last executing test programs: 14m2.647404631s ago: executing program 3 (id=2096): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/243, 0xf3}], 0x1, 0x4, 0x3) io_uring_enter(0xffffffffffffffff, 0x42db, 0x7348, 0x10, &(0x7f0000000240)={[0x7, 0x4]}, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x2, 0x8, 0x0, 0x0, @multicast}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0a40, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x80800) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_alloc\x00', r4}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) 14m1.683637314s ago: executing program 3 (id=2102): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40980, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) listen(0xffffffffffffffff, 0x8) userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000000c0)={0x0, "08000000000000000000000000000000000000b582000000010000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r4}) close_range(r4, 0xffffffffffffffff, 0x0) 14m0.264066003s ago: executing program 3 (id=2106): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="3a3f5d2129ffc724bcebbf31c6bdac74", 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88035b96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) finit_module(r2, 0x0, 0x1) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @loopback, 0x4}], 0x1c) mmap(&(0x7f000036e000/0x2000)=nil, 0x2000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006180)={0x2020}, 0x2020) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xa0401, 0x0) ioctl$SNAPSHOT_S2RAM(r6, 0x330b) 14m0.153928775s ago: executing program 3 (id=2107): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x12a480) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0xfffffffc, 0x0, 0xa, 0x0, "b02c03f046c6a9295d2e4afab7687f1a438898d280787d308b8f0678d0744f8abb9575a4b6877d1dcb4327c57e69769d982783b6fd2a3a8e0268c55f57483c1e", "9df19b85ae4b432f1f0c50baf8054493d0b2dec612d5c071ce1117c9c942df91", [0x5, 0xfffffff9]}) 14m0.153594114s ago: executing program 3 (id=2108): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r0, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 14m0.086553098s ago: executing program 3 (id=2109): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0xa0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xfffd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x2, 0xfffffff8, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7d", 0x4}], 0x2}, 0x5) 13m45.056145118s ago: executing program 32 (id=2109): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0xa0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xfffd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x2, 0xfffffff8, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7d", 0x4}], 0x2}, 0x5) 8m55.750999519s ago: executing program 4 (id=3032): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=@newtaction={0x22c, 0x30, 0x1, 0x0, 0x0, {}, [{0x218, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe49, 0x11e41e7a, 0x20000000, 0xfffffffd, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x90, 0x16, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x40}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8001}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x2, 0x8, 0x6d, 0x1}}]}, {0x24, 0x6, "358109bb4842f278ec757bd4b911d91ec8dae775c4c5c9683bd5b41f2e1e0fdc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0xf8, 0x1d, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x929}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x100}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x71}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xaf}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}]}, {0x92, 0x6, "742b62ba290b762e5bd7ed19f7566543c6bdd474657bff21765da1b99f18da6e04134faa91d52ba4d4270208b77d20204f7ab196f43b2e0d6a332058da988e6a9b5682a95df943fe7d2fbf157e9771b616547d2296d6b9879fe1e05bfc76d0ee144db0edc5a6a4fa55483d4331d7ff9a895dbcecb6b7653eb3fe34757e71f6914a3b09a70b3f1b463bd89bea2439"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x404c814}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001bc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x800, 0x0, 0x4000}, &(0x7f0000000340), 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x48802, 0x0) r5 = syz_io_uring_setup(0x2b06, &(0x7f0000000040), &(0x7f0000ffd000), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r5, 0x14, &(0x7f00000000c0), 0x0) write$sndseq(r4, &(0x7f0000000080)=[{0x4, 0x0, 0x0, 0x7f, @time={0x5, 0xfffffff4}, {0xe, 0x4}, {0x5, 0x5}, @queue={0x2, {0xffffffff, 0x2}}}], 0x1c) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$CDROM_LOCKDOOR(r6, 0x5329, 0x0) ioctl$CDROMEJECT(r6, 0x5309) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000bc0)=ANY=[@ANYRES32=r3], 0xd7c}, 0x1, 0x0, 0x0, 0x1}, 0x20040080) ioctl$DVD_WRITE_STRUCT(r6, 0x5390, &(0x7f0000000380)=@type=0x2) ioctl$CDROMEJECT_SW(r6, 0x530f, 0x0) fanotify_init(0x1a, 0x800) 8m54.609621046s ago: executing program 4 (id=3039): syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "ac3272000000006f00"}]}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f0000004a00)=[{{&(0x7f0000000c00)=@qipcrtr, 0x80, &(0x7f0000002180)=[{&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/112, 0x70}, {&(0x7f0000001d00)=""/175, 0xaf}, {&(0x7f0000001dc0)=""/154, 0x9a}, {&(0x7f0000001e80)=""/82, 0x52}, {&(0x7f0000001f00)=""/170, 0xaa}, {&(0x7f0000001fc0)=""/166, 0xa6}, {&(0x7f0000002080)=""/154, 0x9a}, {&(0x7f0000002140)=""/3, 0x3}], 0x9, &(0x7f0000002200)=""/114, 0x72}, 0x1}, {{&(0x7f0000002280)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000002300)=""/18, 0x12}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/4, 0x4}, {&(0x7f0000003380)=""/148, 0x94}, {&(0x7f0000003440)=""/140, 0x8c}, {&(0x7f0000003500)=""/20, 0x14}, {&(0x7f0000003540)=""/151, 0x97}, {&(0x7f0000003600)=""/109, 0x6d}, {&(0x7f0000003680)=""/22, 0x16}, {&(0x7f00000036c0)=""/208, 0xd0}], 0xa, &(0x7f0000003840)=""/170, 0xaa}, 0x8}, {{&(0x7f0000003900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003980)=""/199, 0xc7}, {&(0x7f0000003a80)=""/115, 0x73}, {&(0x7f0000003b00)=""/134, 0x86}], 0x3}, 0x590}, {{&(0x7f0000003c00)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000003c80), 0x0, &(0x7f0000003cc0)=""/245, 0xf5}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000003dc0)=""/139, 0x8b}, {&(0x7f0000003e80)=""/152, 0x98}, {&(0x7f0000003f40)=""/166, 0xa6}, {&(0x7f0000004000)=""/195, 0xc3}], 0x4, &(0x7f0000004140)=""/220, 0xdc}, 0x10000}, {{&(0x7f0000004240)=@xdp, 0x80, &(0x7f0000004700)=[{&(0x7f00000042c0)=""/231, 0xe7}, {&(0x7f00000043c0)=""/38, 0x26}, {&(0x7f0000004400)=""/176, 0xb0}, {&(0x7f00000044c0)=""/188, 0xbc}, {&(0x7f0000004580)=""/62, 0x3e}, {&(0x7f00000045c0)=""/103, 0x67}, {&(0x7f0000004640)=""/157, 0x9d}], 0x7}, 0xe443}, {{&(0x7f0000004740)=@vsock, 0x80, &(0x7f00000048c0)=[{&(0x7f00000047c0)=""/79, 0x4f}, {&(0x7f0000004840)=""/77, 0x4d}], 0x2, &(0x7f0000004900)=""/232, 0xe8}}], 0x7, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x1a, "cfeacfbd6c9555bb04b2f81c4d07"}}]}, 0x30}}, 0x4) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0x4) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r0, 0x303, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async, rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r7) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000840)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x7, 0x80000000, 0x44, @mcast1, @loopback, 0x20, 0x8000, 0xfffffffe, 0x2}}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'tunl0\x00', &(0x7f00000008c0)={'gretap0\x00', 0x0, 0x7, 0x7, 0x1, 0x80, {{0xf, 0x4, 0x1, 0x3, 0x3c, 0x64, 0x0, 0xd, 0x4, 0x0, @loopback, @empty, {[@timestamp={0x44, 0x10, 0x94, 0x0, 0x3, [0x81, 0x0, 0x4]}, @lsrr={0x83, 0xb, 0xac, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x27}]}, @timestamp_prespec={0x44, 0xc, 0xf1, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x6}]}]}}}}}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'sit0\x00', 0x0, 0x20, 0x1, 0x4, 0x7fff, {{0x17, 0x4, 0x1, 0x8, 0x5c, 0x67, 0x0, 0x9, 0x29, 0x0, @broadcast, @multicast2, {[@cipso={0x86, 0x3f, 0xffffffffffffffff, [{0x6, 0x11, "708dc7bf090bb96c4c10a2ee602dc5"}, {0x2, 0xc, "7f449fc454d788b9d447"}, {0x6, 0xe, "b90fb0c9f27ca0938a2dd4ac"}, {0x0, 0xe, "4b07e3d2d4bbce01d4a205ef"}]}, @rr={0x7, 0x7, 0x44, [@remote]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a80)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x5c, r9, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004820) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x20, 0x0, 0x8040}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) 8m54.60936734s ago: executing program 4 (id=3040): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x2000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x11c, 0xb, 0xd0e0011, 0x11c, 0xc6, 0x1ac, 0x1d8, 0x190, 0x1ac, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {0xff}, 0x1}, 0x0, 0xd4, 0x11c, 0x7000000, {}, [@common=@icmp={{0x24}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0xffffffff}}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0xffffffff, 'bridge_slave_1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x29c) 8m54.605379975s ago: executing program 4 (id=3041): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff]) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES16=r0, @ANYRESHEX=r1, @ANYRES8=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x108843, 0x98) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000100fefffff5000000000a00000a20000000000a01080000000000000000010000090900010073797a310008000070000000030a010400000000000000000100000a0900010073797a31000000000900030073797a300000000028000480080002401501ad7d140004"], 0xb8}, 0x1, 0x0, 0x0, 0x200009c4}, 0x340040c1) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000000)={{@local, 0x200001}, @local, 0x0, 0xffee, 0x347, 0x80000004, 0x24b, 0x10001, 0x9}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x30008010) munlock(&(0x7f0000001000/0x4000)=nil, 0x4000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000940)=[@assoc={0x10, 0x117, 0x4, 0x7ff}], 0x10}], 0x1, 0x40800) recvmsg$qrtr(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000700)=""/195, 0xc3}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x10020) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xfff3, 0xffff}, {0x1, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) openat$dlm_control(0xffffff9c, &(0x7f0000000240), 0x2000, 0x0) 8m52.051270079s ago: executing program 0 (id=3049): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = openat$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400400, 0x14) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x8, 0x3, 0x3, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000007b00000018110000", @ANYRES16=r1, @ANYRESOCT=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r4, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) r5 = fsopen(&(0x7f0000000340)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000d86dc4675410367e2db7d6f20a800001000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028005001d0000000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_ENTRIES(r9, 0x29, 0x41, &(0x7f0000001100)={'mangle\x00', 0x1000, "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"}, &(0x7f00000000c0)=0x1024) socket$inet_tcp(0x2, 0x1, 0x0) 8m51.477198086s ago: executing program 4 (id=3051): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) writev(r1, &(0x7f0000000740)=[{&(0x7f00000008c0)="581a17919cc7749e9438c65fb69e487bd1c16731510e7fc4ed9fb860505f1495ff92f16a38f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6e07473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bd25a62c560cb63836556c63de020000000000000013af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc00"/252, 0xfc}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e6574", 0x23}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec6247282000000000000000000", 0xd7}, {&(0x7f00000007c0)="f4f6ec3f1f6e4804195e1668ee6a7994d3b9535b0ce4e85ed9aa0a7f86d48b994dcc5f47b255f609e705d9fbea0869812c0c3a096c7999643abde2e9c01404f75059df685d52a7b5d59f75dab6f01434874daf57b46d0151c0214ee1d955d8a24b8ce42aa8461222202c0b7e67b10f14040bd14ce1d9b5c123024c0aa559191474c1b44eebe0a4feb6b9f872bd5f100d8f15dac14e66ca4b6e8bc168f9c7677432cbc268bf49e7b09d1a18cd49ad8bf344bbfde550052881cb7979129c65fc61fbbd6a99f24251b060090a04935c7f7a6f7862714aa4401ec436ba3a64", 0xdd}, {&(0x7f0000002480)="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", 0xd1e}], 0x5) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r1, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x800042, 0xf8, 0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r3 = syz_clone(0x40000000, &(0x7f0000000d80)="7d901e2f14efe13b34363557385258dfa17fd3bc4d9f0e0f4305f7f63c96a08e19de6e2e9ca56936bf438a1fc79902a37cfa998e908bcc135b7bb517094e615d66f05a744f90c5352864aecfec074ebc2634cc8404cbb580ed448d7c6537f754681a114c6fb25e2c07", 0x69, &(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)="910065e8f4dd31a98f37bd0106a480d28db093ba99c95bafc28150ebfd84c7be") ptrace$setregs(0xd, r3, 0x7fff, &(0x7f0000000ec0)="0bbfb55e62b07c2000f9038257137e502cae56cfc94f3f983f0e4df84d6b5b260c4c9726d44937c75f5fd7f0c54915bd23aa73616d803fc0771abac7b77df906ec49716bd1d7ae9e0cdc6ce48639c317642ea6ca6b492f5681ca602b9f338fecfb8d7eec552f1a0e48d94585271efcaf853031079ccfa6dde3eeaf45c94a546f6c117334d50de509d0ffdd872f17a1704be857bb47de0e6e97973ac9f92fc66f8c2b16cf2950d87086e8721293f150da46278c976877") r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0xfffc, r4, 0x0}]) r6 = gettid() r7 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) tkill(r6, 0x7) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000090000880"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="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"], 0xbf8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8m51.021004823s ago: executing program 0 (id=3053): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x8000, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffcfe, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000001500), 0x4) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) r4 = socket(0x18, 0x3, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') ioctl(r1, 0xffffffff, &(0x7f0000002080)) r5 = io_uring_setup(0x1d34, 0x0) syz_io_uring_setup(0x49e, &(0x7f0000000380)={0x0, 0x388e, 0x400, 0x0, 0x8019d, 0x0, r5}, 0x0, &(0x7f0000000440)) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x1e4, 0x0, 0x22a, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xcf26}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x34c7fb27}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfffff8af, @empty, 0x4f1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff0000}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0x9f, 0x3, "95bdb858fda82909cd3a4fd7829a60301ce44a94c9cc2adb53b94183762de0868f8648b51885b78f50c906b9fe218f970115506dc7667000189a00e6ec27a5ad7ed313732ad95b93efdec387f9fa9defc528661b74a544b9a6e4d95f64caa6c58aa12457b3f19d1e2d0d82ddf73f71757762864beb0c867a02a86cdc7d459c6813ee8fd9a509c253a0236ba5997d8727da2bc6fd41d8af15332d4a"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff2a}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20024800}, 0x20008010) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x2000) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') socket(0x23, 0x2, 0x1) 8m49.831210174s ago: executing program 0 (id=3056): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) setitimer(0x0, 0x0, &(0x7f0000000180)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 8m49.71120804s ago: executing program 0 (id=3057): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x109002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000680)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @broadcast, {0x8, 0x9}, @broadcast, @void, @value=@ver_80211n={0x0, 0x4, 0x2, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_b}, {@broadcast, @device_b, 0x8d, "e36bfd8a732a4b8e111bd5c80d921e33e1e6d1a5f8b3a459311296f62de17f83a9b0d6098dc8c6af86a8a49c8b914960981125ad50158335f275292a17b84478dac583e10cbdf7e0fe524fe8b5bce8f6c4f025ea755af0006c366cd5233bec15825d8575c87644d9c4d3ca47a77ce82a0fcb6bb48781e5fd6a82d94904fc25230b4be1a52ef5c8c6b58aa00e09"}, {@broadcast, @broadcast, 0xd8, "6a5bd45376fc808935c40b3c0a3111c1edfdab4dc54dcea1a1dec876436cc607d78b86cbc67a80a47ab26885209d74514728bdd2709a1dbae8bf09b9adb01700330eb3eabf1b285cedc9e4bc06ed5cd463d12eb0686afef4b82e0735a9a46ecd78a01401696cd3f147a3a243077ebf3f4c623b3def6a25ee4a278aca276dfde31867e9c79315be632a441a243177112354e2bf7453d32b3c6c1e5529734ad6c6afbbf7ded61a5d06e8cadacf00237a49357ede0b31d699189093ed6246c751e96c37ef33e55c33179b7ffa4312e968114bbdc332c8d8faa5"}, {@device_b, @device_a, 0xb8, "ea15483a73bffdb637e661e4ddb426c16c432b5035bcc1ac3d680919d5e2e4f1b7dc7dfba464d2086cf05367c6faee5ef476976db462e030e4cd9379a1676d00aa1b5054d0c5160d4b197fed43d59e9def97615a7d92a5b1fca5566ed356a6477874e61ad03af80ccef8ad1e24d8d0da2752252981b461bafb16ec79aa0c26f0ff2e32458125ab8eacb0b94696461c5bd0fc046eaebaf2ac3da85efd15b1af0424a70b503d56a4c62394be462a0c672ed670f07e50dca956"}, {@device_a, @device_b, 0xa5, "7e32101c016b3cc15932503e02f9a32d888b7986a465364fc16f565d23e64e98693186398e4313fa58d03f53d45da64adec5f47a46b2c5dc5d97837e450132fb242e9e2e24f9bb0e0afe621d64da6ff0d26df071619bec51c83c86ac3de08bfe706efe86597e68d8a04b3ff69fb39133318d275dcb7d605e07625bb306bf3f3b1c83e2e523e59b82e30f52e09c1a39699cdc54838307a1c51d460aefd21fe3c694bfbec9ac"}, {@broadcast, @broadcast, 0x77, "a21c7f7f9f72d07bc953c3558c49c503bec25899bb286d5b5083df2a8f855608d7b77c9f213db648302210ef20422d7270db7a515b255ebc5fc79704dbf93585b926bd4cd8af7d37cfa199f95278fb281460414ea60633c614dfee71238c03c668723fe7586f62ee16095d3f9f9287e2b9a901ed5c5c8f"}, {@broadcast, @device_b, 0x32, "aef0d671c0c9f6d7953b0c748eb84d83605d940e2ebefa4cf171698f1ce74395dd44475f179303655d403e52cfa5361c0ff0"}]}, 0x3fa) nanosleep(0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="41000200010001", 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a31000000001600030068617368000000002c706f72742c6e6574000000"], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x14044017}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x3f00, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_setup(0x1, &(0x7f00000004c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) 8m46.719051681s ago: executing program 0 (id=3061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xcde2a179f50c0bcc}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x6, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4044801}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1, 0x0, 0xe00}, 0x4) 8m35.749939465s ago: executing program 33 (id=3051): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) writev(r1, &(0x7f0000000740)=[{&(0x7f00000008c0)="581a17919cc7749e9438c65fb69e487bd1c16731510e7fc4ed9fb860505f1495ff92f16a38f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6e07473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bd25a62c560cb63836556c63de020000000000000013af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc00"/252, 0xfc}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e6574", 0x23}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec6247282000000000000000000", 0xd7}, {&(0x7f00000007c0)="f4f6ec3f1f6e4804195e1668ee6a7994d3b9535b0ce4e85ed9aa0a7f86d48b994dcc5f47b255f609e705d9fbea0869812c0c3a096c7999643abde2e9c01404f75059df685d52a7b5d59f75dab6f01434874daf57b46d0151c0214ee1d955d8a24b8ce42aa8461222202c0b7e67b10f14040bd14ce1d9b5c123024c0aa559191474c1b44eebe0a4feb6b9f872bd5f100d8f15dac14e66ca4b6e8bc168f9c7677432cbc268bf49e7b09d1a18cd49ad8bf344bbfde550052881cb7979129c65fc61fbbd6a99f24251b060090a04935c7f7a6f7862714aa4401ec436ba3a64", 0xdd}, {&(0x7f0000002480)="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", 0xd1e}], 0x5) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r1, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x800042, 0xf8, 0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r3 = syz_clone(0x40000000, &(0x7f0000000d80)="7d901e2f14efe13b34363557385258dfa17fd3bc4d9f0e0f4305f7f63c96a08e19de6e2e9ca56936bf438a1fc79902a37cfa998e908bcc135b7bb517094e615d66f05a744f90c5352864aecfec074ebc2634cc8404cbb580ed448d7c6537f754681a114c6fb25e2c07", 0x69, &(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)="910065e8f4dd31a98f37bd0106a480d28db093ba99c95bafc28150ebfd84c7be") ptrace$setregs(0xd, r3, 0x7fff, &(0x7f0000000ec0)="0bbfb55e62b07c2000f9038257137e502cae56cfc94f3f983f0e4df84d6b5b260c4c9726d44937c75f5fd7f0c54915bd23aa73616d803fc0771abac7b77df906ec49716bd1d7ae9e0cdc6ce48639c317642ea6ca6b492f5681ca602b9f338fecfb8d7eec552f1a0e48d94585271efcaf853031079ccfa6dde3eeaf45c94a546f6c117334d50de509d0ffdd872f17a1704be857bb47de0e6e97973ac9f92fc66f8c2b16cf2950d87086e8721293f150da46278c976877") r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0xfffc, r4, 0x0}]) r6 = gettid() r7 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) tkill(r6, 