last executing test programs: 9.771473558s ago: executing program 0 (id=2836): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) unshare(0x62040200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000034000000080001007063690011000200303030303a30303a31302e3000000000080073000000000037a4ecf8f3202f54f0a8b189df1d02354b7fff25b8f6c8a20d7cb1d58ad7d8f72d95304b11ffdf5b9002b3d126243779ff9be0d54e67f2e5ed31a445e3d6820655f87305722f1268513250211574160a90dbb9777f1073e7af648007ca6a9272ef321b3e8e2db76b736de92e8da3da2ad70000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x41) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000"], 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r6], 0x3c}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000004c}, 0x4000c) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="3000000000000000844000000100"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) 9.595676527s ago: executing program 1 (id=2837): sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$FUSE_INIT(r2, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x40040) 8.365913645s ago: executing program 2 (id=2839): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_read_part_table(0x5c0, &(0x7f0000000000)="$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") r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x130, &(0x7f0000000080)=ANY=[@ANYBLOB="716255c47b46aaaaaaaaaabb86dd6000000000fa00000000005dca23e2000000000000000000ff020000000000000000000000000001"], 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed0040, &(0x7f0000000000)={[{@data_writeback}, {@resgid={'resgid', 0x3d, 0xee00}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}, {@noload}, {@nobarrier}, {@nodiscard}]}, 0xfe, 0x477, &(0x7f0000000dc0)="$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") ioctl$KVM_NMI(r3, 0xae9a) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8000c61) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x10, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) 8.29302283s ago: executing program 1 (id=2842): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@dev, 0x20000}, {@remote}, {@multicast2}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.736708354s ago: executing program 0 (id=2843): sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x20, 0x0, @mcast1, 0x40000}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000f6ffffe3ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff07000000000000050000000a004e200e8a34c38f"], 0x310) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000080)={0x8001, 0x8}) getpgrp(0x0) read$FUSE(r1, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, r2}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x20, 0x12, 0x2fe, 0xfffd, 0x0, 0x80000001, 0x0}) ioctl$FIBMAP(r3, 0x401070ca, &(0x7f0000000040)) pidfd_send_signal(0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x8, 0x0, 0x6}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 7.704709765s ago: executing program 1 (id=2844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r2, 0x0) read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r3, {0x7, 0x28, 0x8, 0x4, 0x9, 0x6, 0xf, 0x88b9}}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'ip6erspan0\x00', {}, 0xfa0}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x1f, 0x0, 0x8}}, 0x50) write$binfmt_elf32(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0xab, 0x1, 0x2, 0x5b9, 0x3, 0x6, 0xffffffff, 0x38e, 0x38, 0x11, 0x5, 0x1, 0x20, 0x2, 0x0, 0x4, 0x68a}, [{0x2, 0xff, 0x79a, 0x7, 0x0, 0x5, 0xc, 0x7}], '(', ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x859) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) poll(&(0x7f0000000240)=[{r6}], 0x1, 0x10000) dup3(r0, r1, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r7) sendmsg$NL802154_CMD_SET_CCA_MODE(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0xf0789ddadb7022b2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x20, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x4004000) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb0, 0xf1, 0xf2, 0x40, 0x13d3, 0x3311, 0x4090, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xec, 0x1c, 0x50}}]}}]}}, 0x0) 7.360852747s ago: executing program 3 (id=2845): r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x33, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private, @rand_addr, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001e00)=""/4100, 0x1004}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 7.27562074s ago: executing program 0 (id=2846): r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private, @rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001e00)=""/4100, 0x1004}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 7.022111559s ago: executing program 2 (id=2847): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140), 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200422, &(0x7f0000000440)={[{@prjquota}, {@debug}], [{@obj_role={'obj_role', 0x3d, ')\xc6\x8b\xfb(^'}}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x32, 0x36, 0x61, 0x30, 0x33, 0x61, 0x38], 0x2d, [0x35, 0x62, 0x65, 0x34], 0x2d, [0x37, 0x31, 0x39, 0x37], 0x2d, [0x39, 0x64, 0x37, 0x61], 0x2d, [0x30, 0xc31263e6f2c3068c, 0x64, 0x66, 0x39, 0x64, 0x35, 0x65]}}}]}, 0x6, 0x50d, &(0x7f0000008340)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000007000000000000000000850000001900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c00000003080000001100000000000000000040060002400000000078af92c7ce4f73d85169c5aeeec67eac525b38dbc1c79b9d360571b635680a25f93f29222636543f43216ba18a131bda"], 0x1c}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x361500) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x3, 0x6, 0x2, @rand_addr=' \x01\x00', @local, 0x1, 0x80, 0x5, 0x2}}) bind$packet(r4, &(0x7f0000000540)={0x11, 0x3, r5, 0x1, 0x10}, 0x14) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000600)={0x101ff, 0x1, 0x10000, 0x1000, &(0x7f0000ffa000/0x1000)=nil}) ioctl(r6, 0x8b32, &(0x7f0000000040)) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x30002, 0x24, 0xe}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r8) socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r10, 0x0) sendmmsg$sock(r8, &(0x7f0000007140)=[{{&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000003700)=[@timestamping={{0x18, 0x1, 0x24}}], 0x18}}], 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc080661a, &(0x7f0000000200)={@desc={0x1, 0x0, @desc2}}) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x0, 'D'}, @main=@item_4={0x3, 0x0, 0x8, "456b3c02"}]}}, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) 6.763591242s ago: executing program 4 (id=2849): socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x8}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x58, &(0x7f00000001c0)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 6.609508682s ago: executing program 0 (id=2850): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x18}, 0x4008044) socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000300)='./file0\x00', 0x1d5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/diskstats\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000002100)=""/4112, 0x1010}], 0x1, 0x0, 0x0) 6.596975028s ago: executing program 3 (id=2851): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000001540)='./file1\x00', 0xc012, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}, {@discard}, {@discard}]}, 0x1, 0x14d3, &(0x7f0000001580)="$eJzs3HuYz9XaMPB1r7W+jGnSr0kOw7rX/eWXBsskSQ5JckiSJElySkiaJElIDDklIQk5TpLDEJLDYDDO5/P50GRLkiSnnMJ6L+39PJ6928/led+938cfc3+ua12z7vn+7vu31twz8z1c18zPnYZUb1ijSn0iEv8S+OuHFCFEjBCivxDiDiFEIIQoE18m/vrxXApS/rU3Yf9ez6Xd6hWwW4n7n71x/7M37n/2xv3P3rj/2Rv3P3vj/mdv3H/GsrOt0wrcySP7Dn7+n53x+T974/5nb9z/7I37n71x/7M37n/2xv3P3rj/2Rv3n7Hs7FY/f+Zxa8et/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY9XPQ3aCHEf8xv9boYY4wxxhhjjDH27+Nz3uoVMMYYY4wxxhhj7P8/EFIooUUgcoicIkbkErHiNhEnbhe5xR0iIu4U8eIukUfcLfKKfCK/KCASREFRSBiBwgoSoSgsioiouEcUFfeKRFFMFBclhBMlRZK4T5QS94vS4gFRRjwoyoqHRDlRXlQQFcXDopJ4RFQWj4oq4jFRVVQT1UUN8bioKZ4QtcSTorZ4StQRT4u64hlRTzwr6ovnRAPxvGgoXhCNxIuisWgimopmovn/U/67opt4T3QXPUSK6Cl6ifdFb9FH9BX9RH/xgRggPhQDxUdikBgshoiPxVDxiRgmPhXDxQgxUnwmRonRYowYK8aJ8SJVfC4miC/ERPGlmCQmiyliqkgT08R08ZWYIWaKWeJrMVt8I+aIuWKemC/SxQKxUCwSGWKxWCKWikyxTCwXK8RKsUqsFmvEWrFOrBcbxEaxSWwWW8RWsU1sFzvETrFL7BZ7xF6xT+wXB8RB8a3IEt/9X+Zf+If8ziBAgAQJGjTkgBwQAzEQC7EQB3GQG3JDBCIQD/GQB/JAXsgL+SE/JEACFIJCgIBAQFAYCkMUolAUikIiJEJxKA4OHCRBEpSC+6E0lIYyUAbKQlkoB+WhPFSEilAJKkFlqAxVoApUhapQHarD4/A4PAG1oBbUhtpQB+pAXagL9aAe1If60AAaQENoCI2gETSGxtAUmkJzaA4toAW0hJbQGlpDG2gDbaEtJEMytIN20B7aQwfoAB2hI3SCTtAZukAXeBfehffgPegBVWVP6AW9oDf0hr7QD/rBBzAAPoQP4SMYBINhCHwMH8MnMAzOw3AYASNhJFSSo2EMjAWS4yEVUmECTICJMBEmwWSYDFMhDabBdJgOM2AmzISvYTZ8A9/AXJgL8yEd0mEhLIIMyIAlcAEyYRkshxWwElbBSlgDa2ENrIcNsB42wSbYAltgG2yDHbADdsEu2AN7YB/sgwNwAAZBFmTBITgEh+EwHIEjcBSOwjE4BsfhOJyAE3ASTsIpOA1n4DScg3NwHi7ARbgIl+EyXIErcA2uXf/hl9dpqWUOmUPGyBgZK2NlnIyTuWVuGZERGS/jZR6ZR+aVeWV+mV8myARZSBaSKFGSDGVhWVhGZVQWlUVlokyUxWVx6aSTSTJJlpKlZGlZWpaRD8qy8iFZTpaXrVxFWVFWkq1dZfmorCKryKqymqwua8gasqasKWvJWrK2rC3ryDqyrnxG1pM9oS88J693pqEcDI3kEGgsm8imspn8BF6SLeQwaClbydbyFTkChkNb2cIly9dlOzkG2ss35Vh4S3aU46GTfEd2ll1kV/mu7CZbuu6yh5wEPWUvORV6yz6yr+wnZ0A1eb1j1eVHcpAcLIfIj+V8+EQOk5/K4XKEHCk/k6PkaDlGjpXj5HiZKj+XE+QXcqL8Uk6Sk+UUOVWmyWlyuvxKzpAz5Sz5tZwtv5Fz5Fw5T86X6XKBXCgXyQy5WC6RS2WmXCaXyxVypVwlV8s1cq1cJ9fLDXKj3CQ3yy1yq9wmt8sdcqfcJXfLPXKv3Cf3ywPyoPxWZsnv5CH5F3lYfi+PyB/kUfmjPCZ/ksflz/KE/EWelL/KU/K0PCPPynPyN3leXpAX5SV5Wf4ur8ir8pr0UihQUimlVaByqJwqRuVSseo2FaduV7nVHSqi7lTx6i6VR92t8qp8Kr8qoBJUQVVIGYXKKlKhKqyKqKi6RxVV96pEVUwVVyWUUyVVkrpPlVL3q9LqAVVGPajKqodUOVVeVVAV1cOqknpEVVaPqirqMVVVVVPVVQ31uKqpnlC11JOqtnpK1VFPq7rqGVVPPavqq+dUA/W8aqheUI3Ui6qxaqKaqmaquXpJtVAvq5aqlWqtXlFt1KuqrXpNJavXVTv1hmqv3lQd1Fuqo3pbdVLvqM6qi+qqrqpryqvuqodKUT1VL/W+6q36qL6qn+qvPlAD1IdqoPpIDVKD1RD1sRqqPlHD1KdquBqhRqrP1Cg1Wo1RY9U4NV6lqs/VBPWFmqi+VJPUZDVFTVVpaprq+7dKs/4H+V/8k/yBf7z7FrVVbVPb1Q61U+1Su9UetVftVfvVfnVQHVRZKksdUofUYXVYHVFH1FF1VB1Tx9RxdVydUCfUSXVSnVKn1SV1Vp1Tv6nz6oK6oC6py+qyuvK3r4HQoKVWWutA59A5dYzOpWP1bTpO365z6zt0RN+p4/VdOo++W+fV+XR+XUAn6IK6kDYatdWkQ11YF9FRfY8uqu/VibqYLq5LaKdL6iR937+cf7P1NdfNdQvdQrfULXVr3Vq30W10W91WJ+tk3U630+11e91Bd9AddUfdSXfSnXVn3VV31d10N91dd9cpOkX30u/r3rqP7qv76f76Az1AD9AD9UA9SA/SQ/QQPVQP1cP0MD1cD9cj9Ug9So/SY/QYPU6P06k6VU/QE/REPVFP0pP0FD1Fp+k0PV1P1zP0DD1Lz9Kz9Ww9R8/R8/Q8na7T9UK9UGfoDL1EL9GZepleplfoFXqVXqXX6DV6nV6nN+gNepPepDP1Vr1Vb9fb9U69U+/Wu/VevVfv1/v1QX1QZ+ksfUgf0of1YX1EH9FH9VF9TB/Tx/VxfUKf0Cf1SX1Kn9Jn9Bl9Tp/T5/V5fVFf1Jf1ZX1FX9HX9LXrl32BDGSgAx3kCHIEMUFMEBvEBnFBXJA7yB1EgkgQH8QHeYK7g7xBviB/UCBICAoGhQITYGADCsKgcFAkiAb3BEWDe4PEoFhQPCgRuKBkkBTcF5QK7g9KBw8EZYIHg7LBQ0G5oHxQIagYPBxUCh4JKgePBlWCx4KqQbWgelAjeDyoGTwR1AqeDGoHTwV1gqeDusEzQb3g2aB+8FzQIHg+aBi8EDQKXgwaB02CpkGzoPm/tb735/O97LqbHibF9DS9zPumt+lj+pp+pr/5wAwwH5qB5iMzyAw2Q8zHZqj5xAwzn5rhZoQZaT4zo8xoM8aMNePMeJNqPjcTzBdmovnSTDKTzRQz1aSZaWa6+crMMDPNLPO1mW2+MXPMXDPPzDfpZoFZaBaZDLPYLDFLTaZZZpabFWalWWVWmzVmrVln1psNZqPZZDabLWar2Wa2mx1mp9lldps9Zq/ZZ/abA+ag+dZkme/MIfMXc9h8b46YH8xR86M5Zn4yx83P5oT5xZw0v5pT5rQ5Y86ac+Y3c95cMBfNJXPZ/G6umKvmmvHXL+6vn95Ro8YcmANjMAZjMRbjMA5zY26MYATjMR7zYB7Mi3kxP+bHBEzAQlgIryMkLIyFMYpRLIpFMRETsTgWR4cOkzAJS2EpLI2lsQyWwbJYFsthOayAFfBhfBgfwUfwUXwUH8PHsBpWwxpYA2tiTayFtbA21sY6WAfrYl2sh/WwPtbHBtgAG2JDbISNsDE2xqbYFJtjc2yBLbAltsTW2BrbYBtsi20xGZOxHbbD9tgeO2AH7IgdsRN2ws7YGbtiV+yG3bA7dscUTMFe2At7Y2/si32xP/bHATgAB+JAHISDcAgOwaE4FIfhMByOI3AkfoajcDSOwbE4DsdjKqbiBJyAE3EiTsJJOAWnYBqm4XScjjNwBs7CWTgbZ+McnIPzcB6mYzouxIWYgRm4BJdgJmbiclyOK3ElrsbVuBbX4npcjxtxI27GzbgVt+J23I47cSfuxt24F/fiftyPB/EgZmEWHsJDeBgP4xE8gkfxKB7DY3gcj+MJPIEn8SSewlN4Bs/gOTyH5/E8XsSLeBl/xyt4Fa+hxxiby8ba22ycvd3mtnfYf4zz2wI2wRa0hayxeW2+v4vRWptoi9nitoR1tqRNsvf9KS5ny9sKtqJ92Fayj9jKf4pr2idsLfukrW2fsjXs438X17FP27r2BVvPvmjr2ya2gW1mG9oXbCP7om1sm9imtpltY1+1be1rNtm+btvZN/4UL7SL7Fq7zq63G+x+e8BetJfscfuzvWx/t91tD9vffmAH2A/tQPuRHWQH/ykeaT+zo+xoO8aOtePs+D/FU+xUm2an2en2KzvDzvxTnG4X2Nk2w86xc+08O/+P+PqaMuxiu8QutZl2mV1uV9iVdpVdbdf851pX2E12s91i99p9drvdYXfaXXa33fNHfH0fB+23Nst+Z4/Zn+xh+709Yk/Yo/bHP+Lr+zthf7En7a/2lD1tz9iz9pz9zZ63F/7Y//W9n7VX7TXrrSAgSYo0BZSDclIM5aJYuo3i6HbKTXdQhO6keLqL8tDdlJfyUX4qQAlUkAqRISRLRCEVpiIUpXuoKN1LiVSMilMJclSSkug+KkX3U2l6gMrQg1SWHqJyVJ4qUEV6mCrRI1SZHqUq9BhVpWpUnWrQ41STnqBa9CTVpqeoDj1NdekZqkfPUn16jhrQ89SQXqBG9CI1pibUlJpRc3qJWtDL1JJaUWt6hdrQq9SWXqNkep3a0RvUnt6kDvQWdaS3qRO9Q52pC3Wld6kbvUfdqQelUE/qRe9Tb+pDfakf9acPaAB9SAPpIxpEg2kIfUxD6RMaRp/ScBpBI+kzGkWjaQyNpXE0nlLpc5pAX9BE+pIm0WSaQlMpjabRdPqKZtBMmkVf02z6hubQXJpH8ymdFtBCWkQZtJiW0FLKpGW0nFbQSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtBO2kW7aQ/tpX20nw7QQfqWsug7OkR/ocP0PR2hH+go/UjH6Cc6Tj/TCfqFTtKvdIpO0xk6S+foNzpPF+giXaLL9Dtdoat0jTyJEEIZqlCHQZgjzBnGhLnC2PC2MC68Pcwd3hFGwjvD+PCuME94d5g3zBfmDwuECWHBsFBoQgxtSGEYFg6LhNHwnrBoeG+YGBYLi4clQheWDJPC+8JS4f1h6fCBsEz4YFg2fCgsF5YPK4QVw4fDSuEjYeXw0bBK+FhYNawWVg9rhI+HNcMnwlrhk2Ht8KmwdPh0WDd8JqwXPhvWD58LG4TPhw3DF8JG4Yth47BJ2DRsFjYPXwpbhC+HLcNWYevwlbBN+GrYNnwtTA5fD9uFb9z0eErYM+wVvh++H3r/pJoXnR9Njy6ILowuimZEF0eXRJdGM6PLosujK6Iro6uiq6Nromuj66LroxuiG6ObopujW6Le18gpHDjplNMucDlcThfjcrlYd5uLc7e73O4OF3F3unh3l8vj7nZ5XT6X3xVwCa6gK+SMQ2cdudAVdkVc1N3jirp7XaIr5oq7Es65ki7JNXPNXXPXwr3sWrpWrrV7xb3iXnWvutfca+5118694dq7N10H95br6N52b7t3XGfXxXV177pu7j3X3fVwKS7F9XK9XG/X2/V1fV1/198NcAPcQDfQDXKD3BA3xA11Q90wN8wNd8PdSDfSjXKj3Bg3xo1z41yqS3UT3AQ30U10k9wkN8VNcWkuzU13090MN8PNcrPcbDfbzXFz3Dw3z6W7dLfQLXQZLsMtcUtcpst0y91yt9KtdKvdarfWrXXr3Xq30W10m91mt9VtddvddrfT7XS73W631+11+