last executing test programs: 33m28.647569073s ago: executing program 3 (id=2356): inotify_add_watch(0xffffffffffffffff, 0x0, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x0, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x9, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x9, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0xbcdb], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x8000004, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0xfffffffe, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 33m24.613063918s ago: executing program 3 (id=2359): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x9, 0x1, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x2, @vbi={0x3ff, 0x58, 0x6df9, 0x3234564e, [0xa, 0x6], [], 0x108}}) 33m24.433628376s ago: executing program 3 (id=2375): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) 33m23.468490497s ago: executing program 3 (id=2380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r1, 0x110, 0x7, 0x0, 0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x744}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000000c0)=@x86={0x0, 0xb, 0xd, 0x0, 0x200, 0xfd, 0x3, 0x3, 0x4, 0x9, 0x2, 0x9c, 0x0, 0xb, 0x9, 0x0, 0x0, 0x0, 0x7d, '\x00', 0x3, 0x7}) 33m22.837105638s ago: executing program 3 (id=2382): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2000080, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r1}, './file0\x00'}) 33m22.734398242s ago: executing program 3 (id=2383): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x48}}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 33m16.967269112s ago: executing program 1 (id=2405): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000540)={0x3, &(0x7f0000000900)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r1}, &(0x7f0000002480), &(0x7f00000024c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000680)="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", &(0x7f0000000040)=@tcp, 0x4}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6c", 0x41}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66", 0x8}], 0x1}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300), 0xf01c, 0x524f01) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 33m16.886281895s ago: executing program 1 (id=2407): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x744}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x0, 0xb, 0xd, 0x0, 0x200, 0xfd, 0x3, 0x3, 0x4, 0x9, 0x2, 0x9c, 0x0, 0xb, 0x9, 0x0, 0x0, 0x0, 0x7d, '\x00', 0x3, 0x7}) 33m16.697687963s ago: executing program 1 (id=2408): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvfrom(r0, 0x0, 0x0, 0x42, 0x0, 0x0) 33m16.697329817s ago: executing program 1 (id=2409): epoll_create1(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x80) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000006000000140008"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) r4 = syz_open_dev$evdev(0x0, 0xc80, 0x80000) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000140)={0x17}) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_io_uring_setup(0xce, &(0x7f0000000000)={0x0, 0x4000000, 0x100, 0x0, 0x80000335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x8008}}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000180)='0', 0xfe64) 33m15.254703139s ago: executing program 1 (id=2411): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2000080, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r1}, './file0\x00'}) 33m15.254485254s ago: executing program 1 (id=2412): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001140)={r1}, 0xc) 33m15.194995621s ago: executing program 0 (id=2413): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@private, @multicast2}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) r3 = memfd_secret(0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x44, r5, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x44}}, 0x40000) 33m14.248471574s ago: executing program 0 (id=2415): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_io_uring_setup(0x23d, &(0x7f0000000680)={0x0, 0x425e5, 0x10100, 0x3, 0x202e0}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r2, 0x2648, 0x1d5e, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) read$dsp(r1, &(0x7f0000000280)=""/79, 0x4f) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000000)={0x0, {0x0, 0x0, @ofdm}}) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000080)={0x0, {0x0, 0x0, @qam}}) 33m13.356667179s ago: executing program 0 (id=2419): epoll_create1(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x80) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000006000000140008"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) r4 = syz_open_dev$evdev(0x0, 0xc80, 0x80000) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000140)={0x17}) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_io_uring_setup(0xce, &(0x7f0000000000)={0x0, 0x4000000, 0x100, 0x0, 0x80000335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x8008}}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000180)='0', 0xfe64) 33m11.959236343s ago: executing program 0 (id=2420): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x4c, r0, 0x35116d45b8b88e51, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0x62, 0x99, {0x0, 0x56}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}}, 0x24000000) 33m11.958859358s ago: executing program 0 (id=2421): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2000080, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r1}, './file0\x00'}) 33m11.8787701s ago: executing program 0 (id=2422): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0xc) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r4 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x1, 0x2, 0xf2}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000900000092000000000305"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000040) setresgid(0xee00, 0xee01, 0x0) chdir(&(0x7f0000000280)='./file1\x00') 33m7.491475652s ago: executing program 32 (id=2383): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x48}}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 33m0.240257584s ago: executing program 33 (id=2412): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001140)={r1}, 0xc) 32m56.885435177s ago: executing program 34 (id=2422): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0xc) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r4 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x1, 0x2, 0xf2}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000900000092000000000305"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000040) setresgid(0xee00, 0xee01, 0x0) chdir(&(0x7f0000000280)='./file1\x00') 5m8.584978451s ago: executing program 5 (id=7243): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 5m8.307340984s ago: executing program 5 (id=7252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0xfffffffb, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2002000, &(0x7f0000000800)=ANY=[@ANYRES8=r5, @ANYRES16, @ANYRES32=r1, @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB="3944001004b30c05d572852f59bd9e9340bab5696bda4eea462d17c650d6ae18500c4f0686973edfb02f435f3c36430a2b369d859200259f3b20e12b86a2f272b2ac637809596cb86fc620deffb8a54065b09c7a1cd4f6a01be1cb16485e97fe12777f732dbdc00d6bb9671ac28f6a15ff251afda4ccf1d4d21119bcd4cd750b54b6c85212538a5b9180da2845749af190291a2b6e68ca175aaaf563b35dae7cb356c4f4fe31e0facdadb10e5486e269d5d6df3c9dcff60249c0b3221fc806dcd2baf344802537fa810b9a1e5830ab75aef38df7178fea19900894e020a18b6e"]) setresuid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) 5m8.155868684s ago: executing program 5 (id=7245): write$ppp(0xffffffffffffffff, &(0x7f0000000000)="e625adf6", 0x4) r0 = openat$ppp(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x6) (async) close(0xffffffffffffffff) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0xfffffffffffffffe}, 0x100) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000140)={0x7, 'vxcan1\x00', {0x800}, 0x8001}) (async) r2 = openat$procfs(0xffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd4, r3, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffe}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x800}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x135d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0xc841) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) (async) read$FUSE(r2, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = getuid() (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002440)={0x0, 0x0, 0x0}, &(0x7f0000002480)=0xc) write$FUSE_ATTR(r2, &(0x7f00000024c0)={0x78, 0x0, r5, {0x8, 0x6, 0x0, {0x0, 0x7, 0x8, 0xe, 0x0, 0x7f9, 0x209, 0xd7, 0x1, 0x6000, 0x0, r8, r11, 0xfe5, 0x1c}}}, 0x78) (async) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x28, 0x6, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x20000010) (async) read$midi(r2, &(0x7f0000002640)=""/4096, 0x1000) (async) ioctl$PPPIOCSPASS(r0, 0x40087447, &(0x7f0000003680)={0x1, &(0x7f0000003640)=[{0x40, 0x3, 0x1, 0x7fff}]}) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) open_by_handle_at(r12, &(0x7f00000036c0)=@fuse_with_parent={0x18, 0x82, {{0x8, 0x2, 0x26}, {0x249c7620, 0x4, 0x7}}}, 0x100) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000003800)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000037c0)={&(0x7f0000003780)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r13}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003880), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000003d00)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003cc0)={&(0x7f00000038c0)={0x3e0, r14, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x2d}}}}, [@NL80211_ATTR_TX_RATES={0xe4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x7, 0x3, 0x9, 0x401, 0x7be9, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xe, 0x3, 0x9947, 0x3, 0x8, 0x6, 0x1000]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x5}, {0x6, 0x7}, {0x1, 0x5}, {0x4, 0x4}, {0x7, 0x6}, {0x5, 0x1}, {0x7, 0x6}, {0x0, 0x1}, {0x2, 0x3}, {0x3}, {0x5, 0x8}, {0x0, 0x9}, {0x0, 0x4}, {0x5, 0x2}, {0x3, 0x8}, {0x2, 0x8}, {0x2, 0x3}, {0x0, 0x9}, {0x5, 0xa}, {0x1, 0x7}, {0x2, 0x2}, {0x7, 0x5}, {}, {0x0, 0x2}, {0x3, 0x6}, {0x7, 0x1}, {0x1, 0x9}, {0x5, 0x3}, {0x6, 0x8}, {0x1, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x4, 0x4}, {0x1, 0x9}, {0x0, 0x6}, {0x3}, {0x6, 0x2}, {0x4, 0x6}, {0x6, 0x7}, {0x5, 0x1}, {0x4, 0x9}, {0x0, 0xa}, {0x1, 0x8}, {0x7, 0x9}, {0x5, 0x8}, {0x4, 0xa}, {0x3, 0x5}, {0x1}, {0x5, 0x5}, {0x3, 0x5}, {0x0, 0x6}, {0x7, 0x8}, {0x7}, {0x1, 0x5}, {0x2, 0x3}, {0x7, 0x9}, {0x4}, {0x4, 0x3}, {0x2, 0x6}, {0x4, 0x7}, {0x3, 0x9}, {0x2, 0x9}, {0x1, 0xa}, {0x7, 0xa}, {0x2, 0xa}, {0x6, 0x3}, {0x6}, {0x0, 0x9}, {0x2, 0x4}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x12, 0x12, 0x18, 0x2, 0x1b, 0x5, 0x1, 0x5, 0x36, 0x4, 0x5, 0x48, 0x1b, 0x16, 0x1b, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x8c79, 0xff, 0x1ff, 0x0, 0x3, 0x5, 0xcde]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x9, 0xb, 0x3d, 0x12]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xd8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0x96b17625e9e6fc71, 0xb, 0x30, 0x30, 0xc, 0x3, 0xc, 0x24, 0x30, 0x4, 0x34, 0x16, 0x12, 0x30, 0x36, 0x4, 0xb, 0x60, 0x30, 0x2, 0x12, 0x48, 0x12, 0x36, 0x1, 0xb]}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x60, 0x9, 0xc, 0x36, 0x23, 0x1, 0x2, 0x60, 0x6, 0x30, 0x2, 0x2]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x28, 0x200, 0x7, 0x30f, 0xff, 0x8, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x5, 0xff, 0x8, 0xc8, 0x81, 0xf]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x9, 0x3, 0x6c, 0x6c, 0x6c, 0x6, 0x30, 0x30, 0xc, 0x3, 0x30, 0xb, 0x6c, 0x1, 0x16, 0x30, 0x1b, 0x60, 0x60]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x12, 0x48, 0x60, 0x16, 0x6, 0x60, 0x30, 0x5, 0x2, 0x36, 0x36, 0x36, 0x6, 0x30, 0x48, 0x24, 0x5, 0x3, 0x9, 0x30]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x6, 0x1, 0x24, 0x2, 0xc, 0x7b5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x1fc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x978, 0x1000, 0xdaa, 0x6, 0xc, 0xa, 0x8001]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3f1a08d5d71d66ed}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe1a2, 0xfff, 0x4, 0x1, 0x2fad, 0xfff2, 0x0, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x2, 0x9}, {0x3, 0x2}, {0x2, 0x1}, {0x5, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x0, 0x9}, {0x4, 0x1}, {0x6, 0x9}, {0x1, 0xa}, {0x7, 0x7}, {0x0, 0x6}, {0x6, 0x2}, {0x4, 0x5}, {0x0, 0x9}, {0x4, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x5, 0x4}, {0x0, 0x7}, {0x7, 0x1}, {0x4, 0x9}, {0x1, 0x4}, {0x7, 0x4}, {0x0, 0x3}, {0x5, 0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x4, 0xa}, {0x6, 0x9}, {0x3, 0x3}, {0x2, 0x2}, {0x1, 0x4}, {0x2, 0x9}, {0x3, 0x3}, {0x3, 0x6}, {0x3, 0x4}, {0x4, 0x5}, {0x7, 0xa}, {0x1, 0x3}, {0x5, 0xa}, {0x4, 0x1}, {0x2, 0x9}, {0x0, 0x6}, {0x2, 0x6}, {0x2, 0x8}, {0x1, 0x9}, {0x3, 0x1}, {0x5, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x1, 0x1}, {0x1, 0x7}, {}, {0x7, 0x8}, {0x3, 0x9}, {0x7, 0x5}, {0x4, 0x7}]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8001, 0x2, 0xd40, 0x8000, 0x7, 0x8, 0xf]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x610b, 0x6, 0x8, 0x3, 0x0, 0x0, 0x2, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x405d, 0x0, 0x2, 0x5, 0x116, 0x4, 0xa, 0x1ff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0xc, 0xe6, 0x1, 0x1, 0x7c, 0x36, 0x30, 0x1b, 0x24, 0x36, 0x1b, 0x48, 0x4, 0xb, 0x30, 0x3, 0x36, 0x18, 0x37]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0x1}, {0x1, 0x7}, {0x0, 0x1}, {0x1, 0xa}, {0x3, 0x2}, {0x7, 0x7}, {0x6, 0xa}, {0x1, 0x1}, {0x5}, {0x4, 0x3}, {0x6, 0x4}, {0x3, 0x8}, {0x1, 0x9}, {0x4, 0x8}, {0x6, 0xa}, {0x3, 0x3}, {0x0, 0x5}, {0x3, 0x3}, {0x7, 0x3}, {0x1, 0x6}, {0x5, 0xa}, {0x4, 0x6}, {0x7, 0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x2}, {0x5}, {0x6, 0x8}, {0x5, 0xa}, {0x1, 0x8}, {0x2, 0x8}, {0x5, 0x9}, {0x6, 0x7}, {0x0, 0x6}, {0x7, 0x8}, {0x6, 0x6}, {0x3, 0x7}, {0x0, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x2, 0x1}, {0x3, 0x6}, {0x5, 0x6}, {0x3, 0x5}, {0x1, 0x9}, {0x1, 0x5}, {0x2}, {}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x5, 0xfcc5, 0x14, 0x5, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x7f, 0xee, 0x80, 0xffff, 0x80, 0x3, 0x4]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x9, 0x3, 0x16, 0x24, 0x24, 0x4, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf52, 0xf, 0x3, 0x8, 0x7, 0x9, 0x9, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) (async) getresgid(&(0x7f0000006200), &(0x7f0000006240), &(0x7f0000006280)=0x0) fstat(r1, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getgroups(0x8, &(0x7f0000006ac0)=[r7, r11, r7, r7, r11, r11, r7, r7]) syz_fuse_handle_req(r2, &(0x7f0000003d40)="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", 0x2000, &(0x7f0000006c40)={&(0x7f0000005d40)={0x50, 0xfffffffffffffffe, 0xbcfd, {0x7, 0x2d, 0x1, 0x8100, 0xd, 0x9, 0x10, 0x200, 0x0, 0x0, 0xc1, 0x7}}, &(0x7f0000005dc0)={0x18, 0x0, 0x3, {0x3ff}}, &(0x7f0000005e00)={0x18, 0x0, 0x100, {0x8}}, &(0x7f0000005e40)={0x18, 0x0, 0x7f, {0x200}}, &(0x7f0000005e80)={0x18, 0x0, 0x9fd}, &(0x7f0000005ec0)={0x28, 0x0, 0x6, {{0x3c6, 0xfffffffffffffff9, 0x2, r9}}}, &(0x7f0000005f00)={0x60, 0x0, 0x9, {{0x3, 0x6, 0xfff, 0x3ff, 0x4, 0x2, 0x200, 0x9}}}, &(0x7f0000005f80)={0x18, 0xfffffffffffffffe, 0x9, {0x7}}, &(0x7f0000005fc0)={0x11, 0xffffffffffffffda, 0x69, {'\x00'}}, &(0x7f0000006000)={0x20, 0xffffffffffffffda, 0x6, {0x0, 0x3}}, &(0x7f0000006040)={0x78, 0x0, 0x0, {0xa635, 0x2, 0x0, {0x3, 0x6, 0x8, 0x9d, 0xffffffffffffffff, 0x45a, 0x9, 0xffff4cf0, 0x5, 0x6000, 0x4, r10, r11, 0x0, 0x88}}}, &(0x7f00000060c0)={0x90, 0x0, 0x100000001, {0x4, 0x3, 0x9, 0x81, 0x8, 0xfffffffe, {0x3, 0x8000000000000001, 0x0, 0x4, 0xc, 0xf, 0x5, 0x400, 0x64, 0xc000, 0x5, r8, r7, 0xc, 0x9}}}, &(0x7f0000006180)={0x60, 0x0, 0x7a, [{0x3, 0x2, 0x0, 0x1b890be2}, {0x6, 0x8, 0x1, 0x4, '+'}, {0x6, 0x3, 0x0, 0x7ff}]}, &(0x7f0000006340)={0x650, 0x0, 0x9, [{{0x4, 0x0, 0x401, 0x5, 0x81, 0xb5d, {0x1, 0x0, 0x6, 0x2655, 0xfffffffffffffffa, 0x400, 0x6c, 0x3, 0x8, 0x2000, 0x0, 0xee01, r7, 0x5, 0x38}}, {0x0, 0x8000000000000000, 0x5, 0x1, 'IPVS\x00'}}, {{0x4, 0x3, 0x9, 0x8, 0x1, 0x8, {0x2, 0xc0, 0x10, 0xe9, 0x9, 0xff, 0x1, 0x1, 0x9, 0x8000, 0xfffffffe, r6, r11, 0x3, 0x3}}, {0x2, 0x9, 0x1, 0x2, '}'}}, {{0x6, 0x2, 0x4, 0x0, 0x1, 0x5, {0x5, 0x77c, 0x10000, 0x800, 0x53, 0x401, 0x8, 0x0, 0x6, 0x1000, 0x7, r6, r15, 0x3}}, {0x4, 0x3, 0x0, 0x52bd}}, {{0x6, 0x2, 0x5, 0x7fff, 0x819, 0x3, {0x6, 0x81, 0xfffffffffffffcea, 0x9, 0xfff, 0x48c, 0xffff, 0x6, 0x6, 0x2000, 0x3, r6, r11, 0x3b, 0xffffff97}}, {0x6, 0x7, 0x3, 0x80000001, '.##'}}, {{0x0, 0x2, 0x3ff, 0xf, 0xd1, 0x5, {0x2, 0x5, 0x7ff7, 0xffff, 0x4, 0x2, 0x4, 0x3, 0x1, 0x2000, 0x10000, r6, r11, 0x1, 0xbc0}}, {0x4, 0x8000000000000001, 0x6, 0x2bb, 'wlan1\x00'}}, {{0x1, 0x2, 0xeb1, 0xc, 0x6, 0x78, {0x0, 0x7, 0x9, 0x0, 0x79d3, 0x6, 0x5, 0x1, 0x3, 0x8000, 0x9, r10, r7, 0x8e, 0x200}}, {0x2, 0x1, 0x1, 0x2, '\x00'}}, {{0x2, 0x1, 0x1, 0x6, 0x9, 0x3, {0x1, 0x2, 0x6, 0x75d, 0x8000000000000000, 0x7, 0xfb, 0x401, 0x7fffffff, 0x1000, 0x64a5, r8, r7, 0x8, 0x7}}, {0x2, 0x4, 0xc, 0xffffffd9, '+&]-%+%,*{)-'}}, {{0x2, 0x0, 0x7, 0x5, 0x1, 0x3ff, {0x0, 0x5, 0x400, 0xf, 0x42bb9369, 0x80000001, 0x422e846d, 0x9, 0x4, 0x8000, 0x7d1, r6, r7, 0x800, 0x1}}, {0x2, 0x8, 0x1, 0x3, '\x00'}}, {{0x1, 0x1, 0xffffffffffff2d73, 0xc31c, 0x0, 0xffffffff, {0x2, 0x3220, 0x5, 0x9, 0xfffffffffffffffc, 0xa8, 0x80000000, 0x2, 0x9, 0x2000, 0x3, r10, r11, 0x1, 0x5}}, {0x4, 0x3, 0x5, 0x1, '(#$#!'}}, {{0x1, 0x0, 0x9, 0x8, 0x7fffffff, 0x8, {0x6, 0x7ff, 0x4, 0x9, 0x9, 0x2, 0x3, 0x7, 0xa24, 0x8000, 0x5e70, r8, r16, 0x8000, 0x7ff}}, {0x6, 0x1, 0x2, 0x10000, '#('}}]}, &(0x7f00000069c0)={0xa0, 0x0, 0x4, {{0x5, 0x3, 0x8, 0x1, 0x19, 0x7, {0x0, 0x4, 0xb, 0x9, 0x1, 0x4, 0xf55, 0x1, 0xc6, 0xc000, 0x4, r10, r7, 0x7, 0x2}}, {0x0, 0x12}}}, &(0x7f0000006a80)={0x20, 0x0, 0x6, {0x0, 0x4, 0x337, 0x3}}, &(0x7f0000006b00)={0x130, 0x0, 0x6, {0x5, 0x7, 0x0, '\x00', {0x2000, 0x3, 0x97, 0x7, r10, r17, 0x8000, '\x00', 0x1, 0x3, 0x5, 0x3, {0x5, 0x7}, {0x7, 0x9}, {0x2276, 0x3ff}, {0x81}, 0x7, 0x4}}}}) r18 = syz_open_dev$mouse(&(0x7f0000006cc0), 0xffff, 0xc000) fcntl$getown(r18, 0x9) 5m8.036035709s ago: executing program 5 (id=7246): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') (fail_nth: 1) 5m7.955715586s ago: executing program 5 (id=7248): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dfe, 0x11}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000004180)=0x17) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000001c0)={&(0x7f0000000000)="d338050383d8e003f0ba24591c0a4ce4cebb081fcb11db972e8afafd6770970feb450b6b57822e7c39ced1148eecb59ff8d5de7085eb7965a422abcdffb0b270", &(0x7f0000000600)=""/4096, &(0x7f0000000100)="a1be67fef4a2d683f1b135128d6f88181d8966478313ba179fe695e3cb9253929333d67e7b64446b24f9b195a7189a72da00cfa454", &(0x7f0000000180)="525a593f73044d3640a2c255a9e50bb5cec5fef207ed95aca4e3ec745b6a55b77380d9f85361b48eca9321b3c0fca08b24ae0f3d151fde9d701f9841ae0e3453", 0x4, r3}, 0x38) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x121800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000300)={0x79, 0x0, 0x2f3}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x1f, 0x49, 0xcb, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14}]}, 0x34}}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') writev(r8, &(0x7f0000000340)=[{&(0x7f0000000140)="a1", 0x1}, {0x0, 0x2}], 0x2) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_LAPIC(r9, 0x8400ae8e, &(0x7f0000001600)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$inet6(r10, &(0x7f0000000140)={0xa, 0x4e20, 0xa86c, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x8}, 0x1c) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) openat$rdma_cm(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x8}}}}}}, 0x0) 5m7.546771373s ago: executing program 5 (id=7250): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x109) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)=[0x6], 0x0, 0x0, 0x1}}, 0x40) 5m7.505533767s ago: executing program 35 (id=7250): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x109) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)=[0x6], 0x0, 0x0, 0x1}}, 0x40) 4m41.898384126s ago: executing program 7 (id=7436): r0 = socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000035c0)=ANY=[@ANYBLOB="040040006d014100", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000100"/28], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x2000000b, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x54000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd0, &(0x7f0000000040)=0x8, 0x4) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r1, 0x0, 0x0, 0x24008881) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000340)=0x10001) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000440)=0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) kcmp(r2, r7, 0x6, r0, r8) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180100002020642500000000002020207b1af8ff00000000bfa100000000220007010000f8ffffffb702000008000000b7030000070000008500000006000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x94) getsockname$unix(r0, &(0x7f0000000480), &(0x7f0000000400)=0x6e) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 4m40.558548078s ago: executing program 7 (id=7445): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'pimreg1\x00', 0x0}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x98) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000140), 0x4d) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000c090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 4m40.408345234s ago: executing program 7 (id=7447): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x64bd55c157188b30) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @local, 0x100003}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6}, @sco, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x3}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000140)={0x0, 0x50, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x1409, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x18}}, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000080)) ioctl$NBD_DISCONNECT(r5, 0xab08) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x1, &(0x7f00000002c0)=@raw=[@generic={0x6, 0xb, 0x9, 0x81, 0x7fffffff}], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) 4m40.159553607s ago: executing program 7 (id=7453): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 