx_futex_wait+0x10/0x10 [ 524.582140][T15276] ? __do_fast_syscall_32+0xe7/0x970 [ 524.582155][T15276] __do_fast_syscall_32+0xe7/0x970 [ 524.582172][T15276] do_fast_syscall_32+0x32/0x70 [ 524.582187][T15276] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 524.582200][T15276] RIP: 0023:0xf70aef7c [ 524.582209][T15276] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 524.582219][T15276] RSP: 002b:00000000f547c50c EFLAGS: 00000292 ORIG_RAX: 000000000000013c [ 524.582230][T15276] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000280 [ 524.582236][T15276] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 524.582242][T15276] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 524.582247][T15276] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 524.582253][T15276] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 524.582267][T15276] [ 524.583584][T15275] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2530'. [ 524.776246][ T39] audit: type=1326 audit(1781391963.488:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.6.2534" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 524.789276][ T39] audit: type=1326 audit(1781391963.488:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.6.2534" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 524.805635][ T39] audit: type=1326 audit(1781391963.497:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.6.2534" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 524.815273][ T39] audit: type=1326 audit(1781391963.497:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.6.2534" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 524.822575][ T39] audit: type=1326 audit(1781391963.497:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.6.2534" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 524.832740][ T39] audit: type=1326 audit(1781391963.497:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.6.2534" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 524.843208][ T39] audit: type=1326 audit(1781391963.515:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.6.2534" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 524.855933][ T39] audit: type=1326 audit(1781391963.534:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.6.2534" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 524.856801][T15285] futex_wake_op: syz.6.2534 tries to shift op by 32; fix this program [ 524.866257][ T39] audit: type=1326 audit(1781391963.552:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.6.2534" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 524.920557][ T39] audit: type=1326 audit(1781391963.617:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.6.2534" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef7c code=0x7ffc0000 [ 525.000185][T15288] binder: 15287:15288 ioctl c0306201 80000040 returned -22 [ 525.551979][T15309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2539'. [ 525.562492][T15309] nfs4: Unknown parameter 'rma ²' [ 525.980802][T15287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.172388][T15323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.359290][ T5748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 526.379095][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 526.383637][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 526.387770][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 526.393307][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 526.564703][T15339] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 526.946757][T15333] lo speed is unknown, defaulting to 1000 [ 527.270917][T15357] netlink: 'syz.6.2554': attribute type 1 has an invalid length. [ 527.345547][T15363] netlink: 276 bytes leftover after parsing attributes in process `syz.6.2555'. [ 527.411051][T15333] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.413891][T15333] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.416115][T15333] bridge_slave_0: entered allmulticast mode [ 527.419061][T15333] bridge_slave_0: entered promiscuous mode [ 527.454920][T15333] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.459732][T15333] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.462563][T15333] bridge_slave_1: entered allmulticast mode [ 527.466135][T15333] bridge_slave_1: entered promiscuous mode [ 527.525220][T15333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.533810][T15333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.916818][T11417] bond0 (unregistering): Released all slaves [ 527.926747][T15333] team0: Port device team_slave_0 added [ 527.950036][T15333] team0: Port device team_slave_1 added [ 527.973345][T15333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.975907][T15333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.976724][T15385] fuse: fd is not a fuse device [ 527.987290][T15333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.997052][T15333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.999930][T15333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.011221][T15333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.019020][T15388] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2564'. [ 528.053149][T11417] hmó3)ó: left promiscuous mode [ 528.169427][T15333] hsr_slave_0: entered promiscuous mode [ 528.177665][T15333] hsr_slave_1: entered promiscuous mode [ 528.182395][T15333] debugfs: 'hsr0' already exists in 'hsr' [ 528.184942][T15333] Cannot create hsr debugfs directory [ 528.308871][ T5453] 8021q: adding VLAN 0 to HW filter on device eth14 [ 528.640351][ T5453] 8021q: adding VLAN 0 to HW filter on device eth15 [ 528.654097][ T5753] Bluetooth: hci1: command tx timeout [ 528.883996][T11417] hsr_slave_0: left promiscuous mode [ 528.887916][T11417] hsr_slave_1: left promiscuous mode [ 528.888705][T15418] netlink: 'syz.0.2571': attribute type 1 has an invalid length. [ 528.894105][T15418] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2571'. [ 528.897003][T15418] netlink: 'syz.0.2571': attribute type 1 has an invalid length. [ 528.899468][T15418] netlink: 'syz.0.2571': attribute type 8 has an invalid length. [ 528.902032][T15418] netlink: 606 bytes leftover after parsing attributes in process `syz.0.2571'. [ 528.905771][T15418] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2571'. [ 529.875276][T15436] FAULT_INJECTION: forcing a failure. [ 529.875276][T15436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.892983][T15436] CPU: 2 UID: 0 PID: 15436 Comm: syz.0.2576 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.893002][T15436] Tainted: [L]=SOFTLOCKUP [ 529.893006][T15436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 529.893013][T15436] Call Trace: [ 529.893017][T15436] [ 529.893022][T15436] dump_stack_lvl+0x100/0x190 [ 529.893045][T15436] should_fail_ex.cold+0x5/0xa [ 529.893060][T15436] _copy_to_user+0x32/0xd0 [ 529.893076][T15436] simple_read_from_buffer+0xcb/0x170 [ 529.893090][T15436] proc_fail_nth_read+0x1af/0x230 [ 529.893107][T15436] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 529.893125][T15436] ? rw_verify_area+0xce/0x6d0 [ 529.893136][T15436] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 529.893152][T15436] vfs_read+0x1e4/0xb30 [ 529.893170][T15436] ? __pfx_vfs_read+0x10/0x10 [ 529.893181][T15436] ? find_held_lock+0x2b/0x80 [ 529.893195][T15436] ? __fget_files+0x215/0x3d0 [ 529.893210][T15436] ? __fget_files+0x21f/0x3d0 [ 529.893226][T15436] ksys_read+0x12a/0x250 [ 529.893237][T15436] ? __pfx_ksys_read+0x10/0x10 [ 529.893249][T15436] ? rcu_is_watching+0x12/0xc0 [ 529.893261][T15436] ? rcu_is_watching+0x12/0xc0 [ 529.893275][T15436] do_int80_emulation+0x14b/0x720 [ 529.893293][T15436] asm_int80_emulation+0x1a/0x20 [ 529.893305][T15436] RIP: 0023:0xf71261ab [ 529.893315][T15436] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 529.893325][T15436] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 529.893336][T15436] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53e65d0 [ 529.893343][T15436] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 529.893349][T15436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 529.893355][T15436] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 529.893361][T15436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 529.893375][T15436] [ 529.924998][T15333] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 530.024369][T15333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 530.027332][T15333] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 530.052853][T15333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.055848][T15333] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 530.069268][T15333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 530.075933][T15333] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 530.097496][T15333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 530.115407][T11417] IPVS: stop unused estimator thread 0... [ 530.176102][T15333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.184665][T15333] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.192442][T11420] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.194812][T11420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.201260][T11420] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.203551][T11420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.234714][T15333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 530.504299][T15333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.525228][T15478] syzkaller0: entered promiscuous mode [ 530.527486][T15478] syzkaller0: entered allmulticast mode [ 530.574893][T15333] veth0_vlan: entered promiscuous mode [ 530.584126][T15333] veth1_vlan: entered promiscuous mode [ 530.600960][T15333] veth0_macvtap: entered