91+d9AddFkuyx1yh9xhd9gdcT+4o+5Hd8z95I67n90J94s76X51p9xpd8addefcb+68u+AuukvusvvdXXFX3TXnXWrk88iEyBeRiZEvI5MikyNTIlMjaZFpkemRryIzIjMjsyJfR2ZHvonMicyNzIvMj6RHFkQWRhZFMiKLI0siSyOZkWWR5ZEVkZWRVRHvC24PfWFfxEf9Pb6ov9cn+mK+uC/hnS/pk/x9vpS/35f2D/gy/kFf1j/ky/nyvoJ/0Tf2TXxT38w39y/5Fv5l39K38q39K76Nf9W39a/5ZP+6b+ff8O39m76Df8t39G/7Tv4d39l38V39u76bf8939z18iu/pe/n3fW/fx/f1/Xx//4Ef4D/0A/1HfpAf7If4j/1Q/4kf5j/1w/0IP9J/5kf50X6MH+vH+fE+1X/uJ/gv/ET/pZ/kJ/spfqpP89P8dP+Vn+Fn+ln+az/bf+Pn+Ll+np/v0/0Cv9Av8hl+sV/il/pMv8wv9yv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nb/c7/E6/y+/2e/xev8/v9wf8Qf+tz/Lf+UP+L/6w/94f8T/4o/5Hf8z/5I/7n/0J/4s/6X/1p/xpf8af9ef8b/68v+Av+kv+sv/dX/FX/TX+mzXGGGOMsf8RdZPjPf/J5+TfxnW9hBC37yhw9B9rbsz713kfmdAmIoR4vUen5/5jVK2akpLyt9dmKhEUmSuEiNzIzyFuxMtEa/GqSBatRKl/ur4+sstlukn96INCxP6XnBhxI75R//7/pv7o2TetP1eIxCI3cnKJG/GN+qX/m/r5Wtykfq7vU4Vo+V9y4sSN+Eb9JPGyeEMk/90rGWOMMcYYY4yxv+ojK3S42f3t9fvzBH0jJ6e4Ed/s/pwxxhhjjDHGGGO33ltdur72UnJyqw484QlPePKfk1v9m4kxxhhjjDH273bjov9Wr4QxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu+/jf+ndit3iNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2q/2fAAAA//+uBTVz") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x6b}}, 0x0}, 0x90) r0 = syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6b3, &(0x7f00000000c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x80247009, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r4 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r4, 0xffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0xff41) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) ioctl$TIOCGRS485(r5, 0x5416, &(0x7f0000000200)) write$binfmt_aout(r0, &(0x7f0000000880)={{0xcc, 0x0, 0xf3, 0x345, 0x0, 0x2, 0xb0, 0x8001}, "2974ec00f4f75f55b92ee1e1818ccadbb8d3af37040a80cdad00f50fae58e06cfd3089d91fe41b86e479be7afeb3d0c5eeee9636eebce61f950f25c302104615fb66afd0", ['\x00', '\x00', '\x00', '\x00']}, 0x464) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$addseals(r4, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x1000}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000080)={r8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 5.537058265s ago: executing program 4 (id=2852): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000001540)='./file1\x00', 0xc012, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}, {@discard}, {@discard}]}, 0x1, 0x14d3, &(0x7f0000001580)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x6b}}, 0x0}, 0x90) r0 = syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6b3, &(0x7f00000000c0)="$eJzs3c9vHGcdB+DPrNdbb6iC0yZthIqIEqkgRSR2rBTChYAQyqFCVTlwthKnsbJxKttFboXABQQnJA79AwqSb5yQuAeFc7n1anGqhMQl4hBxMZrZWXvtXf+I7dgxPE80ft+Z95133vnOzDs741gb4P/WrctpPkqRW5ffXirnV1emOqsrUy/VxZ0kZb6RNLtJirmkeJzcLMuLvil96YBPZm+8+/mT1S+6c816quo3dlpviCF1l+spF5KM1Omg0b1uYlN7t5O8PFCltde2NlUsg3apTuHYrQ1Y3qH2P05vWfAs1y3wgundnYrufXPAeHIqyVj9OSD16NA4uh4+HzuNcgAAAPC/4rOHx90DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOHnq7/8v6qlRp7mQovf9/63esjp/oj067g4AAAAAAAAAwCH42tM8zVJO9+bXiup3/hermbP5z1rypXyQhcxkPleylOksZjHzmUwy3tdQa2l6cXF+cn3N0vA1rw1d89pR7TEAAAAAAAAAnGDtbUt+mVsbv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAXQZGMdJOsJTm7XrDcaHYXp1XNJn/v5U+IYtjCR0ffDwAAADiQsX2s8+WneZqlnO7NrxXVM/9r1fPyWD7IXBYzm8V0MpM79TN0+dTfWF2Z6qyuTD0op8F2v/evZ+pG1WK67x6qLa8/rPe2fL6q0c7dzFZLruR2VedOGtWapfO9/gzv18dln4rv1gb60Bzas2Yd1nJjv9/uLcKheNZXEeN1l3sRmaj7VkbjTDcCRfWiJtkaiV2PTnPrltLI6PqWJtNYf/Nz9kAxH+5UnZb785vnGvMdLA9buB6JRqpIXOs7+17bORLJ1//yp5/c68zdv3d34fKx7NJ+jGyzvI5E7wzLVF8kXj/RkRg+DmxvoorEufX5W/lhfpzLuZB3Mp/Z/DTTWcxM9T61NF2fz+XP8Z0jdXPT3Du79aRVH5fuMdtLny7kB1VuOherdU9nNkUe5k5m8lb171om861cz/Xc6DvC57btd7Vv1VXf2HrV9470X4d2/tI36kw7yW/rdCAGteW1ru3OzsPSHfvLuJ7pi2t3JHyyXutM39g40RelV3rRGR3a+H7GxuZX6ky5jV/V6YthvI5EeQH17hK93r3ajUSzuhcNnud/qK6Nhc7c/fl70+9v0/7WAfnNOi1Pq5Wv7rWXww/F4SrPl1cyVo8km8+OsuzV8kCObC2brMrOro9AjYGyc1VZUfSu1B9te6W26s9wgy1dq8peH1o2VZWd7yvb9HkrD9PJnSOIHwAHNJ5TrfY/25+1P23/un2v/fbY91/69ktvtDL6t9HvNCdG3my8Ufw5n+bnG8//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/i18+NH96U5nZn54prF90S6Z3VrekinqL/TZ17YOMdNKchjtjG1tZ7RccOS70951d9Z+kRx5nHtfIji8zu/KTDN7afDmbnU+3lcPG0mO9zw8usxIhp8AxzwwAc/d1cUH719d+PCjb84+mH5v5r2ZudHr129M3Lj+1tTVu7OdmYnuz+PuJfA8bNz0j7snAAAAAAAAAAAAwF4N+8OAiy8fxt/AtPzPQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBQ3Lqc5qMUmZy4MlHOr65Mdcqpl9+o2UzSaCTFz5LicXIz3Snjfc0V+ePjrA3ZziezN979/MnqFxttNbv1k0adHsByPeVCkpE6Paz2bh+4veLfvT0sA3apFzg4bv8NAAD//wNS+MQ=") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x80247009, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r4 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r4, 0xffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0xff41) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) ioctl$TIOCGRS485(r5, 0x5416, &(0x7f0000000200)) write$binfmt_aout(r0, &(0x7f0000000880)={{0xcc, 0x0, 0xf3, 0x345, 0x0, 0x2, 0xb0, 0x8001}, "2974ec00f4f75f55b92ee1e1818ccadbb8d3af37040a80cdad00f50fae58e06cfd3089d91fe41b86e479be7afeb3d0c5eeee9636eebce61f950f25c302104615fb66afd0", ['\x00', '\x00', '\x00', '\x00']}, 0x464) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$addseals(r4, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x1000}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000080)={r8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 5.119337162s ago: executing program 3 (id=2853): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x402800, 0x0) r1 = io_uring_setup(0x8000066b, &(0x7f00000002c0)={0x0, 0x6e26, 0x10, 0x0, 0x0, 0x0, r0}) io_uring_enter(r1, 0x6557, 0x1d22, 0x2, &(0x7f0000000040)={[0x4]}, 0x8) madvise(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$eJzs3c1vHGcdB/DvrNcvm0qO26ZpQJUwjVQQEYkdK4VwSUAIBalCVThwthqnseKkwXFR2gNxAYkrB/6AcggXOIEQEhJSpHKGW8XN4lQJiUtPaQ8MmtlZe+3u2ptXO/TziWaf55ln5pnf/OZlXyJrAnxuXTiR9t10cuHEa7eq9sadhZWNOwvXevUkk0laSbtbpLieFB8k59Od8oVqZjNcMWw7v14+e/HDjzc+6rba2RqveukMD7A9yl6sN1Nmk4w15UPYNt4bDzbe5Fa12MxMlbDjvcTBfhtPUm7z46NbPYOUY32Nodc78PQouu+bfbrX/0xyKMlU7w1tvdvZevIR7um+7kXrjy8OAAAAODAO37ud3Mr0fscBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT5Pm+f9FM7V69dkUvef/T/Q9Y39in8MdbvfIpnqVu60nEQwAAAAAAAAAPF5fupffXSzL6V67LOr/83+5bhypX5/J27mZpazmZG5lMWtZy2rmk8z0DTRxa3FtbXW+t+anZVkOWfP0wDVPjxhw51HsNQAAAAAAAAD83zjXlD/LhUzvcywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBNkYx1i3o60qvPpNVOMpVkolpuPflHr/40u7vfAQAAAMATcPhe7uVWpnvtsqi/8x+tv/dP5e1cz1qWs5aVLOVS/VtA91t/a+POwsrGnYVr1fTZcb/9n636H6f3DKMeMd3fHgZv+Vi9RCeXs1zPOZk38lZWcimtes3KsV48g+N6r4qpONdVlqMl6FJTVnv+q6Y8GGbqjIxvZmSuia3KxrO7Z6L/6DzAlubT2vzl58h95Pzcrlsp/ts7Jod6c5Jnvr93zsfva2ceys5MnO47+47unonkK3/6/Y+urFy/eqVYP3FwTqP7MPmvratmZyYW+jLx4siZuHzz6czETq28sFm/kO/lhzmR2bye1SznJ1nMWpYym+/WtcXmfK5eZ3bP1Pltrdf3imKiOS5jO2L68uFuuVtML9frTmc5P8hbuZSlvFr/O535fCNnciZn+47wCyNc9a0BV/2fhwd//KtNpZPkl015MFR5fbYvr/333Jm6r39OK+Vkd73nHtm9cVP7i02lOhI/b8qDYTMTU9l8l+hF93wvA+MDM/Gb+rZyc+X61dUrizd2jFusD97eK9m++wfnRlKdL89VB6tubT87qr7nB/bN131HNvtaO/t+29ns2+tKnWg+w312pNN134sD+xbqvmN9fVuftz4ty7L7eQuAA+/Q1w5NdP7d+Xvn/c4vOlc6r019Z/Kbky9NZPxv499qz4290nqp+EPez0+z9zd0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgTzffeffq4srK0uqOSlmWt4d0PZZK2sm2OX/9S98ySeqHAY0+YLX0+VZSz2mnqdxfYLcfbHfee9Ak/LM5Jk8k4Y+kMjX0/NlZ+aQsy4MR8yiVsnFQ4tmPyr7eloAn4NTatRunbr7z7teXry2+ufTm0vWzZ86cnTt75tWFU5eXV5bmuq/7HSXwOPR9AgcAAAAAAAAAAACeEqP9cU7xcH/bAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAQLpxI+26KzM+dnKvaG3cWVqqpV99a8pMkrSTFbFJ8kJxPd8pM33DFsO2sJxc//Hjjo26r3Uz18q3d1hvNejNlNslYUw4wNWhmeXvYeEU9zo3h442o2NzDKmHHe4mD/fa/AAAA///tbhq7") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x700, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300), 