4m40.085233959s ago: executing program 7 (id=7455): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) (fail_nth: 1) 4m39.780318371s ago: executing program 7 (id=7460): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 4m39.668768716s ago: executing program 36 (id=7460): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 7.892820965s ago: executing program 6 (id=8886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x3f, 0x0, 0x40f00, 0x5c, '\x00', r4, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x4, @void}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x80a0000, 0x1000, &(0x7f000027e000/0x1000)=nil, 0xd0621a0000000000, r8}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtfilter={0x2c, 0x2c, 0x402, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x10, 0xfff2}, {0xe, 0x10}, {0xfff1, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xfd}}]}, 0x2c}}, 0x20000000) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 7.890666976s ago: executing program 8 (id=8888): munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x6) read$FUSE(r4, &(0x7f0000002900)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010000000000000000000100000005a0040001000000"], 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x24}}, 0x0) tkill(r0, 0xe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 7.653496367s ago: executing program 2 (id=8889): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x8}, 0x14) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756f74612c6772f071756f74615f626c6f636b5f686152646c696d69743d332c00"]) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=@polexpire={0xb8, 0x19, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x20}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x3, 0x8000000000000000}, {0x6}, 0x4, 0xb, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$FITHAW(r1, 0xc0045878) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@enum={0xc, 0x200000000000029a, 0x0, 0x6, 0x4, [{0xc, 0xdca}]}, @var={0x40004, 0x0, 0x0, 0xe, 0x2, 0x3}]}, {0x0, [0x30]}}, &(0x7f0000000200)=""/19, 0x3f, 0x13, 0x0, 0x2b}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0xe0f, 0x2, 0x0, 0x200, 0x1, 0xff, '\x00', 0x0, r2, 0x4, 0x3, 0x2}, 0x50) (async, rerun: 32) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400001) (rerun: 32) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000080)={0x2b78, 0x7, 0xfff, 0x3}) 7.603560224s ago: executing program 6 (id=8890): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x3) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000ea01020000000900010073797a3200000000090001008a797ab0000000000900030073797a32000000000900010073797a32000000000900030073797a3200000000140002"], 0x70}}, 0x20000800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r3, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940), 0x0, 0x72, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xf9, 0x7, 0x5c, @private1, @empty, 0x8000, 0x40, 0x7, 0x1}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000", @ANYRES16=r4, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0x8008330e, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000000c0), 0x4) syz_80211_join_ibss(&(0x7f0000000340)='wlan0\x00', &(0x7f0000000400)=@default_ibss_ssid, 0x6, 0x0) tgkill(r0, r0, 0x25) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 7.603284905s ago: executing program 2 (id=8891): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x3) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000ea01020000000900010073797a3200000000090001008a797ab0000000000900030073797a32000000000900010073797a32000000000900030073797a3200000000140002"], 0x70}}, 0x20000800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r3, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940), 0x0, 0x72, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xf9, 0x7, 0x5c, @private1, @empty, 0x8000, 0x40, 0x7, 0x1}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000", @ANYRES16=r4, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0x8008330e, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000000c0), 0x4) syz_80211_join_ibss(&(0x7f0000000340)='wlan0\x00', &(0x7f0000000400)=@default_ibss_ssid, 0x6, 0x0) tgkill(r0, r0, 0x25) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (fail_nth: 1) 6.916474506s ago: executing program 8 (id=8892): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x18, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x3, 0x20, 0x0, 0x0, 0x205a, 0x1ff, 0x0, 0x96c, 0x6, 0x0}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)=ANY=[@ANYRESHEX=r4, @ANYRES32=0x0, @ANYRES16=r5, @ANYBLOB="0a001b"], 0x2c}], 0x1, 0x0, 0x0, 0x4008030}, 0x0) open(&(0x7f0000000280)='./cgroup/../file0\x00', 0x80, 0x31) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) setrlimit(0xc, &(0x7f0000000f80)={0x57b}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtaction={0xe68, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x8001, 0x10000000, 0x8}, 0x92, 0x6}, [{0x4, 0xe, 0x8, 0xe42, 0x4, 0xec87}, {0x6, 0x40, 0x6, 0x458, 0x400, 0x7}, {0x40, 0xa6, 0x8, 0x0, 0x7, 0xf63}, {0x1, 0x2, 0xfc78, 0x3, 0x4, 0x7fff}, {0x0, 0x3c98, 0x1, 0x7fffffff, 0x9, 0xc}, {0x3, 0x7, 0x3, 0x0, 0x6, 0x4}, {0x1, 0x2, 0x0, 0x51, 0x6, 0x6}, {0xf, 0xfff, 0x9, 0x99, 0x6b2b}, {0x8e73, 0x3f8000, 0x1, 0x4, 0x7, 0x7}, {0x4, 0x3, 0x1, 0x4, 0x0, 0x400}, {0xec25, 0x60, 0xffffff00, 0xb45d, 0x552, 0x39f}, {0x100000, 0xfffff317, 0x2, 0x5, 0x974f, 0x17}, {0x4, 0x7, 0x100, 0x9, 0xfff, 0xffffffff}, {0xfffffff7, 0x101, 0x400, 0x6, 0x40, 0xb}, {0x0, 0x4, 0x5, 0x3, 0x81, 0x2}, {0xb2, 0x4c81440c, 0x8, 0x800, 0x2, 0xd66}, {0x4, 0x2bb, 0x80, 0xa, 0xfffffffa, 0x5}, {0xfffffffe, 0x5b92, 0x7, 0x4, 0x88f5, 0x9}, {0x6, 0xc, 0x200, 0x4, 0xfffffff1, 0x26}, {0x9, 0x56, 0x1, 0xd, 0x5, 0x1}, {0x5, 0x3, 0xc, 0xfffffff7, 0x2}, {0xfffffff7, 0xf9f5, 0x8, 0xfff, 0xe1, 0x2d5e}, {0x6, 0x10001, 0x2, 0xcb, 0x5, 0x4}, {0xe, 0x101, 0x80, 0xd, 0xfffffffc, 0x9}, {0x0, 0xb, 0xfffffff4, 0x9, 0xfff, 0x81}, {0x6, 0x4, 0x9, 0x38f5, 0xe, 0xb4}, {0x2, 0x6, 0x9, 0x3, 0xe5, 0x3800}, {0x9, 0x4, 0x1, 0x101, 0x49a, 0x40}, {0x100, 0xffffffff, 0x80000001, 0x3, 0x12ab, 0xbc}, {0xa4a9, 0x3, 0x9, 0x7, 0x9, 0xb}, {0x7fffffff, 0x4, 0x5, 0x3, 0x7fff, 0xc}, {0x5, 0x9, 0x75, 0xffff8001, 0x9, 0x6}, {0xb0, 0x4, 0xffffffff, 0x6d, 0x81, 0xfffffffa}, {0x100, 0x6, 0xffffffff, 0x0, 0x4, 0x9}, {0x6, 0x9, 0x9, 0x1, 0xffff, 0x2}, {0x800, 0x4, 0xfffffffe, 0x10001, 0x7fffffff, 0x100}, {0xb, 0x2, 0x4, 0xfffffff8, 0x6, 0xfffffff9}, {0x1, 0x9, 0x5, 0x6, 0x84, 0x7}, {0xa, 0x0, 0x909d, 0x1, 0x9}, {0xbe0, 0x3, 0x5, 0x2, 0x3, 0x80000001}, {0x6, 0x0, 0x8001, 0xce8, 0xc7f, 0x10001}, {0xcf4, 0xaad, 0x8, 0x6, 0x1, 0x3}, {0x6, 0x5, 0x5, 0x7, 0x7247, 0x2}, {0x80000000, 0xfe9, 0x32b2, 0x7, 0x5, 0x7ff}, {0x40, 0x9, 0x68, 0x0, 0x2, 0x98a}, {0x7, 0x0, 0x5b02, 0x6, 0x8001, 0x2}, {0x6, 0x4, 0x1ff, 0xd, 0x8, 0xfff}, {0x2, 0x9, 0x800, 0x0, 0xfffffff8, 0x3a}, {0x4, 0x9, 0x9, 0xfff, 0x3, 0xd4f}, {0xb44, 0x8, 0x9, 0x7f, 0x3, 0x3}, {0xc1, 0x6, 0x2, 0x6, 0x1, 0x5}, {0x40, 0x6be, 0x4d1, 0x5, 0x2, 0x7}, {0x1ff, 0xb25, 0x80000001, 0x1, 0xf}, {0x4, 0x6, 0x1, 0x32}, {0xe6e1, 0x5, 0xfffffff9, 0x2, 0x60, 0x1a0}, {0x401, 0x0, 0x8000, 0xffff65ca, 0xffffffc0, 0xf9}, {0xf, 0x2, 0x9, 0xa, 0x3, 0xffffffff}, {0x4, 0x3, 0x9, 0x6, 0x4, 0x7ff}, {0x7ff, 0xfffffffc, 0x15e5a53f, 0x67b, 0x1, 0x4}, {0x4, 0x7, 0x5, 0x10001, 0x8, 0x6}, {0x8f2, 0xfff, 0x6, 0x2, 0xc5, 0xfffffff8}, {0x8000, 0xc1, 0x8, 0x7fff, 0x7fff, 0x400}, {0x2900416, 0x10000, 0xe, 0x9, 0x1000, 0x9}, {0x10, 0xfffffff8, 0x0, 0x4, 0xe, 0x9}, {0x8, 0x8, 0x8000, 0x0, 0xd01, 0x3}, {0x800, 0x3, 0x0, 0x0, 0x4, 0xf87b}, {0x1, 0x1ff, 0x3, 0x3, 0x9, 0x3ff}, {0x7, 0xfffffff6, 0x0, 0xde, 0x3, 0x7}, {0x8, 0xaf00, 0x1, 0x1, 0x8, 0x1}, {0x4, 0x2, 0x9, 0xfd, 0x0, 0x7}, {0x0, 0x6, 0x8, 0xc, 0xf15f10b, 0x6}, {0x4d, 0x6, 0x8, 0x7, 0xe582, 0x6}, {0x4, 0x0, 0x40, 0x8, 0x0, 0xffff8000}, {0x9, 0x4, 0x6, 0x6, 0xa, 0x8}, {0x3, 0x401, 0x6, 0xe, 0x1ff000, 0x1}, {0xfffffb2a, 0x8, 0x5, 0xffff, 0x2, 0xffffff00}, {0x400, 0x6, 0x3, 0x9a, 0x1, 0x2000}, {0x5, 0x2, 0x81, 0xf, 0x5, 0x8}, {0x1, 0x4241, 0xfffffff8, 0x9, 0x400, 0xebed}, {0x5, 0x1ed, 0x2, 0x8, 0x707, 0xfc1a}, {0x1d, 0x33, 0xfffffff8, 0x2, 0x6, 0x9}, {0x9b, 0x6, 0x3a438d3b, 0x8000, 0x4}, {0x9, 0x81, 0x7fff, 0x800, 0x9}, {0x10, 0x4, 0x1, 0x622e, 0xd8, 0x9}, {0x33, 0x7, 0x9, 0x6, 0x1e, 0xd}, {0xd2, 0x7, 0x6, 0x2, 0x7, 0x1000}, {0x3, 0x0, 0x7, 0xab7, 0x5, 0x5}, {0xb, 0x7, 0xc, 0x1, 0x6, 0x80000000}, {0x3, 0x1, 0x2, 0x8, 0x2c, 0x10}, {0x50a49641, 0x2, 0x4, 0xef1, 0x8, 0x9a90}, {0x5e300141, 0x0, 0x7, 0x93, 0xa, 0x6e}, {0x36, 0x5, 0x6de, 0x80000001, 0x4}, {0x8, 0x2, 0x5, 0x4, 0x0, 0x57d}, {0x3, 0x6, 0x7fc, 0x6, 0x7, 0x8}, {0x5000, 0x7, 0x0, 0x4, 0x6, 0x4}, {0x4, 0x7fffffff, 0x7fff, 0xfffffffe, 0x100000, 0x5}, {0x7d, 0x343, 0x6, 0x1, 0xa19a, 0x5}, {0x1, 0x4, 0x962, 0xd, 0x1, 0x8}, {0x1a4, 0x2, 0xffff, 0xa, 0x0, 0x1}, {0x800, 0x81, 0x6, 0x3, 0xfffffff9, 0x8001}, {0x8000, 0x3, 0x0, 0x1, 0x2, 0x8}, {0x101, 0x4, 0x7f, 0x3b24, 0xc16, 0x1ff}, {0x80, 0x8, 0x3, 0x2, 0x34c, 0x2}, {0x9, 0x6, 0x2, 0x88, 0x4, 0x3ff}, {0x6, 0x4, 0xf, 0x5, 0xfffff157, 0x7}, {0x400000, 0xbefa, 0x9, 0x6, 0x4, 0xffffffff}, {0x2fd, 0x4, 0x8, 0x3, 0x6, 0x1}, {0xa1, 0x1, 0xd, 0x7, 0x4, 0xe1}, {0x6, 0x101, 0x7, 0x3, 0x0, 0x3}, {0x3, 0x6, 0x7, 0x9}, {0x2, 0xc, 0x23c, 0x8, 0x12, 0x80}, {0x0, 0x292, 0x2, 0x8, 0xffff, 0x2}, {0x9, 0x0, 0x3, 0x4, 0x40, 0xffffffff}, {0x80000000, 0x6f95, 0x23, 0xf9, 0x8, 0x7fff}, {0x5, 0x19de554e, 0xfffff4b2, 0xb97, 0x1, 0x7}, {0x9, 0x0, 0x521, 0x5, 0x3}, {0xffff, 0x4, 0xfb1, 0x3, 0x0, 0xfffffff8}, {0x6, 0x19c1, 0x7ff, 0xa, 0xda8b, 0x9b}, {0x3, 0x8, 0x7fff, 0x6, 0x7, 0x8}, {0x80, 0x5, 0x48, 0xce6, 0x3, 0x4}, {0x9, 0x3ae2, 0x1, 0x7, 0x7, 0xfff}, {0xb5, 0x7f, 0xffffacad, 0x0, 0x4}, {0x3, 0x0, 0x7455, 0xe, 0x8000, 0x4}, {0x8, 0x8, 0x10, 0x0, 0x0, 0x3}, {0x2, 0x8, 0x0, 0x5, 0x1ff, 0x6}, {0xd, 0x4, 0x73f57df3, 0x8, 0xffffff61, 0x8}, {0x7, 0x8, 0x5, 0x5, 0xb, 0x40}, {0x6f, 0x0, 0xffff, 0x81, 0xc, 0x10000}], [{0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {}, {}, {}, {0x5}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x5}, {}, {0x2}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x5}, {0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000fc0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 6.448778152s ago: executing program 2 (id=8895): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004c40)=@newchain={0x3f74, 0x64, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xffe0, 0xa}, {0xffe0, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xf3}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_matchall={{0xd}, {0x214c, 0x2, [@TCA_MATCHALL_ACT={0x364, 0x2, [@m_skbmod={0x10c, 0xc, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x3, 0xffff, 0x3, 0x40000000, 0x1}, 0xb}}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x9, 0x191, 0x8, 0x10000, 0x26b9d8fe}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}]}, {0x58, 0x6, "84a7d326e632305c4b3918ecbf2d311034591dbe11f9eb1c22b0b135f7238c989591933d74589eca8c33e75629acd4a92711cd7e9cf35f775418b3e61c070165175f159121c0eb15d9091223a1251dfc562e6231"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x118, 0x1d, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x5}, @TCA_CT_ZONE={0x6, 0x4, 0x4}]}, {0xe0, 0x6, "4891adf9616feb202a4305578e35ddcdd0369c9ad09740f68d34d90dc4567a666f0f943f72db1f1ee9f29a1ede660294108aad09a3be16b77016cc9dd6a3a92b29447ea83910dc446dd973d1ee65fbbb22f0b0706c807492bd6d24f1b1766685c94408c5e03df24cbb84479a2fe7e1dfeeda6ca50a73bf384d4dd71feb7b4f8c51755f8083466ab48c04defc66080ed61581e4b2af7d0bc37b67d9febded297c9e034ba7f98699f86b3d536618bf6eec21bbe01739e00fc42e0df6b2bd3fa8b74c7527ba3ff8a810475a8edf28038bc4882a83522f8ff669a1a557c5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_police={0x13c, 0x16, 0x0, 0x0, {{0xb}, {0xf8, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x4, 0x65de, 0x3db, 0x0, {0xe, 0x2, 0xd20a, 0x7, 0x8000, 0x7f}, {0xe, 0x1, 0x7fff, 0x6, 0x7f, 0xfff}, 0x7, 0x4, 0x55d0}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0xfffffff2, 0x0, 0x6, {0x6, 0x2, 0xff, 0xaeb, 0x3, 0xd0}, {0x0, 0x2, 0x9c2, 0x0, 0x8, 0x90}, 0xffffffff, 0x8}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0xffffffffffffffff, 0x3, 0x1, 0x9, {0x2, 0x2, 0xfffd, 0x0, 0x7, 0x2}, {0x4, 0x1, 0x5, 0x400, 0x10, 0x7}, 0x0, 0xf4, 0x9}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}], []]}, {0x19, 0x6, "c84c2c83bd802f54e400ef968e5516bc59ad4a7be7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_ACT={0x2e0, 0x2, [@m_skbmod={0x15c, 0x3, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x33}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x8000, 0x505, 0x5, 0x4, 0x1}, 0x1}}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x3, 0x9, 0x2, 0x9, 0x9e}, 0xe}}]}, {0xdc, 0x6, "2118f6088ea2ae4411549b3491b5e168935a3647674a9ebc85927a4ce959a0e068ede507a83ea23e06b943a64ac37bc1236bde68ec1ea94bc77dab199257b7d1707890eb095aba19a54f563e93b11a8c230859f9caa40e73b9e99c38d9f7ab8293829077e6d9dbb92fbd11a926f7d8d462fd0456caea16660e28d85386ab3581b6310a668be31392c6ed775de1c56b8b43c9a350efb5d8af3a724754e80560fe4ceced0f373c27e3d16270c3410626f72f3d47587d95823f5803c8b132a8260069566576355dc887be572561db6c921308eb3ce72b611abd"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0x180, 0x4, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0xb868, 0x10000000, 0x3, 0x3}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x0, 0x8, 0xa, 0x2}, @dev={0xac, 0x14, 0x14, 0x36}, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4fcb, 0x1, 0x1, 0x4, 0x1}, @private=0xa010101, @empty}}]}, {0xe0, 0x6, "be1502524cb5667e998b5144261e04a33551d6d4e24737be2b219fc6d46fc862ba697ca390e221d87ae09904dcfbb5aed0eacbdf21aaa782e9ba9ddbfe8292d8fd54e156fcbe8f0f3bf7a3b0d96074c08a10f98515abccb3acc18d370aea5b869a6e4bcc8f1a2d460f741f86d31dd9a3c8f3cd5a3f8f452a003f497d3ab0c49bbffc53d0394a9b006a2e54bcaf2004f1a38c8eabb0fba2849f164563da8da5a3648c3bd886b1d5ba6884eae318d9df0c76a6a687cce342fe5b7b849681885d6a7a9d575dda42bd90c6b4beb537ea8ab4f277ab66838c99fe87103859"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_ACT={0x10dc, 0x2, [@m_skbedit={0x1040, 0x1c, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff8, 0x10}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0x98, 0x1c, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x7, 0x20000000, 0x9, 0x5}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x71, 0x5, 0x6, 0xae7, 0xda6c}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x31, 0x6, "36b2e58a6616bf4e268bac8205d6d7a4382d1e8dd1b7e78d979a45b75ad763826d04b18523b16eed6ead90c0e7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0xd}}, @TCA_MATCHALL_ACT={0x5c4, 0x2, [@m_ife={0x54, 0x6, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x184d, 0x0, 0x80000001, 0x80000001}}}]}, {0xd, 0x6, "015305ec6c3d5b5231"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0x528, 0x1b, 0x0, 0x0, {{0xb}, {0x414, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x571, 0x3, 0x3, 0x7, 0xc, 0x2, 0x883f04fe, 0xff, 0x3, 0x4, 0x400, 0x6, 0x10000, 0xfffffa9f, 0x7fffffff, 0xff, 0x3, 0x6, 0x7fff, 0x9, 0xd, 0x81, 0x7, 0x8, 0x7, 0x9, 0x23, 0x8, 0xa128, 0x2, 0x0, 0x8, 0x6, 0x4, 0x0, 0xfffff000, 0x0, 0xb142, 0xf, 0xbc3, 0x6, 0xb, 0xf043, 0x2794, 0x9, 0x1, 0x0, 0x4, 0x4, 0x9, 0xef, 0x7, 0x7, 0x401, 0x6, 0xffffffff, 0x8, 0x2, 0xff, 0x3, 0x0, 0xf, 0x8, 0x4, 0x8, 0x0, 0x5ffb, 0x1, 0x7ff, 0xa, 0x200, 0x389, 0x9, 0x6, 0x3, 0x8, 0x5, 0xae3b, 0x88e0, 0x1, 0x6, 0xc15, 0x3, 0xe63, 0x6eba, 0x5, 0xe, 0x2, 0x3, 0x1, 0x2, 0x80000000, 0x7, 0x80000001, 0x52, 0x5, 0x55c4, 0x8, 0x8, 0x40, 0x4, 0x8, 0x80000001, 0x40800000, 0x0, 0x9, 0x9, 0x2, 0x4, 0x99, 0xffff966f, 0xa, 0x10000, 0x7f, 0xe, 0xffff0001, 0x3, 0xad6, 0x8, 0x4, 0x9, 0x7, 0x3, 0x8, 0x5, 0xffffffff, 0x7, 0x5de, 0x3, 0x1, 0x8, 0xc00000, 0xfffffffa, 0xf8, 0x6, 0xabc9, 0x9, 0x6, 0x3, 0x8, 0x8001, 0x2fa, 0x0, 0x4, 0x5, 0x8, 0x50, 0x3, 0x5, 0x5, 0xa, 0x0, 0x6, 0x835, 0x7, 0xfffffffe, 0x1000, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0xa8a, 0x9, 0x10, 0x2, 0x0, 0x80, 0x9, 0x3, 0x1, 0x7ff, 0x6, 0xfaf, 0x6, 0x2, 0x6, 0x1000, 0x7fffffff, 0x200, 0x7, 0x9153, 0x618e, 0x3ff, 0x2, 0x40, 0x10001, 0x1ea4, 0x3ff, 0x1, 0x7dfe, 0x8, 0x0, 0x7, 0x3, 0x61, 0x100, 0x9, 0x8, 0x3, 0x3ad, 0x0, 0x5, 0x7, 0x2, 0x3, 0x3, 0x6, 0x7, 0x7fff, 0x8, 0x6, 0x9, 0x5, 0xb, 0x9, 0x2, 0x5, 0xa, 0x2, 0x3, 0x2, 0x7ad6, 0x8, 0x10, 0x3, 0x2, 0x2, 0x26, 0x7, 0x0, 0x7, 0x8, 0x5, 0x10000, 0x2, 0x5, 0xffffffff, 0x8119, 0x68db, 0x1ff, 0x8, 0x2, 0x6, 0x9, 0x10001, 0x7, 0xa0, 0xb7c0, 0x4, 0xf66, 0x0, 0xc, 0x2, 0x2]}]]}, {0xec, 0x6, "4596f17977f89f59ec1d38bc6acaa7924560ae1b3b0c692efc2ba5acbe6c6d4767daa98549ee3d7335acc4ac443d2953f94af8855f0abbd34615f5842cb2e5784c164a861f83c75a58186775d6c8eed28a5593c97ccc1c2fbaf171f8a36ce6f4c1da30ac82f0703c4bfdb0881f6cb672f9dcc3d4a787403619d9f4866f74c923703ff1d3b8ff6a9b0a50195959109305c398cd3ab56558b591535edbb8dd9d3738b7742e8d788fa358f033b2c7ede06c9a7f0f3cd8fadd351c24a6d80930e5063957c40c8dd1e0ff64c0f6e71e3f33f79251b54204ed39ffea7d7ccdbc7073d7b14b994bece964f7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x44, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x15, 0x6, "329c0aa593d1bbf2a668daabad8abd537a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_ACT={0x344, 0x2, [@m_bpf={0x110, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0xe7, 0x6, "3c6b92b04cc0adaddcac49f0a21ea56cc173427b76a40ac81d3fdbf9a86cfde6b7a6b037b0264d463e105750133b87bc2911f404651b579767757a779fb24a6debe90afeb0db8ce75394a4791cdf9bef9926f98b4013264fcf67cb614cabacf08454da7d61e3cc0598e3a21c3dcc98a7b71d03a49aec8ee8b096c1a1bf80d8bd168b60cde0129dbf3032919a0ad489190c4fb24b550304aa29dd732909ba280315e86147c72e201f02a6cccb65e05ff85d2e18cdd3547e74a38100d7bf5e687a8528578db5cd70ddfe98f3486e0f2789cb8d5c96dd8011a8c689c7d1ee9117e3a43823"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0xf4, 0x16, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x1, 0x81, 0x7c1d}, 0x7}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x20000000, 0x5}, 0x6e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x100, 0x2, 0x1, 0x1}, 0x2}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0xd, 0x3, 0x1, 0x80000001}, 0x60}}]}, {0x58, 0x6, "296e7a1fea3427953f5980d661069306ca505ddcc61a9e8ca485a018c08f6b65cf6b153aaedd4875f920f12b1acd11b34d3ad891d983585b47ace573764ce1912425146b35b38cf9f020c6e44e456da5eabc308e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0x13c, 0x2, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7eb7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfff}]}, {0xef, 0x6, "be0254a27a03b8831167b9797056ff810fa2fa3db36cfa151594d06bbbaa979e5c375a8b490776745fbc336a0a7992b6ae048f865cf57adc291cc761e541a082494e6c159255eba1bfac78df2a2f8217fbffd65efe74c5b189790c5f18ba0423d1d262f715f9cabf3978336d51ae81312ae5a7292cc50faa288796df215eab681b87d753e5e08cceae5e4b560e50e975eb4b4d282a5497fb5327113fc88a1b10d2854ab58ebcbd957bf1fac8c856c8394d5167ba92733a403c3acd6de81ab96724391ba37dfaf1a110cc71beb09094a5e7422f92112c0dd68b1bcb8334ad79c3e5c59494d88116b1def2f6"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}, @TCA_MATCHALL_ACT={0x10c, 0x2, [@m_mpls={0x108, 0x1b, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88b5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xb2a43}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x465, 0x733f5a3e, 0x6, 0xd, 0x5}, 0x3}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x2, 0x20000000, 0xb, 0x6}, 0x4}}]}, {0x71, 0x6, "b55e12ac7d00524ce8bcb2e434fc7126c90d569bc8c4b806c6abe1afd2791a1eaea1f5223aa129b32d3216cc6ce403697b4995095fd5ccbf11103110bdb1fe628c6b310a07699f5ca4d5d293925dca63225e142ad94fb1278eba131a790110672f2c9ff537cd2f69b21ea2eb57"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xf4}}, @filter_kind_options=@f_bpf={{0x8}, {0x1dd4, 0x2, [@TCA_BPF_POLICE={0xc24, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x4, 0x3ff, 0x80000000, 0xffff, 0x7, 0x7, 0x3, 0x40, 0x4, 0x0, 0x7, 0x3, 0x79b9, 0x0, 0x3, 0xd, 0x2, 0x1, 0x8000, 0x8, 0x1, 0xb56, 0x3ff, 0x80000000, 0x0, 0x5, 0xf12a, 0x9, 0xf, 0x7, 0x0, 0x800, 0x3, 0x6, 0x3, 0x4, 0x2, 0x401, 0x14, 0xf, 0x3, 0x4, 0x3, 0x7, 0x1, 0x6, 0x5, 0xaa13, 0x5, 0x2, 0x16f6, 0x7, 0x8, 0x84, 0x2, 0x17ffc, 0x8000, 0x0, 0x80000000, 0x8e, 0x5, 0x0, 0x70, 0x0, 0x40, 0x7, 0x8000, 0x5, 0x0, 0x6, 0x80000000, 0xb68, 0x8, 0x5, 0x6a, 0x1, 0xffffff7f, 0xfff, 0xea9, 0x5, 0x8, 0x0, 0x8, 0x9, 0x7fffffff, 0x8, 0xfffffffb, 0x7, 0x200, 0xf041, 0xd84, 0x3, 0x4b2, 0x6, 0x3, 0x6, 0x7, 0x1, 0x9, 0x0, 0xe, 0x10, 0x8, 0x3, 0x1, 0xfffffffd, 0x0, 0xfff, 0xa96, 0x9, 0xb1, 0x4, 0x7, 0x10000, 0x8, 0x3, 0xc66f, 0x4, 0xffff, 0xa0000000, 0x7, 0x4, 0x2, 0xfff, 0x80000001, 0x2, 0xffffffff, 0x4, 0xb, 0xfffff001, 0x4, 0x2, 0x6, 0x40000000, 0x5, 0x9, 0x3, 0x80, 0x5, 0x8, 0x6, 0x1, 0x8, 0x0, 0x0, 0x6, 0xc1ca, 0x0, 0x80000000, 0x0, 0x1, 0xda2, 0x0, 0x39e, 0x7, 0x1, 0x8, 0x7fff, 0x2, 0x4, 0x5, 0x0, 0x7fff, 0x7d56, 0x800, 0x9ce4, 0x2d7e, 0x94, 0x4, 0x8, 0x8b2, 0x10001, 0x1000, 0x80, 0x7ff, 0x3, 0x6, 0xd, 0x1, 0x80000000, 0x7, 0x0, 0xea51, 0x5, 0x7, 0x8, 0x1, 0x5, 0xba, 0x8000, 0x379, 0x4, 0xfff, 0x2, 0x3, 0x3, 0x3, 0x7, 0x9, 0x4, 0xdde, 0x1, 0x3fc, 0x3, 0x100, 0xfffffffa, 0x8, 0x1e9, 0x70, 0xffffff99, 0x36815d61, 0x81, 0x1f81, 0x2, 0x87a9, 0xc, 0x25df, 0x5, 0x0, 0x8, 0x5, 0x4, 0xfe05, 0xfffffff8, 0x47, 0x6, 0x7, 0x760, 0x7fff, 0x2000, 0x4, 0x2, 0x8, 0x9, 0x80000001, 0x4, 0x2, 0x6, 0x3592, 0x1, 0x63, 0x100, 0x14000, 0x4000, 0x5, 0x0, 0x6, 0x2, 0x9, 0x5, 0x4, 0xc, 0x7fffffff, 0xfffff801, 0x7fff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x100, 0x8, 0x5, 0xfffffff6, 0x0, 0x6, 0x8, 0x0, 0x3, 0x120, 0x3, 0x7, 0x8, 0x9, 0x6, 0x3, 0x5, 0x9, 0xfffffffd, 0x7, 0xf2, 0x2, 0x10f4, 0x4bb, 0x7, 0x0, 0x1, 0x1d4a, 0xfffffc00, 0x3ff, 0x8, 0x6, 0x3, 0xfffffff9, 0x84, 0x0, 0x0, 0x2, 0xff, 0x2, 0xb091, 0x0, 0x462a8e13, 0x5, 0xffffffe8, 0x8, 0xf, 0x0, 0x7, 0x3, 0x0, 0x5, 0xba, 0x3969, 0x401, 0x89f, 0x1, 0x1, 0x1, 0x26e7, 0x9, 0x6, 0x1000, 0xff, 0x1, 0x0, 0x8, 0x4, 0x7ff, 0xfffffffd, 0x6, 0x4, 0x3, 0x81, 0x3, 0x5, 0x2, 0x10000, 0x3, 0xa738, 0xb59, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x9, 0xfffffff7, 0x6, 0x4, 0xc, 0x3, 0x5, 0xd, 0x339, 0xb, 0x3ff, 0x7, 0xf, 0x400, 0x1, 0x9, 0xffff, 0xfffffffb, 0x8, 0x9, 0x7, 0x3, 0x81, 0xffffff7a, 0x40, 0x1000, 0x4, 0x7a8b, 0x8, 0x7, 0x10001, 0x9, 0x4, 0xbaa, 0x2, 0x2, 0x5, 0x6, 0x7, 0x2, 0x4, 0x3, 0x1, 0x5, 0x3, 0xffffff00, 0x7, 0x2f, 0x8, 0x965, 0x7c59ed17, 0x7fffffff, 0x80000000, 0x8, 0x8, 0x6, 0x7f, 0xfffffffd, 0x4, 0x4, 0x6, 0xfffffffa, 0x7, 0x100, 0x80006, 0x8, 0x100, 0xa9bb, 0xe968, 0x6, 0x800, 0x0, 0x8, 0x4, 0x7, 0xd, 0x2, 0xe028, 0xfffffffe, 0x7fffffff, 0x3, 0x1200, 0x1, 0x4, 0x89f, 0x2, 0x6, 0xc34a, 0x3, 0x2, 0x6, 0x5, 0x7, 0x5, 0x1000, 0xba3, 0x1, 0x401, 0x0, 0xd94, 0x5, 0x2, 0x764057c0, 