0x7) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000090000880"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="08002abd7000fbdbdf2501000000080007000200000038080880680000801400040002004e21e00000010000000000000000060005000800000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000200bfb42f0394d162df2fdf962534dd0c013458fa6016b8abac6660d2f74ea15244380500801400040002004e24e000000200000000000000002005098088000080060001000200000008000200ffffffff0500030003000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000aa050003000000000094000080060001000200000008000200ac14141d0500030000000000060001000200000008000200640101000500030003000000060001000200000008000200e000000105000300010000000600010002000000080002000a01010005000300000000000600010002000000080002007f00000105000300000000000600010002000000080002000000000005000300020000001c000080060001000200000008000200ac1e000105000300020000004c000080060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a0000001400020020010000000000000000000000000000050003000200000070000080060001000200000008000200640101020500030003000000060001000200000008000200000000000500030002000000060001000a000000140002000000000000000000000000000000000005000300030000000600010002000000080002007f00000105000300020000004c000080060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000a00000014000200fc0000000000000000000000000000000500030001000000d0000080060001000200000008000200ac1414aa0500030002000000060001000200000008000200ac1e00010500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000200000008000200e00000010500030002000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000d00000800600010002000000080002000000000005000300030000000600010002000000080002007f00000105000300000000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000000500030001000000060001000200000008000200000000000500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000a00000014000200ff01000000000000000000000000000105000300020000003c010080060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000001f0500030003000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200fc0000000000000000000000000000010500030000000000060001000200000008000200e00000010500030000000000060001000200000008000200e00000020500030000000000060001000200000008000200ac14142b0500030000000000060001000200000008000200e000000205000300030000005400008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000200f433ed4448606cfe3713f0104c3e72eb4b9c6a3687a7a31a2fe2b3f3c12127050600050009000000b8010080200004000a004e2300000001fe8000000000000000000000000000aa04000000080003000600000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c6801098034000080060001000200000008000200e00000020500030001000000060001000200000008000200ac1414aa050003000300000030010080060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200000000000500030000000000060001000200000008000200640101010500030003000000060001000200000008000200ac1e01010500030003000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200ffffffff0500030002000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200ff02000000000000000000000000000105000300030000000600010002000000080002006401010105000300010000008800008024000200c3e3c3958d5330da19e45da5ca6aaf1263396dc7f7b923c8a4b4cf46213e645124000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a00010000001400040002004e24ffffffff0000000000000000200004000a004e20000007ffff020000000000000000000000000001080000000800070003000000940308800c00008008000a00010000008403008024000200e2b594b1a1b9a0edde05d18e988c6993c78ea886868e4703c6e14b92af9b15891400040002004e20ac1414bb00000000000000001803098040000080060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fe880000000000000000000000000001050003000000000028000080060001000a00000014000200fe80000000000000000000000000002b050003000000000058000080060001000200000008000200ac1414bb0500030003000000060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200e0000001050003000200000018010080060001000a0000001400020000000000000000000000ffffffffffff0500030000000000060001000a00000014000200fc0000000000000000000000000000010500030000000000060001000a0000001400020000000000000000000000ffffac1414bb0500030001000000060001000a00000014000200fe8000000000000000000000000000310500030000000000060001000200000008000200ffffffff0500030003000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ac1414170500030003000000060001000200000008000200ac1414bb05000300010000000600010002000000080002000a01010205000300020000003c010080060001000a00000014000200fe80000000000000000000000000003c0500030001000000060001000200000008000200000000000500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000a0000001400020000000000000000000000ffff7f0000010500030002000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200e00000010500030001000000060001000200000008000200000000000500030000000000060001000a0000001400020000000000000000000000ffffac1414440500030001000000060001000a00000014000200fe880000000000000000000000000001050003000300000006000100020000000800020000000000050003000200000008000a00010000001400040002004e24ac1e000100000000000000001400040002004e23ac1414130000000000000000060006004e200000"], 0xbf8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8m30.739241379s ago: executing program 34 (id=3061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xcde2a179f50c0bcc}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x6, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4044801}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1, 0x0, 0xe00}, 0x4) 7m49.460723356s ago: executing program 1 (id=3152): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x101480, 0x0) ioctl$CDROMVOLREAD(r3, 0x5313, &(0x7f0000000180)) ioctl$SG_IO(r2, 0x2285, &(0x7f00000008c0)={0x53, 0xfffffffffffffffb, 0x6, 0x40, @buffer={0x0, 0xfffffffffffffec2, 0x0}, &(0x7f0000000800)="ea982e0821bb", 0x0, 0x5, 0x31, 0x0, 0x0}) 7m49.100125602s ago: executing program 1 (id=3155): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1c5d741dd17c1ac0d38ef2a565ef1e833630000000000005c38a19d00", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c725df8a69ea917deb7ba193b7e7772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x1]}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004, 0x810, r0, 0x0) syz_io_uring_setup(0x1a3, &(0x7f0000000240)={0x0, 0xf3ea, 0x80, 0x0, 0x34d}, &(0x7f0000000480)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x4, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x6, 0x3, 0x8, 0x5}, {0x5, 0xf7, 0x2, 0x4}, {0xc0, 0x0, 0xc5, 0x8}]}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r5, 0x80044dff, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8003, 0x4, 0x886}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x2, 0x0) r6 = gettid() r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x1}, 0x4) write$rfkill(r7, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) write$rfkill(r7, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000003c0), 0x4) sched_setattr(r6, &(0x7f0000000380)={0x38, 0x6, 0x10000010, 0x2, 0x80, 0xdc, 0x4, 0xd517, 0x1, 0x80}, 0x0) capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000000040)={0x80000000, 0x0, 0x0, 0x100, 0x3}) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x1, 0x40001018, r4, 0x0) syz_io_uring_setup(0x26503, &(0x7f0000000500)={0x0, 0x47a8, 0x0, 0x1, 0xc0}, &(0x7f0000000180), &(0x7f00000001c0)) 7m47.459999348s ago: executing program 1 (id=3163): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) (async) r1 = socket(0x10, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) (async, rerun: 64) r2 = getpid() (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x18) lsm_set_self_attr(0x66, 0x0, 0x0, 0x0) (async) r3 = openat$ndctl0(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f0000000340)=0x1ef) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r6, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) (async) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async) sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) (async) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x4, 0x2003) recvmmsg(r6, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x12141, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (rerun: 32) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0) (async) fchown(r0, 0xffffffffffffffff, 0x0) 7m46.960777959s ago: executing program 1 (id=3168): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) syz_emit_ethernet(0x5a, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaa2aaaae38f6cc5538586dd604dd31800240600000000000000a9f3ab87a7b57f0c0000fe8000000000000000000000000000aafffe4001", @ANYRESOCT=r0, @ANYRES32=0x41424344, @ANYBLOB="9002000090780000000000000000000000000000000000006d98e8b14535086f6124a7d6116124de9552c0ed5ab29c0cbbac3e8fa1d60a150059194a8b87252a64f5d19538fe8021188cdc6355ac5915320a6e883229556b89f9def8c96d6d63a05e9731eab8940b244e11729d9d5777140594a2cb721381c0313c148824306af38626b48c18570e5221e82ca7d7869d9885063db05c42ceb821f33a27332764f85aac9f8849bf82fcb942cde705bf49434187a3550f69da5287d6fa75e60d9d72ea915234a20ba45b137c705098c1b9329097ff53817dbc57440cc473f4b199e0d93b57edc047770067e94e"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0xb, &(0x7f00000000c0)={0x1d, 0xfffff42f, 0x4}) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) ioctl$RNDADDTOENTCNT(r5, 0x5207, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r6 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC=r0], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r6) write$char_usb(r7, &(0x7f0000000180)='/', 0x1) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 7m45.323698986s ago: executing program 1 (id=3178): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=@newtaction={0x244, 0x30, 0x1, 0x0, 0x0, {}, [{0x230, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe49, 0x11e41e7a, 0x20000000, 0xfffffffd, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0xa8, 0x16, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xf08, 0x8, 0x2, 0x4, 0xd8c}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x40}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8001}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x2, 0x8, 0x6d, 0x1}}]}, {0x23, 0x6, "358109bb4842f278ec757bd4b911d91ec8dae775c4c5c9683bd5b41f2e1e0f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0xf8, 0x1d, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x929}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x100}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x71}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xaf}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}]}, {0x92, 0x6, "742b62ba290b762e5bd7ed19f7566543c6bdd474657bff21765da1b99f18da6e04134faa91d52ba4d4270208b77d20204f7ab196f43b2e0d6a332058da988e6a9b5682a95df943fe7d2fbf157e9771b616547d2296d6b9879fe1e05bfc76d0ee144db0edc5a6a4fa55483d4331d7ff9a895dbcecb6b7653eb3fe34757e71f6914a3b09a70b3f1b463bd89bea2439"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x404c814}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001bc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x800, 0x0, 0x4000}, &(0x7f0000000340), 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x48802, 0x0) r5 = syz_io_uring_setup(0x2b06, &(0x7f0000000040), &(0x7f0000ffd000), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r5, 0x14, &(0x7f00000000c0), 0x0) write$sndseq(r4, &(0x7f0000000080)=[{0x4, 0x0, 0x0, 0x7f, @time={0x5, 0xfffffff4}, {0xe, 0x4}, {0x5, 0x5}, @queue={0x2, {0xffffffff, 0x2}}}], 0x1c) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$CDROM_LOCKDOOR(r6, 0x5329, 0x0) ioctl$CDROMEJECT(r6, 0x5309) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000bc0)=ANY=[@ANYRES32=r3], 0xd7c}, 0x1, 0x0, 0x0, 0x1}, 0x20040080) ioctl$DVD_WRITE_STRUCT(r6, 0x5390, &(0x7f0000000380)=@type=0x2) ioctl$CDROMEJECT_SW(r6, 0x530f, 0x0) fanotify_init(0x1a, 0x800) 7m44.490348924s ago: executing program 1 (id=3189): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000089"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@private=0xa010101, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {0x0, 0x8000}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 7m44.452227785s ago: executing program 35 (id=3189): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000089"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@private=0xa010101, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {0x0, 0x8000}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 5m1.316683146s ago: executing program 5 (id=3859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0c0000000c0000000700000005000000000000060400000000400000006100000000000000"], 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, 0x2, 0x2, 0x5, 0x1, 0x5}, &(0x7f00000000c0)=0x98) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000480)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000440)=0x6}) sendto$inet6(r6, 0x0, 0x0, 0x40000, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x200100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x80001000001000, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x20000009, 0x1, 0xc, 0x80004006, 0x802}, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xf0, 0xb}, 0x50) 5m0.338597857s ago: executing program 5 (id=3865): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, 0x0) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff80000040, 0x8, 0x2, 0x6b, 0x2, 0x0, 0x0, 0x0, 0x1000}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r2, 0x90000915, 0x20000000) 4m59.435922716s ago: executing program 5 (id=3871): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000020c0)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2c}}], 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0xc0000010}) r3 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x49, &(0x7f0000000340), 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002040)={0x50, 0xffffffffffffffda, r4, {0x7, 0x2b, 0x0, 0x0, 0x2, 0x25f, 0x3, 0xb8, 0x0, 0x0, 0x10, 0x24bbe80a}}, 0x50) 4m59.041919506s ago: executing program 5 (id=3874): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x1a}]}}}]}, 0x3c}}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x40, r6, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x40}}, 0x4044080) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r8, 0x0, 0x1}, 0x18) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) openat$cdrom(0xffffff9c, &(0x7f00000013c0), 0x4, 0x0) 4m57.002726422s ago: executing program 5 (id=3879): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x7, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010100, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x4, 0x3}]}]}, 0xfc}}, 0x20000088) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010065580000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 4m56.599101524s ago: executing program 5 (id=3882): mkdir(&(0x7f0000000340)='./file\x00', 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x8, 0x1, 0x4e22}, 0x8) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0xa}, 0xa) r2 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x4) rename(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000180)='./file0\x00') sync() sync() 4m41.171447859s ago: executing program 36 (id=3882): mkdir(&(0x7f0000000340)='./file\x00', 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x8, 0x1, 0x4e22}, 0x8) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0xa}, 0xa) r2 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x4) rename(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000180)='./file0\x00') sync() sync() 7.536601527s ago: executing program 2 (id=5266): r0 = socket$tipc(0x1e, 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) lseek(r3, 0x80, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r5) r7 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1) fcntl$setlease(r7, 0x400, 0x1) r8 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r8, &(0x7f0000000340)={'#! ', './file0'}, 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xffffffff, 0x19, 0x8, 0x0, r5, 0x7, '\x00', 0x0, r7, 0x2, 0x4, 0x0, 0xf}, 0x50) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca249435, &(0x7f0000002080)={0x0, 0x3, @status={[0x9, 0x7fffffff, 0x5, 0x10001, 0x6, 0x4000000000]}, [0x2006, 0xb, 0x2, 0x5, 0x3, 0x4000000000000000, 0x5, 0xa, 0xfffffffffffffffe, 0x400, 0x8, 0x7, 0x7, 0x200000000000000, 0x2, 0x3, 0xc, 0x7356, 0x8, 0xafa, 0x3, 0xfffffffffffffff9, 0x6, 0x9f, 0x401, 0x26e1, 0xc, 0x9, 0x8, 0x3, 0x401, 0x3, 0x1ff, 0x8, 0x0, 0x2, 0xffffffffffffffff, 0x1, 0xa, 0x5950, 0x3, 0x4, 0x22, 0xd, 0x8000000000000001, 0x9, 0xffffffff, 0x200, 0x4, 0x5, 0xfffffffffffffffa, 0x9, 0xfbffffffffffff51, 0x2c81, 0x22a6, 0x5, 0x7, 0x73, 0x0, 0x8, 0x9, 0x7, 0xfffffffffffffffe, 0x500]}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x610, &(0x7f0000000340)={[{@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}], [], 0x2c}) 7.536172579s ago: executing program 8 (id=5267): syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="0380c2000000fb"], 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0xdd481bbb4e5303de, &(0x7f0000000340)={0x2, &(0x7f00000001c0)=[{0x1c, 0x5, 0x21, 0x4}, {0xfff7, 0x8, 0xa, 0xd}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c0"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000040000000bf0300f0ffffffff8400000072000000849b19408c17d18e5be8065f8ddac7f608b670812343668801d8154bf5fbcb7f4af4e0e8ee30013f8e2a5a13c07042494fa403d58ff2ec29"], 0x0, 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r6, 0x0, 0x20044800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r7) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010104}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev}]}, 0x4c}, 0x8, 0x3000000000002}, 0x8000) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6.435999787s ago: executing program 8 (id=5268): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x609, 0xc8, 0x0, &(0x7f00000000c0)="ddc000000000080000e634ab570075a4a697d64e441c029c7b65cf0a7246e50e41d600025d9a2b0172a00d92b4524b6e882166e05bd53099844aeb61694b26fb32e4afb6d7b6de502e904039f71e37d47835dd540cce3a01cdea291991d8f361b590fece730dee7941d88ee8b854ad01b61b0624a41f08b247dc7c2dda60ef2fd226ef323f25572f87f603a43eb2f4d59d836c8f55e2e03ce02fa703908408e7d8382c83f654f603cff0b28d81743f97d47188ed8f12cae5c1be5d875a79f5edbe963a6de50205b143da00000000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x1, 0x7, 0x0, {0x0, 0x0, r3}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x4, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r3, 0x447, 0x1000000, 0x3e, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505330, &(0x7f0000000040)={{}, {0x5}, 0x3, 0x7}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r7}, 0x8) get_mempolicy(0x0, 0x0, 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x0) 6.241752893s ago: executing program 2 (id=5269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x403, 0x300, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 5.911922559s ago: executing program 2 (id=5271): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x401, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) listen(r0, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r0, r4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x20000050) 5.272728162s ago: executing program 7 (id=5272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x8000000000000000, 0x1000, 0x4, 0x0, 0x15}) io_setup(0x4, &(0x7f0000000600)=0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) semctl$IPC_RMID(0x0, 0x0, 0x0) io_submit(r3, 0xe7, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000000)="ff07000000000000", 0x400000}]) io_destroy(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) 4.548797256s ago: executing program 7 (id=5273): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x401, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) listen(r0, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) dup2(r0, r4) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x20000050) 4.366809634s ago: executing program 8 (id=5274): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xff0e}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = dup(r0) write$UHID_INPUT(r5, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) 3.998943589s ago: executing program 2 (id=5275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff, 0x0, 0xffff, 0x600}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff, 0x0, 0xffff, 0x600}, 0x20) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 3.526762756s ago: executing program 2 (id=5277): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x7, 0x4) bind$inet(r0, 0x0, 0x0) r1 = syz_pidfd_open(0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff04) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x4001, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x11, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x9000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x2, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x6, 0x7, 0x0, 0x0, 0xdc}, {0x100000, 0xeeee0000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xf000, 0x3000, 0x9, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c, 0x0, 0x1}, {0xdddd0000, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0xb, 0xfc, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x2d00, 0x8000000, [0x0, 0x0, 0x42dc]}) ioctl$KVM_GET_SREGS2(r6, 0x8140aecc, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x1000000}, 0x94) socket$packet(0x11, 0x2, 0x300) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 3.031670826s ago: executing program 6 (id=5278): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) setuid(0xee01) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x4d, r6, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9fa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 2.836910044s ago: executing program 6 (id=5279): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14], 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000601) 2.770623996s ago: executing program 6 (id=5280): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_vm_readv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 2.56673873s ago: executing program 6 (id=5282): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x401, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) listen(r0, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r0, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x20000050) 2.35692846s ago: executing program 8 (id=5283): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x401, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) listen(r0, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r0, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x20000050) 1.902762277s ago: executing program 7 (id=5284): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x30, r0, 0xf4e33000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xfffffffe}, @in={0x2, 0x4e24, @broadcast}]}, &(0x7f0000000280)=0xc) 1.845590542s ago: executing program 7 (id=5285): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x344, 0x0, 0x11, 0x148, 0x0, 0x0, 0x2b0, 0x2a8, 0x2a8, 