0x6e, 0x0}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRESHEX], 0x7) setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file1\x00', &(0x7f00000001c0), 0x0, 0x841, 0x0) listxattr(&(0x7f0000000180)='./file1\x00', &(0x7f00000006c0)=""/264, 0x108) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x82, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40081271, &(0x7f0000000000)=0x800) writev(r5, &(0x7f0000000680)=[{&(0x7f00000000c0)="97", 0x1}], 0x1) close_range(r5, r5, 0x2) 4.236094063s ago: executing program 1 (id=2854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x388, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x35c, 0x3, 0x0, 0x1, [{0x358, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x350, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VALUE={0x52, 0x1, "b305710da6350aec1336b781067e700ae4a82c92c1c908dcb9a9ac0b4bc29b47505deaeb566a2b3e108c08e26c4282b7ddd2aa92bc4ad778d3b6647cecb5cd09ad23257060b94eb5c3e888eaa3ec"}, @NFTA_DATA_VALUE={0xdf, 0x1, "bbd5d1a46f03774aa11d7af75f3cf3280b2967ba7023ffcae71e260b8410d8f0b4fef97ca7d480451a670cab0eeabf179374a8c169d7cc532132039c50338e8516b98f30763ed89e3858e335857d8897d4f9f3d4b3754fab84681342f1e81da967c480c290572e4417548017225c1dddde77ccfff9e64391334d9714ee1a29d9cb6b9e93a0ce71e4a7da722bf0849f3470e94a556b0be72bdb8648bc2741ad3ee344f83ce0123152a13848378ec1b80784d79a93961b814b5688e11c7cc8feb8c7fc24e9866dee031b3877e604cd69d2f899c44206122522372021"}, @NFTA_DATA_VALUE={0xb6, 0x1, "90435f7dc98bddd60b79741a66025867417f7a3978f36ad39da58b9fa2c9adb2e01ed4918831c6e7d4e47628e6f0389815ee83bf56441af1e6ec2a8e1cb25c23e3bbcc1dfa0c820b562c6050b9dd00128e38e7182d2271b17158f618d1d1a3c3b3e3e233ebbb61c65459aada053075da7b2fd78521a49ea3fb5d2aff4d183667041fea8d4b6fd682894eba762bc6d9b93c32e606bba25b11b427a905037682a72ece7d35f8aee8b5e063c63cbc172a8e8a8f"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x40c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x20) r4 = socket(0x1000000010, 0x80002, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r7, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000007c0)={0x0, 0x0, 0x50, "2090d48e5a77e4ed299a45b85fb10b80cd6a5332fe425cad013ca71d2371bb2e951d515c49198bd05327aa51b617a9a763136c01264aad1d2a30406acecd88da17a177732b658589d961c8d20e5f91eb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/custom0\x00', 0x0, 0x0) r10 = gettid() ioctl$BINDER_GET_FROZEN_INFO(r9, 0xc00c620f, &(0x7f0000000740)={r10}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="40306000000060b6b79e5dfce9ae9f9287e0d544892059a41e42853e9232afba0b787ee90d79eeca4f2dacc8f0fa4eda50a8dde7f4b762b2c821a460bf3a98c950adec8e5b0b6d5a97a34974101650dc60de57be6312eff916ecd32e7730422e5b2f2de30a1e"], &(0x7f0000000540)={0x0, 0x3, 0x102, @string={0x102, 0x3, "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"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="002222002a4c399f9b080742000007245addcd83abcb893792af0f937023c6819313b42aa6828a31"], &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe777, 0x8, 0x1, {0x22, 0x694}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="00138d0000005b97380b6d5b14c0e376f60f13eb5f6a458bf5729c3ad582b36e4fab85084904550a37af836ef3d35dab3a33d940e7b6e22ff9c81370b90dccd897445190fbe50cee05876112b1d29d31a77b000301512829a22eebb2b93750adc11aef5ac267e7ce4f2948ae22ef32126ba915f031d638efd593a99f92ed629efa865455827f89deea96ad8b8a4cbc2ca83b20"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xfc}, &(0x7f00000003c0)=ANY=[@ANYBLOB="20010e0000004c124591fd529dc1cdf4cd666097"], &(0x7f0000000400)={0x20, 0x3, 0x1, 0x1f}}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000003f000000aa0000000033000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x184}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)={0xa4, 0x3, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x661}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_PROTOINFO={0x3c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x38, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1e}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x6}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x1}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x1d}, @CTA_PROTOINFO_DCCP_ROLE={0x5}]}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 4.142402116s ago: executing program 3 (id=2855): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x0, 0x0, 0x0) r1 = socket(0x0, 0x3, 0x5) r2 = socket(0x200000100000011, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="4dcdc7d96a760000000600050000000000060000", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000e7ffffff0000000000000000850000005300000085000000230000009500000000000000a94be0c51261be6a99e5e06bb0a232d5e1f59f18f845f82e9a7cde9e8f1b547edf613a03f1737d951d7a617558b674e1c4fdfd771ebe7c33af3e4917be59ac67f0bbabcb8f41c23ba8d91633a8b9c70e804744dc081ac69cfea08e4e5a06f70c6792f2888d6fd95f202028070000003771bc3f325a6386a9d49e3c13b32461acf0be4b31638c29187d748841f439547bcdac15e52a4b6a2981eb4afadbbdf9157fa588f475c4cd2e44e2129dc6b93993909613e8d95f5610c067d9b97c524c210af077707d71e8512e"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="5f8f9ca681265d6cd1b08e2b5ede", 0x0, 0xffbfffff, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)='K'}, 0x50) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @remote}, &(0x7f0000000100)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r7, 0x0, 0xc, &(0x7f0000000000)=0xb, 0x4) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@dellink={0x2c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) setsockopt$inet_int(r7, 0x0, 0x0, &(0x7f0000000040)=0x8000, 0x4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r9 = accept$alg(r8, 0x0, 0x0) recvmmsg(r9, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000200)=""/153, 0x99}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000004d40)="cf", 