promiscuous mode [ 530.606948][T15333] veth1_macvtap: entered promiscuous mode [ 530.620010][T15333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.758498][T15486] 9p: Bad value for 'wfdno' [ 530.829683][ T5753] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 530.894662][T15499] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2592'. [ 530.908069][ T5753] Bluetooth: hci1: command tx timeout [ 530.931755][T15333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.951487][T11420] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.954242][T11420] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.970309][T11420] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.977698][T11420] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.073975][T11420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.079849][T11420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.098169][T11209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.100679][T11209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.217036][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2594'. [ 531.219899][T15508] openvswitch: netlink: Flow actions attr not present in new flow. [ 531.378002][T15517] overlayfs: failed to clone upperpath [ 531.605203][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 531.605218][ T39] audit: type=1804 audit(1781391969.780:2518): pid=15523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2599" name="/newroot/114/bus/bus" dev="overlay" ino=665 res=1 errno=0 [ 531.864129][T15527] FAULT_INJECTION: forcing a failure. [ 531.864129][T15527] name failslab, interval 1, probability 0, space 0, times 0 [ 531.871225][T15527] CPU: 2 UID: 0 PID: 15527 Comm: syz.0.2600 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.871255][T15527] Tainted: [L]=SOFTLOCKUP [ 531.871261][T15527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 531.871272][T15527] Call Trace: [ 531.871279][T15527] [ 531.871286][T15527] dump_stack_lvl+0x100/0x190 [ 531.871327][T15527] should_fail_ex.cold+0x5/0xa [ 531.871351][T15527] should_failslab+0xc2/0x120 [ 531.871374][T15527] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 531.871401][T15527] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 531.871423][T15527] ? kasan_save_stack+0x30/0x50 [ 531.871439][T15527] ? kasan_save_track+0x14/0x30 [ 531.871456][T15527] ? __kasan_kmalloc+0xaa/0xb0 [ 531.871477][T15527] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 531.871503][T15527] idr_get_free+0x52e/0xa00 [ 531.871535][T15527] idr_alloc_u32+0x1ac/0x320 [ 531.871561][T15527] ? __pfx_idr_alloc_u32+0x10/0x10 [ 531.871595][T15527] idr_alloc_cyclic+0x10b/0x230 [ 531.871642][T15527] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 531.871665][T15527] ? __kmalloc_noprof+0x320/0x850 [ 531.871693][T15527] ? lockdep_init_map_type+0x5c/0x250 [ 531.871722][T15527] ? __rwlock_init+0x37/0x150 [ 531.871744][T15527] afs_lookup_cell+0xe48/0x1b10 [ 531.871778][T15527] ? __pfx_afs_lookup_cell+0x10/0x10 [ 531.871806][T15527] ? find_held_lock+0x2b/0x80 [ 531.871827][T15527] ? net_generic+0xea/0x2a0 [ 531.871850][T15527] ? net_generic+0xea/0x2a0 [ 531.871882][T15527] afs_dynroot_lookup+0x2e2/0xa80 [ 531.871906][T15527] ? d_alloc_parallel+0x26/0x14e0 [ 531.871926][T15527] ? __pfx_afs_dynroot_lookup+0x10/0x10 [ 531.871953][T15527] ? __d_lookup+0x266/0x4a0 [ 531.871977][T15527] lookup_open.isra.0+0x631/0x11b0 [ 531.872003][T15527] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 531.872038][T15527] ? lookup_fast+0x2da/0x600 [ 531.872073][T15527] path_openat+0xa98/0x31a0 [ 531.872102][T15527] ? entry_SYSENTER_compat+0x10/0x2d [ 531.872127][T15527] ? __pfx_path_openat+0x10/0x10 [ 531.872159][T15527] do_file_open+0x20e/0x430 [ 531.872204][T15527] ? __pfx_do_file_open+0x10/0x10 [ 531.872246][T15527] ? alloc_fd+0x476/0x790 [ 531.872271][T15527] ? do_getname+0x191/0x390 [ 531.872304][T15527] do_sys_openat2+0x10d/0x1e0 [ 531.872332][T15527] ? __pfx_do_sys_openat2+0x10/0x10 [ 531.872357][T15527] ? __fget_files+0x215/0x3d0 [ 531.872382][T15527] ? __fget_files+0x21f/0x3d0 [ 531.872405][T15527] __ia32_compat_sys_open+0xfe/0x1c0 [ 531.872433][T15527] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 531.872461][T15527] ? fput+0x79/0x100 [ 531.872484][T15527] ? ksys_write+0x1ac/0x250 [ 531.872506][T15527] ? rcu_is_watching+0x12/0xc0 [ 531.872529][T15527] __do_fast_syscall_32+0xe7/0x970 [ 531.872555][T15527] ? lockdep_hardirqs_on+0x78/0x100 [ 531.872582][T15527] do_fast_syscall_32+0x32/0x70 [ 531.872609][T15527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 531.872631][T15527] RIP: 0023:0xf7f28f7c [ 531.872646][T15527] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 531.872662][T15527] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000005 [ 531.872681][T15527] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000000000080 [ 531.872693][T15527] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000000 [ 531.872703][T15527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 531.872714][T15527] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 531.872724][T15527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 531.872749][T15527] [ 532.001668][ C2] hpet: Lost 8 RTC interrupts [ 532.447894][ T6726] libceph: connect (1)[c::]:6789 error -101 [ 532.451483][ T6726] libceph: mon0 (1)[c::]:6789 connect error [ 532.624666][T15555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2611'. [ 532.627468][T15557] binder: BINDER_SET_CONTEXT_MGR already set [ 532.630791][T15557] binder: 15556:15557 ioctl 4018620d 80000100 returned -16 [ 532.637172][T15557] binder: BINDER_SET_CONTEXT_MGR already set [ 532.639262][T15557] binder: 15556:15557 ioctl 4018620d 80004a80 returned -16 [ 532.668258][ T39] audit: type=1804 audit(1781391970.768:2519): pid=15559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2613" name="/newroot/5/bus/bus" dev="overlay" ino=52 res=1 errno=0 [ 532.739915][ T6726] libceph: connect (1)[c::]:6789 error -101 [ 532.741897][ T6726] libceph: mon0 (1)[c::]:6789 connect error [ 533.162302][ T5753] Bluetooth: hci1: command tx timeout [ 533.303406][ T6726] libceph: connect (1)[c::]:6789 error -101 [ 533.305274][ T6726] libceph: mon0 (1)[c::]:6789 connect error [ 533.337138][T15543] ceph: No mds server is up or the cluster is laggy [ 533.573990][T15571] openvswitch: netlink: Unknown nsh attribute 0 [ 533.579637][T15571] netlink: 328 bytes leftover after parsing attributes in process `syz.7.2616'. [ 533.736930][ T34] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 533.899313][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 533.903139][ T34] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 533.906692][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 533.911651][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 533.915774][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 533.919849][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.927642][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 533.931836][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.214414][T15592] ip6t_REJECT: ECHOREPLY is not supported [ 534.624569][T15594] binder: BINDER_SET_CONTEXT_MGR already set [ 534.626637][T15594] binder: 15593:15594 ioctl 4018620d 80000100 returned -16 [ 534.711922][ T39] audit: type=1804 audit(1781391972.641:2520): pid=15598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2626" name="/newroot/121/bus/bus" dev="overlay" ino=712 res=1 errno=0 [ 534.757827][T15599] usbtmc 5-1:16.0: simple usb_control_msg failed -32 [ 534.761870][ T5531] usb 5-1: USB disconnect, device number 32 [ 535.254132][ T5753] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 535.259920][ T5753] Bluetooth: hci3: Injecting HCI hardware error event [ 535.264218][ T5753] Bluetooth: hci3: hardware error 0x00 [ 535.281413][T15606] FAULT_INJECTION: forcing a failure. [ 535.281413][T15606] name failslab, interval 1, probability 0, space 0, times 0 [ 535.288558][T15606] CPU: 1 UID: 0 PID: 15606 Comm: syz.2.2628 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.288587][T15606] Tainted: [L]=SOFTLOCKUP [ 535.288594][T15606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 535.288605][T15606] Call Trace: [ 535.288612][T15606] [ 535.288620][T15606] dump_stack_lvl+0x100/0x190 [ 535.288654][T15606] should_fail_ex.cold+0x5/0xa [ 535.288678][T15606] should_failslab+0xc2/0x120 [ 535.288699][T15606] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 535.288728][T15606] ? __d_alloc+0x34/0xa40 [ 535.288752][T15606] ? ktime_get_coarse_real_ts64_mg+0x1e0/0x300 [ 535.288776][T15606] __d_alloc+0x34/0xa40 [ 535.288797][T15606] ? inode_set_ctime_current+0x283/0x870 [ 535.288824][T15606] d_alloc_pseudo+0x1c/0xc0 [ 535.288843][T15606] alloc_file_pseudo+0xcf/0x230 [ 535.288872][T15606] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 535.288905][T15606] ioctx_alloc+0x5d6/0x21a0 [ 535.288939][T15606] ? find_held_lock+0x2b/0x80 [ 535.288962][T15606] ? __pfx_ioctx_alloc+0x10/0x10 [ 535.288994][T15606] __ia32_compat_sys_io_setup+0xc8/0x220 [ 535.289022][T15606] __do_fast_syscall_32+0xe7/0x970 [ 535.289048][T15606] ? lockdep_hardirqs_on+0x78/0x100 [ 535.289075][T15606] do_fast_syscall_32+0x32/0x70 [ 535.289102][T15606] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 535.289124][T15606] RIP: 0023:0xf700ef7c [ 535.289140][T15606] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 535.289157][T15606] RSP: 002b:00000000f53dc50c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 535.289174][T15606] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000800016c0 [ 535.289186][T15606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 535.289202][T15606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 