0x2b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xff, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1, 0x7a}, 0x0, 0x1c0, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'team_slave_1\x00', {0x5, 0x7, 0x25, 0x7, 0x5, 0x1ff, 0xb, 0x18, 0x18}, {0x8}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x3, 0x0, 0x6, 0x1], 0x1, 0x1}, {0x1, [0x1, 0x0, 0x0, 0x1, 0x1, 0x3], 0x0, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3a0) 1.841356854s ago: executing program 7 (id=5286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0c0000000c0000000700000005000000000000060400000000400000006100000000000000"], 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, 0x2, 0x2, 0x5, 0x1, 0x5}, &(0x7f00000000c0)=0x98) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000480)=@attr_other={0x0, 0x1, 0x1, 0x0}) sendto$inet6(r5, 0x0, 0x0, 0x40000, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x200100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x80001000001000, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x20000009, 0x1, 0xc, 0x80004006, 0x802}, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xf0, 0xb}, 0x50) 495.981696ms ago: executing program 6 (id=5287): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_INSN(r0, 0x8020640c, &(0x7f00000000c0)={0x4000000, 0x0, 0x0, 0x3, 0x8}) (fail_nth: 1) 442.355069ms ago: executing program 7 (id=5288): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x2000402c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x208000, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0xffe}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8, 0x1}, {0x0, 0x8, 0xfffffffd}, {0x4, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x400009, 0x6, 0x0, 0x17, 0x2, 0x1, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]}) 401.327057ms ago: executing program 8 (id=5289): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80200, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000180)={0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001600)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0xff}, 0x0, 0xffffffff}}, @TCA_TBF_PTAB={0x404, 0x3, [0xf14, 0xf, 0x1, 0x7fff, 0x7, 0xff, 0xa44, 0xf67, 0x7, 0x6, 0x7, 0x400, 0x4, 0xc, 0xa3, 0xf, 0x500, 0x4, 0x3, 0x23, 0x51, 0x7c7, 0x0, 0x2, 0x8001, 0x3ff, 0x7, 0x40, 0xe7, 0x2, 0x55, 0xfffffffc, 0xa0, 0x9, 0x40000004, 0x4, 0x100, 0x9, 0x897, 0x8, 0xd883, 0x6, 0x7, 0x3ff, 0x0, 0x80, 0xe94c, 0x8, 0x3, 0x600, 0x6, 0x0, 0x7f, 0x3, 0x2, 0x0, 0xed8, 0x5, 0xffff7fff, 0x3, 0x9, 0x80000001, 0x3, 0x2, 0x8, 0x0, 0x3ff, 0xaa1, 0x7, 0x6, 0xff, 0x80000000, 0x180, 0x8001, 0x56c6, 0x80000000, 0x9, 0x4a1c, 0x4ee, 0x9, 0x5, 0xd, 0x9, 0x200, 0xad75, 0x6, 0x3, 0x2, 0x1, 0x1, 0x8, 0xfffffffb, 0x200, 0x5, 0x5fa, 0x4, 0x47, 0x0, 0x10, 0x80000001, 0x4e, 0x8fdd, 0x1, 0x8, 0x3, 0x8, 0x1, 0x79f, 0x9, 0x80000001, 0x8, 0x7, 0x7, 0x7fff, 0x9, 0x800b, 0xfffffffa, 0xd, 0x0, 0x9, 0x80, 0x4, 0x2, 0x0, 0xfffffffb, 0x4, 0x4, 0x3ff, 0xffff, 0x7, 0x6, 0x7, 0x4, 0xdfb, 0x81, 0x6ae0, 0xfffffffa, 0x621, 0x0, 0x4, 0x442, 0x100, 0x10, 0x3, 0x9, 0x100, 0x4, 0x8fac, 0x1, 0x2, 0x3, 0x4, 0x39d, 0x4, 0x1, 0x9, 0x81, 0x800, 0x6, 0x3ff, 0xfffffffc, 0x9, 0x3, 0xfffffffb, 0x7fffffff, 0x9, 0x401, 0xffff, 0x7fffffff, 0x4, 0x8, 0x30000, 0x4f9, 0x7fff, 0x9, 0x8001, 0x401, 0xfffffff9, 0x7, 0x2, 0x9, 0x5, 0xfffffffe, 0x8, 0x3, 0x1b1f, 0xd91b, 0x8, 0x6, 0x9, 0x1, 0x0, 0x6, 0xeb, 0x5, 0x1, 0x8, 0x2, 0xc, 0x1ff, 0x10000, 0x7, 0x4, 0x6fd, 0x2, 0x8, 0x0, 0xca0, 0x8ae, 0x0, 0x401, 0x0, 0x7fff, 0x5, 0x4, 0x5, 0x5, 0x8, 0x8, 0x6, 0xffff8000, 0x0, 0x3, 0x100, 0x3, 0xb, 0x4, 0x7, 0xfffffffe, 0xffffffff, 0x1, 0x3973, 0x0, 0x3, 0x565f, 0x8, 0x9, 0x3, 0xd, 0x100, 0x6, 0x8, 0x1000, 0x2, 0x6, 0x1, 0x0, 0x80000000, 0x9, 0xffffae87, 0x8, 0x6, 0xf, 0x4, 0x1, 0xffff]}]}}]}, 0x45c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, 0x0, &(0x7f0000000000)=0xc00) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x30, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x980}, {0x8, 0x0, 0x980}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x0, 0xb, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x0, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPRESSIONS={0x0, 0x12, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @fib={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x0, 0x1, 0x1, 0x0, 0x9}]}}}, {0x0, 0x1, 0x0, 0x1, @hash={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x0, 0x4, 0x1, 0x0, 0x4191}, @NFTA_HASH_SEED={0x0, 0x5, 0x1, 0x0, 0x8}, @NFTA_HASH_MODULUS={0x0, 0x4, 0x1, 0x0, 0x4}, @NFTA_HASH_OFFSET={0x0, 0x6, 0x1, 0x0, 0x2}, @NFTA_HASH_MODULUS={0x0, 0x4, 0x1, 0x0, 0x9}, @NFTA_HASH_TYPE={0x0, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_TYPE={0x0, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SEED={0x0, 0x5, 0x1, 0x0, 0xa9}]}}}, {0x0, 0x1, 0x0, 0x1, @cmp}, {0x0, 0x1, 0x0, 0x1, @fwd={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @inner={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @dup={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_SET_USERDATA={0x0, 0xd, 0x1, 0x0, "ebfa3aa8c13643deeff42d64c41567fe92490224964fd2737201b70204cbedb507c1282a72c46afc89b472efb55dc5f21331b1931875e0e373af0e8d594b5488a83f79a2f41e8cc75778d9ef6304182c77a768b17493e9ae30bf6e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$COMEDI_INSN(r0, 0x8020640c, &(0x7f00000000c0)={0x4000000, 0x0, 0x0, 0x3, 0x8}) 146.263007ms ago: executing program 6 (id=5290): vmsplice(0xffffffffffffffff, &(0x7f0000000c80)=[{&(0x7f0000001800)="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", 0x801}], 0x1, 0xa) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x40, r5, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2a8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffff5d5b}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) splice(r0, 0x0, r2, 0x0, 0xbfd1, 0x0) 2.260225ms ago: executing program 2 (id=5291): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd28, 0x40000, {0x2, 0x1f, 0xd, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc}]}, 0x28}, 0x1, 0x0, 0xa00}, 0x0) 0s ago: executing program 8 (id=5292): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000140), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0x1, 0x80000000, 0x0, {}, [{0x91, 0x1, [@m_vlan={0x5c, 0x19, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x1, 0x3, 0x10000, 0x5}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe2e}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$tun(0xffffffffffffffff, &(0x7f0000000380)={@void, @val={0x0, 0x80, 0x6c, 0x0, 0x80, 0x3}, @llc={@snap={0xab, 0xab, '<', "d9d173", 0x8, "0899026a17e30e8aab05510632c752423e28b81dd50a103dc124ccb00de5a6533e0dfd651e3f3ca5f085478fcabf0a8ae4749a0dbced9e88f7c6eb9e81be52597639b54499a3ae04d9d609739df405e6a6aeebe8c0916a8c1564f350f8cb2cc3d25ca59216dd49540cbfc8f52ece5174b4e3c9c43b7c28d545abc17926"}}}, 0x8f) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r5, &(0x7f00000004c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @default}, 0x1c) r6 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x240880c1, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r6, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x21) sendto$inet6(r6, 0x0, 0x0, 0x4010, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_crypto(0x10, 0x3, 0x15) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) unshare(0x62040200) kernel console output (not intermixed with test programs): 0000000000 [ 1276.186804][T24376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1276.186821][T24376] [ 1276.186833][T24376] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4676'. [ 1276.757615][T19456] usb usb54-port1: unable to enumerate USB device [ 1276.900869][T24382] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 1276.903393][T24382] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1276.940375][T24382] vhci_hcd vhci_hcd.0: Device attached [ 1277.004278][T24386] fuse: Bad value for 'rootmode' [ 1277.060795][T24390] lo speed is unknown, defaulting to 1000 [ 1277.065372][T24390] wg2 speed is unknown, defaulting to 1000 [ 1277.171084][ T6023] usb 53-1: new low-speed USB device number 3 using vhci_hcd [ 1278.083223][T24406] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1278.090031][T24406] bond2: (slave lo): Enslaving as an active interface with an up link [ 1278.096656][T24406] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1278.103731][T16418] lo speed is unknown, defaulting to 1000 [ 1278.105963][ T9133] lo speed is unknown, defaulting to 1000 [ 1278.108277][ T34] lo speed is unknown, defaulting to 1000 [ 1278.163422][T24409] FAULT_INJECTION: forcing a failure. [ 1278.163422][T24409] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.167668][T24409] CPU: 3 UID: 0 PID: 24409 Comm: syz.7.4686 Tainted: G L syzkaller #0 PREEMPT(full) [ 1278.167686][T24409] Tainted: [L]=SOFTLOCKUP [ 1278.167690][T24409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1278.167698][T24409] Call Trace: [ 1278.167703][T24409] [ 1278.167708][T24409] dump_stack_lvl+0x16c/0x1f0 [ 1278.167730][T24409] should_fail_ex+0x512/0x640 [ 1278.167743][T24409] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1278.167759][T24409] should_failslab+0xc2/0x120 [ 1278.167782][T24409] kmem_cache_alloc_noprof+0x83/0x770 [ 1278.167796][T24409] ? skb_clone+0x190/0x3f0 [ 1278.167815][T24409] ? skb_clone+0x190/0x3f0 [ 1278.167829][T24409] skb_clone+0x190/0x3f0 [ 1278.167845][T24409] netlink_deliver_tap+0xabd/0xd30 [ 1278.167865][T24409] netlink_unicast+0x64c/0x870 [ 1278.167884][T24409] ? __pfx_netlink_unicast+0x10/0x10 [ 1278.167907][T24409] netlink_sendmsg+0x8c8/0xdd0 [ 1278.167927][T24409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1278.167945][T24409] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1278.167968][T24409] ____sys_sendmsg+0xa5d/0xc30 [ 1278.167981][T24409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1278.167991][T24409] ? get_compat_msghdr+0x11a/0x170 [ 1278.168013][T24409] ___sys_sendmsg+0x134/0x1d0 [ 1278.168034][T24409] ? __pfx____sys_sendmsg+0x10/0x10 [ 1278.168067][T24409] ? find_held_lock+0x2b/0x80 [ 1278.168108][T24409] __sys_sendmsg+0x16d/0x220 [ 1278.168135][T24409] ? __pfx___sys_sendmsg+0x10/0x10 [ 1278.168160][T24409] ? do_user_addr_fault+0x843/0x1370 [ 1278.168177][T24409] __do_fast_syscall_32+0xe8/0x680 [ 1278.168191][T24409] do_fast_syscall_32+0x32/0x80 [ 1278.168202][T24409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1278.168217][T24409] RIP: 0023:0xf70fd579 [ 1278.168226][T24409] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1278.168237][T24409] RSP: 002b:00000000f54ed55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1278.168249][T24409] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1278.168256][T24409] RDX: 0000000000000844 RSI: 0000000000000000 RDI: 0000000000000000 [ 1278.168263][T24409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1278.168270][T24409] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1278.168276][T24409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1278.168291][T24409] [ 1278.836413][T24383] vhci_hcd: connection reset by peer [ 1278.840105][ T12] vhci_hcd vhci_hcd.8: stop threads [ 1278.842283][ T12] vhci_hcd vhci_hcd.8: release socket [ 1278.844257][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 1278.856784][T24421] fuse: Unknown parameter 'use00000000000000000000' [ 1278.887223][T24423] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4690'. [ 1278.919915][T24425] comedi comedi2: dt2815: I/O port conflict (0xfffffffffffffff9,2) [ 1279.093415][ T40] audit: type=1326 audit(1768263921.935:15528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24424 comm="syz.2.4691" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f74579 code=0x0 [ 1279.931932][T24437] netlink: 'syz.6.4692': attribute type 1 has an invalid length. [ 1279.967594][T24434] gretap1: entered allmulticast mode [ 1279.971259][T24434] bond3: (slave gretap1): making interface the new active one [ 1279.974047][T24434] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1280.114539][T24443] netlink: 'syz.2.4695': attribute type 1 has an invalid length. [ 1280.942353][T24457] FAULT_INJECTION: forcing a failure. [ 1280.942353][T24457] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.946324][T24457] CPU: 1 UID: 0 PID: 24457 Comm: syz.6.4700 Tainted: G L syzkaller #0 PREEMPT(full) [ 1280.946342][T24457] Tainted: [L]=SOFTLOCKUP [ 1280.946346][T24457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1280.946354][T24457] Call Trace: [ 1280.946358][T24457] [ 1280.946363][T24457] dump_stack_lvl+0x16c/0x1f0 [ 1280.946385][T24457] should_fail_ex+0x512/0x640 [ 1280.946399][T24457] ? __kmalloc_noprof+0xca/0x910 [ 1280.946414][T24457] should_failslab+0xc2/0x120 [ 1280.946432][T24457] __kmalloc_noprof+0xeb/0x910 [ 1280.946444][T24457] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1280.946466][T24457] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1280.946478][T24457] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1280.946494][T24457] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1280.946507][T24457] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1280.946520][T24457] ? genl_get_cmd+0x194/0x580 [ 1280.946534][T24457] ? bpf_lsm_capable+0x9/0x10 [ 1280.946549][T24457] ? security_capable+0x7e/0x260 [ 1280.946571][T24457] genl_rcv_msg+0x55c/0x800 [ 1280.946585][T24457] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1280.946596][T24457] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 1280.946612][T24457] ? __pfx_nl802154_del_llsec_key+0x10/0x10 [ 1280.946627][T24457] ? __pfx_nl802154_post_doit+0x10/0x10 [ 1280.946642][T24457] ? __lock_acquire+0x436/0x2890 [ 1280.946655][T24457] netlink_rcv_skb+0x158/0x420 [ 1280.946673][T24457] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1280.946685][T24457] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1280.946708][T24457] ? netlink_deliver_tap+0x1ae/0xd30 [ 1280.946727][T24457] genl_rcv+0x28/0x40 [ 1280.946736][T24457] netlink_unicast+0x5aa/0x870 [ 1280.946755][T24457] ? __pfx_netlink_unicast+0x10/0x10 [ 1280.946778][T24457] netlink_sendmsg+0x8c8/0xdd0 [ 1280.946798][T24457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1280.946817][T24457] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1280.946839][T24457] ____sys_sendmsg+0xa5d/0xc30 [ 1280.946852][T24457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1280.946862][T24457] ? get_compat_msghdr+0x11a/0x170 [ 1280.946884][T24457] ___sys_sendmsg+0x134/0x1d0 [ 1280.946901][T24457] ? __pfx____sys_sendmsg+0x10/0x10 [ 1280.946923][T24457] ? find_held_lock+0x2b/0x80 [ 1280.946947][T24457] __sys_sendmsg+0x16d/0x220 [ 1280.946963][T24457] ? __pfx___sys_sendmsg+0x10/0x10 [ 1280.946987][T24457] __do_fast_syscall_32+0xe8/0x680 [ 1280.947000][T24457] do_fast_syscall_32+0x32/0x80 [ 1280.947012][T24457] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1280.947026][T24457] RIP: 0023:0xf703d579 [ 1280.947036][T24457] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1280.947047][T24457] RSP: 002b:00000000f542d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1280.947058][T24457] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 1280.947065][T24457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1280.947072][T24457] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1280.947078][T24457] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1280.947085][T24457] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1280.947099][T24457] [ 1281.423812][T24471] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4710'. [ 1282.268607][T24479] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1282.270768][T24479] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1282.289881][T24479] vhci_hcd vhci_hcd.0: Device attached [ 1282.341375][ T6023] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1282.383332][T24485] syzkaller1: entered allmulticast mode [ 1282.521102][T16418] usb 51-1: new low-speed USB device number 3 using vhci_hcd [ 1282.568188][T24480] vhci_hcd: connection reset by peer [ 1282.572185][T17567] vhci_hcd vhci_hcd.7: stop threads [ 1282.574262][T17567] vhci_hcd vhci_hcd.7: release socket [ 1282.576506][T17567] vhci_hcd vhci_hcd.7: disconnect device [ 1282.973799][T24492] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4706'. [ 1283.296983][T24500] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4709'. [ 1283.307648][T24500] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4709'. [ 1284.209675][T24515] fuse: Bad value for 'rootmode' [ 1284.515768][T24525] netdevsim netdevsim7 : renamed from netdevsim0 (while UP) [ 1285.030015][T24540] fuse: Unknown parameter 'use00000000000000000000' [ 1285.059504][T24542] netlink: 'syz.7.4724': attribute type 3 has an invalid length. [ 1285.097252][T24546] tipc: Started in network mode [ 1285.098988][T24546] tipc: Node identity 84e, cluster identity 4711 [ 1285.100930][T24546] tipc: Node number set to 2126 [ 1285.130508][T24548] fuse: Unknown parameter 'user_i00000000000000000000' [ 1285.482719][T24563] bond2 (unregistering): Released all slaves [ 1286.222609][T24572] fuse: Unknown parameter 'use00000000000000000000' [ 1286.394555][T24578] FAULT_INJECTION: forcing a failure. [ 1286.394555][T24578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1286.399060][T24578] CPU: 2 UID: 0 PID: 24578 Comm: syz.7.4735 Tainted: G L syzkaller #0 PREEMPT(full) [ 1286.399079][T24578] Tainted: [L]=SOFTLOCKUP [ 1286.399082][T24578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1286.399090][T24578] Call Trace: [ 1286.399094][T24578] [ 1286.399099][T24578] dump_stack_lvl+0x16c/0x1f0 [ 1286.399122][T24578] should_fail_ex+0x512/0x640 [ 1286.399137][T24578] strncpy_from_user+0x3b/0x2e0 [ 1286.399151][T24578] getname_flags.part.0+0x8f/0x550 [ 1286.399167][T24578] getname_flags+0x93/0xf0 [ 1286.399182][T24578] user_path_at+0x24/0x60 [ 1286.399198][T24578] __ia32_sys_umount+0x109/0x190 [ 1286.399217][T24578] ? __pfx___ia32_sys_umount+0x10/0x10 [ 1286.399236][T24578] ? rcu_is_watching+0x12/0xc0 [ 1286.399253][T24578] __do_fast_syscall_32+0xe8/0x680 [ 1286.399266][T24578] do_fast_syscall_32+0x32/0x80 [ 1286.399277][T24578] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1286.399292][T24578] RIP: 0023:0xf70fd579 [ 1286.399302][T24578] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1286.399313][T24578] RSP: 002b:00000000f54cc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000034 [ 1286.399324][T24578] RAX: ffffffffffffffda RBX: 0000000080000340 RCX: 0000000000000000 [ 1286.399331][T24578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1286.399338][T24578] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1286.399344][T24578] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1286.399351][T24578] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1286.399364][T24578] [ 1286.711531][T24588] fuse: Unknown parameter 'user_i00000000000000000000' [ 1287.081196][T19456] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 1287.232834][T19456] usb 13-1: unable to get BOS descriptor or descriptor too short [ 1287.236332][T19456] usb 13-1: config 129 has an invalid interface number: 135 but max is 0 [ 1287.239189][T19456] usb 13-1: config 129 has an invalid interface number: 5 but max is 0 [ 1287.241902][T19456] usb 13-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1287.244962][T19456] usb 13-1: config 129 has no interface number 0 [ 1287.247788][T19456] usb 13-1: config 129 has no interface number 1 [ 1287.249968][T19456] usb 13-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1287.254230][T19456] usb 13-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1287.257732][T19456] usb 13-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1287.262070][T19456] usb 13-1: config 129 interface 135 has no altsetting 0 [ 1287.264381][T19456] usb 13-1: config 129 interface 5 has no altsetting 0 [ 1287.268917][T19456] usb 13-1: string descriptor 0 read error: -22 [ 1287.271393][T19456] usb 13-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1287.274345][T19456] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.283399][T19456] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 1287.285824][T19456] usb 13-1: MIDIStreaming interface descriptor not found [ 1287.520301][T24609] lo speed is unknown, defaulting to 1000 [ 1287.523861][T24609] wg2 speed is unknown, defaulting to 1000 [ 1287.532846][T20867] usb 13-1: USB disconnect, device number 8 [ 1287.611108][T16418] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1287.637972][T24616] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1287.952155][T24623] fuse: Unknown parameter 'user_id00000000000000000000' [ 1288.122518][T24626] netlink: 'syz.7.4749': attribute type 1 has an invalid length. [ 1289.529044][T24649] fuse: Unknown parameter 'user_i00000000000000000000' [ 1290.023419][T24665] FAULT_INJECTION: forcing a failure. [ 1290.023419][T24665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1290.027664][T24665] CPU: 2 UID: 0 PID: 24665 Comm: syz.2.4761 Tainted: G L syzkaller #0 PREEMPT(full) [ 1290.027683][T24665] Tainted: [L]=SOFTLOCKUP [ 1290.027687][T24665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1290.027706][T24665] Call Trace: [ 1290.027712][T24665] [ 1290.027717][T24665] dump_stack_lvl+0x16c/0x1f0 [ 1290.027740][T24665] should_fail_ex+0x512/0x640 [ 1290.027764][T24665] _copy_from_iter+0x2a4/0x16c0 [ 1290.027788][T24665] ? __alloc_skb+0x220/0x410 [ 1290.027809][T24665] ? __alloc_skb+0x35d/0x410 [ 1290.027829][T24665] ? __pfx__copy_from_iter+0x10/0x10 [ 1290.027849][T24665] ? netlink_autobind.isra.0+0x158/0x370 [ 1290.027884][T24665] netlink_sendmsg+0x820/0xdd0 [ 1290.027916][T24665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1290.027946][T24665] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1290.027982][T24665] ____sys_sendmsg+0xa5d/0xc30 [ 1290.028004][T24665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1290.028021][T24665] ? get_compat_msghdr+0x11a/0x170 [ 1290.028058][T24665] ___sys_sendmsg+0x134/0x1d0 [ 1290.028084][T24665] ? __pfx____sys_sendmsg+0x10/0x10 [ 