0x8, 0x8, 0x4, 0x5, 0xfffffff8, 0x80000000, 0x0, 0x8, 0x3, 0x9, 0x1, 0x4, 0x4, 0x7fff, 0x232d, 0x5, 0x0, 0x7, 0x5, 0x9, 0x1, 0x4, 0x62, 0x9, 0xbbd0, 0xffffffff, 0x10000, 0xbbfc, 0x0, 0x3023d77c, 0x55eb, 0x8, 0x7, 0x5, 0x6, 0xb, 0x9, 0x9, 0x6d, 0x8, 0x5, 0x81, 0x8, 0xeafceea8, 0x1, 0xe, 0xfd5b, 0xfffffb78, 0x1, 0xc, 0x0, 0x8, 0x4000003, 0x0, 0xdf1b, 0x5, 0x200, 0xb1, 0x5, 0x8000000, 0x4, 0x7, 0x3, 0xffff, 0x90, 0x10000]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0x34, 0x3, 0x7fff, 0x1, 0x3, 0xfffeffff, 0x1, 0x7, 0x4, 0x5, 0x7, 0x1, 0x0, 0x6, 0x7, 0x8, 0x7, 0x6, 0xffffffff, 0x61, 0xe, 0x6, 0x1, 0x3, 0x2, 0xd, 0x80000000, 0xffffffff, 0x7ff, 0xdc, 0x7fffffff, 0x7, 0xab6, 0x1ff, 0x81e6, 0x800, 0x8, 0x2, 0x5, 0x3, 0xfffffff1, 0x1, 0x2667b905, 0x7, 0x7, 0x3, 0x9, 0x0, 0xf4, 0x9, 0x8, 0x34, 0x8, 0x585b2f5e, 0xfffffffb, 0x2, 0x1d8d, 0x8, 0xffff, 0x3, 0x9, 0x2, 0x82fa, 0x7ff, 0x200, 0x3, 0xfd4a, 0x3, 0x40, 0xb86, 0x8, 0x100, 0x4, 0x5, 0x82, 0x1, 0x4, 0x7fffffff, 0x4, 0xd, 0x1, 0x4a, 0x2, 0x33, 0x1, 0x8, 0x1ff, 0xaf1c, 0xe, 0x2, 0x3, 0x1, 0x4, 0x4, 0x3, 0x1, 0x5, 0x6, 0x5684, 0x8000, 0x3, 0x2, 0x5, 0x3, 0x0, 0x5, 0xb8d, 0x0, 0x7, 0x4, 0x4b, 0x10, 0x3, 0x6, 0x7f, 0x9f9b, 0x80000000, 0x9, 0xb67, 0x9, 0x0, 0x4, 0xe9a, 0x7f, 0x4, 0x6b, 0x8ae, 0x3ff, 0x9, 0x5, 0xffffff7f, 0x981e, 0x1a, 0x7, 0x7fff, 0x5, 0x4, 0x3, 0x9, 0x5c, 0xb02, 0x0, 0x6e1, 0x0, 0x8001, 0xffc0, 0xc, 0x1, 0x6, 0xcc, 0x0, 0x6, 0x1, 0x7, 0x0, 0x0, 0x80, 0x2, 0x4, 0xb, 0x7fff, 0x1, 0x0, 0x80000001, 0xb4e, 0x6, 0x8, 0x7, 0x6, 0x22e, 0x1, 0x1, 0x468, 0x9, 0xfffffffe, 0x82, 0x7, 0x80000000, 0x4, 0x0, 0xa9, 0x7fff, 0x0, 0x5, 0x4, 0xff, 0x7, 0x7fff, 0x10, 0x6, 0x4, 0x1, 0x8, 0xbe96, 0x3ff, 0x800, 0xff, 0x40, 0xa7, 0x7, 0x7fff, 0x3, 0x60000000, 0x3, 0x1, 0x1, 0x4, 0x3, 0x5, 0x3, 0x1d52, 0x51e, 0x61, 0x10, 0x0, 0x1000, 0x1, 0xfc8, 0x5, 0x3, 0x3, 0xbb, 0x5, 0xfffffffa, 0xc, 0xde3, 0xb, 0x9, 0x3, 0xa, 0x200, 0x3, 0x2, 0x1ff, 0xd, 0x9, 0x4, 0x5, 0xf, 0x0, 0x0, 0x2, 0x7, 0x3, 0x3, 0x3, 0x3, 0x1, 0x2, 0x8, 0xfffffffa, 0x9, 0x1, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x0, 0x0, 0xac, 0x1ff}, {0xbf2a, 0x8, 0x5}, {0x2, 0xbc, 0x19, 0xbd8a}, {0xd, 0x7, 0x77, 0x8}, {0xa, 0x1, 0xfa, 0x3}, {0x0, 0xff, 0x0, 0x7fff}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x10, 0x5, 0x0, 0x9}, {0x2, 0x4, 0x1, 0x7}, {0x9, 0x6, 0x4, 0xbff1}, {0x2, 0xd5, 0xa3, 0x241}]}}, @TCA_BPF_POLICE={0xc64, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x0, 0x9, 0x7, 0x7fffffff, 0xfffffff7, 0x2, 0x1, 0x21, 0x8, 0x6, 0x80000001, 0x8, 0x9, 0x8, 0x7, 0x100, 0x44e, 0x3, 0x9, 0x1, 0x7, 0x200, 0x0, 0x7, 0x80000000, 0xc, 0x3, 0x5, 0xc, 0x1, 0xcc40, 0x7fffffff, 0x7, 0x1, 0xf89c, 0x7, 0x7, 0x9, 0x2, 0x5, 0x95c00000, 0x0, 0x0, 0x1, 0x5, 0x3ff, 0xffff5aa9, 0x6e14, 0x5, 0x1, 0x8, 0x80000001, 0x6, 0x100, 0x7, 0x3, 0x72, 0x7, 0x10, 0xfffff40c, 0xffff, 0x7, 0x5, 0xeb, 0xa, 0x8, 0x4, 0x8, 0x0, 0x5, 0x8, 0x48f4, 0x4, 0x2, 0x3, 0xcd, 0x0, 0xe, 0x0, 0x6, 0x2, 0x72a9, 0x25fb, 0x85a, 0x9d, 0x3, 0x9, 0x4, 0xb05, 0x80000000, 0x0, 0xfffffff6, 0x54, 0x3, 0x3, 0x1, 0xa, 0xfffffff8, 0xff3, 0x5, 0xe, 0x8, 0x4, 0x9, 0xd, 0x3, 0x8001, 0x8, 0x3, 0x3, 0x7, 0x7, 0x4, 0x6, 0x8c8d, 0xd6, 0x40, 0xfffffffa, 0x3, 0x7, 0x10f, 0x1, 0x8, 0x0, 0x0, 0x4, 0x7cc6, 0x6, 0x4, 0x3, 0x4, 0x8, 0x2, 0x28, 0x81, 0x63, 0x1, 0x8001, 0xf, 0x23d4, 0xfffffffa, 0x1, 0xffff8001, 0x2, 0x5, 0x1, 0x1e2, 0x8000, 0xfa2, 0xc, 0x100, 0x2a, 0x4, 0x800, 0x7ff, 0x8, 0x8, 0x6c61, 0xc, 0x8, 0x4, 0xfffffff8, 0x1, 0x1a, 0x7b29, 0x2, 0x7, 0x1b, 0x7, 0x800, 0xff, 0x421, 0xfffffffa, 0x8, 0xa0, 0x3, 0x9, 0x8, 0x1, 0x6, 0x9, 0x529, 0x3, 0xc02, 0x7000, 0x8, 0xffffffff, 0x3, 0x0, 0x91, 0xb, 0x2, 0x8001, 0x2, 0x3, 0x7, 0x2, 0x0, 0x7f00, 0xfffffff7, 0x9, 0x4, 0x2, 0xffff, 0x518a, 0x9, 0x9, 0xecd, 0x9, 0xa39f, 0x1, 0x8, 0x6, 0x81, 0x7, 0xafb, 0x8ed, 0x80000001, 0x18, 0x10000, 0x8, 0x4, 0x0, 0x80000001, 0x0, 0xd, 0x217, 0x1a3, 0x50233f04, 0x9, 0x2, 0xa, 0x1, 0x2d, 0x100, 0x78b, 0x58e7, 0x1c21, 0x0, 0x3e95, 0x9, 0x7ff, 0x9, 0xfffffff7, 0x9, 0x5, 0x5, 0x0, 0xb42, 0x3, 0x3, 0x0, 0x0, 0x5, 0xd]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x4, 0xb4, 0xfffff8a8, 0x7, 0x9, 0xfffffffa, 0x68, 0x3, 0x6, 0x0, 0xf, 0x8, 0x650d, 0x2, 0x3, 0x0, 0x2, 0x2, 0xb, 0x9, 0x3, 0xcd, 0x0, 0xffffffff, 0xd, 0x0, 0x7, 0x5, 0x1, 0x9, 0x1, 0x1000, 0x8001, 0xb, 0x2, 0x7, 0x10001, 0x7d, 0x8, 0x1, 0x5, 0x9, 0x7, 0xfffffff7, 0x39b, 0x3452, 0x8000, 0xb8a2, 0x0, 0x9, 0x9, 0xffff, 0xad4, 0x0, 0xff, 0x6, 0x101, 0x0, 0xfff, 0x3, 0x4, 0x890, 0x7, 0x8, 0x4, 0x2, 0x5, 0x8, 0x8, 0x0, 0x2, 0x0, 0x732, 0x1000, 0xb2ca, 0x6, 0x1, 0x7fff, 0xde, 0xa7, 0x200, 0xffff, 0x40000000, 0x2efc, 0x8, 0x3, 0xbc, 0x1, 0x3, 0x5, 0x0, 0x4, 0x6, 0x1, 0x6, 0x1, 0x1, 0x8, 0x10001, 0x9, 0x7, 0xffffffff, 0xff, 0x4, 0xffffff3d, 0x7, 0xedd5, 0x400, 0x4, 0x6, 0x7fffffff, 0x8, 0x8, 0x40, 0x6, 0x3, 0x5, 0x2, 0x0, 0xd0, 0x4355393b, 0x1000, 0x3ff, 0x9, 0x5, 0x3, 0xd9, 0x5, 0x9, 0x5, 0x3, 0x7, 0x0, 0x5af7, 0x3, 0x9, 0x2, 0x8, 0x200, 0x24d, 0xc, 0x5, 0x4349a4a9, 0x2, 0x7, 0x5, 0x7, 0x9, 0x5, 0x5, 0x40, 0x5, 0x6, 0xbfd6, 0x8, 0x0, 0xfffffffd, 0x1, 0x619a00, 0x7, 0x1, 0x1, 0x3, 0x6a7ddeca, 0x7fffffff, 0xff, 0x6, 0x60, 0x9, 0x4d78, 0x1, 0xe, 0x2, 0x4, 0x3, 0xf33a, 0xfffffffb, 0x3, 0x2, 0x4, 0x3, 0x4, 0x3, 0x5, 0x6, 0x0, 0x1, 0xffff, 0x5, 0x5, 0xf, 0x3ff, 0xc7c0, 0x6, 0x7, 0x9, 0x1, 0x5, 0xb6, 0x3, 0x5, 0x6, 0xb84, 0xffff7fff, 0x81, 0xe3, 0xffff6074, 0xfffffff9, 0x3, 0x59e3a8f4, 0x8, 0x3, 0x379f, 0xaab6, 0x2, 0x6, 0x8, 0x2, 0x3, 0x1, 0x8001, 0x10001, 0x0, 0x0, 0x2, 0x2, 0x5, 0x388a, 0xffff, 0x1, 0x3, 0x8, 0x7228b92a, 0x7, 0x95f, 0xc89f, 0x75c, 0x7, 0xd10, 0x8, 0x2, 0xce, 0x3, 0x1, 0xff, 0x4, 0xf, 0x4, 0x6654, 0xfffffffe, 0xd, 0x1d, 0x40, 0x3c4b, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffc, 0x3ff, 0x10000, 0x3, 0x2, 0x8, 0x7, 0x7, 0x8, 0xffffffff, 0xf, 0x8868, 0x2ef6, 0xd, 0x3, 0x3, 0x54b8, 0x8, 0x9, 0x3, 0x1, 0xe, 0x2, 0x5, 0x9035, 0x0, 0x8001, 0x4, 0xe, 0x7, 0x7, 0x5, 0x3, 0x0, 0x8000, 0x5, 0x69, 0x0, 0xfffff0bb, 0x3a, 0x1831, 0x7, 0x5, 0x9, 0x1, 0x8, 0x6a1, 0x8, 0x8001, 0x69a, 0x6, 0x44, 0x6be7, 0x7, 0x6, 0x3, 0x4, 0x1, 0x9, 0x44fd70a1, 0x7, 0xa, 0x8, 0x2, 0xfffffffa, 0x19e60004, 0xd46a, 0x9, 0x0, 0x9, 0x43c, 0x9, 0x9, 0x888, 0x3, 0xfffffffb, 0x0, 0x1, 0x1, 0x7, 0x0, 0xd2, 0xc, 0x1, 0x0, 0x6, 0x7, 0x3, 0x7fff, 0x3, 0x1e, 0x5, 0x8000, 0xffff904c, 0x0, 0x2, 0x2, 0x49b, 0x8, 0xfffffffd, 0x0, 0x6, 0x9, 0x1000, 0x606, 0x1, 0x8, 0x8, 0x2, 0x7, 0xffffff7f, 0x6, 0xf6, 0x1, 0x8, 0x3, 0x7fffffff, 0x100, 0x9, 0x4, 0x8, 0x0, 0x6, 0x1, 0x8, 0x13a, 0x8000, 0x5, 0x1, 0x4, 0x2, 0x7, 0xfffffff6, 0x1, 0x3, 0x4, 0x2, 0x2dc9c00, 0x7f, 0x75b5, 0xe813, 0x101, 0x7, 0x3, 0x40, 0x64d, 0x1, 0x7fffffff, 0x8000, 0x6, 0x4, 0x6, 0xd, 0xffffffff, 0x3, 0x7, 0xfffff800, 0xfffffce4, 0x9, 0x81, 0x4d497c4, 0x800, 0xacc9, 0x0, 0x4, 0xfffffffb, 0x8, 0x400, 0x4, 0x5f, 0x8000, 0x10001, 0x8, 0x8, 0x3, 0x4, 0x8, 0x7, 0x9, 0xc, 0x7, 0x0, 0x9, 0x28000000, 0x9, 0x9, 0x8001, 0x3, 0xc, 0x9, 0x0, 0x3, 0x3, 0x7, 0x7ff, 0x0, 0x0, 0x98d, 0x5, 0x800, 0x8, 0xfe82, 0x6, 0x7, 0xfff, 0x4, 0xb4, 0x5, 0x3, 0xfffffffc, 0x0, 0xd, 0xfff, 0x7, 0x9, 0x2, 0x81, 0xa, 0x7, 0x1, 0x5, 0x1, 0x5, 0x3, 0x8, 0x8, 0xb, 0xc, 0x8001, 0x9, 0xd8, 0x0, 0x7, 0x5, 0xbc, 0x6, 0x54f6, 0xfffffff2, 0x2992, 0x7, 0x5, 0x1, 0x2, 0x3, 0x796, 0x6, 0xa, 0xf, 0x4, 0x5, 0x6, 0x8, 0x3, 0x1, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0x625, 0x10001, 0x7, {0x9c, 0x0, 0xf, 0x0, 0xfffd, 0xf8}, {0x5, 0x0, 0x28c, 0x0, 0x2000, 0x446}, 0x1, 0x4, 0x1}}]}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x6, 0xcd, 0xd, {0x1, 0x1, 0x7, 0x7, 0xfff, 0x7}, {0x0, 0x0, 0x6, 0x8000, 0xb4aa, 0xffff}, 0xcabb, 0x59a, 0x4}}]}, @TCA_BPF_POLICE={0x498, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x200, 0xb8b1, 0x80, 0x3, 0x0, 0x25, 0x9, 0x8, 0x100, 0x6bae, 0x4, 0x1, 0x7, 0x8000, 0x15cb, 0x81, 0xffff0398, 0x5, 0x81, 0x4, 0x40, 0x80000000, 0x0, 0x5, 0xc3f5, 0x87, 0x2, 0x101, 0xfffffff8, 0x7f, 0xd0bd, 0xd, 0x80000000, 0x21a, 0xf56, 0x2, 0xd7, 0xff, 0x9, 0xfffffff7, 0x100, 0x9, 0xfffffffc, 0xc8b, 0xffff, 0x2, 0x2, 0x9, 0x1ff, 0x1, 0xfffffffd, 0x8, 0x100000, 0x5, 0x9, 0x696, 0x2, 0x80000000, 0xffffffff, 0x9, 0x6, 0x4, 0x8, 0xeb, 0x3, 0x8, 0xffffffff, 0x5, 0xb, 0x3, 0x2, 0xe5, 0x1, 0x1, 0x6, 0x8001, 0x9, 0x7, 0x9, 0x5, 0x6, 0x5, 0x6, 0x7f, 0x7, 0xfffffffc, 0x7bc2cc6c, 0x7, 0xb6f, 0x39, 0x0, 0x7ff, 0xec0, 0x8000, 0x4, 0x7, 0x6, 0xb, 0x0, 0x0, 0xff, 0x7f, 0x4, 0x4, 0x4, 0x7, 0x9, 0x100, 0x2ed, 0x100, 0x4, 0x7, 0x3, 0x7ff, 0x1, 0x7ff, 0x4, 0x9, 0x648, 0xfffffffa, 0x5, 0x5, 0xc0c6, 0xe, 0xffffffff, 0x1, 0x8, 0x6, 0x4, 0xfffffffd, 0xa, 0x5, 0x7f, 0xfee5, 0x7, 0x670f, 0xffff, 0x5757, 0x9, 0x3, 0x800, 0x6, 0x112, 0x4, 0x7fff, 0x8, 0x6, 0xffffffff, 0x5, 0xf2, 0x6, 0x3, 0x7, 0x40, 0x6, 0xfff, 0x7fff, 0xfffffff4, 0x2f4, 0x9, 0x1, 0x2, 0x0, 0xd, 0x9, 0x1, 0x97e4, 0xf1a, 0x80000000, 0x7, 0x0, 0x1, 0xca39, 0x9, 0xdb, 0xb, 0x6, 0x7, 0xffff, 0x1, 0x7fffffff, 0x8, 0x5, 0x6, 0x80, 0x8, 0x6, 0xfffffff7, 0x4, 0x8, 0x0, 0x1a, 0x6, 0x7fff, 0x7a6b2b05, 0x2, 0x4c49, 0x6, 0x6, 0x9, 0x877, 0x1ff, 0x0, 0x5, 0x30, 0x5, 0x2, 0x0, 0x8, 0xfd, 0x4, 0x2, 0x4, 0xe, 0x7, 0x4, 0x3, 0x2bb, 0x5, 0x0, 0x1, 0x5, 0x3, 0xffffff80, 0x10, 0x67729d35, 0x0, 0x2, 0xf55, 0x0, 0x401, 0x5, 0x4, 0x67, 0x8, 0x5, 0x1, 0xf, 0x8, 0xa21, 0x4, 0x95, 0xfffffff4, 0x5, 0xb1ab, 0x80000000, 0x3, 0x31e5, 0x7, 0x6, 0xffff, 0x4, 0x2674, 0x3, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x3, 0x0, 0x447, 0xbb, {0x0, 0x1, 0x1ff, 0x10, 0xf4fa, 0x8}, {0x4, 0x0, 0x6, 0xe9, 0x4, 0xa000}, 0x9, 0x8, 0x3}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0xd, 0x3c2, 0x8, {0x3, 0x0, 0xfff, 0x4, 0xffff, 0x1ff}, {0x2, 0x2, 0x6f2, 0x3, 0x6, 0x1}, 0xffffffff, 0x0, 0x8}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}]}, @TCA_BPF_FD={0x8}]}}]}, 0x3f74}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000180), 0x5005) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x3) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000240)) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="6f80", 0x2}], 0x1) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000ea01020000000900010073797a3200000000090001008a797ab0000000000900030073797a32000000000900010073797a32000000000900030073797a3200000000140002"], 0x70}}, 0x20000800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r3, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940), 0x0, 0x72, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xf9, 0x7, 0x5c, @private1, @empty, 0x8000, 0x40, 0x7, 0x1}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000", @ANYRES16=r4, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0x8008330e, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000000c0), 0x4) syz_80211_join_ibss(&(0x7f0000000340)='wlan0\x00', &(0x7f0000000400)=@default_ibss_ssid, 0x6, 0x0) 5.383271437s ago: executing program 6 (id=8897): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x800}]}}]}, 0x44}}, 0xc840) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@mcast2, @local, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x6, 0x2080005, r5}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={@mcast1, @mcast2, @private0, 0x80000001, 0x6, 0x0, 0x100, 0x29, 0xc00002, r5}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x5a8, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0x270, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/snd/midiC#D#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/snd/midiC#D#\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')\xb4-@*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'net/igmp6\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!{#-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xdd, 0x5, "7de2948725562e0cc8dc92df9bdf6110541f12e7b42cef03295e28b60a8f97dd4d73864245b489933bf247be92d4cc93af4922dfc7937d3aa7aaf0131f07a1163a2b1d41e86f84ae43af4329193ac3db2a77bfdf37ca55661beddefff305f49b067e8d543e07659f5133fa13d768d2589bf9337cfdbfbccac0d4dd9313bce8fae228d78b941da12a15d532d62128c47238ebb310bd93021dffdc3de4f988d61541c897d5d4bf4a50d264c8c9d877de07f308f46a7a4d90a0a4fe6759e15f717f253f8e9151de2e3111163d323d18e2f672ef08998251eb990d"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0x9d, 0x5, "dc3f6fa3617cb8d5aa562581a099576bb005ba6ffe58fd656dfc5f995f232e8d809cf4e98bbfe92ba9d6341cd6882274b0ad7229def05188028f797b2183674144c368d728004fce00274d16565efe404a777abb86cbd6b3be8c481a0ad7b2379898520d166ac3e93f26f779b4146813632bbf92366aab3042c7b4f1e09e1a1fde80d788a6854f85413c17d2f1b0cd8da1b072fd3603660dfb"}]}, @ETHTOOL_A_WOL_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_WOL_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x12c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x29}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/snd/midiC#D#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5472}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '@}\\,[,\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$%\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/snd/midiC#D#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4b}]}]}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff7e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_SOPASS={0x2b, 0x3, "ab40e913f48d0c4800a7ddde49e6aa16affc1525642db8f0c1ee90939a9d0c68efd3d0d1c23bf8"}, @ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_MODES={0xac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe52}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x30, 0x4, "29bd83b506bb5a15c345fe6ce98165097f40fe739607c6e7dfeed055c4d61be2933b564b76393845c1ca2dc7"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/snd/midiC#D#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf408}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'net/igmp6\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '0'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x5a8}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x260e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/igmp6\x00') preadv(r12, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/83, 0x53}], 0x1, 0xfffffffe, 0x5) ioctl$FE_GET_EVENT(r8, 0x80286f4e, &(0x7f0000000080)={0x0, {0x0, 0x0, @ofdm}}) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r9, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r13, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) 5.031727889s ago: executing program 4 (id=8898): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket(0x1a, 0x4, 0xfffffffd) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) getsockname$netrom(r0, 0x0, &(0x7f0000000280)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x20}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) readv(r4, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000000001010400000000141a000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c20028014000180080001000000000008000200ac1e00010c000280050001000000000006000340000100000800074000000001000000"], 0x6c}}, 0x0) r7 = dup2(r4, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFBRDADDR(r7, 0x8919, &(0x7f0000000040)={'vlan0\x00', {0x2, 0x0, @broadcast}}) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 4.826470235s ago: executing program 8 (id=8899): mkdirat(0xffffffffffffff9c, 0x0, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket(0x1a, 0x4, 0xfffffffd) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) getsockname$netrom(r0, 0x0, &(0x7f0000000280)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x20}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) readv(r4, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000000001010400000000141a000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c20028014000180080001000000000008000200ac1e00010c000280050001000000000006000340000100000800074000000001000000"], 0x6c}}, 0x0) r7 = dup2(r4, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFBRDADDR(r7, 0x8919, &(0x7f0000000040)={'vlan0\x00', {0x2, 0x0, @broadcast}}) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 4.756006932s ago: executing program 4 (id=8900): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000020000090900010073797a31000000007c000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400000006408000a40000000020b00070066696c7465720000280008800c0001"], 0xc4}, 0x1, 0x0, 0x0, 0x24004900}, 0x2000) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 4.755693673s ago: executing program 4 (id=8901): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="0bc3ff", 0x3}, {&(0x7f0000000240)}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x11, 0x3, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x23, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000003c0)=@sr0, 0x0, &(0x7f0000000580)={0x5, 0x6, 0x558e, 0x7, 0x8, 0x4, 0x772, 0x12db54ad, 0x80000}) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) close(0x3) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 4.507513063s ago: executing program 2 (id=8902): socket(0x22, 0x2, 0x4) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000380)=0x800) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r2, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) memfd_secret(0x0) 4.092525337s ago: executing program 6 (id=8903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x1c, 0x1, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}]}, 0x1c}}, 0x0) 3.786615188s ago: executing program 8 (id=8904): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="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", 0xfcd}], 0x1) 3.592597272s ago: executing program 8 (id=8905): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x2, 0x0, 0x80}) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000400)={0x4, 0x4, 0x1, 'queue0\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) unlink(&(0x7f0000000000)='./bus/\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000280)=0xfffffffc, 0x0, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe7}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x25702020}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x2020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x13}}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 3.592243963s ago: executing program 6 (id=8906): r0 = openat$ndctl0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x7, &(0x7f0000000100)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r5, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x0, 0x8, r4, 0x0, 0x0, 0x1}]) 3.102768365s ago: executing program 4 (id=8907): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xd, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x1, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x404c000}, 0x24000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x5dc}], 0x1}, 0x4) (fail_nth: 1) 2.768980574s ago: executing program 4 (id=8908): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYBLOB="0008000007500500388498df781d84dc5609241c0012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x8efd, 0x0, 0x4, 0x800, 0xbc, 0x1, 0x67, 0x401}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r8}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r8, 0x0, 0x100000000000000}, 0x38) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0x118, 0x137db) ptrace$pokeuser(0x6, r9, 0xfc, 0x6000003f) 330.300092ms ago: executing program 8 (id=8909): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002000000000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0xd) (async) syz_open_dev$dri(0x0, 0x1, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r2, &(0x7f0000002540)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000007ffffcffffffffff030000000000d975b0c36a9100e2ec6d0892", @ANYRES32=0x0, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) r4 = syz_open_dev$audion(&(0x7f00000002c0), 0x1, 0x200600) r5 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000300), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x2d, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000185200000a0000000000000000000000b7080000000000007b8af8ff00000000b7080000a29d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a50000001843000007000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000faffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000184400000200"/80], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16, @ANYBLOB="010023484af53b607cc707000000080001"], 0x2c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newlinkprop={0x3c, 0x6c, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x400e, 0x2}, [@IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_EXT_MASK={0x8, 0x1d, 0x148c}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44890) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) 321.737632ms ago: executing program 2 (id=8910): open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) recvmmsg(0xffffffffffffffff, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000004c0)=""/88, 0x58}, {&(0x7f0000000540)=""/4096, 0x1000}, {0x0}, {0x0}, {&(0x7f0000000180)=""/40, 0x28}], 0x5}, 0x4}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x7fff, &(0x7f0000000300)=[{&(0x7f0000000180)="1a", 0x1}, {0x0}], 0x2}) io_uring_enter(r1, 0x5976, 0x9765, 0x2, 0x0, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x34, &(0x7f00000004c0)=0x1, 0x4) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) (fail_nth: 1) 102.278583ms ago: executing program 2 (id=8911): munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x6) read$FUSE(r4, &(0x7f0000002900)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x8}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r7, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x24}}, 0x0) tkill(r0, 0xe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 12.491622ms ago: executing program 6 (id=8912): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x6) read$FUSE(r4, &(0x7f0000002900)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x8}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000005a0040001000000"], 0x1c}}, 0x0) tkill(r0, 0xe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 4 (id=8913): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockname$netrom(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x20}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000000001010400000000141a000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c20028014000180080001000000000008000200ac1e00010c000280050001000000000006000340000100000800074000000001000000"], 0x6c}}, 0x0) r5 = dup2(r3, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000000040)={'vlan0\x00', {0x2, 0x0, @broadcast}}) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 0s ago: executing program 8 (id=8914): add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x1046, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000010102b00fc020000000000000000000000000001fe8000000000000000000000000000aa670000000000000021"], 