0xfdfa}], 0x1, &(0x7f00000000c0)=[@assoc={0x18}], 0x18}, 0x0) recvmmsg(r7, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.760738694s ago: executing program 4 (id=2856): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) unshare(0x62040200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000034000000080001007063690011000200303030303a30303a31302e3000000000080073000000000037a4ecf8f3202f54f0a8b189df1d02354b7fff25b8f6c8a20d7cb1d58ad7d8f72d95304b11ffdf5b9002b3d126243779ff9be0d54e67f2e5ed31a445e3d6820655f87305722f1268513250211574160a90dbb9777f1073e7af648007ca6a9272ef321b3e8e2db76b736de92e8da3da2ad70000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x41) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000"], 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r6], 0x3c}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000004c}, 0x4000c) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="3000000000000000844000000100"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) 3.312475579s ago: executing program 2 (id=2857): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_read_part_table(0x5c0, &(0x7f0000000000)="$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") r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x130, &(0x7f0000000080)=ANY=[@ANYBLOB="716255c47b46aaaaaaaaaabb86dd6000000000fa00000000005dca23e2000000000000000000ff020000000000000000000000000001"], 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed0040, &(0x7f0000000000)={[{@data_writeback}, {@resgid={'resgid', 0x3d, 0xee00}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}, {@noload}, {@nobarrier}, {@nodiscard}]}, 0xfe, 0x477, &(0x7f0000000dc0)="$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") ioctl$KVM_NMI(r3, 0xae9a) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8000c61) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x10, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) 1.985384748s ago: executing program 1 (id=2858): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2c, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x8, [{@dev, 0x20000}, {@remote}, {@multicast2}, {@broadcast, 0x52b1}]}, @noop, @noop, @noop, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.975434783s ago: executing program 4 (id=2859): ioprio_set$pid(0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(0x0, 0x80) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffffffd) 1.914972637s ago: executing program 3 (id=2860): socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0x2, 0x0, 0x3}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe(&(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="f7e8010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 1.826843901s ago: executing program 2 (id=2861): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ptrace(0xffffffffffffffff, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file2\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,us', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000029000)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f000001c640)=@e={0xff, 0xc}) 1.667466038s ago: executing program 0 (id=2862): socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x8}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x58, &(0x7f00000001c0)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 1.295679369s ago: executing program 2 (id=2863): r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x33, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev, 0x20000}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private, @rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001e00)=""/4100, 0x1004}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 1.257947075s ago: executing program 4 (id=2864): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000300000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8}]}}}]}, 0x3c}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fefd, 0x8, 0x0, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r3, 0x0, &(0x7f0000000200)=""/76}, 0x20) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e010000000000000000"], 0xb) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006380)="f7709f77945ec10b4eecea480cce6641402373da5e6d7f24014f7acee96be0135b59ce90b463223252169e036a4daf3dae250a1e6de526211d43d9512ae526730f553268794994fd54868ec480d09862b687b463a8fc5058903593b9bb4d50879635cbf67a9e7d1110fa0e8ef89dbd2abdae33183737b8c0b907f5cc74ad6ab0383f8240e091417d2816317f40abb64224f616136f93d932f2223ef42fa3c3155d53075d3eb1db73beb32bc364e3fc246d3dcaca2dc91a634815412bae915cdb1a6da7884559403b545235541ddac97d7b1ea8135539ebcfac1edfa2fee8cf78bb46da7644a8f9e42ae06ca7a188b83fa537b0962a10411b67fc4d7dfe9e95cce2aef82e75f4680b8ff9976b6569523b72a86bd3a8c96f30e85812fe33a610c2be0a3c1063e2ee864c6e8bbf331f2768accfea78700a7321e4af2db46fd162457e439369da2217992b77502b9b958df27bc086369963793854d7f8b00c537de3216898b8f2c1dd925049eef1ab57bb6f63b2d88850b49b3c54d71f545afafa16bd2d06ae501344987623890fdf9ac04b179d2131070a34cf143697b6642bf5da67437aaf5e78e7e6be85e44ad7b265d78d2baf92ee5ccb0a452eb32fb3fdd1a41abf3a68086acd20458af55c086f77c30bbbce4c19542f92ab1e68393ffa58b140586b49761aacdf6aeb7682561f01e0869f503c4a161fd405046d3e6523bd4071c09b7516e4e784f4d11706f1c2eb170e735e563c43317a5a9afad28511163cdb63660beb699f7b8a7eaf57d48517974ffa766fe8deab0cfb11562b9c281bce2493d08c40a259e0325c52124e303064c6fbae2826355e531543863030fef484621a381a945b6ec7253e20047e7294bd069442f72672e6dfe1ca17d75d8c6b16c931438cec72e6ee53f3db89a10a38a93cc84c7393773461db5074b4f5060dd0a04a069a7a9b078856a3fa1786fc8dab621ba622acafd0781b523ea097283afb0c59222a316c6ddc0554bcaccc70288e524ed7719fc02a86283b57690a7320af028efbaedd5bd158a9dc9ea8e4f53c7da7566cdbdd4f4d9f01a9dfa6251a355e338efc8eee258add8731c7d22161482b7e3c8bc83f30482f9935fcc5974d9d0685b5fba3b07d7f85cc8fef18ac4e8e915b8476bb44d7384c996921ae40a4fdd2dd2a70ba17e1c2d6ec67b8f7b45568c105d52afa9c82bdc1dc7fd951b1e4fc1212bf29231d8e41ed4dacafec9a823a672dceeee0e4048b5620373c53ab8f3553c842a5a6d914f8334d6d8a4af785f418e6b4aab3965f94ca9d80a74a5a034fb6edd0322696aa1060d82c7b104983f8889026819ffdf3d45c604e53066b03dfae13fad499e3894120c10944eaf752989daee4e172decca9c2b324a817a7c787e6bc59fc2884e358a1a9b14b3704cabe374d23c002b8112be68f409302d3dad0a4c02105cb54c4350c24e6f3b7588bf1c28ae321eaebb930cf0c3b607acff20663eab8a593320c518eba8f9205350f11a9c1530115f7e00f2aa335c92e1305ffcfeac7cdecd6f1b6a33710ec77ce428484712d66bad137b6c8da5aa51d1b7196d981a14a40df8406b292f385cb149cfc0a86701566674e089b88487f34fdb0bf16ca94d9da4a837f15d5cf8f11d9c226844d3eb18d848420f344a3992772125319abb641ea56f03fc626f092f67a8b6716b29cf8585cf5fe25a35f5dab0e3e075ba3c84116fb6cbbf99a8153d179ffc1e64356f1fa0bca