1290.028122][T24665] ? find_held_lock+0x2b/0x80 [ 1290.028163][T24665] __sys_sendmsg+0x16d/0x220 [ 1290.028191][T24665] ? __pfx___sys_sendmsg+0x10/0x10 [ 1290.028227][T24665] ? do_user_addr_fault+0x843/0x1370 [ 1290.028253][T24665] __do_fast_syscall_32+0xe8/0x680 [ 1290.028277][T24665] do_fast_syscall_32+0x32/0x80 [ 1290.028296][T24665] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1290.028320][T24665] RIP: 0023:0xf7f74579 [ 1290.028335][T24665] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1290.028352][T24665] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1290.028371][T24665] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800007c0 [ 1290.028388][T24665] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1290.028399][T24665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1290.028410][T24665] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1290.028420][T24665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1290.028445][T24665] [ 1290.238182][T24668] serio: Serial port ptm0 [ 1290.599375][T24672] : renamed from bond_slave_0 (while UP) [ 1291.045176][T24677] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 1291.176377][T24686] FAULT_INJECTION: forcing a failure. [ 1291.176377][T24686] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.180372][T24686] CPU: 0 UID: 0 PID: 24686 Comm: syz.2.4767 Tainted: G L syzkaller #0 PREEMPT(full) [ 1291.180394][T24686] Tainted: [L]=SOFTLOCKUP [ 1291.180398][T24686] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1291.180406][T24686] Call Trace: [ 1291.180410][T24686] [ 1291.180415][T24686] dump_stack_lvl+0x16c/0x1f0 [ 1291.180437][T24686] should_fail_ex+0x512/0x640 [ 1291.180451][T24686] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1291.180466][T24686] should_failslab+0xc2/0x120 [ 1291.180484][T24686] __kmalloc_cache_noprof+0x80/0x800 [ 1291.180497][T24686] ? drm_crtc_queue_sequence_ioctl+0x30a/0xa40 [ 1291.180512][T24686] ? drm_crtc_queue_sequence_ioctl+0x30a/0xa40 [ 1291.180524][T24686] drm_crtc_queue_sequence_ioctl+0x30a/0xa40 [ 1291.180539][T24686] ? __pfx_drm_crtc_queue_sequence_ioctl+0x10/0x10 [ 1291.180552][T24686] ? drm_dev_exit+0x41/0x60 [ 1291.180567][T24686] drm_ioctl_kernel+0x1f4/0x3e0 [ 1291.180579][T24686] ? __pfx_drm_crtc_queue_sequence_ioctl+0x10/0x10 [ 1291.180592][T24686] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1291.180614][T24686] drm_ioctl+0x5c9/0xc30 [ 1291.180635][T24686] ? __pfx_drm_crtc_queue_sequence_ioctl+0x10/0x10 [ 1291.180653][T24686] ? __pfx_drm_ioctl+0x10/0x10 [ 1291.180689][T24686] drm_compat_ioctl+0x327/0x460 [ 1291.180714][T24686] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 1291.180730][T24686] __ia32_compat_sys_ioctl+0x242/0x370 [ 1291.180747][T24686] __do_fast_syscall_32+0xe8/0x680 [ 1291.180760][T24686] do_fast_syscall_32+0x32/0x80 [ 1291.180771][T24686] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1291.180785][T24686] RIP: 0023:0xf7f74579 [ 1291.180795][T24686] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1291.180806][T24686] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1291.180817][T24686] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c00c643c [ 1291.180824][T24686] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 1291.180831][T24686] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1291.180837][T24686] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1291.180844][T24686] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1291.180858][T24686] [ 1291.475872][T24692] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1291.477878][T24692] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1291.480788][T24692] vhci_hcd vhci_hcd.0: Device attached [ 1291.741171][T20867] usb 42-1: SetAddress Request (59) to port 0 [ 1291.743288][T20867] usb 42-1: new SuperSpeed USB device number 59 using vhci_hcd [ 1292.008291][T24693] vhci_hcd: connection reset by peer [ 1292.010183][ T1140] vhci_hcd vhci_hcd.2: stop threads [ 1292.014856][ T1140] vhci_hcd vhci_hcd.2: release socket [ 1292.015717][T24696] tipc: Enabled bearer , priority 0 [ 1292.017235][ T1140] vhci_hcd vhci_hcd.2: disconnect device [ 1292.022519][T24696] syzkaller0: entered promiscuous mode [ 1292.024370][T24696] syzkaller0: entered allmulticast mode [ 1292.034084][T24696] tipc: Resetting bearer [ 1292.071297][T24695] tipc: Resetting bearer [ 1292.143946][T24698] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1292.258046][T24695] tipc: Disabling bearer [ 1292.457726][T24711] fuse: Unknown parameter 'user_i00000000000000000000' [ 1292.885618][T24718] tmpfs: Bad value for 'mpol' [ 1293.683815][T24730] lo speed is unknown, defaulting to 1000 [ 1293.686345][T24730] wg2 speed is unknown, defaulting to 1000 [ 1294.119805][T24738] syzkaller0: entered promiscuous mode [ 1294.121833][T24738] syzkaller0: entered allmulticast mode [ 1294.641647][T24743] fuse: Unknown parameter 'user_id00000000000000000000' [ 1294.691188][T24747] fuse: Unknown parameter '0x0000000000000003' [ 1295.912960][T24771] fuse: Unknown parameter 'user_id00000000000000000000' [ 1296.049439][T24776] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4794'. [ 1296.161426][T24783] fuse: Unknown parameter '0x0000000000000003' [ 1296.408932][T24789] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1296.411752][T24789] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1296.416398][T24789] vhci_hcd vhci_hcd.0: Device attached [ 1297.026747][T24792] vhci_hcd: connection reset by peer [ 1297.029368][ T1140] vhci_hcd vhci_hcd.2: stop threads [ 1297.032686][ T1140] vhci_hcd vhci_hcd.2: release socket [ 1297.034609][T20867] usb 42-1: device descriptor read/8, error -110 [ 1297.036913][ T1140] vhci_hcd vhci_hcd.2: disconnect device [ 1297.228764][T24803] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(13) [ 1297.231208][T24803] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1297.233897][T24803] vhci_hcd vhci_hcd.0: Device attached [ 1297.244083][T24806] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4798'. [ 1297.392077][T24804] vhci_hcd: connection closed [ 1297.393140][T18433] vhci_hcd vhci_hcd.6: stop threads [ 1297.396674][T18433] vhci_hcd vhci_hcd.6: release socket [ 1297.400094][T18433] vhci_hcd vhci_hcd.6: disconnect device [ 1297.453161][T20867] usb usb42-port1: attempt power cycle [ 1297.983643][T24814] FAULT_INJECTION: forcing a failure. [ 1297.983643][T24814] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.988503][T24814] CPU: 3 UID: 0 PID: 24814 Comm: syz.6.4803 Tainted: G L syzkaller #0 PREEMPT(full) [ 1297.988532][T24814] Tainted: [L]=SOFTLOCKUP [ 1297.988538][T24814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1297.988549][T24814] Call Trace: [ 1297.988555][T24814] [ 1297.988562][T24814] dump_stack_lvl+0x16c/0x1f0 [ 1297.988597][T24814] should_fail_ex+0x512/0x640 [ 1297.988619][T24814] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1297.988645][T24814] should_failslab+0xc2/0x120 [ 1297.988673][T24814] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1297.988696][T24814] ? __alloc_skb+0x156/0x410 [ 1297.988723][T24814] ? __alloc_skb+0x156/0x410 [ 1297.988743][T24814] __alloc_skb+0x156/0x410 [ 1297.988762][T24814] ? __alloc_skb+0x35d/0x410 [ 1297.988782][T24814] ? __pfx___alloc_skb+0x10/0x10 [ 1297.988806][T24814] ? netlink_autobind.isra.0+0x158/0x370 [ 1297.988842][T24814] netlink_alloc_large_skb+0x69/0x140 [ 1297.988873][T24814] netlink_sendmsg+0x698/0xdd0 [ 1297.988905][T24814] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1297.988937][T24814] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1297.988974][T24814] ____sys_sendmsg+0xa5d/0xc30 [ 1297.988996][T24814] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1297.989012][T24814] ? get_compat_msghdr+0x11a/0x170 [ 1297.989049][T24814] ___sys_sendmsg+0x134/0x1d0 [ 1297.989076][T24814] ? __pfx____sys_sendmsg+0x10/0x10 [ 1297.989113][T24814] ? find_held_lock+0x2b/0x80 [ 1297.989154][T24814] __sys_sendmsg+0x16d/0x220 [ 1297.989179][T24814] ? __pfx___sys_sendmsg+0x10/0x10 [ 1297.989220][T24814] __do_fast_syscall_32+0xe8/0x680 [ 1297.989241][T24814] do_fast_syscall_32+0x32/0x80 [ 1297.989260][T24814] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1297.989283][T24814] RIP: 0023:0xf703d579 [ 1297.989324][T24814] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1297.989343][T24814] RSP: 002b:00000000f542d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1297.989361][T24814] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800010c0 [ 1297.989373][T24814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1297.989384][T24814] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1297.989394][T24814] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1297.989404][T24814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1297.989430][T24814] [ 1298.090040][T20867] usb usb42-port1: unable to enumerate USB device [ 1298.170669][T24819] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4805'. [ 1298.251327][T24788] Bluetooth: hci3: command 0x0c1a tx timeout [ 1298.259508][T24822] : renamed from bond_slave_0 (while UP) [ 1299.448399][T24845] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4812'. [ 1300.274812][T24856] siw: device registration error -23 [ 1301.239969][T24886] overlayfs: failed to resolve './file0': -2 [ 1301.546528][T24894] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4826'. [ 1301.692130][T24895] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4827'. [ 1301.696104][T24895] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4827'. [ 1301.699819][T24895] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4827'. [ 1301.955391][T24907] fuse: Unknown parameter 'fd0x0000000000000003' [ 1303.012611][ T34] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 1303.166218][ T34] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1303.170808][ T34] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1303.175568][ T34] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1303.178808][ T34] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1303.184547][ T34] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1303.188490][ T34] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.201629][ T34] usb 13-1: config 0 descriptor?? [ 1303.287648][T24932] fuse: Unknown parameter 'fd0x0000000000000003' [ 1303.607557][T24922] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4837'. [ 1303.694765][ T34] hid_parser_main: 8 callbacks suppressed [ 1303.694779][ T34] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1304.139704][T24947] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1304.141892][T24947] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1304.144821][T24947] vhci_hcd vhci_hcd.0: Device attached [ 1304.181743][ T34] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1304.184252][ T34] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1304.186682][ T34] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1304.189021][ T34] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1304.194382][ T34] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1304.199485][T24946] syzkaller0: entered promiscuous mode [ 1304.201725][T24946] syzkaller0: entered allmulticast mode [ 1304.208302][ T34] usb 13-1: USB disconnect, device number 9 [ 1304.331740][T24952] fido_id[24952]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb13/report_descriptor': No such file or directory [ 1304.415393][T22440] usb 42-1: SetAddress Request (63) to port 0 [ 1304.417874][T22440] usb 42-1: new SuperSpeed USB device number 63 using vhci_hcd [ 1304.733390][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 1304.735575][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.248146][T24963] fuse: Unknown parameter 'fd0x0000000000000003' [ 1305.348579][T24968] input: syz1 as /devices/virtual/input/input67 [ 1305.455392][ T40] audit: type=1326 audit(1768263948.295:15529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24966 comm="syz.6.4851" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x0 [ 1306.451215][ T6023] kernel read not supported for file /dsp (pid: 6023 comm: kworker/1:5) [ 1306.840252][ T40] audit: type=1326 audit(1768263949.675:15530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24985 comm="syz.6.4855" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x0 [ 1306.940567][T24948] vhci_hcd: connection reset by peer [ 1306.943185][ T182] vhci_hcd vhci_hcd.2: stop threads [ 1306.945055][ T182] vhci_hcd vhci_hcd.2: release socket [ 1306.946925][ T182] vhci_hcd vhci_hcd.2: disconnect device [ 1309.451280][T22440] usb 42-1: device descriptor read/8, error -110 [ 1309.842688][T22440] usb usb42-port1: attempt power cycle [ 1310.413250][T22440] usb usb42-port1: unable to enumerate USB device [ 1315.801368][T24978] tunl0: Caught tx_queue_len zero misconfig [ 1315.981821][T24997] netlink: 'syz.7.4857': attribute type 30 has an invalid length. [ 1316.032803][T25008] netlink: 'syz.7.4857': attribute type 30 has an invalid length. [ 1316.452308][T25012] tipc: Started in network mode [ 1316.454259][T25012] tipc: Node identity be95bc4a5f9f, cluster identity 4711 [ 1316.456851][T25012] tipc: Enabled bearer , priority 0 [ 1316.460061][T25013] syzkaller0: entered promiscuous mode [ 1316.464436][T25013] syzkaller0: entered allmulticast mode [ 1316.621279][T25018] syzkaller0: mtu greater than device maximum [ 1316.677802][T25005] tipc: Resetting bearer [ 1316.900013][ T40] audit: type=1326 audit(1768263959.735:15531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25024 comm="syz.8.4864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 1316.907770][ T40] audit: type=1326 audit(1768263959.735:15532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25024 comm="syz.8.4864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 1316.916263][ T40] audit: type=1326 audit(1768263959.755:15533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25024 comm="syz.8.4864" exe="/syz-executor" sig=0 arch=40000003 syscall=122 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 1316.923467][ T40] audit: type=1326 audit(1768263959.755:15534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25024 comm="syz.8.4864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 1316.930302][ T40] audit: type=1326 audit(1768263959.755:15535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25024 comm="syz.8.4864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 1316.938448][ T40] audit: type=1326 audit(1768263959.765:15536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25024 comm="syz.8.4864" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 1316.945709][ T40] audit: type=1326 audit(1768263959.765:15537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25024 comm="syz.8.4864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 1316.946880][T25005] tipc: Disabling bearer [ 1316.956625][ T40] audit: type=1326 audit(1768263959.765:15538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25024 comm="syz.8.4864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 1316.963875][ T40] audit: type=1326 audit(1768263959.775:15539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25024 comm="syz.8.4864" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 1316.970660][ T40] audit: type=1326 audit(1768263959.775:15540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25024 comm="syz.8.4864" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 1317.122603][T25030] vivid-007: disconnect [ 1317.743252][T25024] vivid-007: reconnect [ 1317.836234][T25038] usb usb1: usbfs: process 25038 (syz.7.4868) did not claim interface 0 before use [ 1317.911664][T25042] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4870'. [ 1317.924276][T25038] lo speed is unknown, defaulting to 1000 [ 1317.928923][T25038] wg2 speed is unknown, defaulting to 1000 [ 1318.031876][T25045] netlink: 144 bytes leftover after parsing attributes in process `syz.7.4868'. [ 1318.788286][T25057] FAULT_INJECTION: forcing a failure. [ 1318.788286][T25057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1318.793234][T25057] CPU: 2 UID: 0 PID: 25057 Comm: syz.7.4871 Tainted: G L syzkaller #0 PREEMPT(full) [ 1318.793253][T25057] Tainted: [L]=SOFTLOCKUP [ 1318.793257][T25057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1318.793264][T25057] Call Trace: [ 1318.793269][T25057] [ 1318.793273][T25057] dump_stack_lvl+0x16c/0x1f0 [ 1318.793297][T25057] should_fail_ex+0x512/0x640 [ 1318.793313][T25057] _copy_to_user+0x32/0xd0 [ 1318.793327][T25057] bpf_test_finish.isra.0+0x48d/0x6b0 [ 1318.793347][T25057] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 1318.793366][T25057] ? eth_type_trans+0x2e3/0x740 [ 1318.793385][T25057] bpf_prog_test_run_skb+0x201c/0x31a0 [ 1318.793417][T25057] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1318.793435][T25057] ? fput+0x70/0xf0 [ 1318.793448][T25057] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1318.793465][T25057] __sys_bpf+0x1035/0x4980 [ 1318.793478][T25057] ? __pfx___sys_bpf+0x10/0x10 [ 1318.793488][T25057] ? find_held_lock+0x2b/0x80 [ 1318.793506][T25057] ? find_held_lock+0x2b/0x80 [ 1318.793524][T25057] ? __mutex_unlock_slowpath+0x161/0x790 [ 1318.793544][T25057] ? fput+0x70/0xf0 [ 1318.793555][T25057] ? ksys_write+0x1ac/0x250 [ 1318.793571][T25057] ? __pfx_ksys_write+0x10/0x10 [ 1318.793589][T25057] __ia32_sys_bpf+0x76/0xe0 [ 1318.793600][T25057] ? lockdep_hardirqs_on+0x7c/0x110 [ 1318.793618][T25057] __do_fast_syscall_32+0xe8/0x680 [ 1318.793630][T25057] do_fast_syscall_32+0x32/0x80 [ 1318.793642][T25057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1318.793656][T25057] RIP: 0023:0xf70fd579 [ 1318.793665][T25057] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1318.793676][T25057] RSP: 002b:00000000f54ed55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1318.793688][T25057] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0 [ 1318.793699][T25057] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1318.793709][T25057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1318.793718][T25057] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1318.793727][T25057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1318.793750][T25057] [ 1319.084266][T25066] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1319.088654][T25066] netlink: 188 bytes leftover after parsing attributes in process `syz.6.4874'. [ 1319.341190][ T34] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 1319.389786][T25071] fuse: Unknown parameter '0x0000000000000003' [ 1319.450648][T25074] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1319.452876][T25074] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1319.455652][T25074] vhci_hcd vhci_hcd.0: Device attached [ 1319.479228][T25074] random: crng reseeded on system resumption [ 1319.491227][ T34] usb 11-1: Using ep0 maxpacket: 16 [ 1319.497463][ T34] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1319.500894][ T34] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1319.505021][ T34] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1319.508320][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1319.515436][ T34] usb 11-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1319.518543][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.527637][ T34] usb 11-1: Product: syz [ 1319.529342][ T34] usb 11-1: Manufacturer: syz [ 1319.531271][ T34] usb 11-1: SerialNumber: syz [ 1319.540003][ T34] usb 11-1: config 0 descriptor?? [ 1319.541441][T17567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1319.544978][T17567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1319.761474][T19456] usb 52-1: SetAddress Request (22) to port 0 [ 1319.763544][T19456] usb 52-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1319.772419][ T34] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input68 [ 1319.777901][ T5332] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1319.833349][ T5332] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1319.882480][T25082] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1319.931486][ T5332] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1320.012055][ T5332] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1320.032916][T25087] overlay: ./file0 is not a directory [ 1320.052702][T25066] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1320.091530][ T5332] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1320.151327][ T5332] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1320.202512][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1320.461255][T25075] vhci_hcd: connection reset by peer [ 1320.464811][T17567] vhci_hcd vhci_hcd.7: stop threads [ 1320.467121][T17567] vhci_hcd vhci_hcd.7: release socket [ 1320.469638][T17567] vhci_hcd vhci_hcd.7: disconnect device [ 1321.901957][T25106] fuse: Unknown parameter '0x0000000000000003' [ 1322.126059][T25112] netlink: zone id is out of range [ 1322.195177][T25112] netlink: set zone limit has 4 unknown bytes [ 1322.253549][T22440] usb 11-1: USB disconnect, device number 18 [ 1322.547863][T25127] overlay: ./file0 is not a directory [ 1322.952926][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 1322.952988][ T40] audit: type=1326 audit(1768263965.775:15561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25128 comm="syz.2.4894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1322.972925][ T40] audit: type=1326 audit(1768263965.775:15562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25128 comm="syz.2.4894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1322.979859][ T40] audit: type=1326 audit(1768263965.775:15563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25128 comm="syz.2.4894" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1322.988194][ T40] audit: type=1326 audit(1768263965.775:15564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25128 comm="syz.2.4894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1322.990087][ T53] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1322.995334][ T40] audit: type=1326 audit(1768263965.775:15565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25128 