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x8, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0)={0x16, 0xb, '\x00', [@pad1, @ra={0x5, 0x2, 0x2}, @padn={0x1, 0x1, [0x0]}, @generic={0x7, 0x3c, "040a86a47c72f32d4aa4828b2a324bc81ebca8542804da91f01fd011f8736afe403cda709132f48e9ff6e42e4e1b012d1c0c1875166615508e8b245c"}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xf}]}, 0x68) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1c8, 0x12) kernel console output (not intermixed with test programs): 469.063472][ T4704] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000008 [ 2469.063484][ T4704] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000016 [ 2469.063491][ T4704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2469.063497][ T4704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2469.063504][ T4704] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2469.063510][ T4704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2469.063524][ T4704] [ 2469.712962][ T4743] 9p: Unknown Cache mode or invalid value fscach [ 2469.738499][ T4743] bridge_slave_0: default FDB implementation only supports local addresses [ 2469.800843][ T4743] netlink: 'syz.6.8455': attribute type 8 has an invalid length. [ 2469.804389][ T4743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8455'. [ 2470.323231][ T4747] FAULT_INJECTION: forcing a failure. [ 2470.323231][ T4747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2470.330748][ T4747] CPU: 3 UID: 0 PID: 4747 Comm: syz.2.8457 Tainted: G L syzkaller #0 PREEMPT(full) [ 2470.330778][ T4747] Tainted: [L]=SOFTLOCKUP [ 2470.330785][ T4747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2470.330796][ T4747] Call Trace: [ 2470.330803][ T4747] [ 2470.330810][ T4747] dump_stack_lvl+0x100/0x190 [ 2470.330840][ T4747] should_fail_ex.cold+0x5/0xa [ 2470.330861][ T4747] _copy_from_user+0x2e/0xd0 [ 2470.330888][ T4747] get_compat_msghdr+0xb3/0x4b0 [ 2470.330908][ T4747] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2470.330943][ T4747] ___sys_sendmsg+0x1b6/0x1e0 [ 2470.330971][ T4747] ? __pfx____sys_sendmsg+0x10/0x10 [ 2470.331026][ T4747] __sys_sendmsg+0x170/0x220 [ 2470.331047][ T4747] ? __pfx___sys_sendmsg+0x10/0x10 [ 2470.331075][ T4747] ? __pfx_ksys_write+0x10/0x10 [ 2470.331132][ T4747] __do_fast_syscall_32+0xe3/0x8c0 [ 2470.331156][ T4747] do_fast_syscall_32+0x32/0x70 [ 2470.331176][ T4747] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2470.331200][ T4747] RIP: 0023:0xf7fc7f6c [ 2470.331215][ T4747] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2470.331232][ T4747] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2470.331251][ T4747] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 2470.331263][ T4747] RDX: 0000000004008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2470.331274][ T4747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2470.331284][ T4747] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2470.331294][ T4747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2470.331318][ T4747] [ 2470.437185][ T4751] overlay: ./file0 is not a directory [ 2470.645426][ T4760] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8460'. [ 2470.715551][ T4757] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 2470.718409][ T4757] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2470.725079][ T4757] vhci_hcd vhci_hcd.0: Device attached [ 2470.727241][T24720] Bluetooth: hci3: ACL packet too small [ 2470.774265][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 2470.962854][ T651] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 2471.275735][ T4761] vhci_hcd: connection reset by peer [ 2471.278240][T32315] vhci_hcd vhci_hcd.2: stop threads [ 2471.284593][T32315] vhci_hcd vhci_hcd.2: release socket [ 2471.291180][T32315] vhci_hcd vhci_hcd.2: disconnect device [ 2471.930393][ T4788] /dev/nullb0: Can't lookup blockdev [ 2471.933877][ T40] audit: type=1107 audit(1772102551.318:899): pid=4781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2473.890738][ T4807] FAULT_INJECTION: forcing a failure. [ 2473.890738][ T4807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2473.896208][ T4807] CPU: 0 UID: 0 PID: 4807 Comm: syz.8.8473 Tainted: G L syzkaller #0 PREEMPT(full) [ 2473.896236][ T4807] Tainted: [L]=SOFTLOCKUP [ 2473.896243][ T4807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2473.896253][ T4807] Call Trace: [ 2473.896262][ T4807] [ 2473.896270][ T4807] dump_stack_lvl+0x100/0x190 [ 2473.896302][ T4807] should_fail_ex.cold+0x5/0xa [ 2473.896323][ T4807] _copy_from_user+0x2e/0xd0 [ 2473.896352][ T4807] get_compat_msghdr+0xb3/0x4b0 [ 2473.896378][ T4807] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2473.896407][ T4807] ___sys_sendmsg+0x1b6/0x1e0 [ 2473.896434][ T4807] ? __pfx____sys_sendmsg+0x10/0x10 [ 2473.896488][ T4807] __sys_sendmsg+0x170/0x220 [ 2473.896510][ T4807] ? __pfx___sys_sendmsg+0x10/0x10 [ 2473.896537][ T4807] ? __pfx_ksys_write+0x10/0x10 [ 2473.896570][ T4807] __do_fast_syscall_32+0xe3/0x8c0 [ 2473.896595][ T4807] do_fast_syscall_32+0x32/0x70 [ 2473.896616][ T4807] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2473.896640][ T4807] RIP: 0023:0xf708ef6c [ 2473.896655][ T4807] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2473.896672][ T4807] RSP: 002b:00000000f543b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2473.896692][ T4807] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 2473.896704][ T4807] RDX: 000000002000c08d RSI: 0000000000000000 RDI: 0000000000000000 [ 2473.896715][ T4807] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2473.896726][ T4807] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2473.896736][ T4807] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2473.896759][ T4807] [ 2474.907368][ T4820] input: syz1 as /devices/virtual/input/input130 [ 2474.996442][ T4822] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8477'. [ 2475.396153][ T4834] overlayfs: failed to clone lowerpath [ 2476.092646][ T651] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 2476.349214][ T4842] input: syz1 as /devices/virtual/input/input131 [ 2477.319531][ T4850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2477.379194][ T4849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2477.532582][ T4864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8487'. [ 2478.115490][T14017] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 2478.295163][T14017] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2478.298692][T14017] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2478.302659][T14017] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2478.313213][T14017] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2478.454075][T14017] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2478.457076][T14017] usb 9-1: Product: syz [ 2478.464563][T14017] usb 9-1: Manufacturer: syz [ 2478.466580][T14017] usb 9-1: SerialNumber: syz [ 2478.475599][T14017] hub 9-1:1.0: bad descriptor, ignoring hub [ 2478.478994][T14017] hub 9-1:1.0: probe with driver hub failed with error -5 [ 2478.577356][ T4880] netlink: 'syz.6.8489': attribute type 4 has an invalid length. [ 2478.586062][ T4880] netlink: 'syz.6.8489': attribute type 4 has an invalid length. [ 2478.678812][T14017] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 83 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2478.879817][ T4886] input: syz1 as /devices/virtual/input/input132 [ 2478.971118][T14017] usb 9-1: USB disconnect, device number 83 [ 2478.997899][T14017] usblp0: removed [ 2479.650071][ T4901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8496'. [ 2480.607526][ T4915] openvswitch: netlink: Key type 272 is out of range max 32 [ 2480.930219][ T4920] netlink: 'syz.8.8499': attribute type 4 has an invalid length. [ 2480.939164][ T4920] netlink: 'syz.8.8499': attribute type 4 has an invalid length. [ 2481.800948][ T4929] FAULT_INJECTION: forcing a failure. [ 2481.800948][ T4929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2481.805690][ T4929] CPU: 3 UID: 0 PID: 4929 Comm: syz.4.8505 Tainted: G L syzkaller #0 PREEMPT(full) [ 2481.805707][ T4929] Tainted: [L]=SOFTLOCKUP [ 2481.805711][ T4929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2481.805718][ T4929] Call Trace: [ 2481.805723][ T4929] [ 2481.805727][ T4929] dump_stack_lvl+0x100/0x190 [ 2481.805747][ T4929] should_fail_ex.cold+0x5/0xa [ 2481.805760][ T4929] _copy_from_user+0x2e/0xd0 [ 2481.805778][ T4929] get_compat_msghdr+0xb3/0x4b0 [ 2481.805790][ T4929] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2481.805806][ T4929] ___sys_sendmsg+0x1b6/0x1e0 [ 2481.805823][ T4929] ? __pfx____sys_sendmsg+0x10/0x10 [ 2481.805855][ T4929] __sys_sendmsg+0x170/0x220 [ 2481.805867][ T4929] ? __pfx___sys_sendmsg+0x10/0x10 [ 2481.805883][ T4929] ? __pfx_ksys_write+0x10/0x10 [ 2481.805903][ T4929] __do_fast_syscall_32+0xe3/0x8c0 [ 2481.805919][ T4929] do_fast_syscall_32+0x32/0x70 [ 2481.805932][ T4929] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2481.805947][ T4929] RIP: 0023:0xf70aef6c [ 2481.805957][ T4929] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2481.805968][ T4929] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2481.805979][ T4929] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2481.805987][ T4929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2481.805993][ T4929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2481.805999][ T4929] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2481.806006][ T4929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2481.806021][ T4929] [ 2482.390478][ T4939] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8507'. [ 2482.414907][ T4941] FAULT_INJECTION: forcing a failure. [ 2482.414907][ T4941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2482.419244][ T4941] CPU: 3 UID: 0 PID: 4941 Comm: syz.4.8508 Tainted: G L syzkaller #0 PREEMPT(full) [ 2482.419263][ T4941] Tainted: [L]=SOFTLOCKUP [ 2482.419267][ T4941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2482.419274][ T4941] Call Trace: [ 2482.419279][ T4941] [ 2482.419284][ T4941] dump_stack_lvl+0x100/0x190 [ 2482.419305][ T4941] should_fail_ex.cold+0x5/0xa [ 2482.419319][ T4941] _copy_from_user+0x2e/0xd0 [ 2482.419338][ T4941] get_compat_msghdr+0xb3/0x4b0 [ 2482.419350][ T4941] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2482.419367][ T4941] ___sys_sendmsg+0x1b6/0x1e0 [ 2482.419384][ T4941] ? __pfx____sys_sendmsg+0x10/0x10 [ 2482.419415][ T4941] __sys_sendmsg+0x170/0x220 [ 2482.419428][ T4941] ? __pfx___sys_sendmsg+0x10/0x10 [ 2482.419444][ T4941] ? __pfx_ksys_write+0x10/0x10 [ 2482.419464][ T4941] __do_fast_syscall_32+0xe3/0x8c0 [ 2482.419479][ T4941] do_fast_syscall_32+0x32/0x70 [ 2482.419493][ T4941] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2482.419508][ T4941] RIP: 0023:0xf70aef6c [ 2482.419517][ T4941] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2482.419528][ T4941] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2482.419539][ T4941] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 2482.419546][ T4941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2482.419553][ T4941] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2482.419559][ T4941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2482.419566][ T4941] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2482.419579][ T4941] [ 2482.822831][ T4954] JFS: discard option not supported on device [ 2482.827371][ T4954] Mount JFS Failure: -22 [ 2482.933206][ T4954] jfs_mount failed w/return code = -22 [ 2485.284483][ T4977] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8519'. [ 2485.673894][ T4990] input: syz1 as /devices/virtual/input/input133 [ 2485.788112][ T4993] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8522'. [ 2487.585718][ T5010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8527'. [ 2488.195306][ T5018] netlink: 'syz.4.8528': attribute type 4 has an invalid length. [ 2488.251974][ T5019] netlink: 'syz.4.8528': attribute type 4 has an invalid length. [ 2489.059950][ T5036] qnx6: unable to read the first superblock [ 2489.073594][ T40] audit: type=1107 audit(1772102568.519:900): pid=5027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2489.121460][ T5034] overlayfs: failed to clone lowerpath [ 2489.167207][ T5041] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 2489.170087][ T5041] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2489.209645][ T5041] vhci_hcd vhci_hcd.0: Device attached [ 2489.210339][ T5044] FAULT_INJECTION: forcing a failure. [ 2489.210339][ T5044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2489.217773][ T5044] CPU: 2 UID: 0 PID: 5044 Comm: syz.4.8535 Tainted: G L syzkaller #0 PREEMPT(full) [ 2489.217803][ T5044] Tainted: [L]=SOFTLOCKUP [ 2489.217810][ T5044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2489.217820][ T5044] Call Trace: [ 2489.217827][ T5044] [ 2489.217835][ T5044] dump_stack_lvl+0x100/0x190 [ 2489.217865][ T5044] should_fail_ex.cold+0x5/0xa [ 2489.217887][ T5044] _copy_from_user+0x2e/0xd0 [ 2489.217916][ T5044] get_compat_msghdr+0xb3/0x4b0 [ 2489.217936][ T5044] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2489.217970][ T5044] ___sys_sendmsg+0x1b6/0x1e0 [ 2489.217998][ T5044] ? __pfx____sys_sendmsg+0x10/0x10 [ 2489.218051][ T5044] __sys_sendmsg+0x170/0x220 [ 2489.218072][ T5044] ? __pfx___sys_sendmsg+0x10/0x10 [ 2489.218100][ T5044] ? __pfx_ksys_write+0x10/0x10 [ 2489.218131][ T5044] __do_fast_syscall_32+0xe3/0x8c0 [ 2489.218156][ T5044] do_fast_syscall_32+0x32/0x70 [ 2489.218176][ T5044] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2489.218200][ T5044] RIP: 0023:0xf70aef6c [ 2489.218215][ T5044] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2489.218231][ T5044] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2489.218250][ T5044] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 2489.218262][ T5044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2489.218272][ T5044] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2489.218282][ T5044] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2489.218293][ T5044] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2489.218316][ T5044] [ 2489.447037][T14122] usb 53-1: new low-speed USB device number 3 using vhci_hcd [ 2489.602959][ T5041] netlink: 'syz.8.8532': attribute type 1 has an invalid length. [ 2489.639512][ T5041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2489.665042][ T5051] input: syz1 as /devices/virtual/input/input134 [ 2489.750792][ T5049] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8537'. [ 2490.013719][ T5042] vhci_hcd: connection reset by peer [ 2490.016706][T31262] vhci_hcd vhci_hcd.8: stop threads [ 2490.018492][T31262] vhci_hcd vhci_hcd.8: release socket [ 2490.020324][T31262] vhci_hcd vhci_hcd.8: disconnect device [ 2490.037754][ T5068] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8543'. [ 2490.047530][ T40] audit: type=1326 audit(1772102569.502:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.6.8543" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x0 [ 2490.291398][ T5073] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 2490.293488][ T5073] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2490.296556][ T5073] vhci_hcd vhci_hcd.0: Device attached [ 2490.391782][ T5073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2490.563750][T25267] usb 46-1: SetAddress Request (15) to port 0 [ 2490.566355][T25267] usb 46-1: new SuperSpeed USB device number 15 using vhci_hcd [ 2491.023950][ T5074] vhci_hcd: connection reset by peer [ 2491.031189][ T40] audit: type=1326 audit(1772102570.484:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.8.8545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2491.032826][T24610] vhci_hcd vhci_hcd.4: stop threads [ 2491.039370][ T40] audit: type=1326 audit(1772102570.495:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.8.8545" exe="/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2491.040403][T24610] vhci_hcd vhci_hcd.4: release socket [ 2491.050177][T24610] vhci_hcd vhci_hcd.4: disconnect device [ 2491.050443][ T40] audit: type=1326 audit(1772102570.505:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.8.8545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2491.059965][ T40] audit: type=1326 audit(1772102570.505:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.8.8545" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2491.066610][ T40] audit: type=1326 audit(1772102570.505:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.8.8545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2491.073311][ T40] audit: type=1326 audit(1772102570.505:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.8.8545" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2491.079887][ T40] audit: type=1326 audit(1772102570.505:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.8.8545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2491.088659][ T40] audit: type=1326 audit(1772102570.505:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.8.8545" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2491.173495][ T5086] netlink: 64 bytes leftover after parsing attributes in process `syz.8.8545'. [ 2491.844286][ T5098] input: syz1 as /devices/virtual/input/input135 [ 2492.703610][ T5109] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 2492.933208][ T5115] input: syz1 as /devices/virtual/input/input136 [ 2493.048419][ T5116] netlink: 88 bytes leftover after parsing attributes in process `syz.8.8556'. [ 2493.262633][ T5126] /dev/nullb0: Can't lookup blockdev [ 2493.284297][ T5128] overlayfs: workdir and upperdir must be separate subtrees [ 2493.626301][ T5135] syz_tun: entered allmulticast mode [ 2493.682525][ T5135] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8560'. [ 2493.940101][ T5144] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2494.094253][ T5150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8566'. [ 2494.611911][T14122] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 2494.812778][ T759] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 2494.841206][T29464] Bluetooth: hci3: command 0x0405 tx timeout [ 2494.962353][ T759] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2494.966435][ T759] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2494.983598][ T759] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2494.996466][ T759] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2495.010780][ T759] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2495.014816][ T759] usb 9-1: Product: syz [ 2495.016814][ T759] usb 9-1: Manufacturer: syz [ 2495.019106][ T759] usb 9-1: SerialNumber: syz [ 2495.041433][ T759] hub 9-1:1.0: bad descriptor, ignoring hub [ 2495.043942][ T759] hub 9-1:1.0: probe with driver hub failed with error -5 [ 2495.119997][ T5173] /dev/nullb0: Can't lookup blockdev [ 2495.124887][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 2495.124903][ T40] audit: type=1107 audit(1772102574.586:944): pid=5169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2495.202827][ T5168] netlink: 'syz.8.8572': attribute type 4 has an invalid length. [ 2495.236734][ T759] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 84 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2495.257011][ T5177] netlink: 'syz.8.8572': attribute type 4 has an invalid length. [ 2495.539917][T31557] usb 9-1: USB disconnect, device number 84 [ 2495.551556][T31557] usblp0: removed [ 2495.639023][T25267] usb 46-1: device descriptor read/8, error -110 [ 2496.028474][T25267] usb usb46-port1: attempt power cycle [ 2496.145799][ T5186] netlink: 'syz.8.8577': attribute type 4 has an invalid length. [ 2496.181739][ T5198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8582'. [ 2496.183857][ T5199] input: syz1 as /devices/virtual/input/input137 [ 2496.206304][ T5186] netlink: 'syz.8.8577': attribute type 4 has an invalid length. [ 2496.256544][ T5200] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8584'. [ 2496.588281][T25267] usb usb46-port1: unable to enumerate USB device [ 2497.075344][ T5208] netlink: 'syz.8.8585': attribute type 4 has an invalid length. [ 2497.110382][ T5208] netlink: 'syz.8.8585': attribute type 4 has an invalid length. [ 2497.122093][ T5216] FAULT_INJECTION: forcing a failure. [ 2497.122093][ T5216] name failslab, interval 1, probability 0, space 0, times 0 [ 2497.129551][ T5216] CPU: 2 UID: 0 PID: 5216 Comm: syz.4.8590 Tainted: G L syzkaller #0 PREEMPT(full) [ 2497.129578][ T5216] Tainted: [L]=SOFTLOCKUP [ 2497.129584][ T5216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2497.129593][ T5216] Call Trace: [ 2497.129600][ T5216] [ 2497.129606][ T5216] dump_stack_lvl+0x100/0x190 [ 2497.129635][ T5216] should_fail_ex.cold+0x5/0xa [ 2497.129653][ T5216] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 2497.129677][ T5216] should_failslab+0xc2/0x120 [ 2497.129702][ T5216] __kmalloc_noprof+0xe0/0x850 [ 2497.129730][ T5216] kernfs_fop_write_iter+0x26a/0x5f0 [ 2497.129758][ T5216] vfs_write+0x6ac/0x1070 [ 2497.129781][ T5216] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2497.129823][ T5216] ? __pfx_vfs_write+0x10/0x10 [ 2497.129875][ T5216] ksys_write+0x12a/0x250 [ 2497.129897][ T5216] ? __pfx_ksys_write+0x10/0x10 [ 2497.129920][ T5216] ? __pfx_ksys_write+0x10/0x10 [ 2497.129947][ T5216] __do_fast_syscall_32+0xe3/0x8c0 [ 2497.129969][ T5216] do_fast_syscall_32+0x32/0x70 [ 2497.129987][ T5216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2497.130006][ T5216] RIP: 0023:0xf70aef6c [ 2497.130019][ T5216] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2497.130035][ T5216] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 2497.130051][ T5216] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 2497.130062][ T5216] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 2497.130077][ T5216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2497.130085][ T5216] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2497.130095][ T5216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2497.130116][ T5216] [ 2497.236737][ T5217] qnx6: unable to read the first superblock [ 2497.250660][ T40] audit: type=1107 audit(1772102576.722:945): pid=5209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2497.594020][ T5226] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8593'. [ 2497.786441][ T5228] input: syz1 as /devices/virtual/input/input138 [ 2497.879807][ T5235] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8597'. [ 2497.896076][ T5229] netlink: 88 bytes leftover after parsing attributes in process `syz.8.8594'. [ 2497.938912][ T5239] btrfs: Unknown parameter 'discardse' [ 2497.944226][ T5241] FAULT_INJECTION: forcing a failure. [ 2497.944226][ T5241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2497.948394][ T5241] CPU: 2 UID: 0 PID: 5241 Comm: syz.2.8599 Tainted: G L syzkaller #0 PREEMPT(full) [ 2497.948413][ T5241] Tainted: [L]=SOFTLOCKUP [ 2497.948417][ T5241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2497.948425][ T5241] Call Trace: [ 2497.948430][ T5241] [ 2497.948436][ T5241] dump_stack_lvl+0x100/0x190 [ 2497.948464][ T5241] should_fail_ex.cold+0x5/0xa [ 2497.948484][ T5241] _copy_from_user+0x2e/0xd0 [ 2497.948508][ T5241] get_compat_msghdr+0xb3/0x4b0 [ 2497.948526][ T5241] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2497.948550][ T5241] ___sys_sendmsg+0x1b6/0x1e0 [ 2497.948576][ T5241] ? __pfx____sys_sendmsg+0x10/0x10 [ 2497.948629][ T5241] __sys_sendmsg+0x170/0x220 [ 2497.948650][ T5241] ? __pfx___sys_sendmsg+0x10/0x10 [ 2497.948675][ T5241] ? __pfx_ksys_write+0x10/0x10 [ 2497.948704][ T5241] __do_fast_syscall_32+0xe3/0x8c0 [ 2497.948725][ T5241] do_fast_syscall_32+0x32/0x70 [ 2497.948743][ T5241] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2497.948764][ T5241] RIP: 0023:0xf7fc7f6c [ 2497.948776][ T5241] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2497.948788][ T5241] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2497.948799][ T5241] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 2497.948806][ T5241] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2497.948813][ T5241] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2497.948820][ T5241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2497.948826][ T5241] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2497.948839][ T5241] [ 2498.038122][ T5246] FAULT_INJECTION: forcing a failure. [ 2498.038122][ T5246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2498.043754][ T5246] CPU: 0 UID: 0 PID: 5246 Comm: syz.2.8602 Tainted: G L syzkaller #0 PREEMPT(full) [ 2498.043783][ T5246] Tainted: [L]=SOFTLOCKUP [ 2498.043789][ T5246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2498.043800][ T5246] Call Trace: [ 2498.043807][ T5246] [ 2498.043814][ T5246] dump_stack_lvl+0x100/0x190 [ 2498.043845][ T5246] should_fail_ex.cold+0x5/0xa [ 2498.043865][ T5246] _copy_from_user+0x2e/0xd0 [ 2498.043915][ T5246] get_compat_msghdr+0xb3/0x4b0 [ 2498.043936][ T5246] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2498.043964][ T5246] ___sys_sendmsg+0x1b6/0x1e0 [ 2498.043992][ T5246] ? __pfx____sys_sendmsg+0x10/0x10 [ 2498.044047][ T5246] __sys_sendmsg+0x170/0x220 [ 2498.044067][ T5246] ? __pfx___sys_sendmsg+0x10/0x10 [ 2498.044094][ T5246] ? __pfx_ksys_write+0x10/0x10 [ 2498.044126][ T5246] __do_fast_syscall_32+0xe3/0x8c0 [ 2498.044151][ T5246] do_fast_syscall_32+0x32/0x70 [ 2498.044171][ T5246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2498.044194][ T5246] RIP: 0023:0xf7fc7f6c [ 2498.044209][ T5246] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2498.044226][ T5246] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2498.044244][ T5246] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000280 [ 2498.044256][ T5246] RDX: 0000000000040004 RSI: 0000000000000000 RDI: 0000000000000000 [ 2498.044267][ T5246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2498.044277][ T5246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2498.044287][ T5246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2498.044311][ T5246] [ 2498.452253][ T5258] qnx6: unable to read the first superblock [ 2498.459920][ T40] audit: type=1107 audit(1772102577.925:946): pid=5251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2499.751066][ T5268] input: syz1 as /devices/virtual/input/input139 [ 2499.885719][ T5274] syzkaller1: entered allmulticast mode [ 2499.919083][ T5268] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8608'. [ 2500.397313][ T5285] kAFS: unable to lookup cell 'ÿ' [ 2501.055290][ T5295] netlink: 'syz.4.8614': attribute type 1 has an invalid length. [ 2501.057827][ T5295] netlink: 'syz.4.8614': attribute type 3 has an invalid length. [ 2501.060353][ T5295] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8614'. [ 2501.830680][ T5309] qnx6: unable to read the first superblock [ 2501.841455][ T40] audit: type=1107 audit(1772102581.324:947): pid=5297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2502.229698][ T5334] FAULT_INJECTION: forcing a failure. [ 2502.229698][ T5334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2502.274323][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: syz.8.8624 Tainted: G L syzkaller #0 PREEMPT(full) [ 2502.274348][ T5334] Tainted: [L]=SOFTLOCKUP [ 2502.274354][ T5334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2502.274365][ T5334] Call Trace: [ 2502.274370][ T5334] [ 2502.274378][ T5334] dump_stack_lvl+0x100/0x190 [ 2502.274406][ T5334] should_fail_ex.cold+0x5/0xa [ 2502.274424][ T5334] _copy_from_user+0x2e/0xd0 [ 2502.274447][ T5334] __ia32_compat_sys_socketcall+0x187/0x770 [ 2502.274468][ T5334] ? __fget_files+0x21f/0x3d0 [ 2502.274492][ T5334] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 2502.274514][ T5334] ? fput+0x79/0x100 [ 2502.274528][ T5334] ? ksys_write+0x1ac/0x250 [ 2502.274549][ T5334] ? __pfx_ksys_write+0x10/0x10 [ 2502.274578][ T5334] do_int80_emulation+0x141/0x6b0 [ 2502.274600][ T5334] asm_int80_emulation+0x1a/0x20 [ 2502.274614][ T5334] RIP: 0023:0xf71c5b6b [ 2502.274640][ T5334] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2502.274657][ T5334] RSP: 002b:00000000f547c34c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 2502.274674][ T5334] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f547c3f4 [ 2502.274685][ T5334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2502.274694][ T5334] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2502.274703][ T5334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2502.274713][ T5334] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2502.274730][ T5334] [ 2502.381528][ T5339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8625'. [ 2503.489036][ T5346] netlink: 'syz.2.8620': attribute type 4 has an invalid length. [ 2503.494823][ T5346] netlink: 'syz.2.8620': attribute type 4 has an invalid length. [ 2503.721298][ T5356] FAULT_INJECTION: forcing a failure. [ 2503.721298][ T5356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2503.726843][ T5356] CPU: 2 UID: 0 PID: 5356 Comm: syz.8.8630 Tainted: G L syzkaller #0 PREEMPT(full) [ 2503.726872][ T5356] Tainted: [L]=SOFTLOCKUP [ 2503.726878][ T5356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2503.726888][ T5356] Call Trace: [ 2503.726895][ T5356] [ 2503.726902][ T5356] dump_stack_lvl+0x100/0x190 [ 2503.726932][ T5356] should_fail_ex.cold+0x5/0xa [ 2503.726953][ T5356] _copy_from_user+0x2e/0xd0 [ 2503.726980][ T5356] get_compat_msghdr+0xb3/0x4b0 [ 2503.727000][ T5356] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2503.727028][ T5356] ___sys_sendmsg+0x1b6/0x1e0 [ 2503.727060][ T5356] ? __pfx____sys_sendmsg+0x10/0x10 [ 2503.727113][ T5356] __sys_sendmsg+0x170/0x220 [ 2503.727133][ T5356] ? __pfx___sys_sendmsg+0x10/0x10 [ 2503.727159][ T5356] ? __pfx_ksys_write+0x10/0x10 [ 2503.727189][ T5356] __do_fast_syscall_32+0xe3/0x8c0 [ 2503.727214][ T5356] do_fast_syscall_32+0x32/0x70 [ 2503.727234][ T5356] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2503.727256][ T5356] RIP: 0023:0xf708ef6c [ 2503.727270][ T5356] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2503.727287][ T5356] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2503.727305][ T5356] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000380 [ 2503.727316][ T5356] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 2503.727327][ T5356] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2503.727337][ T5356] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2503.727347][ T5356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2503.727370][ T5356] [ 2503.921876][ T5349] batman_adv: batadv0: Adding interface: gretap1 [ 2503.925805][ T5349] batman_adv: batadv0: Interface activated: gretap1 [ 2503.986584][ T5354] qnx6: unable to read the first superblock [ 2503.994433][ T40] audit: type=1107 audit(1772102583.480:948): pid=5352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2504.200340][ T5367] input: syz1 as /devices/virtual/input/input140 [ 2504.432872][ T5371] netlink: 88 bytes leftover after parsing attributes in process `syz.8.8635'. [ 2504.453890][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8637'. [ 2505.157574][ T5375] syzkaller0: entered promiscuous mode [ 2505.159362][ T5375] syzkaller0: entered allmulticast mode [ 2507.176722][ T5400] input: syz1 as /devices/virtual/input/input141 [ 2507.287294][ T5401] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8646'. [ 2507.740891][ T5397] /dev/nullb0: Can't lookup blockdev [ 2507.744636][ T40] audit: type=1107 audit(1772102587.238:949): pid=5394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2508.087169][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8647'. [ 2508.998335][ T5432] FAULT_INJECTION: forcing a failure. [ 2508.998335][ T5432] name failslab, interval 1, probability 0, space 0, times 0 [ 2509.004213][ T5432] CPU: 2 UID: 0 PID: 5432 Comm: syz.4.8655 Tainted: G L syzkaller #0 PREEMPT(full) [ 2509.004233][ T5432] Tainted: [L]=SOFTLOCKUP [ 2509.004237][ T5432] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2509.004244][ T5432] Call Trace: [ 2509.004249][ T5432] [ 2509.004254][ T5432] dump_stack_lvl+0x100/0x190 [ 2509.004274][ T5432] should_fail_ex.cold+0x5/0xa [ 2509.004287][ T5432] should_failslab+0xc2/0x120 [ 2509.004305][ T5432] __kmalloc_cache_noprof+0x7a/0x6f0 [ 2509.004319][ T5432] ? ovl_iterate+0xabf/0x11e0 [ 2509.004337][ T5432] ovl_iterate+0xabf/0x11e0 [ 2509.004353][ T5432] ? __pfx_down_write+0x10/0x10 [ 2509.004368][ T5432] ? __pfx_down_read_killable+0x10/0x10 [ 2509.004384][ T5432] ? __pfx_ovl_iterate+0x10/0x10 [ 2509.004399][ T5432] wrap_directory_iterator+0xa2/0xe0 [ 2509.004416][ T5432] iterate_dir+0x296/0xae0 [ 2509.004433][ T5432] __ia32_sys_getdents64+0x13a/0x2c0 [ 2509.004450][ T5432] ? __pfx___ia32_sys_getdents64+0x10/0x10 [ 2509.004466][ T5432] ? __pfx_filldir64+0x10/0x10 [ 2509.004482][ T5432] ? __pfx_ksys_write+0x10/0x10 [ 2509.004502][ T5432] __do_fast_syscall_32+0xe3/0x8c0 [ 2509.004517][ T5432] do_fast_syscall_32+0x32/0x70 [ 2509.004530][ T5432] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2509.004545][ T5432] RIP: 0023:0xf70aef6c [ 2509.004556][ T5432] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2509.004566][ T5432] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000dc [ 2509.004578][ T5432] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 2509.004585][ T5432] RDX: 00000000000000e1 RSI: 0000000000000000 RDI: 0000000000000000 [ 2509.004592][ T5432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2509.004598][ T5432] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2509.004604][ T5432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2509.004617][ T5432] [ 2509.213979][ T5438] syzkaller0: entered promiscuous mode [ 2509.218460][ T5438] syzkaller0: entered allmulticast mode [ 2509.237665][ T5438] FAULT_INJECTION: forcing a failure. [ 2509.237665][ T5438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2509.243140][ T5438] CPU: 2 UID: 0 PID: 5438 Comm: syz.4.8658 Tainted: G L syzkaller #0 PREEMPT(full) [ 2509.243169][ T5438] Tainted: [L]=SOFTLOCKUP [ 2509.243175][ T5438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2509.243185][ T5438] Call Trace: [ 2509.243193][ T5438] [ 2509.243214][ T5438] dump_stack_lvl+0x100/0x190 [ 2509.243247][ T5438] should_fail_ex.cold+0x5/0xa [ 2509.243268][ T5438] _copy_from_user+0x2e/0xd0 [ 2509.243296][ T5438] move_addr_to_kernel+0x65/0x170 [ 2509.243323][ T5438] __sys_sendto+0x1c9/0x520 [ 2509.243342][ T5438] ? __pfx___sys_sendto+0x10/0x10 [ 2509.243367][ T5438] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2509.243399][ T5438] ? fput+0x79/0x100 [ 2509.243419][ T5438] ? ksys_write+0x1ac/0x250 [ 2509.243448][ T5438] __ia32_sys_sendto+0xdd/0x1b0 [ 2509.243465][ T5438] ? __do_fast_syscall_32+0x94/0x8c0 [ 2509.243485][ T5438] ? lockdep_hardirqs_on+0x78/0x100 [ 2509.243505][ T5438] __do_fast_syscall_32+0xe3/0x8c0 [ 2509.243529][ T5438] do_fast_syscall_32+0x32/0x70 [ 2509.243550][ T5438] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2509.243573][ T5438] RIP: 0023:0xf70aef6c [ 2509.243588][ T5438] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2509.243605][ T5438] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 2509.243623][ T5438] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000200 [ 2509.243635][ T5438] RDX: 000000000000000e RSI: 0000000004000050 RDI: 00000000800001c0 [ 2509.243646][ T5438] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 2509.243657][ T5438] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2509.243667][ T5438] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2509.243689][ T5438] [ 2509.327127][ T40] audit: type=1326 audit(1772102588.822:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.6.8657" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 2509.338208][ T40] audit: type=1326 audit(1772102588.822:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.6.8657" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 2509.349436][ T40] audit: type=1326 audit(1772102588.822:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.6.8657" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 2509.360197][ T40] audit: type=1326 audit(1772102588.822:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.6.8657" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 2509.379552][ T5440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8657'. [ 2509.403022][ T5440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8657'. [ 2509.403150][ T40] audit: type=1326 audit(1772102588.822:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.6.8657" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 2509.416249][ T40] audit: type=1326 audit(1772102588.822:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.6.8657" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 2509.427285][ T40] audit: type=1326 audit(1772102588.822:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.6.8657" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 2509.439384][ T40] audit: type=1326 audit(1772102588.822:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.6.8657" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 2509.452104][ T40] audit: type=1326 audit(1772102588.822:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.6.8657" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 2509.513247][ T5444] netlink: 'syz.4.8659': attribute type 10 has an invalid length. [ 2509.518876][ T5444] bond0: (slave .): Opening slave failed [ 2509.523330][ T5443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2510.099599][ T5448] netlink: 'syz.6.8661': attribute type 10 has an invalid length. [ 2510.106101][ T5448] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 2510.111971][ T5448] team0: Port device netdevsim0 added [ 2510.493487][ T5455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8662'. [ 2511.309718][ T5452] netlink: 'syz.4.8663': attribute type 4 has an invalid length. [ 2511.316660][ T5468] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 2511.320292][ T5452] netlink: 'syz.4.8663': attribute type 4 has an invalid length. [ 2511.419781][ T5471] input: syz1 as /devices/virtual/input/input142 [ 2511.499544][ T5470] netlink: 88 bytes leftover after parsing attributes in process `syz.8.8668'. [ 2511.573537][ T5473] fuse: root generation should be zero [ 2511.599283][ T5477] ALSA: mixer_oss: invalid OSS volume '—ˆ†åÉY¢¤{õ›´žÜÿ¬¤Uøü°ŽDíÆD ' [ 2511.602523][ T5477] ALSA: mixer_oss: invalid OSS volume 'ߧ«4cÑTÆÒÈ󯆩"¦m!lŠT.îšÎ œ¾®ì' [ 2511.605338][ T5477] ALSA: mixer_oss: invalid OSS volume 'lg§' [ 2511.607372][ T5477] ALSA: mixer_oss: invalid OSS volume 'í)nÃäÃkëKi†·,r‚¾WY\ñZV‰Óå¼÷?J`G' [ 2511.612578][ T5473] xt_cgroup: xt_cgroup: no path or classid specified [ 2511.620709][ T5477] ALSA: mixer_oss: invalid OSS volume 'kûO0ÍÇòª$ÛÒgÀ¾{ƒpl{ˆúy;_A¸RW§€' [ 2511.632002][ T5477] ALSA: mixer_oss: invalid OSS volume 'ò' [ 2511.634215][ T5477] ALSA: mixer_oss: invalid OSS volume 'sv«ˆ Fu{Qby>áñh%w¾áõ]' [ 2511.637344][ T5477] ALSA: mixer_oss: invalid OSS volume 'ŽEÙ“•= Øv?ïÌ@4Åä8î¶@»híüÉÆL' [ 2511.640166][ T5477] ALSA: mixer_oss: invalid OSS volume 'î+­³?>3Iq¡»0:i¸Ýq½|û—UëDœÅ™¯û' [ 2511.642975][ T5477] ALSA: mixer_oss: invalid OSS volume 'vÓ·*xrµýN0¡Ü—ƒácŒ†Až‚€åìdâhû' [ 2511.645725][ T5477] ALSA: mixer_oss: invalid OSS volume '±äJMÊïé œ%HœJ[~S' [ 2511.962803][ T5490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2511.969775][ T5490] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 2511.974126][ T5490] bond1: (slave macvlan3): Enslaving as an active interface with a down link [ 2512.138532][T14122] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 2512.289935][T14122] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2512.294539][T14122] usb 13-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2512.299182][T14122] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2512.304706][T14122] usb 13-1: config 0 descriptor?? [ 2512.512281][T14122] usbhid 13-1:0.0: can't add hid device: -71 [ 2512.514269][T14122] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 2512.525277][T14122] usb 13-1: USB disconnect, device number 16 [ 2512.976773][T14122] usb 13-1: new high-speed USB device number 17 using dummy_hcd [ 2513.126476][T14122] usb 13-1: Using ep0 maxpacket: 32 [ 2513.130730][T14122] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2513.134646][T14122] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 2513.137924][T14122] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2513.143432][T14122] usb 13-1: config 0 descriptor?? [ 2513.149326][T14122] ldusb 13-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2513.157012][T14122] ldusb 13-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2513.252371][ T5527] netlink: 'syz.6.8685': attribute type 4 has an invalid length. [ 2513.270850][ T5527] netlink: 'syz.6.8685': attribute type 4 has an invalid length. [ 2513.450853][ T5487] FAULT_INJECTION: forcing a failure. [ 2513.450853][ T5487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2513.455116][ T5487] CPU: 3 UID: 0 PID: 5487 Comm: syz.8.8674 Tainted: G L syzkaller #0 PREEMPT(full) [ 2513.455135][ T5487] Tainted: [L]=SOFTLOCKUP [ 2513.455140][ T5487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2513.455146][ T5487] Call Trace: [ 2513.455151][ T5487] [ 2513.455156][ T5487] dump_stack_lvl+0x100/0x190 [ 2513.455190][ T5487] should_fail_ex.cold+0x5/0xa [ 2513.455203][ T5487] _copy_to_user+0x32/0xd0 [ 2513.455222][ T5487] ld_usb_read+0x5f9/0x890 [ 2513.455241][ T5487] ? __pfx_ld_usb_read+0x10/0x10 [ 2513.455256][ T5487] ? common_file_perm+0x1ab/0x4f0 [ 2513.455274][ T5487] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2513.455287][ T5487] ? bpf_lsm_file_permission+0x9/0x10 [ 2513.455303][ T5487] ? security_file_permission+0x76/0x210 [ 2513.455322][ T5487] ? rw_verify_area+0xce/0x6d0 [ 2513.455336][ T5487] ? __pfx_ld_usb_read+0x10/0x10 [ 2513.455352][ T5487] vfs_read+0x1e4/0xb30 [ 2513.455370][ T5487] ? __pfx_vfs_read+0x10/0x10 [ 2513.455385][ T5487] ? find_held_lock+0x2b/0x80 [ 2513.455402][ T5487] ? __fget_files+0x215/0x3d0 [ 2513.455418][ T5487] ? __fget_files+0x215/0x3d0 [ 2513.455437][ T5487] ? __fget_files+0x21f/0x3d0 [ 2513.455458][ T5487] ksys_read+0x1f8/0x250 [ 2513.455474][ T5487] ? __pfx_ksys_read+0x10/0x10 [ 2513.455490][ T5487] ? __pfx_ksys_write+0x10/0x10 [ 2513.455510][ T5487] __do_fast_syscall_32+0xe3/0x8c0 [ 2513.455526][ T5487] do_fast_syscall_32+0x32/0x70 [ 2513.455539][ T5487] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2513.455554][ T5487] RIP: 0023:0xf708ef6c [ 2513.455564][ T5487] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2513.455575][ T5487] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 2513.455586][ T5487] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 2513.455593][ T5487] RDX: 00000000000000ee RSI: 0000000000000000 RDI: 0000000000000000 [ 2513.455600][ T5487] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2513.455606][ T5487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2513.455612][ T5487] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2513.455626][ T5487] [ 2513.651793][T30680] usb 13-1: USB disconnect, device number 17 [ 2513.655300][T30680] ldusb 13-1:0.0: LD USB Device #0 now disconnected [ 2514.204283][ T759] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 2514.354029][ T759] usb 9-1: Using ep0 maxpacket: 16 [ 2514.357762][ T759] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2514.362275][ T759] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2514.366835][ T759] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2514.372065][ T759] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2514.376089][ T759] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2514.381519][ T759] usb 9-1: config 0 descriptor?? [ 2514.483613][ T651] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 2514.696134][ T651] usb 13-1: Using ep0 maxpacket: 16 [ 2514.699940][ T651] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2514.705252][ T651] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2514.709220][ T651] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2514.714463][ T651] usb 13-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2514.717298][ T651] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2514.721228][ T651] usb 13-1: config 0 descriptor?? [ 2514.795449][ T759] hid_parser_main: 5 callbacks suppressed [ 2514.795470][ T759] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 2514.800801][ T759] microsoft 0003:045E:07DA.0017: ignoring exceeding usage max [ 2514.816586][ T759] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:045E:07DA.0017/input/input143 [ 2514.887699][ T759] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 2514.954947][ T5549] netlink: 84 bytes leftover after parsing attributes in process `syz.6.8692'. [ 2514.993390][ T5536] FAULT_INJECTION: forcing a failure. [ 2514.993390][ T5536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2514.998587][ T5536] CPU: 2 UID: 0 PID: 5536 Comm: syz.4.8688 Tainted: G L syzkaller #0 PREEMPT(full) [ 2514.998614][ T5536] Tainted: [L]=SOFTLOCKUP [ 2514.998620][ T5536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2514.998631][ T5536] Call