6823ebd8e1a176636962cff271cee5c5bafcb68fad4921e070c4ae08cd8fa0b94534f11e66403d129a5e8253bd3a9dc09a8189895819ff618532bf6743b17a243d515e63868bdf9287fd1bad0d525759953624c8e82debf88159b2c22945535d9379c911f89c7856be1438bd02df70c939b80741ddad245082a72556a2ab3c2390b84c17b6119103a0b8126dbc55e05b153ef9a12cc67f649c14160c698a7127b39fe88fb91d19b2a381c08114c6e3e6d3d42b77602c838c421a9a414f1eb182d0197ff67dcfb5d79404afbdf9c96f475a0d5afc9a4d7cdad458eed6b1de6c13b11c46004243db779e7ad6dbbf15e69ee34bd2524cf72e49a5352992a9251a86c3dc30d7d5fe61ae538928e8fdca0e04fdb5917523d8266b7b4f1679a5082e798f587c5ed9084c70965e94e12f643ab0191e606c2eb0c3359a2b8504f3bb2e721cfbcfdd90c31cde10992c9400273bbc45fe5ba34d7ede773036e2fd1fec1f001c495accdf8ff572de3eb2aeebad29acfe3d2b1448fd67368d0c37f8bfbbf09bafc8f99a44b187f4f443c82b21f66f722fb59f40ce0f9d83c52b9b3358a80e102b21795a1cfcb986c787ccbb9f9c96c2b66d2f7a94ef2c2a5b65d5c2970ba6f3107609f4a67432835c2ce1682d260f6826072a6b6d4b113a5b06311677ca01260f3567ff1ab6be13b455f93916906273c5430fcccb57e0d78224ebec422763ee3a6b94528749a7ee5f70c9036cf3a99a9c98abc0e8aec18733a0c7da76814f2ff741582a9d96eb798426065764fcf86e40b6490f545494b48749fa8d398c5938d6bc7dbe183deecb913ef4c61aef27ea6bb77c23af09c3dec453f01d8e0cf1a3df30d73d44c4e147d9ff2853cb05b1d9fcd2d80815016f65368c477f3e8b676ee1ef5b9154850f02951060f5335d7b8b1c395151b443130d27b4aa0cdd9c1badc38e1825cbaea22480e1d8a986b001a4464fea618707f43bdf7949f500f3f9293b7f7f28170d45eb3e9422d7a107d5dfab18b8e7a2cbc4b42a818384136a49a021721fe07dff4fb2f26e74ee6b5725166409d794c69a1a5b27cb6263c387b81612add3c9e9e509845843a6ffb2250d37c365e3f57f0ad6e908fab119211e7679b41c8e298f9e85558be25ec0a4e6c9aa3d523ef3771971bfd272fcb736d10fa98a87b78c532fcc322f5e24baa21f2a3c84a90ec9b546869400bad19dec3575ebc69c8e512210b81667ed3cede89d10ee5871a6fb166b2f5c96f079cd5bf97f41327930b210627106c4cb6d77e3793b808c425b8a4118bbaa2d1a1454b162cf9886ec17e215d12223a65348ab33185861ab1f3166a4a925d25a63def895a5b01deea11bcaf17c79d27a922834a32aa0f8676793c7257e44d3f7768de19292a385a7a4b3fc992abfb9f8f3ada57b83dc7955c0b2edef1a8214dd8ea2cc9679685137dd63f3918020e2e2f38602005a4a6e84422867b9160f65e92e053d0b58191eadcd5a8a69b18e3216ea63df3f31869c81de88fc75a1d9e15cbdf8d68ba50cd8dfa55259aa362c2615ccab13489844d5ed995383e334074f561a4a67e1060e64a818fc96135d34e604cabe3d9195cf1283725c7700e397ecb72fc8b36f38cd0830b19b439101e4b3839c48ddc95367bff87b888407a517f94fbe58a7033db1123c0a0074c730e34ce821e12f43d84d3b4f0310c6ecd8afe7779671d7b825bb3892825c762b86f0ffd182b6aafd477fadf0c7a931cb61e2b05fc11267bf0a9882e7c2f8e84d3480d9e4576cc03f0e1dbfbef9f66840ad37e76da3ff8a419730a0076de67e9b913f03f5b637287d981eafa1223feafb86bcff5b2ce987f6fa8386ee036a3f75fe014ef90b05a744e038c43766b5fd552e66b9b4996f774988d2a70fa0bf05fbc453cc4fd0ab642db1bc71e1b63919f3c49254f177306f9b00af5782c0633d68ecb85f93fc1afd8dee3dd1ca8b0d7ba0ea463de0b6e3e05c080f832e129cec16853923cf15f06d9a38e20a5a6fa5125d03c1b72680547eafd9fdf246af08dcb4d4d746577478fbc72d7a36bb4bd3b5ba4dc5e407babfcd64b8c413d7dd5433d6a4ee17d5b4835a74c81414a9397d73e15ae387f04a5012a37c88b226207aba933d68a67bcd38f5e0fb8b24c4434c3a0109deaef4f9ab1d230ea6a4acd6db0c3962d0de3bb64e33a29af8dcbf39d48a27c1649a66d4aecdce2db60c50bcec31677559369184608db197f2ebed81ca8fbeb9d2f8c486ec9839e765df69ea634f2815e75eac613febfa26012767c28eae207ed9315bf19c42de9602f44f45a9cb9913a67548787a30c9e56f3399ab281c537751a28d98392655a60ceb9f2515772d2f1d5d2843952312e2a59061b60f128def6795e0c8eb7b12a710c1afacc84f498a29d683d1949c17f3aeeb8b9a32eb10bb242d61a2db5902d592224fb8e1e713ef33caaec6f8516333ca4886345555166e91a6469d67f39241d144c6457c0f74c60e662439281a660b3c802eafa5825fab36b764d4753b33920dc72ec4b7136be556c7d0d528eef67049f5a7bd9cc7e4e94a4874ad8d06595ed38a5f1cafff1018c1351d1d7eab144edba6d4f9eeb7924a25b9f7a3eb20984919d9ade66a18c33f92b65031472ca657a724d86053a3fc60fc5502acec81822bc609954e402a406081cfe7931a1adbfc45a3168e30a451561302a131ff702b4d6c5d3603ea9d1b54c64aad93407e078d6b435154236ba594e8d2f798bbdface489b43120bc0bd7e1bcb6658c2c192ccf18f278e9c5bb14dbdf1a4eb3412f9dc64a31abefd79bd7c91bb7297c9f694840a75cae5d3482d15a2d148092a6545972b7f95a23206bda509260bb370a012b744c2bb46b57da12367d35e778b7d7f463fd8230368b5a5636f28e2cddd03c69adc9c913027a726130c95d818fa38ca7ba8421d3fcf0736cd3001ffcf80701cf6d737cc3dd8f905af39fb2806d2f22289d0001c74eb482f4faf0a1863099cc1b236edd1cfa206b21a2ed86affb4e6a3a4dfb54fab46c8c06cd3e370b50e08e1b7a08864269d867eba5fae8a49560e9479209966002c09719ab8ca58702bfb0071d3859df0193a956ed4d8ad19a2c79656c6dd42eb5a44b808df394333683b605ad0cf176bfcfdc89b01317a802cf0ab02fc3673822b55fcfba512792c9e40a150cfae4dcd40b2b12296ba95063a2f50f552b4682c4d461b1efb7555816b5b836ff0319af6935ae5b41e67329a7b21da93c36fcd87cbba1653c0d00077b14cfcba24f891d62219c157b6354300837d211fbcf1881f5e98d6195fb782479e106c072020b56285107e2fd7947bc64ec9a43a0b239c140ec0456685ac3eba988952e641d2eb16cd0132d2bb25576fc6bcd5e29eb9da2d40e8b50776abe5cd7ea45da8442a311977c51755015b3e4995739edef0567a3f169e980addb1705224175372339de904eb952e13f648449722258fa21f7e53f4a1956e8e9a39dbb18c6d2d10d9146358158a0ab7ce3f54120b705e1ccb7a13fb7e9103d0b80faaac31cab07f6d2d9f668c707b5e3bdf259923a1057816a31e8c771267fd974193d90e1a9837a987d9ba52f7af599c1aeed13f6619cc0b334396b750c9017f84cff56c0dfecc12faee59e37cf7d44575bb448abb19616d4fa79f4fdf96631328dd0d0717f12b9587d76b577bbe78eaa7b0acace3b79776b5d2e77942c57745e347ec766170e90cc66a5191bff3ad49d423ba2817cf92be74e653cc6274a20bade324638d57a27f2fea01d4670bc1ad5ec4d006492ff5fa616a0010be824766f12acec9b26a7606cc8453382c3dd1f5f5c85354569123824002c44d0ae4cd2e1ebb4e33e3d7b69fe14e05fb53af9d66f53990a830120cd618cfaa10e5f6deab4ef4522afd380ea52f90b181fd5b538f424900aac643d118c33dbb6ffe0b2428844f51943412d8fda4a327b71c814cd6345b3690a4716f04fc7323ff1af08e82ef5e571c9fb0fa9b22af40948febda32ea14ecf61700eb02967d09bfd078ace6cea259952c0be90fab1ce841f1022d2da82f173c580d43effdb424b1729aa9fe40292c082043a7c901bc76426ef6e3de788db31e50f54458ca4e360bb803b48d5a4be50724c1f48b504b086d9dca3ae74eae76a1849d14a4074f389aba805b793f9662f072405026afc3ef108ede69dbd2c769886dfc75a9a2e093137d92b38e34a050eca73cd3067d56dfd58fedaff2857e720b09d676607a1e8eeeb06b26494cc2b844f5e856271732477f384af839e98889d5c9cc28651f6eb74029f839150f947d180e48776ef1c829509e12016c6d1b717713e6325751a944cd259b1b86b1f5e793cdb55a73784498be09c2cebdd70159c77abc7c64af2e2de1a860a3e9dd8646b7a6866e1891fcf97a2b3ea47c0c57c5fa9a94129c2e27940ab9fe996eb1813d21d48fb6dbc9b8071c50dc26b4ed21588211fc5edb1ca873c70b606678ae7de9c10d2d083f372421a3038c592a38aec69020862f4432ef9ae7f400ed53b44bb58e92b022ac8b62a6b459337af339dc3346a809b715f9974d21e606244d23cf4dcb0956f93c14047243172adc97a1fed868bc49fb57ecc123425a21e94dd5b9d1ff52bc45965a7be2f5ea8218750e2cc8f174fbd2c7811742f5f17fa1f954b8423c403fd2e4e96296e37e0bfe2edd52e8c3b921dac771c61524455b401017ab5f655eca76139