comm="syz.2.4894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1323.008645][T25131] IPVS: length: 154 != 183903660728 [ 1323.008845][ T40] audit: type=1326 audit(1768263965.785:15566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25128 comm="syz.2.4894" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1323.028705][T25133] lo speed is unknown, defaulting to 1000 [ 1323.031407][T25133] wg2 speed is unknown, defaulting to 1000 [ 1323.126440][ T40] audit: type=1326 audit(1768263965.785:15567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25128 comm="syz.2.4894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1323.137782][ T40] audit: type=1326 audit(1768263965.785:15568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25128 comm="syz.2.4894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1323.144870][ T40] audit: type=1326 audit(1768263965.785:15569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25128 comm="syz.2.4894" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1323.151675][ T40] audit: type=1326 audit(1768263965.785:15570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25128 comm="syz.2.4894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 1323.274211][T25140] fuse: Unknown parameter 'fd0x0000000000000003' [ 1323.543231][T25155] FAULT_INJECTION: forcing a failure. [ 1323.543231][T25155] name failslab, interval 1, probability 0, space 0, times 0 [ 1323.559130][T25155] CPU: 3 UID: 0 PID: 25155 Comm: syz.2.4901 Tainted: G L syzkaller #0 PREEMPT(full) [ 1323.559150][T25155] Tainted: [L]=SOFTLOCKUP [ 1323.559154][T25155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1323.559161][T25155] Call Trace: [ 1323.559166][T25155] [ 1323.559170][T25155] dump_stack_lvl+0x16c/0x1f0 [ 1323.559193][T25155] should_fail_ex+0x512/0x640 [ 1323.559207][T25155] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1323.559223][T25155] should_failslab+0xc2/0x120 [ 1323.559242][T25155] kmem_cache_alloc_noprof+0x83/0x770 [ 1323.559255][T25155] ? getname_flags.part.0+0x4c/0x550 [ 1323.559272][T25155] ? getname_flags.part.0+0x4c/0x550 [ 1323.559284][T25155] getname_flags.part.0+0x4c/0x550 [ 1323.559298][T25155] getname_flags+0x93/0xf0 [ 1323.559313][T25155] path_listxattrat+0x2e8/0x370 [ 1323.559329][T25155] ? ksys_write+0x1ac/0x250 [ 1323.559346][T25155] ? __pfx_path_listxattrat+0x10/0x10 [ 1323.559363][T25155] ? rcu_is_watching+0x12/0xc0 [ 1323.559384][T25155] __do_fast_syscall_32+0xe8/0x680 [ 1323.559398][T25155] do_fast_syscall_32+0x32/0x80 [ 1323.559410][T25155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1323.559427][T25155] RIP: 0023:0xf7f74579 [ 1323.559437][T25155] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1323.559449][T25155] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 00000000000000e8 [ 1323.559461][T25155] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 1323.559469][T25155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1323.559476][T25155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1323.559483][T25155] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1323.559490][T25155] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1323.559504][T25155] [ 1323.621135][ T53] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 1323.791144][ T6004] usb 12-1: new full-speed USB device number 9 using dummy_hcd [ 1323.792547][ T53] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 1323.796433][ T53] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1323.799472][ T53] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1323.803663][ T53] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1323.806482][ T53] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1323.831958][ T53] usb 11-1: Product: syz [ 1323.833234][ T53] usb 11-1: Manufacturer: syz [ 1323.834797][ T53] usb 11-1: SerialNumber: syz [ 1323.850956][ T53] usb 11-1: config 0 descriptor?? [ 1323.857191][ T53] hub 11-1:0.0: bad descriptor, ignoring hub [ 1323.859232][ T53] hub 11-1:0.0: probe with driver hub failed with error -5 [ 1323.862963][ T53] usb 11-1: selecting invalid altsetting 0 [ 1323.942617][ T6004] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1323.946144][ T6004] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1323.950880][ T6004] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1323.956260][ T6004] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.114119][T25145] FAULT_INJECTION: forcing a failure. [ 1324.114119][T25145] name failslab, interval 1, probability 0, space 0, times 0 [ 1324.119342][T25145] CPU: 1 UID: 0 PID: 25145 Comm: syz.6.4898 Tainted: G L syzkaller #0 PREEMPT(full) [ 1324.119375][T25145] Tainted: [L]=SOFTLOCKUP [ 1324.119381][T25145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1324.119392][T25145] Call Trace: [ 1324.119399][T25145] [ 1324.119407][T25145] dump_stack_lvl+0x16c/0x1f0 [ 1324.119438][T25145] should_fail_ex+0x512/0x640 [ 1324.119457][T25145] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 1324.119485][T25145] should_failslab+0xc2/0x120 [ 1324.119510][T25145] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 1324.119534][T25145] ? find_held_lock+0x2b/0x80 [ 1324.119554][T25145] ? snd_pcm_hw_rule_add+0x40a/0x590 [ 1324.119586][T25145] ? krealloc_node_align_noprof+0x2ea/0x3d0 [ 1324.119609][T25145] krealloc_node_align_noprof+0x2ea/0x3d0 [ 1324.119631][T25145] ? __split_page_owner+0x245/0x3b0 [ 1324.119659][T25145] snd_pcm_hw_rule_add+0x40a/0x590 [ 1324.119686][T25145] ? __pfx_snd_pcm_hw_rule_format+0x10/0x10 [ 1324.119707][T25145] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 1324.119736][T25145] ? mutex_init_lockep+0x110/0x150 [ 1324.119754][T25145] ? snd_pcm_attach_substream+0x89d/0xd60 [ 1324.119782][T25145] snd_pcm_open_substream+0x534/0x1820 [ 1324.119806][T25145] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1324.119836][T25145] snd_pcm_open+0x29e/0x730 [ 1324.119875][T25145] ? __pfx_snd_pcm_open+0x10/0x10 [ 1324.119900][T25145] ? __pfx_default_wake_function+0x10/0x10 [ 1324.119930][T25145] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 1324.119952][T25145] snd_pcm_playback_open+0x86/0xe0 [ 1324.119975][T25145] snd_open+0x22d/0x4c0 [ 1324.119992][T25145] ? __pfx_snd_open+0x10/0x10 [ 1324.120006][T25145] chrdev_open+0x234/0x6a0 [ 1324.120032][T25145] ? __pfx_chrdev_open+0x10/0x10 [ 1324.120059][T25145] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1324.120091][T25145] do_dentry_open+0x748/0x1590 [ 1324.120114][T25145] ? __pfx_chrdev_open+0x10/0x10 [ 1324.120146][T25145] vfs_open+0x82/0x3f0 [ 1324.120167][T25145] path_openat+0x2078/0x3140 [ 1324.120200][T25145] ? __pfx_path_openat+0x10/0x10 [ 1324.120228][T25145] ? __lock_acquire+0x436/0x2890 [ 1324.120247][T25145] do_filp_open+0x20b/0x470 [ 1324.120272][T25145] ? __pfx_do_filp_open+0x10/0x10 [ 1324.120314][T25145] ? _raw_spin_unlock+0x28/0x50 [ 1324.120337][T25145] ? alloc_fd+0x471/0x7d0 [ 1324.120373][T25145] do_sys_openat2+0x121/0x290 [ 1324.120392][T25145] ? __pfx_do_sys_openat2+0x10/0x10 [ 1324.120413][T25145] ? __fget_files+0x20e/0x3c0 [ 1324.120440][T25145] __ia32_compat_sys_openat+0x16d/0x210 [ 1324.120461][T25145] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1324.120481][T25145] ? ksys_write+0x1ac/0x250 [ 1324.120512][T25145] __do_fast_syscall_32+0xe8/0x680 [ 1324.120531][T25145] do_fast_syscall_32+0x32/0x80 [ 1324.120548][T25145] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1324.120570][T25145] RIP: 0023:0xf703d579 [ 1324.120584][T25145] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1324.120600][T25145] RSP: 002b:00000000f542d100 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 1324.120618][T25145] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f542d150 [ 1324.120629][T25145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73d6ff4 [ 1324.120641][T25145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1324.120651][T25145] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1324.120661][T25145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1324.120685][T25145] [ 1324.602231][T25145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.605658][T25145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.699279][T25175] fuse: Unknown parameter 'fd0x0000000000000003' [ 1324.751390][ T53] usb 11-1: USB disconnect, device number 19 [ 1324.768091][T25178] udevd[25178]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1324.811186][T19456] usb 52-1: device descriptor read/8, error -110 [ 1324.815717][T25182] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4906'. [ 1324.819619][T25182] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4906'. [ 1324.976973][ T6004] usb 12-1: GET_CAPABILITIES returned 0 [ 1324.978854][ T6004] usbtmc 12-1:16.0: can't read capabilities [ 1325.136748][T25193] fuse: Unknown parameter 'max_r' [ 1325.272779][T19456] usb usb52-port1: attempt power cycle [ 1325.348068][ T6023] usb 12-1: USB disconnect, device number 9 [ 1325.500889][T25203] netlink: zone id is out of range [ 1325.535148][T25203] netlink: set zone limit has 4 unknown bytes [ 1325.600734][T25197] /dev/sr0: Can't open blockdev [ 1325.836071][T19456] usb usb52-port1: unable to enumerate USB device [ 1326.149190][T25217] fuse: Unknown parameter 'fd0x0000000000000003' [ 1326.182418][T25219] FAULT_INJECTION: forcing a failure. [ 1326.182418][T25219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1326.187761][T25219] CPU: 3 UID: 0 PID: 25219 Comm: syz.6.4916 Tainted: G L syzkaller #0 PREEMPT(full) [ 1326.187780][T25219] Tainted: [L]=SOFTLOCKUP [ 1326.187784][T25219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1326.187791][T25219] Call Trace: [ 1326.187796][T25219] [ 1326.187801][T25219] dump_stack_lvl+0x16c/0x1f0 [ 1326.187823][T25219] should_fail_ex+0x512/0x640 [ 1326.187840][T25219] _copy_to_user+0x32/0xd0 [ 1326.187855][T25219] simple_read_from_buffer+0xcb/0x170 [ 1326.187873][T25219] proc_fail_nth_read+0x197/0x240 [ 1326.187893][T25219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1326.187912][T25219] ? rw_verify_area+0xcf/0x6c0 [ 1326.187927][T25219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1326.187946][T25219] vfs_read+0x1e4/0xcf0 [ 1326.187963][T25219] ? __pfx___mutex_lock+0x10/0x10 [ 1326.187975][T25219] ? __pfx_vfs_read+0x10/0x10 [ 1326.187990][T25219] ? find_held_lock+0x2b/0x80 [ 1326.188008][T25219] ? __fget_files+0x20e/0x3c0 [ 1326.188029][T25219] ksys_read+0x12a/0x250 [ 1326.188044][T25219] ? __pfx_ksys_read+0x10/0x10 [ 1326.188061][T25219] ? fput+0x70/0xf0 [ 1326.188074][T25219] __do_fast_syscall_32+0xe8/0x680 [ 1326.188087][T25219] do_fast_syscall_32+0x32/0x80 [ 1326.188099][T25219] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1326.188114][T25219] RIP: 0023:0xf703d579 [ 1326.188123][T25219] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1326.188134][T25219] RSP: 002b:00000000f542d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1326.188146][T25219] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f542d620 [ 1326.188153][T25219] RDX: 000000000000000f RSI: 00000000f73d6ff4 RDI: 0000000000000000 [ 1326.188160][T25219] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1326.188166][T25219] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1326.188172][T25219] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1326.188187][T25219] [ 1327.646521][T25227] fuse: Unknown parameter 'max_r' [ 1327.883287][T25253] kAFS: unable to lookup cell '.' [ 1328.132336][T25259] openvswitch: netlink: IP tunnel TTL not specified. [ 1329.225944][T25284] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4934'. [ 1329.233302][T25284] comedi comedi3: bad chanlist[0]=0x00000003 chan=3 range length=1 [ 1329.241163][T25286] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4935'. [ 1329.246037][T25286] qrtr: Invalid version 255 [ 1329.843505][T25295] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4938'. [ 1329.900144][T25298] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4938'. [ 1329.904136][T25298] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4938'. [ 1331.253601][T25317] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4947'. [ 1331.299257][T25317] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4947'. [ 1331.302437][T25317] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4947'. [ 1331.732454][T25328] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4951'. [ 1331.747538][T25331] FAULT_INJECTION: forcing a failure. [ 1331.747538][T25331] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.751959][T25331] CPU: 3 UID: 0 PID: 25331 Comm: syz.2.4952 Tainted: G L syzkaller #0 PREEMPT(full) [ 1331.751978][T25331] Tainted: [L]=SOFTLOCKUP [ 1331.751981][T25331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1331.751989][T25331] Call Trace: [ 1331.751993][T25331] [ 1331.752003][T25331] dump_stack_lvl+0x16c/0x1f0 [ 1331.752026][T25331] should_fail_ex+0x512/0x640 [ 1331.752040][T25331] ? __kmalloc_node_noprof+0xcd/0x930 [ 1331.752058][T25331] should_failslab+0xc2/0x120 [ 1331.752075][T25331] __kmalloc_node_noprof+0xee/0x930 [ 1331.752090][T25331] ? __get_vm_area_node+0x1dc/0x330 [ 1331.752107][T25331] ? __vmalloc_node_range_noprof+0x405/0x16b0 [ 1331.752121][T25331] ? __vmalloc_node_range_noprof+0x405/0x16b0 [ 1331.752132][T25331] __vmalloc_node_range_noprof+0x405/0x16b0 [ 1331.752148][T25331] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1331.752166][T25331] ? __pfx___might_resched+0x10/0x10 [ 1331.752183][T25331] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1331.752195][T25331] ? should_fail_alloc_page+0xee/0x130 [ 1331.752214][T25331] ? rcu_is_watching+0x12/0xc0 [ 1331.752230][T25331] ? trace_mm_page_alloc+0x11b/0x180 [ 1331.752251][T25331] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1331.752265][T25331] __vmalloc_node_noprof+0xad/0xf0 [ 1331.752276][T25331] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1331.752292][T25331] __vmalloc_noprof+0xa3/0x120 [ 1331.752303][T25331] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1331.752316][T25331] ? apparmor_capable+0x1d7/0x4e0 [ 1331.752330][T25331] bpf_prog_alloc_no_stats+0x58/0x600 [ 1331.752344][T25331] ? security_capable+0x7e/0x260 [ 1331.752363][T25331] bpf_prog_alloc+0x3b/0x230 [ 1331.752376][T25331] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1331.752394][T25331] bpf_prog_load+0x19bc/0x2cc0 [ 1331.752412][T25331] ? _parse_integer_limit+0x17f/0x1d0 [ 1331.752432][T25331] ? __pfx_bpf_prog_load+0x10/0x10 [ 1331.752448][T25331] ? __lock_acquire+0x436/0x2890 [ 1331.752474][T25331] __sys_bpf+0x3e72/0x4980 [ 1331.752486][T25331] ? __pfx___sys_bpf+0x10/0x10 [ 1331.752496][T25331] ? find_held_lock+0x2b/0x80 [ 1331.752514][T25331] ? find_held_lock+0x2b/0x80 [ 1331.752546][T25331] ? __mutex_unlock_slowpath+0x161/0x790 [ 1331.752569][T25331] ? fput+0x70/0xf0 [ 1331.752580][T25331] ? ksys_write+0x1ac/0x250 [ 1331.752596][T25331] ? __pfx_ksys_write+0x10/0x10 [ 1331.752614][T25331] __ia32_sys_bpf+0x76/0xe0 [ 1331.752625][T25331] ? lockdep_hardirqs_on+0x7c/0x110 [ 1331.752643][T25331] __do_fast_syscall_32+0xe8/0x680 [ 1331.752658][T25331] do_fast_syscall_32+0x32/0x80 [ 1331.752670][T25331] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1331.752684][T25331] RIP: 0023:0xf7f74579 [ 1331.752693][T25331] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1331.752704][T25331] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1331.752715][T25331] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800054c0 [ 1331.752722][T25331] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1331.752728][T25331] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1331.752735][T25331] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1331.752741][T25331] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1331.752755][T25331] [ 1331.752984][T25331] syz.2.4952: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1331.862928][T25331] CPU: 3 UID: 0 PID: 25331 Comm: syz.2.4952 Tainted: G L syzkaller #0 PREEMPT(full) [ 1331.862946][T25331] Tainted: [L]=SOFTLOCKUP [ 1331.862950][T25331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1331.862957][T25331] Call Trace: [ 1331.862961][T25331] [ 1331.862966][T25331] dump_stack_lvl+0x16c/0x1f0 [ 1331.862988][T25331] warn_alloc+0x248/0x3a0 [ 1331.863009][T25331] ? __pfx_warn_alloc+0x10/0x10 [ 1331.863021][T25331] ? dump_stack_lvl+0x1a3/0x1f0 [ 1331.863039][T25331] ? should_fail_ex+0x354/0x640 [ 1331.863054][T25331] ? rcu_is_watching+0x12/0xc0 [ 1331.863070][T25331] ? trace_kmalloc+0x2b/0xb0 [ 1331.863086][T25331] ? __kmalloc_node_noprof+0x372/0x930 [ 1331.863101][T25331] ? __get_vm_area_node+0x1dc/0x330 [ 1331.863119][T25331] ? __vmalloc_node_range_noprof+0x405/0x16b0 [ 1331.863134][T25331] __vmalloc_node_range_noprof+0x1309/0x16b0 [ 1331.863150][T25331] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1331.863167][T25331] ? __pfx___might_resched+0x10/0x10 [ 1331.863184][T25331] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1331.863196][T25331] ? should_fail_alloc_page+0xee/0x130 [ 1331.863216][T25331] ? rcu_is_watching+0x12/0xc0 [ 1331.863231][T25331] ? trace_mm_page_alloc+0x11b/0x180 [ 1331.863249][T25331] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1331.863263][T25331] __vmalloc_node_noprof+0xad/0xf0 [ 1331.863274][T25331] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1331.863290][T25331] __vmalloc_noprof+0xa3/0x120 [ 1331.863301][T25331] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1331.863314][T25331] ? apparmor_capable+0x1d7/0x4e0 [ 1331.863328][T25331] bpf_prog_alloc_no_stats+0x58/0x600 [ 1331.863341][T25331] ? security_capable+0x7e/0x260 [ 1331.863361][T25331] bpf_prog_alloc+0x3b/0x230 [ 1331.863374][T25331] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1331.863392][T25331] bpf_prog_load+0x19bc/0x2cc0 [ 1331.863409][T25331] ? _parse_integer_limit+0x17f/0x1d0 [ 1331.863429][T25331] ? __pfx_bpf_prog_load+0x10/0x10 [ 1331.863446][T25331] ? __lock_acquire+0x436/0x2890 [ 1331.863471][T25331] __sys_bpf+0x3e72/0x4980 [ 1331.863483][T25331] ? __pfx___sys_bpf+0x10/0x10 [ 1331.863493][T25331] ? find_held_lock+0x2b/0x80 [ 1331.863511][T25331] ? find_held_lock+0x2b/0x80 [ 1331.863529][T25331] ? __mutex_unlock_slowpath+0x161/0x790 [ 1331.863548][T25331] ? fput+0x70/0xf0 [ 1331.863559][T25331] ? ksys_write+0x1ac/0x250 [ 1331.863575][T25331] ? __pfx_ksys_write+0x10/0x10 [ 1331.863594][T25331] __ia32_sys_bpf+0x76/0xe0 [ 1331.863604][T25331] ? lockdep_hardirqs_on+0x7c/0x110 [ 1331.863622][T25331] __do_fast_syscall_32+0xe8/0x680 [ 1331.863634][T25331] do_fast_syscall_32+0x32/0x80 [ 1331.863645][T25331] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1331.863659][T25331] RIP: 0023:0xf7f74579 [ 1331.863669][T25331] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1331.863680][T25331] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1331.863690][T25331] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800054c0 [ 1331.863698][T25331] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1331.863704][T25331] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1331.863710][T25331] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1331.863717][T25331] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1331.863731][T25331] [ 1331.863735][T25331] Mem-Info: [ 1331.970612][T25331] active_anon:1236 inactive_anon:1627 isolated_anon:0 [ 1331.970612][T25331] active_file:2503 inactive_file:1953 isolated_file:0 [ 1331.970612][T25331] unevictable:1768 dirty:142 writeback:0 [ 1331.970612][T25331] slab_reclaimable:6799 slab_unreclaimable:65015 [ 1331.970612][T25331] mapped:23074 shmem:1876 pagetables:1602 [ 1331.970612][T25331] sec_pagetables:333 bounce:0 [ 1331.970612][T25331] kernel_misc_reclaimable:0 [ 1331.970612][T25331] free:62720 free_pcp:19348 free_cma:0 [ 1331.970643][T25331] Node 0 active_anon:388kB inactive_anon:144kB active_file:684kB inactive_file:184kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:324kB dirty:0kB writeback:0kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9472kB pagetables:1512kB sec_pagetables:1160kB all_unreclaimable? yes Balloon:0kB [ 1331.970671][T25331] Node 1 active_anon:4556kB inactive_anon:6364kB active_file:9328kB inactive_file:7628kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:91972kB dirty:568kB writeback:0kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5912kB pagetables:4896kB sec_pagetables:172kB all_unreclaimable? no Balloon:0kB [ 1331.970698][T25331] Node 0 DMA free:2100kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:304kB local_pcp:100kB free_cma:0kB [ 1331.970731][T25331] lowmem_reserve[]: 0 289 289 289 289 [ 1331.970754][T25331] Node 0 DMA32 free:18064kB boost:2048kB min:15380kB low:18712kB high:22044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:380kB inactive_anon:144kB active_file:684kB inactive_file:52kB unevictable:3536kB writepending:0kB zspages:588kB present:1032196kB managed:296804kB mlocked:0kB bounce:0kB free_pcp:10820kB local_pcp:896kB free_cma:0kB [ 1331.970787][T25331] lowmem_reserve[]: 0 0 0 0 0 [ 1331.970808][T25331] Node 1 DMA32 free:230716kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4556kB inactive_anon:6364kB active_file:9328kB inactive_file:7628kB unevictable:3536kB writepending:568kB zspages:5740kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:66268kB local_pcp:22088kB free_cma:0kB [ 1331.970841][T25331] lowmem_reserve[]: 0 0 0 0 0 [ 1331.970861][T25331] Node 0 DMA: 5*4kB (UM) 6*8kB (UM) 3*16kB (UM) 2*32kB (UM) 8*64kB (UM) 3*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2100kB [ 1331.970942][T25331] Node 0 DMA32: 310*4kB (UME) 591*8kB (UME) 216*16kB (UME) 72*32kB (UME) 41*64kB (UME) 15*128kB (UME) 5*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18064kB [ 1331.971119][T25331] Node 1 DMA32: 3757*4kB (UME) 3997*8kB (UME) 2953*16kB (UM) 246*32kB (UM) 106*64kB (UME) 31*128kB (UME) 34*256kB (UME) 43*512kB (UM) 51*1024kB (UME) 9*2048kB (UM) 4*4096kB (U) = 230636kB [ 1331.971212][T25331] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1331.971222][T25331] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1331.971236][T25331] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1331.971245][T25331] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 