535.289212][T15606] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 535.289222][T15606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 535.289246][T15606] [ 535.429529][ T5748] Bluetooth: hci1: command tx timeout [ 536.347950][T15625] netlink: 'syz.2.2637': attribute type 10 has an invalid length. [ 536.353821][T15625] FAULT_INJECTION: forcing a failure. [ 536.353821][T15625] name failslab, interval 1, probability 0, space 0, times 0 [ 536.363392][T15625] CPU: 0 UID: 0 PID: 15625 Comm: syz.2.2637 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.363421][T15625] Tainted: [L]=SOFTLOCKUP [ 536.363427][T15625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 536.363437][T15625] Call Trace: [ 536.363444][T15625] [ 536.363451][T15625] dump_stack_lvl+0x100/0x190 [ 536.363487][T15625] should_fail_ex.cold+0x5/0xa [ 536.363510][T15625] should_failslab+0xc2/0x120 [ 536.363532][T15625] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 536.363560][T15625] ? __alloc_skb+0x140/0x710 [ 536.363581][T15625] __alloc_skb+0x140/0x710 [ 536.363595][T15625] ? __alloc_skb+0x5b7/0x710 [ 536.363611][T15625] ? __pfx___alloc_skb+0x10/0x10 [ 536.363628][T15625] ? __igmp_group_dropped+0x26a/0xe80 [ 536.363654][T15625] inet_ifmcaddr_notify+0xc7/0x1b0 [ 536.363677][T15625] ? __pfx_inet_ifmcaddr_notify+0x10/0x10 [ 536.363708][T15625] __ip_mc_dec_group+0x41d/0x590 [ 536.363733][T15625] inetdev_event+0x142/0x17f0 [ 536.363759][T15625] ? ib_netdevice_event+0xfc/0x330 [ 536.363781][T15625] ? __pfx_inetdev_event+0x10/0x10 [ 536.363805][T15625] ? cfg802154_netdev_notifier_call+0x17a/0xad0 [ 536.363831][T15625] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 536.363858][T15625] notifier_call_chain+0x99/0x400 [ 536.363889][T15625] call_netdevice_notifiers_info+0xbe/0x110 [ 536.363914][T15625] __dev_notify_flags+0x1f7/0x2e0 [ 536.363943][T15625] ? __pfx___dev_notify_flags+0x10/0x10 [ 536.363974][T15625] ? __pfx___dev_change_flags+0x10/0x10 [ 536.364010][T15625] netif_change_flags+0x108/0x160 [ 536.364030][T15625] do_setlink.isra.0+0x1ac4/0x3e60 [ 536.364059][T15625] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 536.364082][T15625] ? __lock_acquire+0x4a5/0x2630 [ 536.364133][T15625] ? __pfx_vprintk_emit+0x10/0x10 [ 536.364157][T15625] ? find_held_lock+0x2b/0x80 [ 536.364177][T15625] ? ___ratelimit+0x77b/0xad0 [ 536.364209][T15625] ? lock_acquire+0x1b1/0x370 [ 536.364240][T15625] ? rcu_is_watching+0x12/0xc0 [ 536.364260][T15625] ? trace_contention_end+0x122/0x170 [ 536.364279][T15625] ? __mutex_lock+0x26d/0x1b10 [ 536.364304][T15625] ? rtnl_newlink+0x8bb/0x2380 [ 536.364322][T15625] ? __nla_validate_parse+0x1e7/0x28b0 [ 536.364348][T15625] ? __pfx___mutex_lock+0x10/0x10 [ 536.364373][T15625] ? rcu_is_watching+0x12/0xc0 [ 536.364393][T15625] ? apparmor_capable+0x1d7/0x4d0 [ 536.364428][T15625] rtnl_newlink+0x11c2/0x2380 [ 536.364456][T15625] ? __pfx_rtnl_newlink+0x10/0x10 [ 536.364474][T15625] ? rcu_is_watching+0x12/0xc0 [ 536.364494][T15625] ? kasan_quarantine_put+0x104/0x240 [ 536.364511][T15625] ? lockdep_hardirqs_on+0x78/0x100 [ 536.364539][T15625] ? kfree_skbmem+0x19a/0x210 [ 536.364561][T15625] ? kmem_cache_free+0x127/0x6c0 [ 536.364594][T15625] ? __lock_acquire+0x4a5/0x2630 [ 536.364625][T15625] ? __dev_queue_xmit+0x9ef/0x4950 [ 536.364659][T15625] ? find_held_lock+0x2b/0x80 [ 536.364680][T15625] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 536.364714][T15625] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 536.364736][T15625] ? __pfx_rtnl_newlink+0x10/0x10 [ 536.364757][T15625] rtnetlink_rcv_msg+0x95e/0xe90 [ 536.364779][T15625] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 536.364807][T15625] ? ref_tracker_free+0x37e/0x6c0 [ 536.364828][T15625] netlink_rcv_skb+0x159/0x420 [ 536.364853][T15625] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 536.364876][T15625] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 536.364910][T15625] ? netlink_deliver_tap+0x1ae/0xcc0 [ 536.364938][T15625] netlink_unicast+0x585/0x850 [ 536.364967][T15625] ? __pfx_netlink_unicast+0x10/0x10 [ 536.364999][T15625] netlink_sendmsg+0x8b0/0xda0 [ 536.365028][T15625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.365055][T15625] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 536.365079][T15625] ____sys_sendmsg+0x9e1/0xb70 [ 536.365102][T15625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.365129][T15625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.365165][T15625] ___sys_sendmsg+0x190/0x1e0 [ 536.365196][T15625] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.365234][T15625] ? find_held_lock+0x2b/0x80 [ 536.365273][T15625] __sys_sendmsg+0x170/0x220 [ 536.365293][T15625] ? __pfx___sys_sendmsg+0x10/0x10 [ 536.365322][T15625] ? __fget_files+0x21f/0x3d0 [ 536.365351][T15625] ? ksys_write+0x1ac/0x250 [ 536.365374][T15625] ? rcu_is_watching+0x12/0xc0 [ 536.365398][T15625] __do_fast_syscall_32+0xe7/0x970 [ 536.365424][T15625] ? lockdep_hardirqs_on+0x78/0x100 [ 536.365452][T15625] do_fast_syscall_32+0x32/0x70 [ 536.365480][T15625] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.365504][T15625] RIP: 0023:0xf700ef7c [ 536.365520][T15625] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 536.365537][T15625] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 536.365555][T15625] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000600 [ 536.365566][T15625] RDX: 0000000000008084 RSI: 0000000000000000 RDI: 0000000000000000 [ 536.365577][T15625] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 536.365588][T15625] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 536.365598][T15625] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 536.365621][T15625] [ 536.542454][T15625] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 536.602816][T15631] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 536.605567][T15631] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 536.611446][T15631] vhci_hcd vhci_hcd.0: Device attached [ 536.679024][ T39] audit: type=1804 audit(1781391974.468:2521): pid=15637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2641" name="/newroot/18/bus/bus" dev="overlay" ino=127 res=1 errno=0 [ 536.815206][ T6726] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 537.128993][ T6726] usb 51-1: new full-speed USB device number 2 using vhci_hcd [ 537.510472][ T5753] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 537.603789][T15632] vhci_hcd: connection closed [ 537.604750][T11211] vhci_hcd vhci_hcd.7: stop threads [ 537.610865][T11211] vhci_hcd vhci_hcd.7: release socket [ 537.613406][T11211] vhci_hcd vhci_hcd.7: disconnect device [ 537.687401][ T6726] usb 51-1: enqueue for inactive port 0 [ 537.726089][T15648] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 538.097714][T15653] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2645'. [ 538.170688][ T6726] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 538.465939][T15656] fuse: fd is not a fuse device [ 538.865296][T15658] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2646'. [ 539.218956][T15666] syzkaller0: entered promiscuous mode [ 539.221755][T15666] syzkaller0: entered allmulticast mode [ 539.263438][ T39] audit: type=1804 audit(1781391976.848:2522): pid=15668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2651" name="/newroot/22/bus/bus" dev="overlay" ino=158 res=1 errno=0 [ 539.391043][T15672] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2652'. [ 539.401697][T15672] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2652'. [ 539.404529][T15672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2652'. [ 539.416400][T15674] lo speed is unknown, defaulting to 1000 [ 539.419352][T15672] syzkaller0: entered promiscuous mode [ 539.421136][T15672] syzkaller0: entered allmulticast mode [ 539.738195][T15682] bridge_slave_0: left allmulticast mode [ 539.741041][T15682] bridge_slave_0: left promiscuous mode [ 539.743661][T15682] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.750405][T15682] bridge_slave_1: left allmulticast mode [ 539.765686][T15682] bridge_slave_1: left promiscuous mode [ 539.768275][T15682] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.778194][T15682] bond0: (slave bond_slave_0): Releasing backup interface [ 539.786842][T15682] bond0: (slave bond_slave_1): Releasing backup interface [ 539.792461][T15683] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2655'. [ 539.800613][T15682] team0: Port device team_slave_0 removed [ 539.809116][T15682] team0: Port device team_slave_1 removed [ 539.812015][T15682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.815044][T15682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.821746][T15682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.824903][T15682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.830337][T15682] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 539.893140][T11209] tipc: Resetting bearer [ 539.902269][T15682] tipc: Enabling of bearer rejected, already enabled [ 539.963277][T15682] netem: change failed [ 540.353452][T15690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2658'. [ 541.387780][ T5753] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 541.502664][T15716] batadv_slave_1: entered promiscuous mode [ 541.541959][T15718] Invalid ELF header type: 0 != 1 [ 541.715823][ T39] audit: type=1326 audit(1781391979.118:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.7.2665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x50000 [ 541.726204][ T39] audit: type=1326 audit(1781391979.118:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.7.2665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x50000 [ 541.734659][ T39] audit: type=1326 audit(1781391979.118:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.7.2665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x50000 [ 541.741656][ T39] audit: type=1326 audit(1781391979.118:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.7.2665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x50000 [ 541.749495][ T39] audit: type=1326 audit(1781391979.118:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.7.2665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x50000 [ 541.755961][ T39] audit: type=1326 audit(1781391979.118:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.7.2665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x50000 [ 541.763316][ T39] audit: type=1326 audit(1781391979.118:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.7.2665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x50000 [ 541.769904][ T39] audit: type=1326 audit(1781391979.118:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.7.2665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x50000 [ 541.778602][ T39] audit: type=1326 audit(1781391979.118:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.7.2665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x50000 [ 541.858231][T15713] pim6reg: entered allmulticast mode [ 541.891105][T15713] team0: entered allmulticast mode [ 541.892872][T15713] vlan0: entered allmulticast mode [ 541.894559][T15713] veth0_vlan: entered allmulticast mode [ 541.902338][T15713] team0: left allmulticast mode [ 541.904094][T15713] vlan0: left allmulticast mode [ 541.905791][T15713] veth0_vlan: left allmulticast mode [ 541.908174][T15713] pim6reg: left allmulticast mode [ 542.569310][T15733] tipc: Resetting bearer [ 542.578347][T15733] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 542.679545][T15735] fuse: Bad value for 'fd' [ 543.046051][T15749] syzkaller0: entered promiscuous mode [ 543.048856][T15749] syzkaller0: entered allmulticast mode [ 543.329989][T15759] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2677'. [ 543.367189][T15761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2678'. [ 543.617622][T15766] 8021q: VLANs not supported on ipvlan1 [ 544.521412][T15777] PM: Enabling pm_trace changes system date and time during resume. [ 544.521412][T15777] PM: Correct system time has to be restored manually after resume. [ 545.425983][T15791] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.2687'. [ 545.480847][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2690'. [ 545.502133][T15799] loop2: detected capacity change from 0 to 7 [ 545.516260][T15799] Dev loop2: unable to read RDB block 7 [ 545.518717][T15799] loop2: unable to read partition table [ 545.520836][T15799] loop2: partition table beyond EOD, truncated [ 545.525483][T15799] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 545.806748][T15811] fuse: Bad value for 'fd' [ 545.891798][T15816] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 546.899483][T15833] binder: BINDER_SET_CONTEXT_MGR already set [ 546.902210][T15833] binder: 15832:15833 ioctl 4018620d 80000100 returned -16 [ 546.909953][T15833] binder: BINDER_SET_CONTEXT_MGR already set [ 546.912478][T15833] binder: 15832:15833 ioctl 4018620d 80001000 returned -16 [ 549.237775][T15853] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2704'. [ 549.342617][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 549.352466][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 549.373311][ T5748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 549.398942][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 549.414962][ T5748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 549.800733][T15866] binder: 15865:15866 ioctl c0306201 0 returned -14 [ 549.872394][T15856] lo speed is unknown, defaulting to 1000 [ 550.072416][T15856] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.075167][T15856] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.077508][T15856] bridge_slave_0: entered allmulticast mode [ 550.081221][T15856] bridge_slave_0: entered promiscuous mode [ 550.085915][T15856] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.089071][T15856] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.092586][T15856] bridge_slave_1: entered allmulticast mode [ 550.096650][T15856] bridge_slave_1: entered promiscuous mode [ 550.116363][T15856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.122696][T15856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.156407][T15856] team0: Port device team_slave_0 added [ 550.159670][T15856] team0: Port device team_slave_1 added [ 550.184047][T15856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.186915][T15856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.198104][T15856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.204236][T15856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.207189][T15856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.218064][T15856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.260792][T15856] hsr_slave_0: entered promiscuous mode [ 550.264022][T15856] hsr_slave_1: entered promiscuous mode [ 550.267207][T15856] debugfs: 'hsr0' already exists in 'hsr' [ 550.269653][T15856] Cannot create hsr debugfs directory [ 550.537605][T15856] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 550.545284][T15856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 550.549661][T15856] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 550.555331][T15856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 550.559233][T15856] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 550.565664][T15856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 550.569163][T15856] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 550.576599][T15856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 550.605643][T15856] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.608677][T15856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.611943][T15856] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.615003][T15856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.679412][T15856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.687578][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.691139][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.699772][T15856] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.706179][ T6126] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.709089][ T6126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.717315][ T6126] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.719999][ T6126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.959318][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2710'. [ 551.629881][ T5748] Bluetooth: hci2: command tx timeout [ 551.757409][T15856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.411219][T15856] veth0_vlan: entered promiscuous mode [ 553.421571][T15856] veth1_vlan: entered promiscuous mode [ 553.452106][T15856] veth0_macvtap: entered promiscuous mode [ 553.470131][T15856] veth1_macvtap: entered promiscuous mode [ 553.486801][T15856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.494637][T15856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.510701][ T1165] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.517847][ T1165] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.754920][ T1165] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.758346][ T1165] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.878428][T11204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.878440][T11204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.895263][ T5748] Bluetooth: hci2: command tx timeout [ 553.935775][T11415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.955069][T11415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.256545][T15963] tipc: Started in network mode [ 554.258598][T15963] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 554.261249][T15963] tipc: Enabled bearer , priority 0 [ 554.428659][ T39] kauditd_printk_skb: 2162 callbacks suppressed [ 554.428673][ T39] audit: type=1800 audit(1781391990.846:4694): pid=15968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2721" name="bus" dev="tmpfs" ino=874 res=0 errno=0 [ 554.639962][T15970] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2722'. [ 554.710593][ T39] audit: type=1804 audit(1781391991.104:4695): pid=15972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2723" name="/newroot/2/bus/bus" dev="overlay" ino=36 res=1 errno=0 [ 554.724166][T15974] netlink: 'syz.7.2724': attribute type 21 has an invalid length. [ 554.727066][T15974] IPv6: NLM_F_CREATE should be specified when creating new route [ 555.466618][ T53] tipc: Node number set to 11578026 [ 555.834972][ T10] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 556.019527][ T10] usb 12-1: Using ep0 maxpacket: 16 [ 556.027399][ T10] usb 12-1: too many configurations: 123, using maximum allowed: 8 [ 556.033953][ T10] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.041711][ T10] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.049518][ T10] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.054402][ T10] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.060459][ T10] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.069403][ T10] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.076552][ T10] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.082640][ T10] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.091867][ T10] usb 12-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 556.096052][ T10] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 556.098572][ T10] usb 12-1: SerialNumber: syz [ 556.101771][ T10] usb 12-1: config 0 descriptor?? [ 556.108474][ T10] input: bcm5974 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input35 [ 