557a4a87cc30210b052ae17a5ca8b634322657ea4d87e0da2392c470f8951ac0560a01b4d0befe632ee311d0b87af31465d6cf7854f5738cb5debfa1d7381c74f45eea08c06d4ddc9e811d1a33394a35efdb7121cdf5f1603343df8431c87718a5d4cf3b2e593508d8b63f0d1e82f9ebc40d4022ba06327cc8233f29c0995da512b318bfa212e9582cb880d9bd6a02050a014294ef321bb2c65e4638a4fd2c8c27fd9ac28c9e49cdae6dd9eb05dafb38a4a003a56dba826e386f5fd3ab0d54b92f53ec11c850927fc4c5b669c67505ce59306ad86460b480b711d4b31c512829b7037d1c45b5b84c0be40a038b5e975c57c860476318a22df2e4f90009c38481e519b9511e54dc59e89a6593bc53ae03224466513930c5ed3689793f00be192a58a919db9ad1267962c0ee60327ee710accb0da037610ef8aaff63f6582f691096fbdfb1996abc4443cd4ffe04fcad3608413044b978d86d3a18bdf86fdb70cf7e7bbb0e4db9d36176d0ba8a4cf81369fa84ee55466df70e6d4431a873000c19bb5caff30c01c7f7f928cde86bea5c401e525fb8a938fd016bffd5c9d52b279e867bc64f575b80eec74e7f66fe92aef613636e50c8f32831ab4b7eabbc89ce6d7bbfd03b6b005e0c5ba27268369f5083b2ded32c1f9e8cd73a1daee26cf03dbbf9c476fd0f14935244eb7b544f8db1c19d8a21de7e8a88f540e8949f721f20d7a47cfad3f52d93c11a796fbe9fbe415194193e5c70b33237f70790905816b856c252a30e72c081a8bac6a1c9fd2c372b9f870831d6ba6671fd8684f25e60cc7e3a1a02ed5f1a4fe426373bf61404a68571e93f35659b6c37f939233ca6663603b053c8fc74da84dd971b9319a1260fa2f5d66609962e93f7f33a40b22066b86a74fb38bf1444d025f27f14e922661471ef8ad503e97f8e7dd6b9c9a420885e519e085a1f26f7149b82881908021f601679f79c944549bcb431a7d2b12f75aa54cae39f9caafefc01e7eb589d2eb574937abbe18b419d7d27309acb330293456337cb9d753e08f7b890bbf76c4d6ef548bc3b5965302bc65ab08a2420527c1ad8be374cae7cc858376219d39a7a6d58c478a721678e789bcc317a4d1acbf47870a4802a07ac0332f7fdad7156065de511862c2a076e264138b98e7abd1a2555ef2e1ca44ee68f06725508891051f6bd24479a616606024841c8203744b999868b9f2b3b5e8a42f454d25fcddf8f5569594716a4022c3ac8ba67115b93d8bb50684b0fb100dabca7f6b7e29b723007776435829c6f21223d7a2556766d198c76ab6cce3b6e6da5c4d14a26b7cda1cebe6792ce4c1498fe644fb4408189e472efde923506ea4d18aa3284ec311fa942dfa5d8b939e509a10c69461993cc9d3ace2fef29afee8d0894764ffd82371d5ed363b5968447ad3c0962b86584cc97740d7bc3838ab1c1b0198ea830f122b200722d3c2c8815a2a5f90382e1c58f2348dbd38449e28c67ed85f66ea3e383b91c782a4e77ad4aa538db6d15ab90dd464318ded6fd293a1b0279852335e3c94bcce6f37950fb23d96f84465aeaa8fc2f71ce61a1416e579399c363bb37ded602fbea1ba5de87ab12bc7aeb5c62f026f648ab2babea2517c3ade2828109da58c010e6efef544088ba412ea57d3cd4fad3fd85b17e386ffc8a700664b2604c8a71c011e894ac03a109d9ddbe0b6d625d33d7d16fba5bcbc1ee1cdcfc6a475a23aff414e5b4f83e9d18e10f9e6dc49e518561ad53a110794d2ad9c7fee95a03b632b2acbebac42c996e1b856b2f18a2a3bf7cb0726c10b6aa3ec2d78bebd26e86ecf78b87736017cffa7d654b357be120985c553d11dbc932139ea6e1efdb7ef34598db568e66d42429e414b5903ad6e616ff7faff6ecedec529cf16b280c18dd4c3c8cd5192f625965e15c29104855364565a4a52ac5ff78eb31a6e7602e84226a87364708c2a9fdcf2f66f5dd0951aacb7b6c8f9bd0e534ae44b47799cdb8f683db5a3258d6f1943e04e59b11fbc6f57d16ff150c94a22717c1b483ad064c25f09022cc4ce09e76fed2b2ce84e9a50623f84cb013d00b8ee3fd2eaf1ed84df2b29d3119865f5df8fbb6d7440ec6da33deff5c60f466f91959c0d7c7800937cf59fdc6e2d53e809a6f6754ed545fc71c42a95d198df6329a3f32ecd091e7e643727ee34241b9244ea9a2118ccc6d5b52f8dbd61dbc7a4b65e8a4b0e937669a8a6377022df74ac0d2d42008edfa83a71c2e14c8cb7f3e54612cbe5b64b31371f445ea6235467b339b285bffaad0acd9af5159b84f58a3e0230a7e6f055a016a0737b893e0d1b2dba11de53529c825bea86a455bba90eb4f10ea5425d498c18c0bc643a5bb07491a8b6d89b1c92329aaff3a9cb9302f81100d97b78a09d1f5c512c26409796608b77c969c070f6e55037c97bef2c30ebb373110c2356e0663c0a7010d13f18f9b7b1d4a5de88b110efe433a5dc9dd03ac7621a6de39584de91e9b43c5ef4cb435eeb45b8865540355030acddeaf451a453a0b0a76cb064ea1e939dc5491f2c591973c741cf1f73ef4451a1b43ed9d9e0c7b126b869e7cd326900a470dc08a15fb176346f7431dadd6b820ec10cba33d7097ebac9c1ff147fe39d9cedad2828facd8c37cb22a8b7d55b63170f55ccf45fc25715d00e7eb7c3f32c5a7dce02bb07073daa170caa4813b2102648cf6a5bc9ae5ef3fc4c6240447190340469cea21650f79f5ff0ab60e6fa8a30a45f29ca7f4356c275ef4dad63b07f73cc672d26091db75eff3e19b51272b0b786609333f6580a3ad3c83673df3776d04cd05fa86b7b8066076b71377580d8b226d9daec174cf2a62ffd48259ca04821e949021b3f540b5268c794a5314de9cb143dafce0575c06750f0c125b507bf39bf0abfc25b9bc39ddbc4450f0f3a70c312905a5c2d11f7b39a3cb0fd08be6f8b74c5d74fdfb0477c942caac42ae596e0aa36db5f10e1571231ebfc327e5a6111eb2f2a0e1be0b0752018973500f1b7c832cf36078c24717f66983bb72649829af53389e89694bce146f8cb358d7922ba07dfa9da6fbd65b7f5159010b1bc6847967b9eeef7c6db90f48b1c1a7ab63481809111b2876c73c375064bdca8064ee8d6d7b3817db8f5dc82709c586afea5850f415ca7641b5e6f45ff93b9dbc2f62c40c47dbe61a069d88e3664c8dfc9be2b35f8896e6d5c8a35b864b50d50364d3cec828a4f7dcff3cb314c9f7ab03c93e1fd8c5bfa2c303d76cb0954b401927a000babc400497d3f3a37c1f7a685ecc12b28db4b9b75debccfb132a4bb3b19ba91a441a94403eef6ad8222edd1dcecf215580296020731cab55029a189561499d34faef21eadfc370f98872c2192aef73f0cdf80de61cc9157d1e08d7153a49f7d1151fb9f110febc34e760c1afb87eb36c9df1d6aa047cb655b3ec5fdae8e2d93861070f98bd5f1c53c26f07d7c43cb295440af75e87671a552e39f9bfe1853222eb8ba0c8013944ee61dbe21281b1d4e3ea3dc0353d4ded5db0128504b97491353120c63bea1c5656be047a77bebe93efbab10375cb0946624e076a93a6ffdc284f4aa9fcf54ebda3653d5abf7da76f19c165d0982d48279ba8ee9f33b2fb060491aa26517e39f2cb4d4ce7726b249f070aeefca6843a813026e45c6ddfccd1e0b8883a7170644c43b227a2a3c03cbd17b8f3dc0910685169ada487a72251eeb6e6a1dd5661294337cf4cee2d74fdfbe00ff6d07847e63880059bcd12951e8b649cca1dc6a355a7d2c26ef8cabd467b21d6bbe28b108b385ffff7304d96b03500c912efd2af7c45f81f5f2f0e3357ec7da616f81ead2f823a128696ec7dd65a6587e5ecb56a8fba1bdea28909da5e085e164b046310182fad711d4e46abaa61281c88c729810c615ce9636b5c96e4150e2fcec6c111469ba8b0c010963d4338fba8a8a080e384198e1410af15f7ee18e5396b721fc331860e072207da236b35dd94fa7dab288a114ea46e754f1d0b4bfa1a5b216706652e52c489e9a3a1cee8ab4fe5d416ac22c2649673715909c27f31684f6e103913bfd28e02fca507940b86405cebb8084d1c6532a5508b716070c67ba544a1593895f4cc1a8d075415feb69d50fb674c3a89b59f80032cdfa8d1181856817bb16f50bafd0e21aa656661bf3b6bfc207a7a645a8edc15ff1cb706b6292a3263ef5ad1479338f59058d08ce76dc801d8e11e280badd5a0c0dcf1c6285d95cc087e7f0dd823b6b7c353d22f1e7ed03c1461cc4c170e33cd06c45f17fe1af233cca638611449493d533f701d77163f6784202d995e17b797d4d2f0d87d05a00728e8fdda47c70ecf919a2a110371da3474580720e8eae934888cf84f1f1a5530baf815e7c16129732ec4af417c1be0970b845dbced563f00a86135bda35c525aa020f285116b00071858e6eacf7b124b635ff7b62410e8c27a4c76adcdec10f5180130e8c554d2d8038677650171a2f6c3da4c04e340b48df92cf41d08a499f680a2cd6ab099fcede2f8b1888aa052c7f2dffdb203e19fb1e2e6237e19b218740c89cce311ff168437500a6eec570780938c3291a19482656a8d53b19bde3d4148bf1a9f2ea67ae835df675662f27b5b6f5e2652d0471c81740acef306d9605b4ca09a2c4c0f3f8063b6fa5fe01109c5e348eb318074785771ab2cedc48d0f5e15b3a368ace5aea415aa2d566063f25