1331.971254][T25331] 7437 total pagecache pages [ 1331.971259][T25331] 1109 pages in swap cache [ 1331.971263][T25331] Free swap = 95504kB [ 1331.971267][T25331] Total swap = 124996kB [ 1331.971272][T25331] 524155 pages RAM [ 1331.971276][T25331] 0 pages HighMem/MovableOnly [ 1331.971280][T25331] 209061 pages reserved [ 1331.971284][T25331] 0 pages cma reserved [ 1332.112854][T25338] FAULT_INJECTION: forcing a failure. [ 1332.112854][T25338] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1332.180080][T25338] CPU: 2 UID: 0 PID: 25338 Comm: syz.2.4954 Tainted: G L syzkaller #0 PREEMPT(full) [ 1332.180124][T25338] Tainted: [L]=SOFTLOCKUP [ 1332.180131][T25338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1332.180144][T25338] Call Trace: [ 1332.180151][T25338] [ 1332.180159][T25338] dump_stack_lvl+0x16c/0x1f0 [ 1332.180192][T25338] should_fail_ex+0x512/0x640 [ 1332.180217][T25338] should_fail_alloc_page+0xe7/0x130 [ 1332.180246][T25338] prepare_alloc_pages+0x401/0x670 [ 1332.180266][T25338] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1332.180282][T25338] ? __lock_acquire+0x436/0x2890 [ 1332.180295][T25338] ? __lock_acquire+0x436/0x2890 [ 1332.180305][T25338] ? irqentry_exit+0x1dd/0x8c0 [ 1332.180318][T25338] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1332.180332][T25338] ? do_raw_spin_lock+0x12c/0x2b0 [ 1332.180346][T25338] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1332.180359][T25338] ? find_held_lock+0x2b/0x80 [ 1332.180376][T25338] ? do_raw_spin_unlock+0x172/0x230 [ 1332.180389][T25338] ? _raw_spin_unlock+0x28/0x50 [ 1332.180405][T25338] ? __dquot_alloc_space+0x520/0xe20 [ 1332.180419][T25338] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1332.180438][T25338] ? policy_nodemask+0xea/0x4e0 [ 1332.180457][T25338] alloc_pages_mpol+0x1fb/0x550 [ 1332.180474][T25338] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1332.180493][T25338] ? __pfx___might_resched+0x10/0x10 [ 1332.180508][T25338] ? shmem_recalc_inode+0x176/0x1a0 [ 1332.180522][T25338] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1332.180535][T25338] shmem_alloc_folio+0x135/0x160 [ 1332.180554][T25338] shmem_mfill_atomic_pte+0x4e6/0x940 [ 1332.180568][T25338] ? mm_alloc_pmd+0x2c2/0x470 [ 1332.180587][T25338] mfill_atomic_copy+0xd8c/0x1e70 [ 1332.180611][T25338] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 1332.180631][T25338] ? userfaultfd_ioctl+0x2373/0x3930 [ 1332.180646][T25338] ? userfaultfd_ioctl+0x23b0/0x3930 [ 1332.180664][T25338] userfaultfd_ioctl+0x2436/0x3930 [ 1332.180683][T25338] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1332.180699][T25338] ? do_vfs_ioctl+0x128/0x14f0 [ 1332.180713][T25338] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1332.180731][T25338] ? find_held_lock+0x2b/0x80 [ 1332.180745][T25338] ? hook_file_ioctl_common+0x144/0x410 [ 1332.180763][T25338] ? __fget_files+0x20e/0x3c0 [ 1332.180779][T25338] ? __fput_deferred+0x420/0x480 [ 1332.180791][T25338] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1332.180807][T25338] ? compat_ptr_ioctl+0x6e/0xa0 [ 1332.180819][T25338] compat_ptr_ioctl+0x6e/0xa0 [ 1332.180831][T25338] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 1332.180856][T25338] __ia32_compat_sys_ioctl+0x242/0x370 [ 1332.180872][T25338] __do_fast_syscall_32+0xe8/0x680 [ 1332.180885][T25338] do_fast_syscall_32+0x32/0x80 [ 1332.180897][T25338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1332.180911][T25338] RIP: 0023:0xf7f74579 [ 1332.180921][T25338] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1332.180932][T25338] RSP: 002b:00000000f544555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1332.180943][T25338] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c028aa03 [ 1332.180950][T25338] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1332.180956][T25338] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1332.180963][T25338] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1332.180969][T25338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1332.180984][T25338] [ 1332.295680][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 1332.295691][ T40] audit: type=1326 audit(1768263975.135:15578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25339 comm="syz.7.4955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1332.366792][ T40] audit: type=1326 audit(1768263975.145:15579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25339 comm="syz.7.4955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1332.391267][ T40] audit: type=1326 audit(1768263975.145:15580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25339 comm="syz.7.4955" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1332.399159][ T40] audit: type=1326 audit(1768263975.145:15581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25339 comm="syz.7.4955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1332.534154][ T40] audit: type=1326 audit(1768263975.145:15582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25339 comm="syz.7.4955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1332.547655][ T40] audit: type=1326 audit(1768263975.145:15583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25339 comm="syz.7.4955" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1332.580577][ T40] audit: type=1326 audit(1768263975.145:15584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25339 comm="syz.7.4955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1332.592026][ T40] audit: type=1326 audit(1768263975.145:15585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25339 comm="syz.7.4955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1332.603141][ T40] audit: type=1326 audit(1768263975.145:15586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25339 comm="syz.7.4955" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1332.614766][ T40] audit: type=1326 audit(1768263975.145:15587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25339 comm="syz.7.4955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1333.065683][T25361] FAULT_INJECTION: forcing a failure. [ 1333.065683][T25361] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.070868][T25361] CPU: 1 UID: 0 PID: 25361 Comm: syz.2.4963 Tainted: G L syzkaller #0 PREEMPT(full) [ 1333.070894][T25361] Tainted: [L]=SOFTLOCKUP [ 1333.070900][T25361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1333.070911][T25361] Call Trace: [ 1333.070918][T25361] [ 1333.070925][T25361] dump_stack_lvl+0x16c/0x1f0 [ 1333.070954][T25361] should_fail_ex+0x512/0x640 [ 1333.070973][T25361] ? __kmalloc_noprof+0xca/0x910 [ 1333.071010][T25361] should_failslab+0xc2/0x120 [ 1333.071036][T25361] __kmalloc_noprof+0xeb/0x910 [ 1333.071053][T25361] ? nf_register_net_hook+0x117/0x160 [ 1333.071078][T25361] ? nft_trans_alloc+0x1d/0x2d0 [ 1333.071105][T25361] ? nft_trans_alloc+0x1d/0x2d0 [ 1333.071127][T25361] nft_trans_alloc+0x1d/0x2d0 [ 1333.071150][T25361] nft_trans_rule_add+0x22/0x200 [ 1333.071176][T25361] nf_tables_newrule+0x1cfb/0x2970 [ 1333.071198][T25361] ? nft_synproxy_do_init+0x5c0/0x5c0 [ 1333.071231][T25361] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1333.071262][T25361] ? __nla_parse+0x40/0x60 [ 1333.071289][T25361] nfnetlink_rcv_batch+0x190d/0x2350 [ 1333.071323][T25361] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 1333.071348][T25361] ? lockdep_hardirqs_on+0x7c/0x110 [ 1333.071374][T25361] ? __dev_queue_xmit+0x782/0x46b0 [ 1333.071393][T25361] ? __local_bh_enable_ip+0xa4/0x120 [ 1333.071452][T25361] ? __nla_parse+0x40/0x60 [ 1333.071479][T25361] nfnetlink_rcv+0x3c1/0x430 [ 1333.071498][T25361] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1333.071525][T25361] netlink_unicast+0x5aa/0x870 [ 1333.071554][T25361] ? __pfx_netlink_unicast+0x10/0x10 [ 1333.071578][T25361] ? __pfx___might_resched+0x10/0x10 [ 1333.071610][T25361] netlink_sendmsg+0x8c8/0xdd0 [ 1333.071639][T25361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1333.071668][T25361] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1333.071700][T25361] ____sys_sendmsg+0xa5d/0xc30 [ 1333.071719][T25361] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1333.071735][T25361] ? get_compat_msghdr+0x11a/0x170 [ 1333.071769][T25361] ___sys_sendmsg+0x134/0x1d0 [ 1333.071793][T25361] ? __pfx____sys_sendmsg+0x10/0x10 [ 1333.071827][T25361] ? find_held_lock+0x2b/0x80 [ 1333.071866][T25361] __sys_sendmsg+0x16d/0x220 [ 1333.071889][T25361] ? __pfx___sys_sendmsg+0x10/0x10 [ 1333.071921][T25361] ? do_user_addr_fault+0x843/0x1370 [ 1333.071947][T25361] __do_fast_syscall_32+0xe8/0x680 [ 1333.071967][T25361] do_fast_syscall_32+0x32/0x80 [ 1333.071983][T25361] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1333.072004][T25361] RIP: 0023:0xf7f74579 [ 1333.072018][T25361] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1333.072034][T25361] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1333.072051][T25361] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1333.072062][T25361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1333.072072][T25361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1333.072082][T25361] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1333.072091][T25361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1333.072115][T25361] [ 1333.117404][T25362] FAULT_INJECTION: forcing a failure. [ 1333.117404][T25362] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1333.193190][T25362] CPU: 3 UID: 0 PID: 25362 Comm: syz.6.4961 Tainted: G L syzkaller #0 PREEMPT(full) [ 1333.193208][T25362] Tainted: [L]=SOFTLOCKUP [ 1333.193212][T25362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1333.193219][T25362] Call Trace: [ 1333.193224][T25362] [ 1333.193230][T25362] dump_stack_lvl+0x16c/0x1f0 [ 1333.193252][T25362] should_fail_ex+0x512/0x640 [ 1333.193268][T25362] should_fail_alloc_page+0xe7/0x130 [ 1333.193287][T25362] prepare_alloc_pages+0x401/0x670 [ 1333.193308][T25362] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1333.193325][T25362] ? unwind_next_frame+0x3f4/0x20b0 [ 1333.193343][T25362] ? unwind_next_frame+0x3fe/0x20b0 [ 1333.193357][T25362] ? kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 1333.193376][T25362] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1333.193390][T25362] ? __ia32_compat_sys_ioctl+0x242/0x370 [ 1333.193406][T25362] ? arch_stack_walk+0x88/0x100 [ 1333.193438][T25362] ? __lock_acquire+0x436/0x2890 [ 1333.193450][T25362] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1333.193468][T25362] ? policy_nodemask+0xea/0x4e0 [ 1333.193487][T25362] alloc_pages_mpol+0x1fb/0x550 [ 1333.193505][T25362] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1333.193527][T25362] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1333.193540][T25362] shmem_alloc_folio+0x135/0x160 [ 1333.193559][T25362] shmem_alloc_and_add_folio+0x494/0xc20 [ 1333.193576][T25362] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1333.193590][T25362] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1333.193607][T25362] shmem_get_folio_gfp+0x67f/0x1610 [ 1333.193623][T25362] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1333.193637][T25362] ? find_held_lock+0x2b/0x80 [ 1333.193654][T25362] shmem_fault+0x1fe/0xa00 [ 1333.193667][T25362] ? __lock_acquire+0x436/0x2890 [ 1333.193677][T25362] ? __pfx_shmem_fault+0x10/0x10 [ 1333.193698][T25362] __do_fault+0x10d/0x490 [ 1333.193713][T25362] do_fault+0x302/0x1ad0 [ 1333.193730][T25362] ? __pfx_filemap_map_pages+0x10/0x10 [ 1333.193746][T25362] __handle_mm_fault+0x1919/0x2bb0 [ 1333.193762][T25362] ? __pfx___handle_mm_fault+0x10/0x10 [ 1333.193775][T25362] ? __pte_offset_map_lock+0x174/0x310 [ 1333.193792][T25362] ? find_held_lock+0x2b/0x80 [ 1333.193811][T25362] ? follow_page_pte+0x5cf/0x1390 [ 1333.193831][T25362] handle_mm_fault+0x3fe/0xad0 [ 1333.193846][T25362] __get_user_pages+0x54e/0x3590 [ 1333.193868][T25362] ? down_read_killable+0x313/0x4c0 [ 1333.193882][T25362] ? __pfx___get_user_pages+0x10/0x10 [ 1333.193898][T25362] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1333.193919][T25362] get_user_pages_unlocked+0x1ca/0x780 [ 1333.193939][T25362] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 1333.193956][T25362] ? get_user_pages_fast_only+0xae/0xf0 [ 1333.193974][T25362] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 1333.193991][T25362] ? __pfx___might_resched+0x10/0x10 [ 1333.194012][T25362] ? __mutex_lock+0x27b/0x1ca0 [ 1333.194025][T25362] hva_to_pfn+0x886/0xe60 [ 1333.194039][T25362] ? __pfx_hva_to_pfn+0x10/0x10 [ 1333.194052][T25362] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1333.194066][T25362] ? __lock_acquire+0x436/0x2890 [ 1333.194082][T25362] kvm_follow_pfn+0x2d4/0x430 [ 1333.194095][T25362] __kvm_faultin_pfn+0x11c/0x1a0 [ 1333.194108][T25362] ? __pfx___kvm_faultin_pfn+0x10/0x10 [ 1333.194128][T25362] vmx_set_apic_access_page_addr+0x52f/0x900 [ 1333.194143][T25362] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 1333.194158][T25362] ? __pfx_vmx_set_apic_access_page_addr+0x10/0x10 [ 1333.194173][T25362] ? vmx_flush_tlb_all+0x153/0x2f0 [ 1333.194193][T25362] ? record_steal_time+0x78/0xc00 [ 1333.194212][T25362] vcpu_run+0x44f5/0x5a80 [ 1333.194225][T25362] ? find_held_lock+0x2b/0x80 [ 1333.194238][T25362] ? vmx_vcpu_load_vmcs+0x222/0x770 [ 1333.194260][T25362] ? __pfx_vcpu_run+0x10/0x10 [ 1333.194282][T25362] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 1333.194296][T25362] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 1333.194314][T25362] kvm_vcpu_ioctl+0x76d/0x16d0 [ 1333.194333][T25362] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1333.194351][T25362] ? tomoyo_path_number_perm+0x18d/0x580 [ 1333.194367][T25362] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1333.194386][T25362] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1333.194403][T25362] ? do_vfs_ioctl+0x128/0x14f0 [ 1333.194417][T25362] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1333.194437][T25362] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 1333.194456][T25362] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1333.194473][T25362] ? __fget_files+0x20e/0x3c0 [ 1333.194489][T25362] ? __fput_deferred+0x420/0x480 [ 1333.194503][T25362] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1333.194521][T25362] __ia32_compat_sys_ioctl+0x242/0x370 [ 1333.194537][T25362] __do_fast_syscall_32+0xe8/0x680 [ 1333.194551][T25362] do_fast_syscall_32+0x32/0x80 [ 1333.194562][T25362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1333.194576][T25362] RIP: 0023:0xf703d579 [ 1333.194586][T25362] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1333.194597][T25362] RSP: 002b:00000000f540c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1333.194608][T25362] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000000ae80 [ 1333.194615][T25362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1333.194622][T25362] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1333.194628][T25362] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1333.194634][T25362] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1333.194649][T25362] [ 1333.380197][ T6023] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 1333.531142][ T6023] usb 13-1: Using ep0 maxpacket: 8 [ 1333.534183][ T6023] usb 13-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1333.537381][ T6023] usb 13-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1333.540506][ T6023] usb 13-1: config 1 interface 0 has no altsetting 0 [ 1333.544481][ T6023] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1333.547456][ T6023] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.552104][ T6023] usb 13-1: Product: И [ 1333.553485][ T6023] usb 13-1: Manufacturer: Ј [ 1333.554988][ T6023] usb 13-1: SerialNumber: ᶰ䇨랄重㪙ᕼ鯙ﰃ믊Ꮉ躍⇎泌胞牵뽶琔휒溛墷哻꿆ﭠꍆဓ꺄᤺⭪惴׫ߝᙏ备콨翣쟔䣋芓ⵁ⃍즄⚝ඊ많ౡ빂君쇽쀿ⱘߤڃ턢᳐￠ꫨ챙掕鲊䈆줁埝잣㷤즣⑄來諃㴁䊂瑦咲㝟Ꮈ卶韬⋺잔 [ 1333.568900][T25358] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1333.571694][T25358] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1333.843548][T25358] lo speed is unknown, defaulting to 1000 [ 1333.846361][T25358] wg2 speed is unknown, defaulting to 1000 [ 1333.921162][T15847] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 1334.065755][ T6023] cdc_ether 13-1:1.0: probe with driver cdc_ether failed with error -71 [ 1334.078835][ T6023] usb 13-1: USB disconnect, device number 10 [ 1334.081951][T15847] usb 11-1: Using ep0 maxpacket: 16 [ 1334.088669][T15847] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1334.097252][T15847] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1334.102310][T15847] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1334.106461][T15847] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1334.109525][T15847] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.114152][T15847] usb 11-1: config 0 descriptor?? [ 1334.411210][T24788] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1334.411388][ T5950] Bluetooth: hci2: command 0x1003 tx timeout [ 1334.524534][T25368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.525796][T25390] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4971'. [ 1334.528762][T25368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.539689][T25368] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4965'. [ 1334.541862][T25390] lo speed is unknown, defaulting to 1000 [ 1334.546077][T25390] wg2 speed is unknown, defaulting to 1000 [ 1334.580956][T15847] usbhid 11-1:0.0: can't add hid device: -71 [ 1334.587548][T15847] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 1334.638447][T15847] usb 11-1: USB disconnect, device number 20 [ 1334.793177][T25392] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4971'. [ 1335.337979][T25405] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1335.452204][T25408] qrtr: Invalid version 0 [ 1335.493987][T25410] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4975'. [ 1336.313906][T25421] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 1336.315994][T25421] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1336.318714][T25421] vhci_hcd vhci_hcd.0: Device attached [ 1336.581140][T15847] usb 54-1: SetAddress Request (10) to port 0 [ 1336.583651][T15847] usb 54-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1336.583665][T25421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.588588][T25421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.601322][T25432] tipc: Enabled bearer , priority 0 [ 1336.607762][T25430] syzkaller0: entered promiscuous mode [ 1336.609817][T25430] syzkaller0: entered allmulticast mode [ 1336.732143][T25430] syzkaller0: mtu less than device minimum [ 1336.751232][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.771373][T25429] tipc: Resetting bearer [ 1336.942911][T25429] tipc: Disabling bearer [ 1336.982086][T25422] vhci_hcd: connection reset by peer [ 1336.984897][ T82] vhci_hcd vhci_hcd.8: stop threads [ 1336.987153][ T82] vhci_hcd vhci_hcd.8: release socket [ 1336.989515][ T82] vhci_hcd vhci_hcd.8: disconnect device [ 1337.142502][T25434] tipc: Enabled bearer , priority 0 [ 1337.146249][T25434] syzkaller0: entered promiscuous mode [ 1337.148631][T25434] syzkaller0: entered allmulticast mode [ 1337.232218][T25434] syzkaller0: mtu less than device minimum [ 1337.271357][T25433] tipc: Resetting bearer [ 1337.403368][T25433] tipc: Disabling bearer [ 1337.677498][T25439] FAULT_INJECTION: forcing a failure. [ 1337.677498][T25439] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.683129][T25439] CPU: 2 UID: 0 PID: 25439 Comm: syz.2.4982 Tainted: G L syzkaller #0 PREEMPT(full) [ 1337.683153][T25439] Tainted: [L]=SOFTLOCKUP [ 1337.683158][T25439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1337.683168][T25439] Call Trace: [ 1337.683173][T25439] [ 1337.683180][T25439] dump_stack_lvl+0x16c/0x1f0 [ 1337.683207][T25439] should_fail_ex+0x512/0x640 [ 1337.683228][T25439] should_failslab+0xc2/0x120 [ 1337.683251][T25439] kmem_cache_alloc_noprof+0x83/0x770 [ 1337.683278][T25439] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1337.683298][T25439] ? __inet_hash_connect+0x7cb/0x1ee0 [ 1337.683331][T25439] ? __inet_hash_connect+0x7cb/0x1ee0 [ 1337.683354][T25439] __inet_hash_connect+0x7cb/0x1ee0 [ 1337.683385][T25439] ? __pfx___inet_check_established+0x10/0x10 [ 1337.683415][T25439] ? __pfx___inet_hash_connect+0x10/0x10 [ 1337.683445][T25439] ? inet_hash_connect+0x125/0x260 [ 1337.683474][T25439] tcp_v4_connect+0xe66/0x1c10 [ 1337.683505][T25439] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1337.683527][T25439] ? __lock_acquire+0x436/0x2890 [ 1337.683550][T25439] __inet_stream_connect+0x915/0xf50 [ 1337.683576][T25439] ? __pfx___inet_stream_connect+0x10/0x10 [ 1337.683599][T25439] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1337.683621][T25439] ? __pfx_inet_stream_connect+0x10/0x10 [ 1337.683639][T25439] ? __local_bh_enable_ip+0xa4/0x120 [ 1337.683669][T25439] ? __pfx_inet_stream_connect+0x10/0x10 [ 1337.683689][T25439] inet_stream_connect+0x57/0xa0 [ 1337.683713][T25439] __sys_connect_file+0x141/0x1a0 [ 1337.683739][T25439] __sys_connect+0x13b/0x160 [ 1337.683757][T25439] ? __pfx___sys_connect+0x10/0x10 [ 1337.683787][T25439] ? __pfx_ksys_write+0x10/0x10 [ 1337.683815][T25439] ? do_user_addr_fault+0x843/0x1370 [ 1337.683840][T25439] __ia32_sys_connect+0x71/0xb0 [ 1337.683858][T25439] ? lockdep_hardirqs_on+0x7c/0x110 [ 1337.683888][T25439] __do_fast_syscall_32+0xe8/0x680 [ 1337.683904][T25439] do_fast_syscall_32+0x32/0x80 [ 1337.683921][T25439] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1337.683945][T25439] RIP: 0023:0xf7f74579 [ 1337.683957][T25439] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1337.683973][T25439] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 1337.683993][T25439] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000140 [ 1337.684005][T25439] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1337.684017][T25439] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1337.684028][T25439] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1337.684039][T25439] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1337.684059][T25439] [ 