556.132565][T15991] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 556.138679][T15991] fuse: Unknown parameter '184467440737095516150x000000000000000a' [ 556.139658][ T5748] Bluetooth: hci2: command tx timeout [ 556.920499][T15997] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2731'. [ 557.132991][T16014] ata1.00: invalid cdb length 6 [ 558.278506][T16051] netlink: 'syz.0.2742': attribute type 1 has an invalid length. [ 558.305383][T16051] bond1: entered promiscuous mode [ 558.309636][T16051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 558.339430][T16051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 558.343447][T16051] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 558.347564][T16051] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 558.363757][T16051] bond1: (slave vti0): making interface the new active one [ 558.366938][T16051] vti0: entered promiscuous mode [ 558.371015][T16051] bond1: (slave vti0): Enslaving as an active interface with an up link [ 558.392958][ T5748] Bluetooth: hci2: command tx timeout [ 558.843302][ T5136] bcm5974 12-1:0.0: could not read from device [ 559.400531][ T53] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 559.440148][ T5136] bcm5974 12-1:0.0: could not read from device [ 559.563207][ T53] usb 7-1: Using ep0 maxpacket: 32 [ 559.566422][ T53] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 559.569248][ T53] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 559.573133][ T53] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 559.577448][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 559.584342][ T53] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 559.592642][ T53] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 559.594267][ T10] usb 12-1: USB disconnect, device number 12 [ 559.597193][ T53] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 559.603858][ T5136] bcm5974 12-1:0.0: could not read from device [ 559.609829][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.614071][ T5136] bcm5974 12-1:0.0: could not read from device [ 559.637729][ T53] usb 7-1: config 0 descriptor?? [ 559.656345][T16082] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 559.659517][T16082] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 559.661580][T16081] netlink: 'syz.0.2747': attribute type 10 has an invalid length. [ 559.670946][T16081] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 559.890113][ T53] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 559.926579][ T53] usb 7-1: USB disconnect, device number 22 [ 559.931069][ T53] usblp0: removed [ 560.017594][T16097] netlink: 1372 bytes leftover after parsing attributes in process `syz.8.2749'. [ 560.102604][T16097] hsr_slave_1 (unregistering): left promiscuous mode [ 560.419272][ T53] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 560.581851][ T53] usb 7-1: Using ep0 maxpacket: 32 [ 560.587498][ T53] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 560.590944][ T53] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 560.594378][ T53] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 560.597730][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 560.601030][ T53] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 560.607557][ T53] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 560.617424][ T53] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 560.622988][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.632100][ T53] usb 7-1: config 0 descriptor?? [ 560.864286][ T53] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 560.994014][ T39] audit: type=1804 audit(1781391996.908:4696): pid=16128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2753" name="/newroot/11/bus/bus" dev="overlay" ino=93 res=1 errno=0 [ 561.091649][ T53] usb 7-1: USB disconnect, device number 23 [ 561.103058][ T53] usblp0: removed [ 561.263178][T16148] Invalid ELF header len 9 [ 561.517757][ T39] audit: type=1326 audit(1781391997.388:4697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.7.2757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 561.530049][ T39] audit: type=1326 audit(1781391997.388:4698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.7.2757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 561.539854][ T39] audit: type=1326 audit(1781391997.388:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.7.2757" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 561.552288][ T39] audit: type=1326 audit(1781391997.388:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.7.2757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 561.559907][ T39] audit: type=1326 audit(1781391997.388:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.7.2757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 561.578929][ T39] audit: type=1326 audit(1781391997.388:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.7.2757" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 561.586999][ T39] audit: type=1326 audit(1781391997.388:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.7.2757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 561.595917][ T39] audit: type=1326 audit(1781391997.388:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.7.2757" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 561.604745][ T39] audit: type=1326 audit(1781391997.388:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.7.2757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 562.212588][T16175] tun0: tun_chr_ioctl cmd 1074025675 [ 562.216204][T16175] tun0: persist enabled [ 562.857847][T16179] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 563.320719][T16183] binder: BINDER_SET_CONTEXT_MGR already set [ 563.323340][T16183] binder: 16181:16183 ioctl 4018620d 80000100 returned -16 [ 563.329822][T16183] binder: BINDER_SET_CONTEXT_MGR already set [ 563.332502][T16183] binder: 16181:16183 ioctl 4018620d 80004a80 returned -16 [ 563.506225][T16175] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2762'. [ 563.911890][T16205] syzkaller0: entered promiscuous mode [ 563.914222][T16205] syzkaller0: entered allmulticast mode [ 563.921764][T16205] binder: 16204:16205 ioctl c0306201 80000080 returned -14 [ 564.556431][T16217] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2774'. [ 564.698187][T16226] netlink: 292 bytes leftover after parsing attributes in process `syz.8.2779'. [ 564.709386][T16226] FAULT_INJECTION: forcing a failure. [ 564.709386][T16226] name failslab, interval 1, probability 0, space 0, times 0 [ 564.713780][T16226] CPU: 3 UID: 0 PID: 16226 Comm: syz.8.2779 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.713798][T16226] Tainted: [L]=SOFTLOCKUP [ 564.713802][T16226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 564.713808][T16226] Call Trace: [ 564.713812][T16226] [ 564.713816][T16226] dump_stack_lvl+0x100/0x190 [ 564.713838][T16226] should_fail_ex.cold+0x5/0xa [ 564.713852][T16226] should_failslab+0xc2/0x120 [ 564.713866][T16226] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 564.713882][T16226] ? skb_clone+0x190/0x400 [ 564.713896][T16226] skb_clone+0x190/0x400 [ 564.713907][T16226] netlink_deliver_tap+0xaed/0xcc0 [ 564.713924][T16226] netlink_unicast+0x6a5/0x850 [ 564.713940][T16226] ? __pfx_netlink_unicast+0x10/0x10 [ 564.713952][T16226] ? genl_rcv_msg+0x4be/0x800 [ 564.713971][T16226] netlink_ack+0x655/0xb80 [ 564.713988][T16226] netlink_rcv_skb+0x333/0x420 [ 564.714002][T16226] ? __pfx_genl_rcv_msg+0x10/0x10 [ 564.714018][T16226] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 564.714037][T16226] ? netlink_deliver_tap+0x1ae/0xcc0 [ 564.714052][T16226] genl_rcv+0x28/0x40 [ 564.714066][T16226] netlink_unicast+0x585/0x850 [ 564.714081][T16226] ? __pfx_netlink_unicast+0x10/0x10 [ 564.714099][T16226] netlink_sendmsg+0x8b0/0xda0 [ 564.714115][T16226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.714130][T16226] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 564.714144][T16226] ____sys_sendmsg+0x9e1/0xb70 [ 564.714157][T16226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.714177][T16226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.714197][T16226] ___sys_sendmsg+0x190/0x1e0 [ 564.714212][T16226] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.714232][T16226] ? find_held_lock+0x2b/0x80 [ 564.714254][T16226] __sys_sendmsg+0x170/0x220 [ 564.714265][T16226] ? __pfx___sys_sendmsg+0x10/0x10 [ 564.714275][T16226] ? __fget_files+0x21f/0x3d0 [ 564.714291][T16226] ? ksys_write+0x1ac/0x250 [ 564.714304][T16226] ? rcu_is_watching+0x12/0xc0 [ 564.714318][T16226] __do_fast_syscall_32+0xe7/0x970 [ 564.714334][T16226] ? lockdep_hardirqs_on+0x78/0x100 [ 564.714350][T16226] do_fast_syscall_32+0x32/0x70 [ 564.714366][T16226] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 564.714380][T16226] RIP: 0023:0xf7fd7f7c [ 564.714389][T16226] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 564.714400][T16226] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 564.714411][T16226] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000640 [ 564.714417][T16226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 564.714423][T16226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 564.714429][T16226] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 564.714435][T16226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.714449][T16226] [ 564.957960][T16236] : renamed from bond_slave_0 [ 565.221791][T16238] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2781'. [ 565.896594][T16247] netlink: 'syz.7.2783': attribute type 11 has an invalid length. [ 566.216474][T16253] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2785'. [ 566.223596][T16253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.236247][T16253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.490099][ T39] kauditd_printk_skb: 73 callbacks suppressed [ 568.490117][ T39] audit: type=1326 audit(1781392003.810:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16295 comm="syz.2.2797" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 568.503744][ T39] audit: type=1326 audit(1781392003.828:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16295 comm="syz.2.2797" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 568.512886][ T39] audit: type=1326 audit(1781392003.828:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16295 comm="syz.2.2797" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 568.522269][ T39] audit: type=1326 audit(1781392003.828:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16295 comm="syz.2.2797" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 568.531559][ T39] audit: type=1326 audit(1781392003.828:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16295 comm="syz.2.2797" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 568.541156][ T39] audit: type=1326 audit(1781392003.837:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16295 comm="syz.2.2797" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf700ef7c code=0x7ffc0000 [ 568.556512][ T39] audit: type=1326 audit(1781392003.837:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16295 comm="syz.2.2797" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71461ab code=0x7ffc0000 [ 568.570247][ T39] audit: type=1326 audit(1781392003.837:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16295 comm="syz.2.2797" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71461ab code=0x7ffc0000 [ 568.585438][ T39] audit: type=1326 audit(1781392003.837:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16295 comm="syz.2.2797" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71461ab code=0x7ffc0000 [ 568.599865][ T39] audit: type=1326 audit(1781392003.837:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16295 comm="syz.2.2797" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71461ab code=0x7ffc0000 [ 569.544726][ T34] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 569.709816][ T34] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 569.713435][ T34] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 569.716721][ T34] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 569.720555][ T34] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 569.724349][ T34] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 569.729564][ T34] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 569.733286][ T34] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 569.735684][ T34] usb 12-1: Product: syz [ 569.737263][ T34] usb 12-1: Manufacturer: syz [ 569.746383][ T34] cdc_wdm 12-1:1.0: skipping garbage [ 569.748725][ T34] cdc_wdm 12-1:1.0: skipping garbage [ 569.754348][ T34] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 569.756263][ T34] cdc_wdm 12-1:1.0: Unknown control protocol [ 570.006230][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 570.008551][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 570.011044][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 570.013564][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 570.016480][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 570.019108][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 570.021450][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 570.023700][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 570.026361][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 570.028555][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 570.031351][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 570.033774][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 570.036681][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 570.039150][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 570.041509][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 570.043644][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 570.046755][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 570.048915][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 570.051182][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 570.053434][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 570.056406][ T53] usb 12-1: USB disconnect, device number 13 [ 570.059003][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 570.110187][T16332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2807'. [ 571.043231][T16351] binder: 16350:16351 ioctl c0306201 0 returned -14 [ 571.074307][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2812'. [ 571.132204][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2812'. [ 571.242460][T16352] bond1: Unable to set down delay as MII monitoring is disabled [ 571.256786][T16352] bond1 (unregistering): Released all slaves [ 572.025343][T16359] NILFS (loop2): device size too small [ 572.984794][T16384] binder: BINDER_SET_CONTEXT_MGR already set [ 572.986712][T16384] binder: 16383:16384 ioctl 4018620d 80000100 returned -16 [ 572.991110][T16384] binder: BINDER_SET_CONTEXT_MGR already set [ 572.993167][T16384] binder: 16383:16384 ioctl 4018620d 80004a80 returned -16 [ 572.995667][T16384] binder: 16383:16384 ioctl c0306201 0 returned -14 [ 573.791548][T16398] bridge0: port 3(syz_tun) entered blocking state [ 573.794055][T16398] bridge0: port 3(syz_tun) entered disabled state [ 573.798404][T16398] syz_tun: entered allmulticast mode [ 573.805625][T16398] syz_tun: entered promiscuous mode [ 573.810483][T16398] bridge0: port 3(syz_tun) entered blocking state [ 573.812776][T16398] bridge0: port 3(syz_tun) entered forwarding state [ 573.847545][T16398] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 574.356680][ T5753] Bluetooth: hci2: command 0x0405 tx timeout [ 574.473074][T16430] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.567648][T16430] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.668111][T16430] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.826692][T16438] netlink: 'syz.2.2831': attribute type 1 has an invalid length. [ 574.891977][T16430] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.012589][ T6126] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.030080][ T6126] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.039017][ T6126] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.052694][ T6126] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.324270][T16466] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2834'. [ 575.671785][T16476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.689997][ T53] IPVS: starting estimator thread 0... [ 575.787319][T16478] IPVS: using max 47 ests per chain, 112800 per kthread [ 575.793703][ T39] kauditd_printk_skb: 41 callbacks suppressed [ 575.793714][ T39] audit: type=1804 audit(1781392010.555:4830): pid=16484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2839" name="/newroot/42/bus/bus" dev="overlay" ino=267 res=1 errno=0 [ 575.917044][T16488] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 576.088056][T12284] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 576.253508][T12284] usb 7-1: Using ep0 maxpacket: 32 [ 576.257349][T12284] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 576.260873][T12284] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 576.265791][T12284] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 576.269629][T12284] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 576.273145][T12284] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 576.277933][T12284] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 576.283179][T12284] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 576.286900][T12284] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.292981][T12284] usb 7-1: config 0 descriptor?? [ 576.365644][T16493] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.537414][T12284] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 577.319769][T16507] FAULT_INJECTION: forcing a failure. [ 577.319769][T16507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.323918][T16507] CPU: 0 UID: 0 PID: 16507 Comm: syz.8.2844 Tainted: G L syzkaller #0 PREEMPT(full) [ 577.323935][T16507] Tainted: [L]=SOFTLOCKUP [ 577.323938][T16507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 577.323944][T16507] Call Trace: [ 577.323949][T16507] [ 577.323953][T16507] dump_stack_lvl+0x100/0x190 [ 577.323974][T16507] should_fail_ex.cold+0x5/0xa [ 577.323989][T16507] _copy_to_user+0x32/0xd0 [ 577.324005][T16507] simple_read_from_buffer+0xcb/0x170 [ 577.324018][T16507] proc_fail_nth_read+0x1af/0x230 [ 577.324037][T16507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 577.324060][T16507] ? rw_verify_area+0xce/0x6d0 [ 577.324071][T16507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 577.324088][T16507] vfs_read+0x1e4/0xb30 [ 577.324102][T16507] ? __pfx_vfs_read+0x10/0x10 [ 577.324112][T16507] ? find_held_lock+0x2b/0x80 [ 577.324126][T16507] ? __fget_files+0x215/0x3d0 [ 577.324141][T16507] ? __fget_files+0x21f/0x3d0 [ 577.324156][T16507] ksys_read+0x12a/0x250 [ 577.324167][T16507] ? __pfx_ksys_read+0x10/0x10 [ 577.324179][T16507] ? rcu_is_watching+0x12/0xc0 [ 577.324192][T16507] ? rcu_is_watching+0x12/0xc0 [ 577.324205][T16507] do_int80_emulation+0x14b/0x720 [ 577.324223][T16507] asm_int80_emulation+0x1a/0x20 [ 577.324234][T16507] RIP: 0023:0xf71d61ab [ 577.324243][T16507] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 577.324253][T16507] RSP: 002b:00000000f54754bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 577.324264][T16507] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54755d0 [ 577.324271][T16507] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 