Trace: [ 2514.998638][ T5536] [ 2514.998645][ T5536] dump_stack_lvl+0x100/0x190 [ 2514.998677][ T5536] should_fail_ex.cold+0x5/0xa [ 2514.998719][ T5536] _copy_to_user+0x32/0xd0 [ 2514.998748][ T5536] simple_read_from_buffer+0xcb/0x170 [ 2514.998775][ T5536] proc_fail_nth_read+0x1af/0x230 [ 2514.998796][ T5536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2514.998818][ T5536] ? rw_verify_area+0xce/0x6d0 [ 2514.998840][ T5536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2514.998859][ T5536] vfs_read+0x1e4/0xb30 [ 2514.998887][ T5536] ? __pfx_vfs_read+0x10/0x10 [ 2514.998909][ T5536] ? find_held_lock+0x2b/0x80 [ 2514.998942][ T5536] ? __fget_files+0x215/0x3d0 [ 2514.998972][ T5536] ? __fget_files+0x21f/0x3d0 [ 2514.999004][ T5536] ksys_read+0x12a/0x250 [ 2514.999028][ T5536] ? __pfx_ksys_read+0x10/0x10 [ 2514.999059][ T5536] do_int80_emulation+0x141/0x6b0 [ 2514.999098][ T5536] asm_int80_emulation+0x1a/0x20 [ 2514.999117][ T5536] RIP: 0023:0xf71e5b6b [ 2514.999131][ T5536] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2514.999147][ T5536] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2514.999164][ T5536] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f549d5d0 [ 2514.999176][ T5536] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 2514.999186][ T5536] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2514.999195][ T5536] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2514.999206][ T5536] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2514.999230][ T5536] [ 2515.095057][ T759] usb 9-1: USB disconnect, device number 85 [ 2515.132115][ T651] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 2515.134910][ T651] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max [ 2515.156014][ T651] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:045E:07DA.0018/input/input144 [ 2515.158732][ T5551] FAULT_INJECTION: forcing a failure. [ 2515.158732][ T5551] name failslab, interval 1, probability 0, space 0, times 0 [ 2515.166518][ T5551] CPU: 2 UID: 0 PID: 5551 Comm: syz.2.8693 Tainted: G L syzkaller #0 PREEMPT(full) [ 2515.166546][ T5551] Tainted: [L]=SOFTLOCKUP [ 2515.166553][ T5551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2515.166564][ T5551] Call Trace: [ 2515.166570][ T5551] [ 2515.166577][ T5551] dump_stack_lvl+0x100/0x190 [ 2515.166607][ T5551] should_fail_ex.cold+0x5/0xa [ 2515.166629][ T5551] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2515.166649][ T5551] should_failslab+0xc2/0x120 [ 2515.166675][ T5551] __kmalloc_noprof+0xe0/0x850 [ 2515.166728][ T5551] tomoyo_realpath_from_path+0xb6/0x690 [ 2515.166751][ T5551] tomoyo_path_number_perm+0x23c/0x580 [ 2515.166775][ T5551] ? tomoyo_path_number_perm+0x22e/0x580 [ 2515.166802][ T5551] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2515.166853][ T5551] ? find_held_lock+0x2b/0x80 [ 2515.166879][ T5551] ? hook_file_ioctl_common+0x146/0x410 [ 2515.166904][ T5551] ? __fget_files+0x215/0x3d0 [ 2515.166939][ T5551] ? __fget_files+0x21f/0x3d0 [ 2515.166969][ T5551] security_file_ioctl_compat+0xd3/0x230 [ 2515.166997][ T5551] __ia32_compat_sys_ioctl+0xc2/0x360 [ 2515.167024][ T5551] __do_fast_syscall_32+0xe3/0x8c0 [ 2515.167047][ T5551] do_fast_syscall_32+0x32/0x70 [ 2515.167067][ T5551] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2515.167090][ T5551] RIP: 0023:0xf7fc7f6c [ 2515.167105][ T5551] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2515.167121][ T5551] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2515.167138][ T5551] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800448f0 [ 2515.167149][ T5551] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2515.167159][ T5551] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2515.167169][ T5551] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2515.167179][ T5551] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2515.167203][ T5551] [ 2515.167210][ T5551] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2515.316861][ T651] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 2515.338129][ T651] usb 13-1: USB disconnect, device number 18 [ 2515.381876][ T5557] fido_id[5557]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb13/13-1/report_descriptor': No such file or directory [ 2515.694270][ T5551] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 2515.768433][ T5569] : entered promiscuous mode [ 2515.800915][T30680] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 2515.850880][ T5575] bond1: option mode: unable to set because the bond device has slaves [ 2515.855141][ T5575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8704'. [ 2515.857988][ T5575] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8704'. [ 2515.887465][ T5575] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2515.960716][T30680] usb 9-1: Using ep0 maxpacket: 16 [ 2515.964397][T30680] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2515.968370][T30680] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 2515.972886][T30680] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2515.978616][T30680] usb 9-1: config 1 interface 0 has no altsetting 0 [ 2515.978932][ T5571] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8702'. [ 2515.983438][T30680] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2515.984643][ T5571] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8702'. [ 2515.988041][T30680] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2515.994498][T30680] usb 9-1: Product: syz [ 2515.996587][T30680] usb 9-1: Manufacturer: syz [ 2515.998816][T30680] usb 9-1: SerialNumber: syz [ 2516.000669][ T5582] FAULT_INJECTION: forcing a failure. [ 2516.000669][ T5582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2516.006224][ T5582] CPU: 2 UID: 0 PID: 5582 Comm: syz.8.8707 Tainted: G L syzkaller #0 PREEMPT(full) [ 2516.006251][ T5582] Tainted: [L]=SOFTLOCKUP [ 2516.006257][ T5582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2516.006268][ T5582] Call Trace: [ 2516.006275][ T5582] [ 2516.006282][ T5582] dump_stack_lvl+0x100/0x190 [ 2516.006314][ T5582] should_fail_ex.cold+0x5/0xa [ 2516.006335][ T5582] _copy_from_user+0x2e/0xd0 [ 2516.006362][ T5582] get_compat_msghdr+0xb3/0x4b0 [ 2516.006382][ T5582] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2516.006410][ T5582] ___sys_sendmsg+0x1b6/0x1e0 [ 2516.006436][ T5582] ? __pfx____sys_sendmsg+0x10/0x10 [ 2516.006490][ T5582] __sys_sendmsg+0x170/0x220 [ 2516.006510][ T5582] ? __pfx___sys_sendmsg+0x10/0x10 [ 2516.006537][ T5582] ? __pfx_ksys_write+0x10/0x10 [ 2516.006568][ T5582] __do_fast_syscall_32+0xe3/0x8c0 [ 2516.006592][ T5582] do_fast_syscall_32+0x32/0x70 [ 2516.006613][ T5582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2516.006635][ T5582] RIP: 0023:0xf708ef6c [ 2516.006649][ T5582] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2516.006666][ T5582] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2516.006711][ T5582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2516.006723][ T5582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2516.006733][ T5582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2516.006744][ T5582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2516.006754][ T5582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2516.006778][ T5582] [ 2516.015582][ T5571] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8702'. [ 2516.058363][ T5585] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8708'. [ 2516.064467][ T5571] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8702'. [ 2516.115867][ T5571] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8702'. [ 2516.119616][ T5571] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8702'. [ 2516.522762][T30680] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 86 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 2516.741430][ T5592] openvswitch: netlink: Flow key attr not present in new flow. [ 2516.763078][ T5571] Process accounting resumed [ 2516.884084][ T5603] FAULT_INJECTION: forcing a failure. [ 2516.884084][ T5603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2516.918652][ T5603] CPU: 1 UID: 0 PID: 5603 Comm: syz.2.8711 Tainted: G L syzkaller #0 PREEMPT(full) [ 2516.918693][ T5603] Tainted: [L]=SOFTLOCKUP [ 2516.918697][ T5603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2516.918704][ T5603] Call Trace: [ 2516.918709][ T5603] [ 2516.918713][ T5603] dump_stack_lvl+0x100/0x190 [ 2516.918746][ T5603] should_fail_ex.cold+0x5/0xa [ 2516.918759][ T5603] _copy_from_user+0x2e/0xd0 [ 2516.918777][ T5603] get_compat_msghdr+0xb3/0x4b0 [ 2516.918790][ T5603] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2516.918806][ T5603] ___sys_sendmsg+0x1b6/0x1e0 [ 2516.918824][ T5603] ? __pfx____sys_sendmsg+0x10/0x10 [ 2516.918856][ T5603] __sys_sendmsg+0x170/0x220 [ 2516.918868][ T5603] ? __pfx___sys_sendmsg+0x10/0x10 [ 2516.918885][ T5603] ? __pfx_ksys_write+0x10/0x10 [ 2516.918905][ T5603] __do_fast_syscall_32+0xe3/0x8c0 [ 2516.918920][ T5603] do_fast_syscall_32+0x32/0x70 [ 2516.918933][ T5603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2516.918949][ T5603] RIP: 0023:0xf7fc7f6c [ 2516.918958][ T5603] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2516.918969][ T5603] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2516.918980][ T5603] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 2516.918987][ T5603] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 2516.918994][ T5603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2516.919000][ T5603] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2516.919006][ T5603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2516.919020][ T5603] [ 2516.953543][ T5610] FAULT_INJECTION: forcing a failure. [ 2516.953543][ T5610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2516.965272][ T5590] usblp0:failed reading printer status (-32) [ 2516.973774][ T5610] CPU: 0 UID: 0 PID: 5610 Comm: syz.2.8714 Tainted: G L syzkaller #0 PREEMPT(full) [ 2516.973803][ T5610] Tainted: [L]=SOFTLOCKUP [ 2516.973810][ T5610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2516.973820][ T5610] Call Trace: [ 2516.973827][ T5610] [ 2516.973834][ T5610] dump_stack_lvl+0x100/0x190 [ 2516.973866][ T5610] should_fail_ex.cold+0x5/0xa [ 2516.973890][ T5610] _copy_from_user+0x2e/0xd0 [ 2516.973919][ T5610] get_compat_msghdr+0xb3/0x4b0 [ 2516.973939][ T5610] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2516.973967][ T5610] ___sys_sendmsg+0x1b6/0x1e0 [ 2516.973995][ T5610] ? __pfx____sys_sendmsg+0x10/0x10 [ 2516.974048][ T5610] __sys_sendmsg+0x170/0x220 [ 2516.974068][ T5610] ? __pfx___sys_sendmsg+0x10/0x10 [ 2516.974097][ T5610] ? __pfx_ksys_write+0x10/0x10 [ 2516.974129][ T5610] __do_fast_syscall_32+0xe3/0x8c0 [ 2516.974153][ T5610] do_fast_syscall_32+0x32/0x70 [ 2516.974176][ T5610] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2516.974199][ T5610] RIP: 0023:0xf7fc7f6c [ 2516.974215][ T5610] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2516.974232][ T5610] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2516.974250][ T5610] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 2516.974262][ T5610] RDX: 0000000004000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 2516.974272][ T5610] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2516.974284][ T5610] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2516.974296][ T5610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2516.974317][ T5610] [ 2518.424854][ T5633] netlink: 'syz.2.8718': attribute type 4 has an invalid length. [ 2518.433039][ T5633] netlink: 'syz.2.8718': attribute type 4 has an invalid length. [ 2518.595429][T14021] usb 9-1: USB disconnect, device number 86 [ 2518.599167][T14021] usblp0: removed [ 2519.121274][ T5654] FAULT_INJECTION: forcing a failure. [ 2519.121274][ T5654] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2519.156706][ T5654] CPU: 0 UID: 0 PID: 5654 Comm: syz.4.8721 Tainted: G L syzkaller #0 PREEMPT(full) [ 2519.156727][ T5654] Tainted: [L]=SOFTLOCKUP [ 2519.156742][ T5654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2519.156750][ T5654] Call Trace: [ 2519.156754][ T5654] [ 2519.156759][ T5654] dump_stack_lvl+0x100/0x190 [ 2519.156780][ T5654] should_fail_ex.cold+0x5/0xa [ 2519.156791][ T5654] ? prepare_alloc_pages+0x16d/0x5f0 [ 2519.156804][ T5654] should_fail_alloc_page+0xeb/0x140 [ 2519.156825][ T5654] prepare_alloc_pages+0x1f0/0x5f0 [ 2519.156839][ T5654] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 2519.156857][ T5654] ? __lock_acquire+0x4a5/0x2630 [ 2519.156876][ T5654] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2519.156895][ T5654] ? is_bpf_text_address+0x8a/0x1a0 [ 2519.156912][ T5654] ? is_bpf_text_address+0x8a/0x1a0 [ 2519.156929][ T5654] ? bpf_ksym_find+0x124/0x1c0 [ 2519.156943][ T5654] ? is_bpf_text_address+0x94/0x1a0 [ 2519.156959][ T5654] ? kernel_text_address+0x8d/0x100 [ 2519.156975][ T5654] ? __kernel_text_address+0xd/0x30 [ 2519.156990][ T5654] ? unwind_get_return_address+0x59/0xa0 [ 2519.157003][ T5654] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2519.157022][ T5654] ? policy_nodemask+0xed/0x4f0 [ 2519.157041][ T5654] alloc_pages_mpol+0x1fb/0x550 [ 2519.157060][ T5654] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2519.157081][ T5654] folio_alloc_mpol_noprof+0x36/0x340 [ 2519.157095][ T5654] vma_alloc_folio_noprof+0xed/0x1d0 [ 2519.157108][ T5654] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 2519.157124][ T5654] do_anonymous_page+0xb3a/0x1fb0 [ 2519.157143][ T5654] __handle_mm_fault+0x1d42/0x2b60 [ 2519.157159][ T5654] ? mt_find+0x45e/0x8e0 [ 2519.157173][ T5654] ? __pfx___handle_mm_fault+0x10/0x10 [ 2519.157186][ T5654] ? __pfx_mt_find+0x10/0x10 [ 2519.157207][ T5654] ? find_vma+0xbf/0x140 [ 2519.157223][ T5654] ? __pfx_find_vma+0x10/0x10 [ 2519.157242][ T5654] handle_mm_fault+0x36d/0xa20 [ 2519.157258][ T5654] do_user_addr_fault+0x74c/0x12f0 [ 2519.157280][ T5654] exc_page_fault+0x6f/0xd0 [ 2519.157293][ T5654] asm_exc_page_fault+0x26/0x30 [ 2519.157305][ T5654] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 2519.157321][ T5654] Code: c9 75 f6 e9 02 a1 04 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 2519.157331][ T5654] RSP: 0018:ffffc90004f9f988 EFLAGS: 00050202 [ 2519.157341][ T5654] RAX: 0000000000000000 RBX: 0000000080b35380 RCX: 0000000000000380 [ 2519.157348][ T5654] RDX: ffff88805af10000 RSI: ffffffff8255c2f1 RDI: 0000000080b36000 [ 2519.157355][ T5654] RBP: ffffc90004f9fd10 R08: 0000000000000001 R09: 00000000000001cf [ 2519.157362][ T5654] R10: 0000000000000200 R11: 0000000000000000 R12: 000000007ffff000 [ 2519.157369][ T5654] R13: 0000000000001000 R14: 0000000000b34000 R15: 0000000000001000 [ 2519.157380][ T5654] ? __might_fault+0x111/0x140 [ 2519.157397][ T5654] iov_iter_zero+0x3a9/0x15b0 [ 2519.157419][ T5654] ? __pfx_iov_iter_zero+0x10/0x10 [ 2519.157436][ T5654] ? _parse_integer_limit+0x17f/0x1d0 [ 2519.157450][ T5654] ? __pfx_aa_file_perm+0x10/0x10 [ 2519.157462][ T5654] ? _kstrtoull+0x13c/0x1f0 [ 2519.157476][ T5654] read_iter_zero+0x121/0x320 [ 2519.157490][ T5654] ? copy_compat_iovec_from_user+0x13a/0x180 [ 2519.157509][ T5654] do_iter_readv_writev+0x60d/0x920 [ 2519.157526][ T5654] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2519.157541][ T5654] ? common_file_perm+0x1ab/0x4f0 [ 2519.157560][ T5654] ? bpf_lsm_file_permission+0x9/0x10 [ 2519.157576][ T5654] ? security_file_permission+0x76/0x210 [ 2519.157595][ T5654] ? rw_verify_area+0xce/0x6d0 [ 2519.157611][ T5654] vfs_readv+0x4d3/0x8d0 [ 2519.157630][ T5654] ? __pfx_vfs_readv+0x10/0x10 [ 2519.157644][ T5654] ? proc_fail_nth_write+0x9f/0x220 [ 2519.157657][ T5654] ? find_held_lock+0x2b/0x80 [ 2519.157686][ T5654] ? __fget_files+0x21f/0x3d0 [ 2519.157707][ T5654] ? do_preadv+0x1ac/0x270 [ 2519.157721][ T5654] do_preadv+0x1ac/0x270 [ 2519.157737][ T5654] ? __pfx_do_preadv+0x10/0x10 [ 2519.157753][ T5654] ? fput+0x79/0x100 [ 2519.157764][ T5654] ? ksys_write+0x1ac/0x250 [ 2519.157781][ T5654] __ia32_compat_sys_preadv2+0x121/0x1b0 [ 2519.157794][ T5654] __do_fast_syscall_32+0xe3/0x8c0 [ 2519.157809][ T5654] do_fast_syscall_32+0x32/0x70 [ 2519.157822][ T5654] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2519.157836][ T5654] RIP: 0023:0xf70aef6c [ 2519.157845][ T5654] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2519.157856][ T5654] RSP: 002b:00000000f547c50c EFLAGS: 00000292 ORIG_RAX: 000000000000017a [ 2519.157866][ T5654] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001540 [ 2519.157873][ T5654] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 2519.157879][ T5654] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2519.157885][ T5654] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2519.157892][ T5654] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2519.157906][ T5654] [ 2519.345785][ T5658] serio: Serial port ptm0 [ 2519.812887][ T5672] FAULT_INJECTION: forcing a failure. [ 2519.812887][ T5672] name failslab, interval 1, probability 0, space 0, times 0 [ 2519.817866][ T5672] CPU: 0 UID: 0 PID: 5672 Comm: syz.2.8727 Tainted: G L syzkaller #0 PREEMPT(full) [ 2519.817890][ T5672] Tainted: [L]=SOFTLOCKUP [ 2519.817894][ T5672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2519.817901][ T5672] Call Trace: [ 2519.817905][ T5672] [ 2519.817910][ T5672] dump_stack_lvl+0x100/0x190 [ 2519.817929][ T5672] should_fail_ex.cold+0x5/0xa [ 2519.817942][ T5672] should_failslab+0xc2/0x120 [ 2519.817960][ T5672] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 2519.817976][ T5672] ? do_getname+0x35/0x390 [ 2519.817991][ T5672] do_getname+0x35/0x390 [ 2519.818004][ T5672] do_sys_openat2+0xc5/0x1e0 [ 2519.818018][ T5672] ? __pfx_do_sys_openat2+0x10/0x10 [ 2519.818030][ T5672] ? __fget_files+0x215/0x3d0 [ 2519.818049][ T5672] ? __fget_files+0x21f/0x3d0 [ 2519.818067][ T5672] __ia32_compat_sys_openat+0x12d/0x210 [ 2519.818082][ T5672] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 2519.818098][ T5672] ? __pfx_ksys_write+0x10/0x10 [ 2519.818117][ T5672] __do_fast_syscall_32+0xe3/0x8c0 [ 2519.818133][ T5672] do_fast_syscall_32+0x32/0x70 [ 2519.818146][ T5672] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2519.818161][ T5672] RIP: 0023:0xf7fc7f6c [ 2519.818170][ T5672] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2519.818181][ T5672] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 2519.818192][ T5672] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 2519.818199][ T5672] RDX: 0000000000040242 RSI: 0000000000000001 RDI: 0000000000000000 [ 2519.818205][ T5672] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2519.818211][ T5672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2519.818218][ T5672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2519.818231][ T5672] [ 2519.994047][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 2519.994059][ T40] audit: type=1804 audit(1772102599.524:1000): pid=5676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.8729" name="/newroot/292/file0" dev="fuse" ino=1 res=1 errno=0 [ 2520.361156][ T5688] netlink: 'syz.2.8730': attribute type 4 has an invalid length. [ 2520.442768][ T5689] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2520.492697][ T5689] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 2520.496499][ T5689] overlayfs: failed to look up (tracing) for ino (-66) [ 2520.534150][ T5690] netlink: 'syz.2.8730': attribute type 4 has an invalid length. [ 2521.496914][ T5698] __nla_validate_parse: 1 callbacks suppressed [ 2521.496949][ T5698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8734'. [ 2521.847108][ T5710] FAULT_INJECTION: forcing a failure. [ 2521.847108][ T5710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2521.851427][ T5710] CPU: 1 UID: 0 PID: 5710 Comm: syz.4.8739 Tainted: G L syzkaller #0 PREEMPT(full) [ 2521.851446][ T5710] Tainted: [L]=SOFTLOCKUP [ 2521.851450][ T5710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2521.851456][ T5710] Call Trace: [ 2521.851461][ T5710] [ 2521.851466][ T5710] dump_stack_lvl+0x100/0x190 [ 2521.851485][ T5710] should_fail_ex.cold+0x5/0xa [ 2521.851498][ T5710] _copy_from_user+0x2e/0xd0 [ 2521.851516][ T5710] get_compat_msghdr+0xb3/0x4b0 [ 2521.851528][ T5710] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2521.851544][ T5710] ___sys_sendmsg+0x1b6/0x1e0 [ 2521.851562][ T5710] ? __pfx____sys_sendmsg+0x10/0x10 [ 2521.851593][ T5710] __sys_sendmsg+0x170/0x220 [ 2521.851606][ T5710] ? __pfx___sys_sendmsg+0x10/0x10 [ 2521.851622][ T5710] ? __pfx_ksys_write+0x10/0x10 [ 2521.851642][ T5710] __do_fast_syscall_32+0xe3/0x8c0 [ 2521.851663][ T5710] do_fast_syscall_32+0x32/0x70 [ 2521.851679][ T5710] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2521.851693][ T5710] RIP: 0023:0xf70aef6c [ 2521.851703][ T5710] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2521.851714][ T5710] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2521.851730][ T5710] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001080 [ 2521.851741][ T5710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2521.851750][ T5710] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2521.851759][ T5710] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2521.851767][ T5710] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2521.851787][ T5710] [ 2522.244235][ T5727] netlink: 'syz.4.8741': attribute type 4 has an invalid length. [ 2522.319516][ T5733] netlink: 'syz.4.8741': attribute type 4 has an invalid length. [ 2523.258807][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8749'. [ 2523.291379][ T5748] hsr_slave_1 (unregistering): left promiscuous mode [ 2523.564256][ T5764] overlayfs: failed to resolve '/ÒT7=Ãðmx¡jUry¡Þ”øUûà/Šé‡8áé': -2 [ 2524.048954][ T5779] syzkaller0: entered promiscuous mode [ 2524.057957][ T5779] syzkaller0: entered allmulticast mode [ 2524.384190][ T5796] FAULT_INJECTION: forcing a failure. [ 2524.384190][ T5796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2524.467643][ T5796] CPU: 1 UID: 0 PID: 5796 Comm: syz.8.8762 Tainted: G L syzkaller #0 PREEMPT(full) [ 2524.467663][ T5796] Tainted: [L]=SOFTLOCKUP [ 2524.467667][ T5796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2524.467674][ T5796] Call Trace: [ 2524.467678][ T5796] [ 2524.467684][ T5796] dump_stack_lvl+0x100/0x190 [ 2524.467704][ T5796] should_fail_ex.cold+0x5/0xa [ 2524.467718][ T5796] _copy_to_user+0x32/0xd0 [ 2524.467736][ T5796] snd_pcm_oss_read2+0x294/0x400 [ 2524.467754][ T5796] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 2524.467771][ T5796] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 2524.467785][ T5796] ? snd_pcm_oss_prepare+0x11e/0x240 [ 2524.467803][ T5796] snd_pcm_oss_read+0x5aa/0x730 [ 2524.467821][ T5796] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 2524.467841][ T5796] vfs_read+0x1e4/0xb30 [ 2524.467859][ T5796] ? __pfx_vfs_read+0x10/0x10 [ 2524.467874][ T5796] ? find_held_lock+0x2b/0x80 [ 2524.467892][ T5796] ? __fget_files+0x215/0x3d0 [ 2524.467909][ T5796] ? __fget_files+0x215/0x3d0 [ 2524.467927][ T5796] ? __fget_files+0x21f/0x3d0 [ 2524.467948][ T5796] ksys_read+0x12a/0x250 [ 2524.467964][ T5796] ? __pfx_ksys_read+0x10/0x10 [ 2524.467980][ T5796] ? __pfx_ksys_write+0x10/0x10 [ 2524.467999][ T5796] __do_fast_syscall_32+0xe3/0x8c0 [ 2524.468014][ T5796] do_fast_syscall_32+0x32/0x70 [ 2524.468028][ T5796] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2524.468043][ T5796] RIP: 0023:0xf708ef6c [ 2524.468053][ T5796] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2524.468063][ T5796] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 2524.468075][ T5796] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800011c0 [ 2524.468082][ T5796] RDX: 00000000200021d5 RSI: 0000000000000000 RDI: 0000000000000000 [ 2524.468088][ T5796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2524.468095][ T5796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2524.468101][ T5796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2524.468115][ T5796] [ 2524.635129][ T5814] FAULT_INJECTION: forcing a failure. [ 2524.635129][ T5814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2524.639772][ T5814] CPU: 0 UID: 0 PID: 5814 Comm: syz.8.8767 Tainted: G L syzkaller #0 PREEMPT(full) [ 2524.639790][ T5814] Tainted: [L]=SOFTLOCKUP [ 2524.639794][ T5814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2524.639801][ T5814] Call Trace: [ 2524.639807][ T5814] [ 2524.639812][ T5814] dump_stack_lvl+0x100/0x190 [ 2524.639832][ T5814] should_fail_ex.cold+0x5/0xa [ 2524.639845][ T5814] _copy_to_user+0x32/0xd0 [ 2524.639863][ T5814] snd_pcm_oss_read2+0x294/0x400 [ 2524.639881][ T5814] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 2524.639898][ T5814] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 2524.639910][ T5814] ? snd_pcm_oss_prepare+0x11e/0x240 [ 2524.639928][ T5814] snd_pcm_oss_read+0x5aa/0x730 [ 2524.639946][ T5814] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 2524.639964][ T5814] vfs_read+0x1e4/0xb30 [ 2524.639982][ T5814] ? __pfx_vfs_read+0x10/0x10 [ 2524.639998][ T5814] ? find_held_lock+0x2b/0x80 [ 2524.640016][ T5814] ? __fget_files+0x215/0x3d0 [ 2524.640032][ T5814] ? __fget_files+0x215/0x3d0 [ 2524.640051][ T5814] ? __fget_files+0x21f/0x3d0 [ 2524.640071][ T5814] ksys_read+0x12a/0x250 [ 2524.640087][ T5814] ? __pfx_ksys_read+0x10/0x10 [ 2524.640103][ T5814] ? __pfx_ksys_write+0x10/0x10 [ 2524.640122][ T5814] __do_fast_syscall_32+0xe3/0x8c0 [ 2524.640138][ T5814] do_fast_syscall_32+0x32/0x70 [ 2524.640151][ T5814] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2524.640166][ T5814] RIP: 0023:0xf708ef6c [ 2524.640176][ T5814] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2524.640188][ T5814] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 2524.640199][ T5814] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800011c0 [ 2524.640206][ T5814] RDX: 00000000200021d5 RSI: 0000000000000000 RDI: 0000000000000000 [ 2524.640213][ T5814] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2524.640219][ T5814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2524.640226][ T5814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2524.640239][ T5814] [ 2525.678996][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8773'. [ 2525.978210][ T5842] FAULT_INJECTION: forcing a failure. [ 2525.978210][ T5842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2525.985565][ T5842] CPU: 1 UID: 0 PID: 5842 Comm: syz.4.8776 Tainted: G L syzkaller #0 PREEMPT(full) [ 2525.985588][ T5842] Tainted: [L]=SOFTLOCKUP [ 2525.985593][ T5842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2525.985600][ T5842] Call Trace: [ 2525.985604][ T5842] [ 2525.985609][ T5842] dump_stack_lvl+0x100/0x190 [ 2525.985629][ T5842] should_fail_ex.cold+0x5/0xa [ 2525.985643][ T5842] _copy_to_user+0x32/0xd0 [ 2525.985661][ T5842] snd_pcm_oss_read2+0x294/0x400 [ 2525.985679][ T5842] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 2525.985696][ T5842] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 2525.985709][ T5842] ? snd_pcm_oss_prepare+0x11e/0x240 [ 2525.985726][ T5842] snd_pcm_oss_read+0x5aa/0x730 [ 2525.985745][ T5842] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 2525.985763][ T5842] vfs_read+0x1e4/0xb30 [ 2525.985781][ T5842] ? __pfx_vfs_read+0x10/0x10 [ 2525.985796][ T5842] ? find_held_lock+0x2b/0x80 [ 2525.985814][ T5842] ? __fget_files+0x215/0x3d0 [ 2525.985832][ T5842] ? __fget_files+0x215/0x3d0 [ 2525.985851][ T5842] ? __fget_files+0x21f/0x3d0 [ 2525.985871][ T5842] ksys_read+0x12a/0x250 [ 2525.985887][ T5842] ? __pfx_ksys_read+0x10/0x10 [ 2525.985908][ T5842] __do_fast_syscall_32+0xe3/0x8c0 [ 2525.985936][ T5842] do_fast_syscall_32+0x32/0x70 [ 2525.985950][ T5842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2525.985965][ T5842] RIP: 0023:0xf70aef6c [ 2525.985974][ T5842] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2525.985985][ T5842] RSP: 002b:00000000f547c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 2525.985996][ T5842] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800011c0 [ 2525.986004][ T5842] RDX: 00000000200021d5 RSI: 0000000000000000 RDI: 0000000000000000 [ 2525.986011][ T5842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2525.986017][ T5842] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2525.986023][ T5842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2525.986038][ T5842] [ 2526.721536][ T5849] FAULT_INJECTION: forcing a failure. [ 2526.721536][ T5849] name failslab, interval 1, probability 0, space 0, times 0 [ 2526.729925][ T5849] CPU: 0 UID: 0 PID: 5849 Comm: syz.8.8778 Tainted: G L syzkaller #0 PREEMPT(full) [ 2526.729945][ T5849] Tainted: [L]=SOFTLOCKUP [ 2526.729950][ T5849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2526.729957][ T5849] Call Trace: [ 2526.729962][ T5849] [ 2526.729967][ T5849] dump_stack_lvl+0x100/0x190 [ 2526.729987][ T5849] should_fail_ex.cold+0x5/0xa [ 2526.730001][ T5849] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2526.730013][ T5849] should_failslab+0xc2/0x120 [ 2526.730032][ T5849] __kmalloc_noprof+0xe0/0x850 [ 2526.730051][ T5849] tomoyo_realpath_from_path+0xb6/0x690 [ 2526.730066][ T5849] tomoyo_path_number_perm+0x23c/0x580 [ 2526.730082][ T5849] ? tomoyo_path_number_perm+0x22e/0x580 [ 2526.730100][ T5849] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2526.730131][ T5849] ? find_held_lock+0x2b/0x80 [ 2526.730148][ T5849] ? hook_file_ioctl_common+0x146/0x410 [ 2526.730165][ T5849] ? __fget_files+0x215/0x3d0 [ 2526.730184][ T5849] ? __fget_files+0x21f/0x3d0 [ 2526.730203][ T5849] security_file_ioctl_compat+0xd3/0x230 [ 2526.730221][ T5849] __ia32_compat_sys_ioctl+0xc2/0x360 [ 2526.730239][ T5849] __do_fast_syscall_32+0xe3/0x8c0 [ 2526.730254][ T5849] do_fast_syscall_32+0x32/0x70 [ 2526.730267][ T5849] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2526.730282][ T5849] RIP: 0023:0xf708ef6c [ 2526.730291][ T5849] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2526.730303][ T5849] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2526.730314][ T5849] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c028aa03 [ 2526.730322][ T5849] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 2526.730329][ T5849] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2526.730335][ T5849] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2526.730342][ T5849] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2526.730355][ T5849] [ 2526.770536][ T5849] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2527.609685][ T5867] sctp: [Deprecated]: syz.4.8784 (pid 5867) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2527.609685][ T5867] Use struct sctp_sack_info instead [ 2527.949467][ T5871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8785'. [ 2528.482117][ T5881] FAULT_INJECTION: forcing a failure. [ 2528.482117][ T5881] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.486223][ T5881] CPU: 2 UID: 0 PID: 5881 Comm: syz.2.8788 Tainted: G L syzkaller #0 PREEMPT(full) [ 2528.486241][ T5881] Tainted: [L]=SOFTLOCKUP [ 2528.486245][ T5881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2528.486252][ T5881] Call Trace: [ 2528.486256][ T5881] [ 2528.486260][ T5881] dump_stack_lvl+0x100/0x190 [ 2528.486280][ T5881] should_fail_ex.cold+0x5/0xa [ 2528.486293][ T5881] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2528.486305][ T5881] should_failslab+0xc2/0x120 [ 2528.486324][ T5881] __kmalloc_noprof+0xe0/0x850 [ 2528.486342][ T5881] tomoyo_realpath_from_path+0xb6/0x690 [ 2528.486357][ T5881] tomoyo_path_number_perm+0x23c/0x580 [ 2528.486374][ T5881] ? tomoyo_path_number_perm+0x22e/0x580 [ 2528.486391][ T5881] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2528.486433][ T5881] ? find_held_lock+0x2b/0x80 [ 2528.486452][ T5881] ? hook_file_ioctl_common+0x146/0x410 [ 2528.486470][ T5881] ? __fget_files+0x215/0x3d0 [ 2528.486490][ T5881] ? __fget_files+0x21f/0x3d0 [ 2528.486509][ T5881] security_file_ioctl_compat+0xd3/0x230 [ 2528.486527][ T5881] __ia32_compat_sys_ioctl+0xc2/0x360 [ 2528.486545][ T5881] __do_fast_syscall_32+0xe3/0x8c0 [ 2528.486588][ T5881] do_fast_syscall_32+0x32/0x70 [ 2528.486603][ T5881] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2528.486618][ T5881] RIP: 0023:0xf7fc7f6c [ 2528.486627][ T5881] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2528.486638][ T5881] RSP: 002b:00000000f544450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2528.486649][ T5881] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000ae80 [ 2528.486656][ T5881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2528.486662][ T5881] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2528.486669][ T5881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2528.486675][ T5881] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2528.486689][ T5881] [ 2528.486707][ T5881] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2528.797279][ T5891] input: syz1 as /devices/virtual/input/input145 [ 2528.958619][ T5895] netlink: 88 bytes leftover after parsing attributes in process `syz.8.8792'. [ 2530.734588][ T5935] FAULT_INJECTION: forcing a failure. [ 2530.734588][ T5935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2530.739984][ T5935] CPU: 3 UID: 0 PID: 5935 Comm: syz.4.8803 Tainted: G L syzkaller #0 PREEMPT(full) [ 2530.740012][ T5935] Tainted: [L]=SOFTLOCKUP [ 2530.740018][ T5935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2530.740029][ T5935] Call Trace: [ 2530.740036][ T5935] [ 2530.740044][ T5935] dump_stack_lvl+0x100/0x190 [ 2530.740075][ T5935] should_fail_ex.cold+0x5/0xa [ 2530.740096][ T5935] _copy_from_user+0x2e/0xd0 [ 2530.740123][ T5935] get_compat_msghdr+0xb3/0x4b0 [ 2530.740144][ T5935] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2530.740172][ T5935] ___sys_sendmsg+0x1b6/0x1e0 [ 2530.740199][ T5935] ? __pfx____sys_sendmsg+0x10/0x10 [ 2530.740254][ T5935] __sys_sendmsg+0x170/0x220 [ 2530.740273][ T5935] ? __pfx___sys_sendmsg+0x10/0x10 [ 2530.740301][ T5935] ? __pfx_ksys_write+0x10/0x10 [ 2530.740332][ T5935] __do_fast_syscall_32+0xe3/0x8c0 [ 2530.740356][ T5935] do_fast_syscall_32+0x32/0x70 [ 2530.740376][ T5935] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2530.740398][ T5935] RIP: 0023:0xf70aef6c [ 2530.740413][ T5935] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2530.740429][ T5935] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2530.740447][ T5935] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 2530.740458][ T5935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2530.740468][ T5935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2530.740478][ T5935] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2530.740488][ T5935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2530.740511][ T5935] [ 2530.756404][ T5934] overlayfs: failed to clone upperpath [ 2531.598438][ T5942] qnx6: unable to read the first superblock [ 2531.608766][ T40] audit: type=1107 audit(1772102611.154:1001): pid=5937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2531.801040][ T5956] FAULT_INJECTION: forcing a failure. [ 2531.801040][ T5956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2531.834175][ T5956] CPU: 2 UID: 0 PID: 5956 Comm: syz.2.8809 Tainted: G L syzkaller #0 PREEMPT(full) [ 2531.834195][ T5956] Tainted: [L]=SOFTLOCKUP [ 2531.834199][ T5956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2531.834206][ T5956] Call Trace: [ 2531.834210][ T5956] [ 2531.834215][ T5956] dump_stack_lvl+0x100/0x190 [ 2531.834235][ T5956] should_fail_ex.cold+0x5/0xa [ 2531.834248][ T5956] _copy_from_user+0x2e/0xd0 [ 2531.834266][ T5956] get_compat_msghdr+0xb3/0x4b0 [ 2531.834278][ T5956] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2531.834294][ T5956] ___sys_sendmsg+0x1b6/0x1e0 [ 2531.834311][ T5956] ? __pfx____sys_sendmsg+0x10/0x10 [ 2531.834342][ T5956] __sys_sendmsg+0x170/0x220 [ 2531.834355][ T5956] ? __pfx___sys_sendmsg+0x10/0x10 [ 2531.834371][ T5956] ? __pfx_ksys_write+0x10/0x10 [ 2531.834391][ T5956] __do_fast_syscall_32+0xe3/0x8c0 [ 2531.834407][ T5956] do_fast_syscall_32+0x32/0x70 [ 2531.834420][ T5956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2531.834435][ T5956] RIP: 0023:0xf7fc7f6c [ 2531.834444][ T5956] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2531.834455][ T5956] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2531.834466][ T5956] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 2531.834473][ T5956] RDX: 0000000022000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2531.834480][ T5956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2531.834486][ T5956] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2531.834492][ T5956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2531.834505][ T5956] [ 2531.992030][T14122] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 2532.046362][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 2532.123008][ T5974] tipc: Enabling of bearer rejected, failed to enable media [ 2532.141500][ T5976] trusted_key: encrypted_key: insufficient parameters specified [ 2532.152957][T14122] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2532.156824][T14122] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2532.159928][T14122] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2532.171745][T14122] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2532.174714][T14122] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2532.191251][T14122] usb 13-1: config 0 descriptor?? [ 2532.260408][ T5989] FAULT_INJECTION: forcing a failure. [ 2532.260408][ T5989] name failslab, interval 1, probability 0, space 0, times 0 [ 2532.264613][ T5989] CPU: 3 UID: 0 PID: 5989 Comm: syz.4.8817 Tainted: G L syzkaller #0 PREEMPT(full) [ 2532.264632][ T5989] Tainted: [L]=SOFTLOCKUP [ 2532.264636][ T5989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2532.264643][ T5989] Call Trace: [ 2532.264647][ T5989] [ 2532.264652][ T5989] dump_stack_lvl+0x100/0x190 [ 2532.264672][ T5989] should_fail_ex.cold+0x5/0xa [ 2532.264686][ T5989] should_failslab+0xc2/0x120 [ 2532.264704][ T5989] __kmalloc_cache_noprof+0x7a/0x6f0 [ 2532.264730][ T5989] ? vga_arb_read+0x7a/0x5e0 [ 2532.264750][ T5989] ? __pfx_vga_arb_read+0x10/0x10 [ 2532.264768][ T5989] vga_arb_read+0x7a/0x5e0 [ 2532.264786][ T5989] ? rw_verify_area+0xce/0x6d0 [ 2532.264801][ T5989] ? __pfx_vga_arb_read+0x10/0x10 [ 2532.264824][ T5989] vfs_read+0x1e4/0xb30 [ 2532.264842][ T5989] ? __pfx_vfs_read+0x10/0x10 [ 2532.264858][ T5989] ? find_held_lock+0x2b/0x80 [ 2532.264875][ T5989] ? __fget_files+0x215/0x3d0 [ 2532.264891][ T5989] ? __fget_files+0x215/0x3d0 [ 2532.264910][ T5989] ? __fget_files+0x21f/0x3d0 [ 2532.264930][ T5989] ksys_pread64+0x161/0x1a0 [ 2532.264949][ T5989] ? __pfx_ksys_pread64+0x10/0x10 [ 2532.264966][ T5989] ? __pfx_ksys_write+0x10/0x10 [ 2532.264986][ T5989] __do_fast_syscall_32+0xe3/0x8c0 [ 2532.265002][ T5989] do_fast_syscall_32+0x32/0x70 [ 2532.265015][ T5989] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2532.265030][ T5989] RIP: 0023:0xf70aef6c [ 2532.265040][ T5989] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2532.265051][ T5989] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000b4 [ 2532.265062][ T5989] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 2532.265070][ T5989] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000000 [ 2532.265076][ T5989] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2532.265082][ T5989] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2532.265089][ T5989] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2532.265102][ T5989] [ 2532.436656][ T5994] /dev/nullb0: Can't lookup blockdev [ 2532.462958][ T40] audit: type=1107 audit(1772102611.995:1002): pid=5986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2532.608721][T14122] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 2532.714146][ T5999] FAULT_INJECTION: forcing a failure. [ 2532.714146][ T5999] name failslab, interval 1, probability 0, space 0, times 0 [ 2532.718351][ T5999] CPU: 2 UID: 0 PID: 5999 Comm: syz.4.8819 Tainted: G L syzkaller #0 PREEMPT(full) [ 2532.718369][ T5999] Tainted: [L]=SOFTLOCKUP [ 2532.718373][ T5999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2532.718381][ T5999] Call Trace: [ 2532.718385][ T5999] [ 2532.718390][ T5999] dump_stack_lvl+0x100/0x190 [ 2532.718411][ T5999] should_fail_ex.cold+0x5/0xa [ 2532.718423][ T5999] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2532.718436][ T5999] should_failslab+0xc2/0x120 [ 2532.718454][ T5999] __kmalloc_noprof+0xe0/0x850 [ 2532.718473][ T5999] tomoyo_realpath_from_path+0xb6/0x690 [ 2532.718488][ T5999] tomoyo_path_number_perm+0x23c/0x580 [ 2532.718505][ T5999] ? tomoyo_path_number_perm+0x22e/0x580 [ 2532.718547][ T5999] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2532.718580][ T5999] ? find_held_lock+0x2b/0x80 [ 2532.718598][ T5999] ? hook_file_ioctl_common+0x146/0x410 [ 2532.718614][ T5999] ? __fget_files+0x215/0x3d0 [ 2532.718634][ T5999] ? __fget_files+0x21f/0x3d0 [ 2532.718653][ T5999] security_file_ioctl_compat+0xd3/0x230 [ 2532.718671][ T5999] __ia32_compat_sys_ioctl+0xc2/0x360 [ 2532.718688][ T5999] __do_fast_syscall_32+0xe3/0x8c0 [ 2532.718703][ T5999] do_fast_syscall_32+0x32/0x70 [ 2532.718717][ T5999] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2532.718731][ T5999] RIP: 0023:0xf70aef6c [ 2532.718741][ T5999] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2532.718752][ T5999] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2532.718764][ T5999] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040085112 [ 2532.718771][ T5999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2532.718777][ T5999] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2532.718784][ T5999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2532.718795][ T5999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2532.718808][ T5999] [ 2532.718814][ T5999] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2534.038686][ T40] audit: type=1326 audit(1772102613.578:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.4.8820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7fc00000 [ 2534.407370][ T6014] FAULT_INJECTION: forcing a failure. [ 2534.407370][ T6014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2534.557679][ T6014] CPU: 1 UID: 0 PID: 6014 Comm: syz.2.8824 Tainted: G L syzkaller #0 PREEMPT(full) [ 2534.557700][ T6014] Tainted: [L]=SOFTLOCKUP [ 2534.557704][ T6014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2534.557712][ T6014] Call Trace: [ 2534.557716][ T6014] [ 2534.557721][ T6014] dump_stack_lvl+0x100/0x190 [ 2534.557741][ T6014] should_fail_ex.cold+0x5/0xa [ 2534.557759][ T6014] _copy_from_user+0x2e/0xd0 [ 2534.557777][ T6014] get_compat_msghdr+0xb3/0x4b0 [ 2534.557789][ T6014] ? _parse_integer_limit+0x17f/0x1d0 [ 2534.557802][ T6014] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2534.557814][ T6014] ? _kstrtoull+0x13c/0x1f0 [ 2534.557826][ T6014] ? __pfx__kstrtoull+0x10/0x10 [ 2534.557840][ T6014] ___sys_sendmsg+0x1b6/0x1e0 [ 2534.557858][ T6014] ? __pfx____sys_sendmsg+0x10/0x10 [ 2534.557874][ T6014] ? __lock_acquire+0x4a5/0x2630 [ 2534.557893][ T6014] ? find_held_lock+0x2b/0x80 [ 2534.557919][ T6014] __sys_sendmmsg+0x2ff/0x430 [ 2534.557933][ T6014] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2534.557962][ T6014] ? __fget_files+0x215/0x3d0 [ 2534.557986][ T6014] ? fput+0x79/0x100 [ 2534.557998][ T6014] ? ksys_write+0x1ac/0x250 [ 2534.558015][ T6014] ? __pfx_ksys_write+0x10/0x10 [ 2534.558033][ T6014] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 2534.558045][ T6014] ? lockdep_hardirqs_on+0x78/0x100 [ 2534.558058][ T6014] __do_fast_syscall_32+0xe3/0x8c0 [ 2534.558073][ T6014] do_fast_syscall_32+0x32/0x70 [ 2534.558086][ T6014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2534.558101][ T6014] RIP: 0023:0xf7fc7f6c [ 2534.558110][ T6014] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2534.558121][ T6014] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 2534.558133][ T6014] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000480 [ 2534.558140][ T6014] RDX: 00000000000002e9 RSI: 0000000000000000 RDI: 0000000000000000 [ 2534.558146][ T6014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2534.558152][ T6014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2534.558159][ T6014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2534.558172][ T6014] [ 2534.882003][ T6024] FAULT_INJECTION: forcing a failure. [ 2534.882003][ T6024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2534.886125][ T6024] CPU: 0 UID: 0 PID: 6024 Comm: syz.4.8828 Tainted: G L syzkaller #0 PREEMPT(full) [ 2534.886143][ T6024] Tainted: [L]=SOFTLOCKUP [ 2534.886147][ T6024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2534.886154][ T6024] Call Trace: [ 2534.886159][ T6024] [ 2534.886163][ T6024] dump_stack_lvl+0x100/0x190 [ 2534.886183][ T6024] should_fail_ex.cold+0x5/0xa [ 2534.886196][ T6024] _copy_from_user+0x2e/0xd0 [ 2534.886215][ T6024] get_compat_msghdr+0xb3/0x4b0 [ 2534.886227][ T6024] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2534.886243][ T6024] ___sys_sendmsg+0x1b6/0x1e0 [ 2534.886260][ T6024] ? __pfx____sys_sendmsg+0x10/0x10 [ 2534.886292][ T6024] __sys_sendmsg+0x170/0x220 [ 2534.886304][ T6024] ? __pfx___sys_sendmsg+0x10/0x10 [ 2534.886320][ T6024] ? __pfx_ksys_write+0x10/0x10 [ 2534.886340][ T6024] __do_fast_syscall_32+0xe3/0x8c0 [ 2534.886355][ T6024] do_fast_syscall_32+0x32/0x70 [ 2534.886368][ T6024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2534.886383][ T6024] RIP: 0023:0xf70aef6c [ 2534.886392][ T6024] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2534.886403][ T6024] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2534.886415][ T6024] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000580 [ 2534.886421][ T6024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2534.886428][ T6024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2534.886434][ T6024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2534.886441][ T6024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2534.886454][ T6024] [ 2535.100609][ T6031] FAULT_INJECTION: forcing a failure. [ 2535.100609][ T6031] name failslab, interval 1, probability 0, space 0, times 0 [ 2535.104587][ T6031] CPU: 3 UID: 0 PID: 6031 Comm: syz.4.8830 Tainted: G L syzkaller #0 PREEMPT(full) [ 2535.104604][ T6031] Tainted: [L]=SOFTLOCKUP [ 2535.104609][ T6031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2535.104616][ T6031] Call Trace: [ 2535.104621][ T6031] [ 2535.104626][ T6031] dump_stack_lvl+0x100/0x190 [ 2535.104647][ T6031] should_fail_ex.cold+0x5/0xa [ 2535.104660][ T6031] should_failslab+0xc2/0x120 [ 2535.104678][ T6031] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 2535.104695][ T6031] ? __alloc_skb+0x140/0x710 [ 2535.104708][ T6031] __alloc_skb+0x140/0x710 [ 2535.104719][ T6031] ? __pfx___alloc_skb+0x10/0x10 [ 2535.104730][ T6031] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 2535.104751][ T6031] tcp_stream_alloc_skb+0x34/0x660 [ 2535.104768][ T6031] tcp_sendmsg_locked+0x133b/0x45f0 [ 2535.104792][ T6031] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 2535.104811][ T6031] ? do_raw_spin_lock+0x128/0x260 [ 2535.104833][ T6031] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2535.104861][ T6031] ? __local_bh_enable_ip+0x9e/0x120 [ 2535.104882][ T6031] tcp_sendmsg+0x2e/0x50 [ 2535.104902][ T6031] ? __pfx_tcp_sendmsg+0x10/0x10 [ 2535.104925][ T6031] inet_sendmsg+0xb9/0x140 [ 2535.104949][ T6031] __sys_sendto+0x467/0x520 [ 2535.104967][ T6031] ? __pfx___sys_sendto+0x10/0x10 [ 2535.104993][ T6031] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2535.105023][ T6031] ? fput+0x79/0x100 [ 2535.105042][ T6031] ? ksys_write+0x1ac/0x250 [ 2535.105069][ T6031] __ia32_sys_sendto+0xdd/0x1b0 [ 2535.105085][ T6031] ? __do_fast_syscall_32+0x94/0x8c0 [ 2535.105105][ T6031] ? lockdep_hardirqs_on+0x78/0x100 [ 2535.105124][ T6031] __do_fast_syscall_32+0xe3/0x8c0 [ 2535.105147][ T6031] do_fast_syscall_32+0x32/0x70 [ 2535.105167][ T6031] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2535.105189][ T6031] RIP: 0023:0xf70aef6c [ 2535.105203][ T6031] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2535.105219][ T6031] RSP: 002b:00000000f547c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 2535.105238][ T6031] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 2535.105250][ T6031] RDX: 00000000ffffff94 RSI: 0000000000000012 RDI: 0000000000000000 [ 2535.105261][ T6031] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 2535.105271][ T6031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2535.105282][ T6031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2535.105305][ T6031] [ 2535.207185][ T651] usb 13-1: USB disconnect, device number 19 [ 2535.421219][ T6037] qnx6: unable to read the first superblock [ 2535.686417][ T40] audit: type=1107 audit(1772102614.980:1004): pid=6032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2535.956696][ T6022] netlink: 'syz.2.8827': attribute type 4 has an invalid length. [ 2536.006927][ T6027] netlink: 'syz.2.8827': attribute type 4 has an invalid length. [ 2538.635991][ T6092] netlink: 'syz.6.8846': attribute type 3 has an invalid length. [ 2538.638588][ T6092] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8846'. [ 2538.641464][ T6092] netlink: 'syz.6.8846': attribute type 3 has an invalid length. [ 2538.645923][ T6092] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8846'. [ 2539.009862][ T6099] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2539.013375][ T6099] overlayfs: failed to set xattr on upper [ 2539.015213][ T6099] overlayfs: ...falling back to redirect_dir=nofollow. [ 2539.017472][ T6099] overlayfs: ...falling back to index=off. [ 2539.019346][ T6099] overlayfs: ...falling back to uuid=null. [ 2539.062843][ T6101] overlayfs: missing 'workdir' [ 2541.695377][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8857'. [ 2542.070007][ T6139] fuse: Unknown parameter '0x0000000000000003ÿ0x00000000000000030x000000000000000300000000000000000000' [ 2542.154572][ T6140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8859'. [ 2542.209140][ T6140] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8859'. [ 2542.570244][ T6144] FAULT_INJECTION: forcing a failure. [ 2542.570244][ T6144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2542.574306][ T6144] CPU: 2 UID: 0 PID: 6144 Comm: syz.8.8861 Tainted: G L syzkaller #0 PREEMPT(full) [ 2542.574325][ T6144] Tainted: [L]=SOFTLOCKUP [ 2542.574329][ T6144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2542.574336][ T6144] Call Trace: [ 2542.574340][ T6144] [ 2542.574345][ T6144] dump_stack_lvl+0x100/0x190 [ 2542.574364][ T6144] should_fail_ex.cold+0x5/0xa [ 2542.574377][ T6144] _copy_to_user+0x32/0xd0 [ 2542.574396][ T6144] simple_read_from_buffer+0xcb/0x170 [ 2542.574414][ T6144] proc_fail_nth_read+0x1af/0x230 [ 2542.574427][ T6144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2542.574459][ T6144] ? rw_verify_area+0xce/0x6d0 [ 2542.574474][ T6144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2542.574490][ T6144] vfs_read+0x1e4/0xb30 [ 2542.574508][ T6144] ? __pfx_vfs_read+0x10/0x10 [ 2542.574523][ T6144] ? find_held_lock+0x2b/0x80 [ 2542.574541][ T6144] ? __fget_files+0x215/0x3d0 [ 2542.574560][ T6144] ? __fget_files+0x21f/0x3d0 [ 2542.574580][ T6144] ksys_read+0x12a/0x250 [ 2542.574596][ T6144] ? __pfx_ksys_read+0x10/0x10 [ 2542.574616][ T6144] do_int80_emulation+0x141/0x6b0 [ 2542.574632][ T6144] asm_int80_emulation+0x1a/0x20 [ 2542.574643][ T6144] RIP: 0023:0xf71c5b6b [ 2542.574652][ T6144] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2542.574663][ T6144] RSP: 002b:00000000f547d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2542.574674][ T6144] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f547d5d0 [ 2542.574681][ T6144] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 2542.574687][ T6144] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2542.574694][ T6144] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2542.574700][ T6144] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2542.574713][ T6144] [ 2542.655185][ T6148] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2542.659168][ T6148] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2542.769483][ T6151] FAULT_INJECTION: forcing a failure. [ 2542.769483][ T6151] name failslab, interval 1, probability 0, space 0, times 0 [ 2542.774372][ T6151] CPU: 2 UID: 0 PID: 6151 Comm: syz.8.8864 Tainted: G L syzkaller #0 PREEMPT(full) [ 2542.774397][ T6151] Tainted: [L]=SOFTLOCKUP [ 2542.774402][ T6151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2542.774412][ T6151] Call Trace: [ 2542.774418][ T6151] [ 2542.774425][ T6151] dump_stack_lvl+0x100/0x190 [ 2542.774505][ T6151] should_fail_ex.cold+0x5/0xa [ 2542.774522][ T6151] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2542.774538][ T6151] should_failslab+0xc2/0x120 [ 2542.774561][ T6151] __kmalloc_noprof+0xe0/0x850 [ 2542.774586][ T6151] tomoyo_realpath_from_path+0xb6/0x690 [ 2542.774606][ T6151] tomoyo_path_number_perm+0x23c/0x580 [ 2542.774627][ T6151] ? tomoyo_path_number_perm+0x22e/0x580 [ 2542.774649][ T6151] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2542.774691][ T6151] ? find_held_lock+0x2b/0x80 [ 2542.774733][ T6151] ? hook_file_ioctl_common+0x146/0x410 [ 2542.774755][ T6151] ? __fget_files+0x215/0x3d0 [ 2542.774779][ T6151] ? __fget_files+0x21f/0x3d0 [ 2542.774803][ T6151] security_file_ioctl_compat+0xd3/0x230 [ 2542.774829][ T6151] __ia32_compat_sys_ioctl+0xc2/0x360 [ 2542.774851][ T6151] __do_fast_syscall_32+0xe3/0x8c0 [ 2542.774871][ T6151] do_fast_syscall_32+0x32/0x70 [ 2542.774889][ T6151] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2542.774908][ T6151] RIP: 0023:0xf708ef6c [ 2542.774920][ T6151] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2542.774935][ T6151] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2542.774950][ T6151] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 2542.774960][ T6151] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000000000000 [ 2542.774969][ T6151] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2542.774978][ T6151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2542.774987][ T6151] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2542.775006][ T6151] [ 2542.775133][ T6151] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2542.962688][ T6163] loop2: detected capacity change from 0 to 7 [ 2542.966731][ T6163] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 2542.974798][ T6163] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 2542.982267][ T6163] Dev loop2: unable to read RDB block 7 [ 2542.984137][ T6163] loop2: unable to read partition table [ 2542.986463][ T6163] loop2: partition table beyond EOD, truncated [ 2542.992398][ T6163] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2543.105018][ T6164] netlink: 'syz.4.8862': attribute type 4 has an invalid length. [ 2543.125171][ T6164] netlink: 'syz.4.8862': attribute type 4 has an invalid length. [ 2544.174508][ T6193] syzkaller0: entered promiscuous mode [ 2544.176485][ T6193] syzkaller0: entered allmulticast mode [ 2544.641467][ T6203] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2545.043934][ T6213] syzkaller0: entered promiscuous mode [ 2545.046268][ T6213] syzkaller0: entered allmulticast mode [ 2545.138902][ T6221] syzkaller0: entered promiscuous mode [ 2545.140682][ T6221] syzkaller0: entered allmulticast mode [ 2545.170154][ T6221] netlink: 80 bytes leftover after parsing attributes in process `syz.8.8883'. [ 2545.255085][ T6224] netlink: 'syz.4.8885': attribute type 5 has an invalid length. [ 2545.257509][ T6224] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8885'. [ 2545.581622][ T6241] tmpfs: Unknown parameter 'grðquota_block_haRdlimit' [ 2545.816277][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8887'. [ 2546.403656][ T6252] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 2546.406107][ T6252] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2546.409266][ T6252] vhci_hcd vhci_hcd.0: Device attached [ 2546.443894][ T6256] Unknown options in mask b7f2 [ 2546.681513][ T6253] vhci_hcd: connection closed [ 2546.681508][T31557] usb 41-1: new high-speed USB device number 6 using vhci_hcd [ 2546.681653][ T6254] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 2546.688813][T32313] vhci_hcd vhci_hcd.2: stop threads [ 2546.691533][T32313] vhci_hcd vhci_hcd.2: release socket [ 2546.711704][T32313] vhci_hcd vhci_hcd.2: disconnect device [ 2546.835879][ T6264] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 2546.838561][ T6264] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2546.866722][ T6264] vhci_hcd vhci_hcd.0: Device attached [ 2547.228378][T23896] usb 53-1: new low-speed USB device number 4 using vhci_hcd [ 2547.790600][ T6267] vhci_hcd: connection reset by peer [ 2547.794338][T24610] vhci_hcd vhci_hcd.8: stop threads [ 2547.796561][T24610] vhci_hcd vhci_hcd.8: release socket [ 2547.800910][T24610] vhci_hcd vhci_hcd.8: disconnect device [ 2547.802047][ T6274] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 2547.805503][ T6274] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2547.819348][ T6274] vhci_hcd vhci_hcd.0: Device attached [ 2547.833943][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8895'. [ 2548.028233][ T6275] vhci_hcd: connection closed [ 2548.028538][T15003] vhci_hcd vhci_hcd.2: stop threads [ 2548.036131][T15003] vhci_hcd vhci_hcd.2: release socket [ 2548.039794][T15003] vhci_hcd vhci_hcd.2: disconnect device [ 2548.326607][ T6283] input: syz1 as /devices/virtual/input/input146 [ 2548.398562][ T6284] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8898'. [ 2548.567702][ T6291] input: syz1 as /devices/virtual/input/input147 [ 2548.647320][ T6294] netlink: 88 bytes leftover after parsing attributes in process `syz.8.8899'. [ 2548.717068][ T6295] trusted_key: encrypted_key: insufficient parameters specified [ 2550.229388][ T6315] FAULT_INJECTION: forcing a failure. [ 2550.229388][ T6315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2550.235333][ T6315] CPU: 2 UID: 0 PID: 6315 Comm: syz.4.8907 Tainted: G L syzkaller #0 PREEMPT(full) [ 2550.235363][ T6315] Tainted: [L]=SOFTLOCKUP [ 2550.235369][ T6315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2550.235381][ T6315] Call Trace: [ 2550.235388][ T6315] [ 2550.235394][ T6315] dump_stack_lvl+0x100/0x190 [ 2550.235425][ T6315] should_fail_ex.cold+0x5/0xa [ 2550.235447][ T6315] _copy_from_user+0x2e/0xd0 [ 2550.235475][ T6315] get_compat_msghdr+0xb3/0x4b0 [ 2550.235496][ T6315] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2550.235523][ T6315] ___sys_sendmsg+0x1b6/0x1e0 [ 2550.235552][ T6315] ? __pfx____sys_sendmsg+0x10/0x10 [ 2550.235607][ T6315] __sys_sendmsg+0x170/0x220 [ 2550.235634][ T6315] ? __pfx___sys_sendmsg+0x10/0x10 [ 2550.235659][ T6315] ? __pfx_ksys_write+0x10/0x10 [ 2550.235686][ T6315] __do_fast_syscall_32+0xe3/0x8c0 [ 2550.235709][ T6315] do_fast_syscall_32+0x32/0x70 [ 2550.235727][ T6315] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2550.235751][ T6315] RIP: 0023:0xf70aef6c [ 2550.235767][ T6315] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2550.235782][ T6315] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2550.235801][ T6315] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800000c0 [ 2550.235812][ T6315] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 2550.235821][ T6315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2550.235831][ T6315] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2550.235840][ T6315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2550.235862][ T6315] [ 2552.735043][T23896] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 2552.895180][T31557] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 2553.425663][ T6340] [ 2553.426496][ T6340] ====================================================== [ 2553.428696][ T6340] WARNING: possible circular locking dependency detected [ 2553.430929][ T6340] syzkaller #0 Tainted: G L [ 2553.433251][ T6340] ------------------------------------------------------ [ 2553.435696][ T6340] syz.8.8914/6340 is trying to acquire lock: [ 2553.437587][ T6340] ffff888051551290 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: lookup_slow+0x42/0x70 [ 2553.440657][ T6340] [ 2553.440657][ T6340] but task is already holding lock: [ 2553.442982][ T6340] ffff88804ae33c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 2553.445896][ T6340] [ 2553.445896][ T6340] which lock already depends on the new lock. [ 2553.445896][ T6340] [ 2553.449147][ T6340] [ 2553.449147][ T6340] the existing dependency chain (in reverse order) is: [ 2553.452017][ T6340] [ 2553.452017][ T6340] -> #3 (&of->mutex){+.+.}-{4:4}: [ 2553.454300][ T6340] __mutex_lock+0x1a2/0x1b90 [ 2553.455945][ T6340] kernfs_fop_write_iter+0x2c2/0x5f0 [ 2553.457798][ T6340] iter_file_splice_write+0x82b/0x10a0 [ 2553.459902][ T6340] do_splice+0x109c/0x1fd0 [ 2553.461495][ T6340] __do_splice+0x33b/0x370 [ 2553.463079][ T6340] __ia32_sys_splice+0x189/0x250 [ 2553.464829][ T6340] __do_fast_syscall_32+0xe3/0x8c0 [ 2553.466620][ T6340] do_fast_syscall_32+0x32/0x70 [ 2553.468340][ T6340] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2553.470516][ T6340] [ 2553.470516][ T6340] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 2553.472842][ T6340] __mutex_lock+0x1a2/0x1b90 [ 2553.474491][ T6340] pipe_lock+0x69/0x80 [ 2553.475967][ T6340] iter_file_splice_write+0x1f8/0x10a0 [ 2553.477864][ T6340] do_splice+0x109c/0x1fd0 [ 2553.479487][ T6340] __do_splice+0x33b/0x370 [ 2553.480092][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8912'. [ 2553.481097][ T6340] __ia32_sys_splice+0x189/0x250 [ 2553.481116][ T6340] __do_fast_syscall_32+0xe3/0x8c0 [ 2553.481128][ T6340] do_fast_syscall_32+0x32/0x70 [ 2553.481140][ T6340] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2553.481154][ T6340] [ 2553.481154][ T6340] -> #1 (sb_writers#5){.+.+}-{0:0}: [ 2553.494430][ T6340] mnt_want_write+0x6f/0x450 [ 2553.496056][ T6340] ovl_create_object+0x12b/0x3b0 [ 2553.497778][ T6340] lookup_open.isra.0+0xc47/0x11b0 [ 2553.499583][ T6340] path_openat+0x2291/0x31a0 [ 2553.501206][ T6340] do_file_open+0x20e/0x430 [ 2553.502819][ T6340] do_sys_openat2+0x10d/0x1e0 [ 2553.504465][ T6340] __ia32_compat_sys_open+0xfe/0x1c0 [ 2553.506305][ T6340] __do_fast_syscall_32+0xe3/0x8c0 [ 2553.508074][ T6340] do_fast_syscall_32+0x32/0x70 [ 2553.509786][ T6340] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2553.511943][ T6340] [ 2553.511943][ T6340] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 2553.514655][ T6340] __lock_acquire+0x14b8/0x2630 [ 2553.516313][ T6340] lock_acquire+0x1cf/0x380 [ 2553.517882][ T6340] down_read+0x99/0x460 [ 2553.519431][ T6340] lookup_slow+0x42/0x70 [ 2553.520974][ T6340] path_lookupat+0x5e8/0xc40 [ 2553.522607][ T6340] filename_lookup+0x202/0x590 [ 2553.524275][ T6340] kern_path+0x37/0x50 [ 2553.525771][ T6340] lookup_bdev+0xd8/0x280 [ 2553.527339][ T6340] resume_store+0x1d6/0x460 [ 2553.528966][ T6340] kobj_attr_store+0x58/0x80 [ 2553.530616][ T6340] sysfs_kf_write+0xf2/0x150 [ 2553.532230][ T6340] kernfs_fop_write_iter+0x3e0/0x5f0 [ 2553.534073][ T6340] vfs_write+0x6ac/0x1070 [ 2553.535644][ T6340] ksys_write+0x12a/0x250 [ 2553.537198][ T6340] __do_fast_syscall_32+0xe3/0x8c0 [ 2553.538998][ T6340] do_fast_syscall_32+0x32/0x70 [ 2553.540694][ T6340] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2553.542880][ T6340] [ 2553.542880][ T6340] other info that might help us debug this: [ 2553.542880][ T6340] [ 2553.546000][ T6340] Chain exists of: [ 2553.546000][ T6340] &ovl_i_mutex_dir_key[depth] --> &pipe->mutex --> &of->mutex [ 2553.546000][ T6340] [ 2553.550099][ T6340] Possible unsafe locking scenario: [ 2553.550099][ T6340] [ 2553.552467][ T6340] CPU0 CPU1 [ 2553.554154][ T6340] ---- ---- [ 2553.555897][ T6340] lock(&of->mutex); [ 2553.557247][ T6340] lock(&pipe->mutex); [ 2553.559377][ T6340] lock(&of->mutex); [ 2553.559442][ T6335] input: syz1 as /devices/virtual/input/input148 [ 2553.561421][ T6340] rlock(&ovl_i_mutex_dir_key[depth]); [ 2553.561436][ T6340] [ 2553.561436][ T6340] *** DEADLOCK *** [ 2553.561436][ T6340] [ 2553.561439][ T6340] 4 locks held by syz.8.8914/6340: [ 2553.561446][ T6340] #0: ffff888023563278 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 2553.572247][ T6340] #1: ffff8880252da420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2553.575079][ T6340] #2: ffff88804ae33c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 2553.578145][ T6340] #3: ffff88801cbeb788 (kn->active#78){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 2553.581314][ T6340] [ 2553.581314][ T6340] stack backtrace: [ 2553.583212][ T6340] CPU: 0 UID: 0 PID: 6340 Comm: syz.8.8914 Tainted: G L syzkaller #0 PREEMPT(full) [ 2553.583229][ T6340] Tainted: [L]=SOFTLOCKUP [ 2553.583233][ T6340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2553.583240][ T6340] Call Trace: [ 2553.583245][ T6340] [ 2553.583251][ T6340] dump_stack_lvl+0x100/0x190 [ 2553.583268][ T6340] print_circular_bug.cold+0x178/0x1c7 [ 2553.583286][ T6340] check_noncircular+0x146/0x160 [ 2553.583300][ T6340] __lock_acquire+0x14b8/0x2630 [ 2553.583320][ T6340] lock_acquire+0x1cf/0x380 [ 2553.583332][ T6340] ? lookup_slow+0x42/0x70 [ 2553.583345][ T6340] ? __pfx___might_resched+0x10/0x10 [ 2553.583361][ T6340] ? try_to_unlazy+0x296/0x910 [ 2553.583375][ T6340] down_read+0x99/0x460 [ 2553.583389][ T6340] ? lookup_slow+0x42/0x70 [ 2553.583401][ T6340] ? __pfx_down_read+0x10/0x10 [ 2553.583415][ T6340] lookup_slow+0x42/0x70 [ 2553.583427][ T6340] path_lookupat+0x5e8/0xc40 [ 2553.583442][ T6340] filename_lookup+0x202/0x590 [ 2553.583459][ T6340] ? __pfx_filename_lookup+0x10/0x10 [ 2553.583479][ T6340] ? __asan_memcpy+0x3c/0x60 [ 2553.583493][ T6340] ? do_getname_kernel+0x1be/0x250 [ 2553.583504][ T6340] kern_path+0x37/0x50 [ 2553.583519][ T6340] lookup_bdev+0xd8/0x280 [ 2553.583536][ T6340] ? __pfx_lookup_bdev+0x10/0x10 [ 2553.583553][ T6340] ? __asan_memcpy+0x3c/0x60 [ 2553.583567][ T6340] resume_store+0x1d6/0x460 [ 2553.583582][ T6340] ? __pfx_resume_store+0x10/0x10 [ 2553.583599][ T6340] ? find_held_lock+0x2b/0x80 [ 2553.583615][ T6340] ? sysfs_file_kobj+0xe4/0x290 [ 2553.583627][ T6340] ? sysfs_file_kobj+0xe4/0x290 [ 2553.583638][ T6340] ? __pfx_resume_store+0x10/0x10 [ 2553.583653][ T6340] kobj_attr_store+0x58/0x80 [ 2553.583667][ T6340] ? __pfx_kobj_attr_store+0x10/0x10 [ 2553.583680][ T6340] sysfs_kf_write+0xf2/0x150 [ 2553.583692][ T6340] kernfs_fop_write_iter+0x3e0/0x5f0 [ 2553.583709][ T6340] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2553.583721][ T6340] vfs_write+0x6ac/0x1070 [ 2553.583737][ T6340] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2553.583755][ T6340] ? __pfx_vfs_write+0x10/0x10 [ 2553.583774][ T6340] ksys_write+0x12a/0x250 [ 2553.583790][ T6340] ? __pfx_ksys_write+0x10/0x10 [ 2553.583807][ T6340] __do_fast_syscall_32+0xe3/0x8c0 [ 2553.583820][ T6340] do_fast_syscall_32+0x32/0x70 [ 2553.583833][ T6340] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2553.583847][ T6340] RIP: 0023:0xf708ef6c [ 2553.583856][ T6340] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2553.583867][ T6340] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 2553.583878][ T6340] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 2553.583885][ T6340] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 2553.583891][ T6340] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2553.583898][ T6340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2553.583904][ T6340] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2553.583914][ T6340] [ 2553.624599][ T6338] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8913'. [ 2553.647966][ T6340] block device autoloading is deprecated and will be removed. [ 2553.684776][ T6340] PM: Image not found (code -22)