1337.821738][T25171] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 1338.052414][T25171] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1338.055316][T25171] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1338.058453][T25171] usb 13-1: config 0 interface 0 has no altsetting 0 [ 1338.062312][T25171] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1338.065206][T25171] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1338.067815][T25171] usb 13-1: Product: syz [ 1338.069207][T25171] usb 13-1: Manufacturer: syz [ 1338.070752][T25171] usb 13-1: SerialNumber: syz [ 1338.073979][T25171] usb 13-1: config 0 descriptor?? [ 1338.080124][T25171] usb 13-1: selecting invalid altsetting 0 [ 1338.386684][T25171] usb 13-1: USB disconnect, device number 11 [ 1338.504134][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 1338.504149][ T40] audit: type=1326 audit(1768263981.345:15617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25455 comm="syz.7.4988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1338.513896][ T40] audit: type=1326 audit(1768263981.355:15618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25455 comm="syz.7.4988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1338.521468][ T40] audit: type=1326 audit(1768263981.365:15619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25455 comm="syz.7.4988" exe="/syz-executor" sig=0 arch=40000003 syscall=122 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1338.530115][ T40] audit: type=1326 audit(1768263981.365:15620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25455 comm="syz.7.4988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1338.539152][ T40] audit: type=1326 audit(1768263981.365:15621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25455 comm="syz.7.4988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1338.547550][ T40] audit: type=1326 audit(1768263981.365:15622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25455 comm="syz.7.4988" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1338.555954][ T40] audit: type=1326 audit(1768263981.365:15623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25455 comm="syz.7.4988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1338.564640][ T40] audit: type=1326 audit(1768263981.365:15624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25455 comm="syz.7.4988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1338.577485][ T40] audit: type=1326 audit(1768263981.365:15625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25455 comm="syz.7.4988" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1338.595194][ T40] audit: type=1326 audit(1768263981.365:15626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25455 comm="syz.7.4988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1338.650010][T25459] vivid-007: disconnect [ 1339.573582][T25455] vivid-007: reconnect [ 1341.032098][ T6023] kernel write not supported for file bpf-map (pid: 6023 comm: kworker/1:5) [ 1341.109034][T25509] comedi comedi3: bad chanlist[0]=0x00000003 chan=3 range length=1 [ 1341.701953][T15847] usb 54-1: device descriptor read/8, error -110 [ 1342.132546][T15847] usb usb54-port1: attempt power cycle [ 1342.229395][T25537] comedi comedi3: bad chanlist[0]=0x00000003 chan=3 range length=1 [ 1342.434443][T25550] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5015'. [ 1342.502355][T25550] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5015'. [ 1342.505261][T25550] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5015'. [ 1342.701909][T15847] usb usb54-port1: unable to enumerate USB device [ 1343.135543][T25555] fuse: Bad value for 'group_id' [ 1343.147184][T25555] fuse: Bad value for 'group_id' [ 1343.324188][T25563] comedi comedi3: bad chanlist[0]=0x00000003 chan=3 range length=1 [ 1343.592771][T25576] ubi: mtd0 is already attached to ubi31 [ 1343.716008][T25579] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5026'. [ 1344.477698][T25592] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5031'. [ 1344.659045][T25596] lo speed is unknown, defaulting to 1000 [ 1344.662820][T25596] wg2 speed is unknown, defaulting to 1000 [ 1344.882104][T25603] netlink: 'syz.7.5035': attribute type 5 has an invalid length. [ 1345.455212][T25615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5040'. [ 1345.538767][T25619] fuse: Bad value for 'group_id' [ 1345.540513][T25619] fuse: Bad value for 'group_id' [ 1346.177557][T25628] ubi: mtd0 is already attached to ubi31 [ 1347.436048][T25643] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5049'. [ 1347.681803][T25647] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5058'. [ 1347.686103][T25647] comedi comedi3: bad chanlist[0]=0x00000003 chan=3 range length=1 [ 1348.062838][T25655] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1348.065708][T25655] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 1348.069452][T25655] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1348.072955][T25655] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 1348.767679][T25677] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5061'. [ 1348.776118][T25677] comedi comedi3: bad chanlist[0]=0x00000003 chan=3 range length=1 [ 1349.203386][T25685] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1349.205362][T25685] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1349.218741][T25685] vhci_hcd vhci_hcd.0: Device attached [ 1349.225917][T25685] ieee802154 phy0 wpan0: encryption failed: -22 [ 1349.232677][T25685] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5062'. [ 1349.491213][T16418] usb 54-1: SetAddress Request (14) to port 0 [ 1349.493840][T16418] usb 54-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1349.703873][T25686] vhci_hcd: connection reset by peer [ 1349.706358][ T13] vhci_hcd vhci_hcd.8: stop threads [ 1349.708455][ T13] vhci_hcd vhci_hcd.8: release socket [ 1349.710229][ T13] vhci_hcd vhci_hcd.8: disconnect device [ 1350.366276][T25705] digital: digital_start_poll: Unknown protocol [ 1350.432952][T25709] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5068'. [ 1350.448397][T25709] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5068'. [ 1350.702259][T25721] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1351.492690][T25736] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5075'. [ 1352.640521][T25754] FAULT_INJECTION: forcing a failure. [ 1352.640521][T25754] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1352.646810][T25754] CPU: 2 UID: 0 PID: 25754 Comm: syz.2.5082 Tainted: G L syzkaller #0 PREEMPT(full) [ 1352.646837][T25754] Tainted: [L]=SOFTLOCKUP [ 1352.646849][T25754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1352.646860][T25754] Call Trace: [ 1352.646866][T25754] [ 1352.646873][T25754] dump_stack_lvl+0x16c/0x1f0 [ 1352.646901][T25754] should_fail_ex+0x512/0x640 [ 1352.646925][T25754] should_fail_alloc_page+0xe7/0x130 [ 1352.646952][T25754] prepare_alloc_pages+0x401/0x670 [ 1352.646994][T25754] ? rcu_is_watching+0x12/0xc0 [ 1352.647024][T25754] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1352.647045][T25754] ? __lock_acquire+0x436/0x2890 [ 1352.647067][T25754] ? __perf_event_task_sched_in+0x27a/0xa10 [ 1352.647090][T25754] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1352.647112][T25754] ? mark_held_locks+0x49/0x80 [ 1352.647132][T25754] ? __lock_acquire+0x436/0x2890 [ 1352.647149][T25754] ? __lock_acquire+0x436/0x2890 [ 1352.647164][T25754] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1352.647188][T25754] ? policy_nodemask+0xea/0x4e0 [ 1352.647215][T25754] alloc_pages_mpol+0x1fb/0x550 [ 1352.647241][T25754] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1352.647269][T25754] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1352.647286][T25754] vma_alloc_folio_noprof+0xed/0x1e0 [ 1352.647304][T25754] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1352.647329][T25754] do_anonymous_page+0xc81/0x2190 [ 1352.647356][T25754] __handle_mm_fault+0x1ecf/0x2bb0 [ 1352.647376][T25754] ? __pfx___handle_mm_fault+0x10/0x10 [ 1352.647408][T25754] ? find_vma+0xbf/0x140 [ 1352.647430][T25754] ? __pfx_find_vma+0x10/0x10 [ 1352.647456][T25754] handle_mm_fault+0x3fe/0xad0 [ 1352.647475][T25754] do_user_addr_fault+0x7a6/0x1370 [ 1352.647497][T25754] ? rcu_is_watching+0x12/0xc0 [ 1352.647522][T25754] exc_page_fault+0x64/0xc0 [ 1352.647549][T25754] asm_exc_page_fault+0x26/0x30 [ 1352.647565][T25754] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 1352.647580][T25754] Code: c9 75 f6 c3 cc cc cc cc 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 1352.647596][T25754] RSP: 0018:ffffc90004e5f9a8 EFLAGS: 00050202 [ 1352.647611][T25754] RAX: 0000000000000000 RBX: 000000007ffff000 RCX: 0000000000000380 [ 1352.647622][T25754] RDX: ffff88802879c980 RSI: ffffffff84a8c384 RDI: 0000000080020000 [ 1352.647632][T25754] RBP: ffffc90004e5fd20 R08: 00000000ffffffff R09: 00000000ffffffff [ 1352.647643][T25754] R10: 0000000000000001 R11: ffff88802879d4b0 R12: 000000008001f380 [ 1352.647653][T25754] R13: 0000000000001000 R14: 000000000001e000 R15: 0000000000001000 [ 1352.647668][T25754] ? iov_iter_zero+0x404/0x15b0 [ 1352.647689][T25754] iov_iter_zero+0x414/0x15b0 [ 1352.647714][T25754] ? __pfx_iov_iter_zero+0x10/0x10 [ 1352.647735][T25754] ? _kstrtoull+0x145/0x200 [ 1352.647757][T25754] ? __pfx_aa_file_perm+0x10/0x10 [ 1352.647782][T25754] read_iter_zero+0x13a/0x340 [ 1352.647807][T25754] ? copy_compat_iovec_from_user+0x145/0x190 [ 1352.647830][T25754] do_iter_readv_writev+0x743/0x9e0 [ 1352.647859][T25754] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1352.647877][T25754] ? common_file_perm+0x1b1/0x500 [ 1352.647900][T25754] ? bpf_lsm_file_permission+0x9/0x10 [ 1352.647919][T25754] ? security_file_permission+0x71/0x210 [ 1352.647943][T25754] ? rw_verify_area+0xcf/0x6c0 [ 1352.647965][T25754] vfs_readv+0x4cb/0x8b0 [ 1352.647988][T25754] ? __pfx_vfs_readv+0x10/0x10 [ 1352.648028][T25754] ? __fget_files+0x20e/0x3c0 [ 1352.648058][T25754] ? do_preadv+0x1a6/0x270 [ 1352.648074][T25754] do_preadv+0x1a6/0x270 [ 1352.648096][T25754] ? __pfx_do_preadv+0x10/0x10 [ 1352.648115][T25754] ? fput+0x70/0xf0 [ 1352.648132][T25754] ? ksys_write+0x1ac/0x250 [ 1352.648154][T25754] ? __pfx_ksys_write+0x10/0x10 [ 1352.648178][T25754] __ia32_compat_sys_preadv2+0x121/0x1b0 [ 1352.648194][T25754] ? rcu_is_watching+0x12/0xc0 [ 1352.648218][T25754] __do_fast_syscall_32+0xe8/0x680 [ 1352.648235][T25754] do_fast_syscall_32+0x32/0x80 [ 1352.648248][T25754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1352.648268][T25754] RIP: 0023:0xf7f74579 [ 1352.648281][T25754] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1352.648297][T25754] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 000000000000017a [ 1352.648312][T25754] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001540 [ 1352.648321][T25754] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1352.648328][T25754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1352.648337][T25754] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1352.648347][T25754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1352.648371][T25754] [ 1353.149735][T25757] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1353.151856][T25757] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1353.156468][T25757] vhci_hcd vhci_hcd.0: Device attached [ 1353.261994][T25763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5084'. [ 1353.432181][ T34] usb 52-1: SetAddress Request (26) to port 0 [ 1353.436277][ T34] usb 52-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1353.770008][T25761] vhci_hcd: connection reset by peer [ 1353.775842][ T182] vhci_hcd vhci_hcd.7: stop threads [ 1353.782306][ T182] vhci_hcd vhci_hcd.7: release socket [ 1353.784065][ T182] vhci_hcd vhci_hcd.7: disconnect device [ 1354.571193][T16418] usb 54-1: device descriptor read/8, error -110 [ 1354.750974][T25775] can: request_module (can-proto-0) failed. [ 1354.892867][T24788] Bluetooth: hci3: command 0x0c1a tx timeout [ 1354.982464][T16418] usb usb54-port1: attempt power cycle [ 1355.326390][T25782] ptrace attach of "/syz-executor exec"[25783] was attempted by "/syz-executor exec"[25782] [ 1355.551610][T16418] usb usb54-port1: unable to enumerate USB device [ 1355.658479][T25792] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1358.501304][ T34] usb 52-1: device descriptor read/8, error -110 [ 1359.002899][ T34] usb usb52-port1: attempt power cycle [ 1359.060116][T25820] fuse: Unknown parameter 'h3-%)'0c>~xl9}oY@bFh' [ 1359.571514][ T34] usb usb52-port1: unable to enumerate USB device [ 1359.706117][T25833] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5105'. [ 1359.714201][T25833] comedi comedi3: bad chanlist[0]=0x00000003 chan=3 range length=1 [ 1359.903854][T25835] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-61) [ 1360.060958][T25841] ubi: mtd0 is already attached to ubi31 [ 1360.488102][T25841] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1360.492364][T25841] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1360.827268][ T24] e1000 0000:00:06.0 eth0: Reset adapter [ 1361.269787][ T53] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 1361.371395][ T24] e1000: eth0 NIC Link is Down [ 1362.237956][T25884] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5114'. [ 1362.243766][T25884] comedi comedi3: bad chanlist[0]=0x00000003 chan=3 range length=1 [ 1362.512387][T24788] Bluetooth: hci1: command 0x0c1a tx timeout [ 1362.571143][T24788] Bluetooth: hci3: command 0x0c1a tx timeout [ 1363.452633][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 1366.175030][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.177095][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.785305][T25916] siw: device registration error -23 [ 1371.839849][T25930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1372.615444][T25940] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5124'. [ 1372.620215][T25940] comedi comedi3: bad chanlist[0]=0x00000003 chan=3 range length=1 [ 1376.049314][T25974] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5135'. [ 1376.053888][T25974] comedi comedi3: bad chanlist[0]=0x00000003 chan=3 range length=1 [ 1379.703896][T26004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1379.720867][T26004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1380.355890][T26004] bond1: left promiscuous mode [ 1380.359412][T26014] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5145'. [ 1380.375015][ T13] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.376095][ T6004] wg2 speed is unknown, defaulting to 1000 [ 1380.395067][ T6004] syz2: Port: 1 Link DOWN [ 1380.395075][ T13] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.400844][ T13] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.421326][ T13] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.433730][ T6004] wg2 speed is unknown, defaulting to 1000 [ 1380.520662][T26027] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5149'. [ 1380.536237][T26027] comedi comedi3: bad chanlist[0]=0x00000003 chan=3 range length=1 [ 1384.202621][T26068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5161'. [ 1384.208720][T26068] comedi comedi3: bad chanlist[0]=0x00000003 chan=3 range length=1 [ 1386.502700][T26097] lo speed is unknown, defaulting to 1000 [ 1386.505262][T26097] wg2 speed is unknown, defaulting to 1000 [ 1386.944969][T26103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5171'. [ 1386.959240][T26103] comedi comedi3: bad chanlist[0]=0x00000003 chan=3 range length=1 [ 1387.371158][T26113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5173'. [ 1387.740129][T26128] sch_fq: defrate 0 ignored. [ 1387.835457][T26126] overlayfs: statfs failed on './file0' [ 1388.255419][T26137] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5182'. [ 1388.264249][T26137] comedi comedi3: bad chanlist[0]=0x00000003 chan=3 range length=1 [ 1389.005454][T26149] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1389.008356][T26149] overlayfs: failed to set xattr on upper [ 1389.010248][T26149] overlayfs: ...falling back to redirect_dir=nofollow. [ 1389.012451][T26149] overlayfs: ...falling back to index=off. [ 1389.014323][T26149] overlayfs: ...falling back to uuid=null. [ 1389.016176][T26149] overlayfs: maximum fs stacking depth exceeded [ 1389.927937][T26152] lo speed is unknown, defaulting to 1000 [ 1389.930502][T26152] wg2 speed is unknown, defaulting to 1000 [ 1390.042678][T26156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5184'. [ 1390.976337][T26167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5191'. [ 1390.982151][T26167] comedi comedi3: bad chanlist[0]=0x00000003 chan=3 range length=1 [ 1392.174174][T26193] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1392.179924][T26195] cgroup: none used incorrectly [ 1392.681117][T16031] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 1392.851179][T16031] usb 12-1: Using ep0 maxpacket: 8 [ 1392.862822][T16031] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1392.865666][T16031] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1392.881999][T16031] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.899471][T26210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5202'. [ 1392.905092][T16031] usb 12-1: config 0 descriptor?? [ 1392.906164][T26210] comedi comedi3: bad chanlist[0]=0x00000003 chan=3 range length=1 [ 1392.945648][T26212] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1392.956039][T26216] lo speed is unknown, defaulting to 1000 [ 1392.957681][T26212] CIFS mount error: No usable UNC path provided in device string! [ 1392.957681][T26212] [ 1392.958683][T26216] wg2 speed is unknown, defaulting to 1000 [ 1392.963254][T26212] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1393.033393][T26215] FAULT_INJECTION: forcing a failure. [ 1393.033393][T26215] name failslab, interval 1, probability 0, space 0, times 0 [ 1393.038488][T26215] CPU: 1 UID: 0 PID: 26215 Comm: syz.6.5211 Tainted: G L syzkaller #0 PREEMPT(full) [ 1393.038507][T26215] Tainted: [L]=SOFTLOCKUP [ 1393.038511][T26215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1393.038519][T26215] Call Trace: [ 1393.038523][T26215] [ 1393.038528][T26215] dump_stack_lvl+0x16c/0x1f0 [ 1393.038553][T26215] should_fail_ex+0x512/0x640 [ 1393.038580][T26215] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1393.038597][T26215] should_failslab+0xc2/0x120 [ 1393.038615][T26215] kmem_cache_alloc_noprof+0x83/0x770 [ 1393.038629][T26215] ? getname_flags.part.0+0x4c/0x550 [ 1393.038645][T26215] ? getname_flags.part.0+0x4c/0x550 [ 1393.038657][T26215] getname_flags.part.0+0x4c/0x550 [ 1393.038671][T26215] getname_flags+0x93/0xf0 [ 1393.038687][T26215] path_listxattrat+0x2e8/0x370 [ 1393.038704][T26215] ? ksys_write+0x1ac/0x250 [ 1393.038722][T26215] ? __pfx_path_listxattrat+0x10/0x10 [ 1393.038737][T26215] ? rcu_is_watching+0x12/0xc0 [ 1393.038757][T26215] __do_fast_syscall_32+0xe8/0x680 [ 1393.038770][T26215] do_fast_syscall_32+0x32/0x80 [ 1393.038781][T26215] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1393.038797][T26215] RIP: 0023:0xf703d579 [ 1393.038806][T26215] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1393.038817][T26215] RSP: 002b:00000000f542d55c EFLAGS: 00000296 ORIG_RAX: 00000000000000e8 [ 1393.038829][T26215] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000000000000 [ 1393.038836][T26215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1393.038842][T26215] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1393.038849][T26215] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1393.038855][T26215] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1393.038872][T26215] [ 1394.552157][T26251] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5212'. [ 1394.555938][T26251] comedi comedi3: bad chanlist[0]=0x00000003 chan=3 range length=1 [ 1396.546304][T16031] usbhid 12-1:0.0: can't add hid device: -71 [ 1396.548292][T16031] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 1396.551990][T16031] usb 12-1: USB disconnect, device number 10 [ 1398.461409][T26316] FAULT_INJECTION: forcing a failure. [ 1398.461409][T26316] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.465557][T26316] CPU: 3 UID: 0 PID: 26316 Comm: syz.6.5231 Tainted: G L syzkaller #0 PREEMPT(full) [ 1398.465575][T26316] Tainted: [L]=SOFTLOCKUP [ 1398.465579][T26316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1398.465586][T26316] Call Trace: [ 1398.465591][T26316] [ 1398.465596][T26316] dump_stack_lvl+0x16c/0x1f0 [ 1398.465619][T26316] should_fail_ex+0x512/0x640 [ 1398.465636][T26316] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1398.465652][T26316] should_failslab+0xc2/0x120 [ 1398.465670][T26316] kmem_cache_alloc_noprof+0x83/0x770 [ 1398.465683][T26316] ? anon_vma_clone+0x405/0x5c0 [ 1398.465695][T26316] ? anon_vma_fork+0xe6/0x620 [ 1398.465710][T26316] ? anon_vma_fork+0xe6/0x620 [ 1398.465721][T26316] anon_vma_fork+0xe6/0x620 [ 1398.465732][T26316] ? vm_area_dup+0x5a1/0x8d0 [ 1398.465745][T26316] dup_mmap+0x12d3/0x20e0 [ 1398.465761][T26316] ? __pfx_dup_mmap+0x10/0x10 [ 1398.465781][T26316] copy_process+0x3b9f/0x7430 [ 1398.465806][T26316] ? __pfx_copy_process+0x10/0x10 [ 1398.465827][T26316] ? _copy_from_user+0x59/0xd0 [ 1398.465842][T26316] kernel_clone+0xfc/0x910 [ 1398.465858][T26316] ? get_pid_task+0xfc/0x250 [ 1398.465870][T26316] ? __pfx_kernel_clone+0x10/0x10 [ 1398.465895][T26316] __do_sys_clone3+0x212/0x290 [ 1398.465912][T26316] ? __pfx___do_sys_clone3+0x10/0x10 [ 1398.465937][T26316] ? __fget_files+0x20e/0x3c0 [ 1398.465961][T26316] ? do_user_addr_fault+0x843/0x1370 [ 1398.465978][T26316] __do_fast_syscall_32+0xe8/0x680 [ 1398.465991][T26316] do_fast_syscall_32+0x32/0x80 [ 1398.466002][T26316] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1398.466017][T26316] RIP: 0023:0xf703d579 [ 1398.466027][T26316] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1398.466037][T26316] RSP: 