577.324277][T16507] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 577.324283][T16507] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 577.324289][T16507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 577.324302][T16507] [ 578.331888][T16511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2846'. [ 578.639636][T16513] overlayfs: failed to resolve './file0/file0': -2 [ 578.774835][ T9] usb 7-1: USB disconnect, device number 24 [ 578.778526][ T9] usblp0: removed [ 579.059156][T16502] syz.2.2840 (16502) used greatest stack depth: 16792 bytes left [ 579.352624][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 581.151870][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 581.271596][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 581.324301][ T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 581.336182][ T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 581.341486][ T9] usb 7-1: Product: syz [ 581.345260][ T9] usb 7-1: Manufacturer: syz [ 581.353864][ T9] usb 7-1: SerialNumber: syz [ 581.359936][ T9] usb 7-1: config 0 descriptor?? [ 581.371222][T16522] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 581.431716][T16555] fuse: Bad value for 'rootmode' [ 581.643512][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 581.737262][ T34] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 581.750682][ T1358] usb 7-1: USB disconnect, device number 25 [ 581.899696][ T34] usb 13-1: Using ep0 maxpacket: 16 [ 581.903575][ T34] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.907767][ T34] usb 13-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 581.911919][ T34] usb 13-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 581.916100][ T34] usb 13-1: config 1 interface 1 has no altsetting 0 [ 581.920869][ T34] usb 13-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 581.925080][ T34] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.928427][ T34] usb 13-1: Product: syz [ 581.930082][ T34] usb 13-1: Manufacturer: syz [ 581.932052][ T34] usb 13-1: SerialNumber: syz [ 582.160833][ T39] audit: type=1326 audit(1781392016.432:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.8.2851" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd7f7c code=0x0 [ 582.227764][T16560] netlink: 'syz.8.2851': attribute type 1 has an invalid length. [ 582.582066][T16564] binder: BINDER_SET_CONTEXT_MGR already set [ 582.584669][T16564] binder: 16563:16564 ioctl 4018620d 80000100 returned -16 [ 582.589235][T16564] binder: BINDER_SET_CONTEXT_MGR already set [ 582.591142][T16564] binder: 16563:16564 ioctl 4018620d 80004a80 returned -16 [ 583.891235][T16586] xt_bpf: check failed: parse error [ 583.955032][T16588] syzkaller1: entered promiscuous mode [ 583.956795][T16588] syzkaller1: entered allmulticast mode [ 584.121967][ C2] hpet: Lost 1 RTC interrupts [ 584.749128][ T34] usb 13-1: selecting invalid altsetting 0 [ 584.844087][ T34] usb 13-1: USB disconnect, device number 2 [ 584.847830][T16605] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2866'. [ 584.851542][T16605] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2866'. [ 584.972215][T14377] udevd[14377]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.110860][T16620] netlink: 'syz.0.2871': attribute type 2 has an invalid length. [ 585.930416][T16636] tmpfs: Bad value for 'mpol' [ 585.949715][T16637] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2873'. [ 585.959262][T16637] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2873'. [ 586.421530][T16661] fuse: Bad value for 'rootmode' [ 586.528291][T16657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2881'. [ 586.531801][T16657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2881'. [ 586.711674][ T34] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 586.885098][ T34] usb 12-1: Using ep0 maxpacket: 16 [ 586.889629][ T34] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.893878][ T34] usb 12-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 586.896885][ T34] usb 12-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 586.900136][ T34] usb 12-1: config 1 interface 1 has no altsetting 0 [ 586.904350][ T34] usb 12-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 586.907826][ T34] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.910310][ T34] usb 12-1: Product: syz [ 586.911648][ T34] usb 12-1: Manufacturer: syz [ 586.913142][ T34] usb 12-1: SerialNumber: syz [ 587.138920][ T39] audit: type=1326 audit(1781392021.027:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16660 comm="syz.7.2883" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffef7c code=0x0 [ 587.196132][T16677] netlink: 'syz.7.2883': attribute type 1 has an invalid length. [ 587.311467][T16672] lo speed is unknown, defaulting to 1000 [ 587.590830][ T5890] libceph: mon0 (1)[c::]:6789 socket error on write [ 587.595567][ T5890] libceph: mon0 (1)[c::]:6789 socket error on write [ 587.708235][T16683] ceph: No mds server is up or the cluster is laggy [ 588.504055][T16709] futex_wake_op: syz.2.2890 tries to shift op by -1; fix this program [ 588.610970][T16713] tmpfs: Bad value for 'mpol' [ 589.335107][T16731] comedi comedi3: pcl812: I/O base address not correctly aligned [ 589.684014][ T34] usb 12-1: selecting invalid altsetting 0 [ 589.727565][ T34] usb 12-1: USB disconnect, device number 14 [ 589.770118][T16735] netlink: zone id is out of range [ 589.800530][ T5753] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 589.823492][T14377] udevd[14377]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 589.861909][T16738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 589.864854][T16738] IPv6: NLM_F_CREATE should be set when creating new route [ 589.868379][T16738] IPv6: NLM_F_CREATE should be set when creating new route [ 589.871542][T16738] IPv6: NLM_F_CREATE should be set when creating new route [ 590.603449][ T5531] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 590.787539][ T5531] usb 7-1: Using ep0 maxpacket: 8 [ 590.800255][ T5531] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 590.804621][ T5531] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 590.809394][ T5531] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 590.814166][ T5531] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 590.818212][ T5531] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.823889][ T5531] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 590.827873][ T5531] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.851707][ T39] audit: type=1804 audit(1781392024.432:4833): pid=16756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2904" name="bus" dev="ramfs" ino=67355 res=1 errno=0 [ 590.892180][ T39] audit: type=1804 audit(1781392024.478:4834): pid=16756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2904" name="bus" dev="ramfs" ino=67355 res=1 errno=0 [ 591.687918][T16759] usbtmc 7-1:16.0: simple usb_control_msg failed -32 [ 591.699838][ T53] usb 7-1: USB disconnect, device number 26 [ 591.711757][T16758] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 591.999277][T16764] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2906'. [ 592.564205][ T53] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 592.733095][ T53] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 592.747996][ T53] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 592.764636][ T53] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 592.778158][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.790750][T16766] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 592.798849][ T53] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 592.917913][T16771] lo speed is unknown, defaulting to 1000 [ 592.986743][ T5820] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 593.160214][ T5820] usb 12-1: Using ep0 maxpacket: 8 [ 593.167846][ T5820] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 593.172503][ T5820] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 593.176232][ T5820] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.182199][ T5820] usb 12-1: config 0 descriptor?? [ 593.236863][ T10] usb 7-1: USB disconnect, device number 27 [ 593.767409][ T5820] iowarrior 12-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 594.156689][ T5820] usb 12-1: USB disconnect, device number 15 [ 594.234836][T16787] Invalid source name [ 594.468653][T16792] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 596.657944][T16814] comedi comedi4: bad chanlist[0]=0x00000200 chan=512 range length=2 [ 596.755143][T16808] XFS (nbd7): SB validate failed with error -5. [ 597.451886][ T39] audit: type=1804 audit(1781392030.513:4835): pid=16820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2922" name="/newroot/99/bus/bus" dev="overlay" ino=593 res=1 errno=0 [ 597.564705][T16829] netlink: 'syz.2.2922': attribute type 4 has an invalid length. [ 597.774275][T16846] can: request_module (can-proto-0) failed. [ 597.914158][ T10] libceph: connect (1)[c::]:6789 error -13 [ 597.916658][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 598.003870][T16854] binder: 16853:16854 ioctl c0306201 0 returned -14 [ 598.136457][T16848] ceph: No mds server is up or the cluster is laggy [ 598.201295][ T5747] libceph: connect (1)[c::]:6789 error -13 [ 598.203796][ T5747] libceph: mon0 (1)[c::]:6789 connect error [ 598.283934][T16864] FAULT_INJECTION: forcing a failure. [ 598.283934][T16864] name failslab, interval 1, probability 0, space 0, times 0 [ 598.288773][T16864] CPU: 3 UID: 0 PID: 16864 Comm: syz.2.2935 Tainted: G L syzkaller #0 PREEMPT(full) [ 598.288791][T16864] Tainted: [L]=SOFTLOCKUP [ 598.288794][T16864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 598.288801][T16864] Call Trace: [ 598.288805][T16864] [ 598.288810][T16864] dump_stack_lvl+0x100/0x190 [ 598.288832][T16864] should_fail_ex.cold+0x5/0xa [ 598.288847][T16864] should_failslab+0xc2/0x120 [ 598.288860][T16864] __kvmalloc_node_noprof+0xfa/0xa00 [ 598.288870][T16864] ? hash_ipmac_create+0x47f/0x1280 [ 598.288885][T16864] hash_ipmac_create+0x47f/0x1280 [ 598.288897][T16864] ? __pfx_hash_ipmac_create+0x10/0x10 [ 598.288923][T16864] ip_set_create+0x6b8/0x14f0 [ 598.288938][T16864] ? __pfx_ip_set_create+0x10/0x10 [ 598.288959][T16864] ? find_held_lock+0x2b/0x80 [ 598.288976][T16864] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 598.288992][T16864] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 598.289005][T16864] ? kfree_skbmem+0x19f/0x210 [ 598.289033][T16864] ? __pfx___dev_queue_xmit+0x10/0x10 [ 598.289050][T16864] netlink_rcv_skb+0x159/0x420 [ 598.289064][T16864] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 598.289076][T16864] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 598.289096][T16864] ? ns_capable+0xd2/0xf0 [ 598.289110][T16864] nfnetlink_rcv+0x1b3/0x440 [ 598.289120][T16864] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 598.289131][T16864] ? netlink_deliver_tap+0x1ae/0xcc0 [ 598.289147][T16864] netlink_unicast+0x585/0x850 [ 598.289163][T16864] ? __pfx_netlink_unicast+0x10/0x10 [ 598.289181][T16864] netlink_sendmsg+0x8b0/0xda0 [ 598.289197][T16864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.289213][T16864] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 598.289227][T16864] ____sys_sendmsg+0x9e1/0xb70 [ 598.289240][T16864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.289255][T16864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.289280][T16864] ___sys_sendmsg+0x190/0x1e0 [ 598.289295][T16864] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.289316][T16864] ? find_held_lock+0x2b/0x80 [ 598.289337][T16864] __sys_sendmsg+0x170/0x220 [ 598.289348][T16864] ? __pfx___sys_sendmsg+0x10/0x10 [ 598.289358][T16864] ? __fget_files+0x21f/0x3d0 [ 598.289375][T16864] ? ksys_write+0x1ac/0x250 [ 598.289388][T16864] ? rcu_is_watching+0x12/0xc0 [ 598.289402][T16864] __do_fast_syscall_32+0xe7/0x970 [ 598.289419][T16864] ? lockdep_hardirqs_on+0x78/0x100 [ 598.289434][T16864] do_fast_syscall_32+0x32/0x70 [ 598.289450][T16864] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 598.289464][T16864] RIP: 0023:0xf700ef7c [ 598.289473][T16864] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 598.289483][T16864] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 598.289494][T16864] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 598.289501][T16864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 598.289507][T16864] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 598.289513][T16864] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 598.289519][T16864] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 598.289533][T16864] [ 599.181226][T16860] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 599.184249][T16860] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 599.211327][T16860] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 599.275839][T16860] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 599.300914][T16860] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 599.346850][T16860] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 599.652553][T16883] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2938'. [ 599.659928][T16860] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 599.664599][T16860] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 599.670466][T16860] CPU: 3 UID: 0 PID: 16860 Comm: syz.0.2934 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.673759][T16860] Tainted: [L]=SOFTLOCKUP [ 599.675075][T16860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 599.678087][T16860] RIP: 0010:klist_put+0x4d/0x1d0 [ 599.679648][T16860] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 cc 0a 0d [ 599.685465][T16860] RSP: 0018:ffffc9000600f270 EFLAGS: 00010202 [ 599.687296][T16860] RAX: dffffc0000000000 RBX: ffff888061192860 RCX: ffffc9002dc12000 [ 599.689723][T16860] RDX: 000000000000000b RSI: ffffffff8b7ce2d5 RDI: 0000000000000058 [ 599.692537][T16860] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2174a44 [ 599.695389][T16860] R10: ffffffff90ba5223 R11: 000000000000001e R12: 0000000000000000 [ 599.697878][T16860] R13: 0000000000000001 R14: ffffffff90ba51e0 R15: dffffc0000000000 [ 599.700565][T16860] FS: 0000000000000000(0000) GS:ffff88809748e000(0063) knlGS:00000000f53e6b40 [ 599.703870][T16860] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 599.706023][T16860] CR2: 00005594c6f5dd40 CR3: 000000007497c000 CR4: 0000000000352ef0 [ 599.708630][T16860] Call Trace: [ 599.709683][T16860] [ 599.710600][T16860] klist_remove+0x14c/0x2e0 [ 599.712038][T16860] ? __pfx_klist_remove+0x10/0x10 [ 599.713581][T16860] ? kobject_put+0xb9/0x640 [ 599.715020][T16860] device_move+0x12d/0x1140 [ 599.716421][T16860] hci_conn_del_sysfs+0x86/0x1a0 [ 599.717940][T16860] hci_conn_del+0x506/0x1180 [ 599.719401][T16860] hci_abort_conn_sync+0x7d9/0xb20 [ 599.721017][T16860] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 599.722762][T16860] ? find_held_lock+0x2b/0x80 [ 599.724248][T16860] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 599.726445][T16860] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 599.728665][T16860] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 599.731479][T16860] hci_disconnect_all_sync.constprop.0.isra.0+0x155/0x430 [ 599.734103][T16860] ? __pfx_hci_disconnect_all_sync.constprop.0.isra.0+0x10/0x10 [ 599.736520][T16860] ? __hci_cmd_sync_status_sk+0xe4/0x190 [ 599.738231][T16860] hci_suspend_sync+0x8b7/0xa70 [ 599.739763][T16860] ? __pfx_hci_suspend_sync+0x10/0x10 [ 599.741410][T16860] ? mgmt_pending_find+0x13e/0x1a0 [ 599.742999][T16860] hci_suspend_dev+0x31d/0x540 [ 599.744496][T16860] ? __pfx_hci_suspend_dev+0x10/0x10 [ 599.746147][T16860] ? kobject_get+0xbb/0x150 [ 599.747575][T16860] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 599.749345][T16860] hci_suspend_notifier+0x21e/0x330 [ 599.750891][T16860] notifier_call_chain+0x99/0x400 [ 599.752450][T16860] blocking_notifier_call_chain_robust+0xc8/0x160 [ 599.754328][T16860] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 599.756466][T16860] ? do_raw_spin_unlock+0x145/0x1e0 [ 599.758051][T16860] pm_notifier_call_chain_robust+0x27/0x60 [ 599.759852][T16860] snapshot_open+0x189/0x2a0 [ 599.761323][T16860] ? __pfx_snapshot_open+0x10/0x10 [ 599.762896][T16860] misc_open+0x26d/0x450 [ 599.764210][T16860] ? __pfx_misc_open+0x10/0x10 [ 599.765680][T16860] chrdev_open+0x234/0x6a0 [ 599.767068][T16860] ? __pfx_apparmor_file_open+0x10/0x10 [ 599.768781][T16860] ? __pfx_chrdev_open+0x10/0x10 [ 599.770303][T16860] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 599.772406][T16860] do_dentry_open+0x6ab/0x14d0 [ 599.773959][T16860] ? __pfx_chrdev_open+0x10/0x10 [ 599.775590][T16860] vfs_open+0x82/0x3f0 [ 599.776931][T16860] path_openat+0x208c/0x31a0 [ 599.778454][T16860] ? do_fast_syscall_32+0x32/0x70 [ 599.780070][T16860] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 599.782111][T16860] ? __pfx_path_openat+0x10/0x10 [ 599.783735][T16860] do_file_open+0x20e/0x430 [ 599.785191][T16860] ? __pfx_do_file_open+0x10/0x10 [ 599.786827][T16860] ? _raw_spin_unlock+0x28/0x50 [ 599.788456][T16860] ? alloc_fd+0x476/0x790 [ 599.789898][T16860] do_sys_openat2+0x10d/0x1e0 [ 599.791507][T16860] ? __pfx_do_sys_openat2+0x10/0x10 [ 599.793294][T16860] ? do_raw_spin_lock+0x128/0x260 [ 599.794930][T16860] ? find_held_lock+0x2b/0x80 [ 599.796473][T16860] ? kcov_ioctl+0x16a/0x720 [ 599.797954][T16860] __ia32_compat_sys_openat+0x12d/0x210 [ 599.799763][T16860] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 599.801815][T16860] ? rcu_is_watching+0x12/0xc0 [ 599.803379][T16860] __do_fast_syscall_32+0xe7/0x970 [ 599.805054][T16860] do_fast_syscall_32+0x32/0x70 [ 599.806669][T16860] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 599.808775][T16860] RIP: 0023:0xf7f28f7c [ 599.810109][T16860] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 599.816973][T16860] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 599.819625][T16860] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000200 [ 599.822106][T16860] RDX: 0000000000000400 RSI: 0000000000000000 RDI: 0000000000000000 [ 599.824627][T16860] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 599.826993][T16860] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 599.829404][T16860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 599.831837][T16860] [ 599.832906][T16860] Modules linked in: [ 599.834510][T16860] ---[ end trace 0000000000000000 ]--- [ 599.859071][T16860] RIP: 0010:klist_put+0x4d/0x1d0 [ 599.868675][T16860] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 cc 0a 0d [ 599.886192][T16860] RSP: 0018:ffffc9000600f270 EFLAGS: 00010202 [ 599.889318][T16860] RAX: dffffc0000000000 RBX: ffff888061192860 RCX: ffffc9002dc12000 [ 599.892752][T16860] RDX: 000000000000000b RSI: ffffffff8b7ce2d5 RDI: 0000000000000058 [ 599.896302][T16860] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2174a44 [ 599.899547][T16860] R10: ffffffff90ba5223 R11: 000000000000001e R12: 0000000000000000 [ 599.903698][T16860] R13: 0000000000000001 R14: ffffffff90ba51e0 R15: dffffc0000000000 [ 599.906849][T16860] FS: 0000000000000000(0000) GS:ffff88809748e000(0063) knlGS:00000000f53e6b40 [ 599.910317][T16860] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 599.913297][T16860] CR2: 00007f9a7bbafad0 CR3: 000000007497c000 CR4: 0000000000352ef0 [ 599.916602][T16860] Kernel panic - not syncing: Fatal exception [ 599.919785][T16860] Kernel Offset: disabled [ 599.921600][T16860] Rebooting in 86400 seconds..