002b:00000000f542d42c EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 1398.466049][T26316] RAX: ffffffffffffffda RBX: 00000000f542d460 RCX: 0000000000000058 [ 1398.466056][T26316] RDX: 0000000000000000 RSI: 000000000a802000 RDI: 0000000000000000 [ 1398.466063][T26316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1398.466069][T26316] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1398.466075][T26316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1398.466090][T26316] [ 1398.578232][T26323] lo speed is unknown, defaulting to 1000 [ 1398.580906][T26323] wg2 speed is unknown, defaulting to 1000 [ 1398.767403][T26332] netlink: 'syz.6.5236': attribute type 13 has an invalid length. [ 1399.140906][T26341] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1399.150535][T26341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5238'. [ 1399.156555][T26341] netlink: 'syz.2.5238': attribute type 14 has an invalid length. [ 1399.779797][T26332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1399.795267][T26332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1400.291313][T26332] veth0_macvtap: left allmulticast mode [ 1400.672161][T26349] netlink: 'syz.8.5241': attribute type 10 has an invalid length. [ 1401.334367][T26341] vxlan0: entered promiscuous mode [ 1401.341632][T26349] bond0: (slave wlan1): Opening slave failed [ 1401.343996][T17567] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.349478][T17567] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.359580][T17567] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.373767][T17567] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.376630][T17567] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1401.379428][T17567] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1401.391392][T17567] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1401.395463][T17567] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1402.987436][T26381] geneve2: entered promiscuous mode [ 1402.998826][T26381] geneve2: entered allmulticast mode [ 1403.499977][T26393] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5253'. [ 1404.381094][T26402] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1404.383181][T26402] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1404.385825][T26402] vhci_hcd vhci_hcd.0: Device attached [ 1404.631078][T14916] usb 51-1: new low-speed USB device number 4 using vhci_hcd [ 1404.691600][T26406] vhci_hcd: connection reset by peer [ 1404.694456][ T46] vhci_hcd vhci_hcd.7: stop threads [ 1404.696120][ T46] vhci_hcd vhci_hcd.7: release socket [ 1404.698288][ T46] vhci_hcd vhci_hcd.7: disconnect device [ 1407.647010][T26441] overlay: ./file0 is not a directory [ 1409.823688][T26475] syz.7.5272: page allocation failure: order:10, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1409.829054][T26475] CPU: 2 UID: 0 PID: 26475 Comm: syz.7.5272 Tainted: G L syzkaller #0 PREEMPT(full) [ 1409.829075][T26475] Tainted: [L]=SOFTLOCKUP [ 1409.829079][T26475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1409.829087][T26475] Call Trace: [ 1409.829092][T26475] [ 1409.829098][T26475] dump_stack_lvl+0x16c/0x1f0 [ 1409.829122][T26475] warn_alloc+0x248/0x3a0 [ 1409.829138][T26475] ? __pfx_warn_alloc+0x10/0x10 [ 1409.829152][T26475] ? psi_memstall_leave+0x1e6/0x2d0 [ 1409.829171][T26475] ? __alloc_pages_direct_compact+0x466/0x580 [ 1409.829187][T26475] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 1409.829200][T26475] ? psi_memstall_leave+0x1e1/0x2d0 [ 1409.829218][T26475] ? psi_memstall_leave+0x1e6/0x2d0 [ 1409.829239][T26475] __alloc_frozen_pages_noprof+0xe9b/0x2430 [ 1409.829261][T26475] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1409.829287][T26475] ? find_held_lock+0x2b/0x80 [ 1409.829302][T26475] ? aa_file_perm+0x29e/0x1560 [ 1409.829320][T26475] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1409.829340][T26475] ? policy_nodemask+0xea/0x4e0 [ 1409.829360][T26475] alloc_pages_mpol+0x1fb/0x550 [ 1409.829380][T26475] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1409.829397][T26475] ? stack_trace_save+0x8e/0xc0 [ 1409.829415][T26475] ? __pfx_stack_trace_save+0x10/0x10 [ 1409.829435][T26475] ___kmalloc_large_node+0x10c/0x150 [ 1409.829448][T26475] __kmalloc_large_node_noprof+0x1c/0x70 [ 1409.829461][T26475] __kmalloc_noprof.cold+0xc/0x62 [ 1409.829477][T26475] ? common_file_perm+0x1b1/0x500 [ 1409.829491][T26475] ? qrtr_tun_write_iter+0xc1/0x1b0 [ 1409.829507][T26475] ? qrtr_tun_write_iter+0xc1/0x1b0 [ 1409.829520][T26475] qrtr_tun_write_iter+0xc1/0x1b0 [ 1409.829534][T26475] aio_write+0x3b9/0x910 [ 1409.829553][T26475] ? __pfx_aio_write+0x10/0x10 [ 1409.829571][T26475] ? __lock_acquire+0x436/0x2890 [ 1409.829590][T26475] ? __might_fault+0xe3/0x190 [ 1409.829603][T26475] ? __might_fault+0x13b/0x190 [ 1409.829619][T26475] ? io_submit_one+0x1243/0x1e70 [ 1409.829629][T26475] io_submit_one+0x1243/0x1e70 [ 1409.829642][T26475] ? __lock_acquire+0x436/0x2890 [ 1409.829655][T26475] ? __pfx_io_submit_one+0x10/0x10 [ 1409.829670][T26475] ? __might_fault+0xe3/0x190 [ 1409.829682][T26475] ? __might_fault+0x13b/0x190 [ 1409.829698][T26475] ? __ia32_compat_sys_io_submit+0x1ad/0x3c0 [ 1409.829710][T26475] __ia32_compat_sys_io_submit+0x1ad/0x3c0 [ 1409.829724][T26475] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 1409.829742][T26475] ? rcu_is_watching+0x12/0xc0 [ 1409.829759][T26475] __do_fast_syscall_32+0xe8/0x680 [ 1409.829773][T26475] do_fast_syscall_32+0x32/0x80 [ 1409.829785][T26475] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1409.829799][T26475] RIP: 0023:0xf70fd579 [ 1409.829809][T26475] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1409.829820][T26475] RSP: 002b:00000000f54ed55c EFLAGS: 00000296 ORIG_RAX: 00000000000000f8 [ 1409.829832][T26475] RAX: ffffffffffffffda RBX: 00000000f7ffd000 RCX: 00000000000000e7 [ 1409.829839][T26475] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1409.829846][T26475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1409.829853][T26475] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1409.829860][T26475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1409.829874][T26475] [ 1409.829878][T26475] Mem-Info: [ 1409.964088][T26475] active_anon:5992 inactive_anon:2652 isolated_anon:0 [ 1409.964088][T26475] active_file:3981 inactive_file:109 isolated_file:0 [ 1409.964088][T26475] unevictable:1768 dirty:0 writeback:3 [ 1409.964088][T26475] slab_reclaimable:6683 slab_unreclaimable:66983 [ 1409.964088][T26475] mapped:27662 shmem:9213 pagetables:1592 [ 1409.964088][T26475] sec_pagetables:336 bounce:0 [ 1409.964088][T26475] kernel_misc_reclaimable:0 [ 1409.964088][T26475] free:37803 free_pcp:258 free_cma:0 [ 1409.978934][T26475] Node 0 active_anon:0kB inactive_anon:184kB active_file:64kB inactive_file:52kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:12kB writeback:20kB shmem:3600kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9608kB pagetables:1784kB sec_pagetables:1164kB all_unreclaimable? no Balloon:0kB [ 1409.988359][T26475] Node 1 active_anon:23976kB inactive_anon:10424kB active_file:16160kB inactive_file:384kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:110728kB dirty:0kB writeback:0kB shmem:33252kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5764kB pagetables:4584kB sec_pagetables:180kB all_unreclaimable? no Balloon:0kB [ 1409.998501][T26475] Node 0 DMA free:2192kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:40kB active_file:0kB inactive_file:132kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1410.007770][T26475] lowmem_reserve[]: 0 289 289 289 289 [ 1410.009495][T26475] Node 0 DMA32 free:18964kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:2048KB free_highatomic:76KB active_anon:152kB inactive_anon:380kB active_file:120kB inactive_file:476kB unevictable:3536kB writepending:32kB zspages:1172kB present:1032196kB managed:296804kB mlocked:0kB bounce:0kB free_pcp:372kB local_pcp:0kB free_cma:0kB [ 1410.018880][T26475] lowmem_reserve[]: 0 0 0 0 0 [ 1410.020670][T26475] Node 1 DMA32 free:130260kB boost:16384kB min:63528kB low:75312kB high:87096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23976kB inactive_anon:10424kB active_file:16160kB inactive_file:384kB unevictable:3536kB writepending:0kB zspages:7024kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:1272kB local_pcp:984kB free_cma:0kB [ 1410.031653][T26475] lowmem_reserve[]: 0 0 0 0 0 [ 1410.033081][T26475] Node 0 DMA: 10*4kB (UM) 5*8kB (UM) 4*16kB (UM) 4*32kB (UM) 9*64kB (UM) 3*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2256kB [ 1410.037485][T26475] Node 0 DMA32: 117*4kB (UMEH) 463*8kB (UMEH) 266*16kB (UMEH) 68*32kB (UME) 47*64kB (UME) 30*128kB (UME) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18732kB [ 1410.043237][T26475] Node 1 DMA32: 217*4kB (UME) 4345*8kB (UME) 3682*16kB (UME) 525*32kB (UME) 161*64kB (UME) 44*128kB (UM) 5*256kB (U) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 130092kB [ 1410.048138][T26475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1410.052042][T26475] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1410.054999][T26475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1410.057825][T26475] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 1410.060576][T26475] 14362 total pagecache pages [ 1410.062310][T26475] 941 pages in swap cache [ 1410.063596][T26475] Free swap = 76964kB [ 1410.064788][T26475] Total swap = 124996kB [ 1410.066106][T26475] 524155 pages RAM [ 1410.069681][T26475] 0 pages HighMem/MovableOnly [ 1410.075240][T26475] 209061 pages reserved [ 1410.076604][T26475] 0 pages cma reserved [ 1410.281286][T14916] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1411.953265][ T9133] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 1411.962303][ T9133] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 1411.972124][ T9133] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 1411.977725][ T9133] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 1411.982856][ T9133] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 1411.992686][ T9133] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 1411.995564][ T9133] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 1411.998455][ T9133] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 1412.002206][ T9133] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 1412.005195][ T9133] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 1412.012669][ T9133] hid-generic 0006:0004:0009.000F: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1412.182816][T26505] fido_id[26505]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1413.088840][T26522] Cannot find add_set index 2 as target [ 1414.584181][T26531] FAULT_INJECTION: forcing a failure. [ 1414.584181][T26531] name failslab, interval 1, probability 0, space 0, times 0 [ 1414.589291][T26531] CPU: 2 UID: 0 PID: 26531 Comm: syz.6.5287 Tainted: G L syzkaller #0 PREEMPT(full) [ 1414.589317][T26531] Tainted: [L]=SOFTLOCKUP [ 1414.589323][T26531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1414.589334][T26531] Call Trace: [ 1414.589355][T26531] [ 1414.589363][T26531] dump_stack_lvl+0x16c/0x1f0 [ 1414.589393][T26531] should_fail_ex+0x512/0x640 [ 1414.589413][T26531] ? fs_reclaim_acquire+0xae/0x150 [ 1414.589442][T26531] should_failslab+0xc2/0x120 [ 1414.589468][T26531] __kmalloc_noprof+0xeb/0x910 [ 1414.589488][T26531] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1414.589522][T26531] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1414.589545][T26531] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1414.589571][T26531] ? tomoyo_profile+0x47/0x60 [ 1414.589599][T26531] tomoyo_path_number_perm+0x245/0x580 [ 1414.589618][T26531] ? tomoyo_path_number_perm+0x237/0x580 [ 1414.589641][T26531] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1414.589685][T26531] ? find_held_lock+0x2b/0x80 [ 1414.589707][T26531] ? hook_file_ioctl_common+0x144/0x410 [ 1414.589734][T26531] ? __fget_files+0x20e/0x3c0 [ 1414.589757][T26531] ? __fput_deferred+0x420/0x480 [ 1414.589779][T26531] security_file_ioctl_compat+0x9b/0x240 [ 1414.589802][T26531] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1414.589827][T26531] __do_fast_syscall_32+0xe8/0x680 [ 1414.589847][T26531] do_fast_syscall_32+0x32/0x80 [ 1414.589864][T26531] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1414.589885][T26531] RIP: 0023:0xf703d579 [ 1414.589899][T26531] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1414.589915][T26531] RSP: 002b:00000000f542d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1414.589932][T26531] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008020640c [ 1414.589944][T26531] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1414.589954][T26531] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1414.589964][T26531] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1414.589974][T26531] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1414.589997][T26531] [ 1414.590117][T26531] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1414.647638][T26532] lo: Caught tx_queue_len zero misconfig [ 1414.982411][T26541] [ 1414.983522][T26541] ====================================================== [ 1414.985932][T26541] WARNING: possible circular locking dependency detected [ 1414.988124][T26541] syzkaller #0 Tainted: G L [ 1414.990336][T26541] ------------------------------------------------------ [ 1414.992618][T26541] syz.6.5290/26541 is trying to acquire lock: [ 1414.994785][T26541] ffff888021524c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1414.997683][T26541] [ 1414.997683][T26541] but task is already holding lock: [ 1414.999996][T26541] ffff8880224cc068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 1415.002608][T26541] [ 1415.002608][T26541] which lock already depends on the new lock. [ 1415.002608][T26541] [ 1415.006043][T26541] [ 1415.006043][T26541] the existing dependency chain (in reverse order) is: [ 1415.008827][T26541] [ 1415.008827][T26541] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 1415.011173][T26541] __mutex_lock+0x1aa/0x1ca0 [ 1415.012798][T26541] anon_pipe_write+0x15d/0x1bd0 [ 1415.014647][T26541] __kernel_write_iter+0x720/0xb10 [ 1415.016421][T26541] __kernel_write+0xf5/0x140 [ 1415.018038][T26541] autofs_notify_daemon+0x4db/0xd60 SYZFAIL: failed to recv rpc [ 1415.019928][T26541] autofs_wait+0x10f3/0x1ac0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1415.021665][T26541] autofs_mount_wait+0x132/0x3c0 [ 1415.023469][T26541] autofs_d_automount+0x4b2/0x960 [ 1415.025393][T26541] __traverse_mounts+0x1b9/0x830 [ 1415.027158][T26541] step_into_slowpath+0x772/0xf50 [ 1415.028906][T26541] path_openat+0x10db/0x3140 [ 1415.030523][T26541] do_filp_open+0x20b/0x470 [ 1415.032136][T26541] do_sys_openat2+0x121/0x290 [ 1415.033801][T26541] __ia32_compat_sys_openat+0x16d/0x210 [ 1415.035815][T26541] __do_fast_syscall_32+0xe8/0x680 [ 1415.037611][T26541] do_fast_syscall_32+0x32/0x80 [ 1415.039314][T26541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1415.041509][T26541] [ 1415.041509][T26541] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1415.043947][T26541] __mutex_lock+0x1aa/0x1ca0 [ 1415.045596][T26541] autofs_notify_daemon+0x4a6/0xd60 [ 1415.047593][T26541] autofs_wait+0x10f3/0x1ac0 [ 1415.049224][T26541] autofs_mount_wait+0x132/0x3c0 [ 1415.050960][T26541] autofs_d_automount+0x4b2/0x960 [ 1415.052725][T26541] __traverse_mounts+0x1b9/0x830 [ 1415.054443][T26541] step_into_slowpath+0x772/0xf50 [ 1415.056192][T26541] path_lookupat+0x627/0xc40 [ 1415.057917][T26541] filename_lookup+0x224/0x5f0 [ 1415.059586][T26541] kern_path+0x35/0x50 [ 1415.061159][T26541] lookup_bdev+0xd8/0x280 [ 1415.062729][T26541] resume_store+0x1d6/0x490 [ 1415.064329][T26541] kobj_attr_store+0x58/0x80 [ 1415.065942][T26541] sysfs_kf_write+0xf2/0x150 [ 1415.067597][T26541] kernfs_fop_write_iter+0x3af/0x570 [ 1415.069702][T26541] vfs_write+0x7d3/0x11d0 [ 1415.071258][T26541] ksys_write+0x12a/0x250 [ 1415.072817][T26541] __do_fast_syscall_32+0xe8/0x680 [ 1415.074585][T26541] do_fast_syscall_32+0x32/0x80 [ 1415.076278][T26541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1415.078498][T26541] [ 1415.078498][T26541] -> #0 (&of->mutex){+.+.}-{4:4}: [ 1415.081292][T26541] __lock_acquire+0x1669/0x2890 [ 1415.082976][T26541] lock_acquire+0x179/0x330 [ 1415.084591][T26541] __mutex_lock+0x1aa/0x1ca0 [ 1415.086201][T26541] kernfs_fop_write_iter+0x28f/0x570 [ 1415.088045][T26541] iter_file_splice_write+0xa24/0x12b0 [ 1415.090103][T26541] do_splice+0x1478/0x1fc0 [ 1415.091670][T26541] __do_splice+0x32a/0x360 [ 1415.093252][T26541] __ia32_sys_splice+0x189/0x250 [ 1415.094972][T26541] __do_fast_syscall_32+0xe8/0x680 [ 1415.096746][T26541] do_fast_syscall_32+0x32/0x80 [ 1415.098435][T26541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1415.100729][T26541] [ 1415.100729][T26541] other info that might help us debug this: [ 1415.100729][T26541] [ 1415.103884][T26541] Chain exists of: [ 1415.103884][T26541] &of->mutex --> &sbi->pipe_mutex --> &pipe->mutex [ 1415.103884][T26541] [ 1415.107683][T26541] Possible unsafe locking scenario: [ 1415.107683][T26541] [ 1415.110064][T26541] CPU0 CPU1 [ 1415.112153][T26541] ---- ---- [ 1415.113850][T26541] lock(&pipe->mutex); [ 1415.115173][T26541] lock(&sbi->pipe_mutex); [ 1415.117353][T26541] lock(&pipe->mutex); [ 1415.119431][T26541] lock(&of->mutex); [ 1415.120760][T26541] [ 1415.120760][T26541] *** DEADLOCK *** [ 1415.120760][T26541] [ 1415.123351][T26541] 2 locks held by syz.6.5290/26541: [ 1415.124983][T26541] #0: ffff888044992420 (sb_writers#7){.+.+}-{0:0}, at: __do_splice+0x32a/0x360 [ 1415.127803][T26541] #1: ffff8880224cc068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 1415.130540][T26541] [ 1415.130540][T26541] stack backtrace: [ 1415.132629][T26541] CPU: 1 UID: 0 PID: 26541 Comm: syz.6.5290 Tainted: G L syzkaller #0 PREEMPT(full) [ 1415.132659][T26541] Tainted: [L]=SOFTLOCKUP [ 1415.132667][T26541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1415.132678][T26541] Call Trace: [ 1415.132687][T26541] [ 1415.132695][T26541] dump_stack_lvl+0x116/0x1f0 [ 1415.132727][T26541] print_circular_bug+0x275/0x340 [ 1415.132758][T26541] check_noncircular+0x146/0x160 [ 1415.132788][T26541] __lock_acquire+0x1669/0x2890 [ 1415.132807][T26541] ? __do_splice+0x32a/0x360 [ 1415.132834][T26541] ? __do_fast_syscall_32+0xe8/0x680 [ 1415.132855][T26541] lock_acquire+0x179/0x330 [ 1415.132873][T26541] ? kernfs_fop_write_iter+0x28f/0x570 [ 1415.132895][T26541] ? __pfx___might_resched+0x10/0x10 [ 1415.132913][T26541] __mutex_lock+0x1aa/0x1ca0 [ 1415.132923][T26541] ? kernfs_fop_write_iter+0x28f/0x570 [ 1415.132940][T26541] ? kernfs_fop_write_iter+0x28f/0x570 [ 1415.132956][T26541] ? __asan_memcpy+0x3c/0x60 [ 1415.132971][T26541] ? __pfx___mutex_lock+0x10/0x10 [ 1415.132982][T26541] ? __pfx__copy_from_iter+0x10/0x10 [ 1415.132996][T26541] ? trace_kmalloc+0x2b/0xb0 [ 1415.133013][T26541] ? __kmalloc_noprof+0x35d/0x910 [ 1415.133025][T26541] ? kernfs_fop_write_iter+0x237/0x570 [ 1415.133042][T26541] ? kernfs_fop_write_iter+0x28f/0x570 [ 1415.133058][T26541] kernfs_fop_write_iter+0x28f/0x570 [ 1415.133076][T26541] iter_file_splice_write+0xa24/0x12b0 [ 1415.133097][T26541] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1415.133115][T26541] ? find_held_lock+0x2b/0x80 [ 1415.133134][T26541] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1415.133152][T26541] do_splice+0x1478/0x1fc0 [ 1415.133169][T26541] ? __lock_acquire+0x436/0x2890 [ 1415.133179][T26541] ? __lock_acquire+0x436/0x2890 [ 1415.133189][T26541] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1415.133203][T26541] ? __pfx_do_splice+0x10/0x10 [ 1415.133219][T26541] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1415.133235][T26541] ? find_held_lock+0x2b/0x80 [ 1415.133250][T26541] __do_splice+0x32a/0x360 [ 1415.133267][T26541] ? __pfx___do_splice+0x10/0x10 [ 1415.133286][T26541] __ia32_sys_splice+0x189/0x250 [ 1415.133304][T26541] __do_fast_syscall_32+0xe8/0x680 [ 1415.133316][T26541] do_fast_syscall_32+0x32/0x80 [ 1415.133327][T26541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1415.133341][T26541] RIP: 0023:0xf703d579 [ 1415.133350][T26541] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1415.133362][T26541] RSP: 002b:00000000f53eb55c EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 1415.133372][T26541] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1415.133380][T26541] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 000000000000bfd1 [ 1415.133386][T26541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1415.133393][T26541] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1415.133399][T26541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1415.133410][T26541] [ 1415.286033][T26541] kernel profiling enabled (shift: 9) [ 1417.951460][ T46] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1418.101496][ T46] bond1 (unregistering): (slave gre1): Releasing backup interface [ 1418.104731][ T46] gre1 (unregistering): left promiscuous mode [ 1418.431465][ T46] bond0 (unregistering): (slave 30): Releasing backup interface [ 1418.501415][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1418.572239][ T46] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1418.591460][ T46] bond0 (unregistering): Released all slaves [ 1419.192368][ T46] bond1 (unregistering): Released all slaves [ 1419.271837][ T46] bond2 (unregistering): (slave lo): Releasing backup interface [ 1419.312127][ T46] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1419.317025][ T46] bond2 (unregistering): Released all slaves [ 1419.322719][ T46] bond3 (unregistering): Released all slaves [ 1419.391417][ T9133] lo speed is unknown, defaulting to 1000 [ 1419.393320][ T9133] syz0: Port: 1 Link DOWN [ 1419.461283][ T46] tipc: Left network mode [ 1421.274159][ T46] hsr_slave_0: left promiscuous mode [ 1421.291295][ T46] hsr_slave_1: left promiscuous mode [ 1421.293430][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1421.331526][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1