571b7a218b9e95117aaf0a389284e763e448c88b49205392fe032ed206ca8e27fb1c65a72d125cc860913dabe714be1a2a85120066cad66d53dec9a30664bfdd33e25398199211b15fe0770cb243bee320e95e506be4617c3e5e6825342c769bc1da3127f8d34c922f60ed2727f5d9209fc28099ec86c29572fc7159f6ced79b0a2a2653100230a55f7a578e2f1d90f6301069ed04106de45b976f2aabe769ed17d59a53116b74fa2f598c0d1e9919ca8d9cc21265ebc218ab9808b094eebd9a48d8349cf3faeaaa7c8ddb07f6eb874f70cdfafe050de69c6e7da6c8d2f71d581d6c604f4bb29243e9d1bbcb0890b436cb43d1a33c4b96a08af4137135a8c8fe74034dcaf1581856f800771", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000f2ffffff000000850000006100000018110000", @ANYRESHEX=0x0, @ANYRES32=r5], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04ffa11b8e23930d0fe8348ffcef75bce7d9b48f6d960923cbf7a8c346b56201706e851dbb837a90da63a1a184eeadf19bed22369b13d3aabfc7e957c4b853377c27165423ff120df0a404e9ab76c7e0231ec9cc70dcb0179d4b69ba5c9c4f9fd6800966419f3f4a5ce2a688f5071b561bfc99bddc971e072ecaaa12333291f2bdb49c35059d907ce91abc39c6003f6e98cf3252d2858165ae3b67a8f3dc9339a6706880"], 0xa4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a0000050000000000fc00ff00d87a970000100010000037ab7d818c7880beaf95677040357bab7d7a05c1bb0aa6aebef67ce4b0c51100f43ed1ed9f97ec6a859d46f82853825b67c84a908adca22e7266dfd4f239a3abbb98f982f6e8d4d652b4cc9d5fdab730c023e7cf262d889069e79c3ea45584d799dfdd019bf9611c91a31edc45c2f064bf78d886991b3c7941edf04673356b94520592b962a1dab9fa4c3c9d49d87496c1ce44b6dec02025820fb3ed3cc93d3d236c016a4253136fc97ff0e7026dc95bd3fc0a8e63f7da4659261c70f15ede"], 0x22) 357.118554ms ago: executing program 0 (id=2865): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000300000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8}]}}}]}, 0x3c}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fefd, 0x8, 0x0, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r3, 0x0, &(0x7f0000000200)=""/76}, 0x20) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e010000000000000000"], 0xb) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000f2ffffff000000850000006100000018110000", @ANYRESHEX=0x0, @ANYRES32=r5], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04ffa11b8e23930d0fe8348ffcef75bce7d9b48f6d960923cbf7a8c346b56201706e851dbb837a90da63a1a184eeadf19bed22369b13d3aabfc7e957c4b853377c27165423ff120df0a404e9ab76c7e0231ec9cc70dcb0179d4b69ba5c9c4f9fd6800966419f3f4a5ce2a688f5071b561bfc99bddc971e072ecaaa12333291f2bdb49c35059d907ce91abc39c6003f6e98cf3252d2858165ae3b67a8f3dc9339a6706880"], 0xa4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a0000050000000000fc00ff00d87a970000100010000037ab7d818c7880beaf95677040357bab7d7a05c1bb0aa6aebef67ce4b0c51100f43ed1ed9f97ec6a859d46f82853825b67c84a908adca22e7266dfd4f239a3abbb98f982f6e8d4d652b4cc9d5fdab730c023e7cf262d889069e79c3ea45584d799dfdd019bf9611c91a31edc45c2f064bf78d886991b3c7941edf04673356b94520592b962a1dab9fa4c3c9d49d87496c1ce44b6dec02025820fb3ed3cc93d3d236c016a4253136fc97ff0e7026dc95bd3fc0a8e63f7da4659261c70f15ede"], 0x22) 338.245898ms ago: executing program 3 (id=2866): r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x8, [{@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001e00)=""/4100, 0x1004}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 246.278766ms ago: executing program 2 (id=2867): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r0, 0x0) preadv2(r0, &(0x7f0000002500)=[{&(0x7f0000001580)=""/193, 0xc1}], 0x1, 0x0, 0x0, 0x1c) r1 = socket(0x40000000015, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0x5}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r9}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0xf000, 0x0, 0x2, r9, 0xb}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x2, r9, 0x7}) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r10 = gettid() process_vm_writev(r10, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/217, 0xd9}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x10}]}]}}, 0x0, 0x32}, 0x20) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 245.164523ms ago: executing program 1 (id=2868): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002240)=@delchain={0x2e0, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x244, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x230, 0x6, [@m_connmark={0x174, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x99, 0x6, "91a991d04aa8cb411880b88050856c4a5b99aafe5cf70a535f4e162db7c30535ebf5e9ab54237bf6d2780785c80bcf9eae2d6d6d65f242d28d9992d8a093d12a497447bc2a6c4f73538dbca11ebb12d1c8ea001eac3246ebaf518402b88e3f2b51ce947977543e069be9c85124bbe592bd2ed79c20d83d312cd1c151c51eed4c8c8bce1d810f14cea570fce0fb771c34fdb1d1b4e7"}, {0xc}, {0xc}}}, @m_vlan={0xb8, 0x0, 0x0, 0x0, {{0x9}, {0x8c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8}]}}]}, 0x2e0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (fail_nth: 1) 0s ago: executing program 4 (id=2869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x388, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x35c, 0x3, 0x0, 0x1, [{0x358, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x350, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VALUE={0x52, 0x1, "b305710da6350aec1336b781067e700ae4a82c92c1c908dcb9a9ac0b4bc29b47505deaeb566a2b3e108c08e26c4282b7ddd2aa92bc4ad778d3b6647cecb5cd09ad23257060b94eb5c3e888eaa3ec"}, @NFTA_DATA_VALUE={0xdf, 0x1, "bbd5d1a46f03774aa11d7af75f3cf3280b2967ba7023ffcae71e260b8410d8f0b4fef97ca7d480451a670cab0eeabf179374a8c169d7cc532132039c50338e8516b98f30763ed89e3858e335857d8897d4f9f3d4b3754fab84681342f1e81da967c480c290572e4417548017225c1dddde77ccfff9e64391334d9714ee1a29d9cb6b9e93a0ce71e4a7da722bf0849f3470e94a556b0be72bdb8648bc2741ad3ee344f83ce0123152a13848378ec1b80784d79a93961b814b5688e11c7cc8feb8c7fc24e9866dee031b3877e604cd69d2f899c44206122522372021"}, @NFTA_DATA_VALUE={0xb6, 0x1, "90435f7dc98bddd60b79741a66025867417f7a3978f36ad39da58b9fa2c9adb2e01ed4918831c6e7d4e47628e6f0389815ee83bf56441af1e6ec2a8e1cb25c23e3bbcc1dfa0c820b562c6050b9dd00128e38e7182d2271b17158f618d1d1a3c3b3e3e233ebbb61c65459aada053075da7b2fd78521a49ea3fb5d2aff4d183667041fea8d4b6fd682894eba762bc6d9b93c32e606bba25b11b427a905037682a72ece7d35f8aee8b5e063c63cbc172a8e8a8f"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x40c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x20) r4 = socket(0x1000000010, 0x80002, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r7, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000007c0)={0x0, 0x0, 0x50, "2090d48e5a77e4ed299a45b85fb10b80cd6a5332fe425cad013ca71d2371bb2e951d515c49198bd05327aa51b617a9a763136c01264aad1d2a30406acecd88da17a177732b658589d961c8d20e5f91eb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/custom0\x00', 0x0, 0x0) r10 = gettid() ioctl$BINDER_GET_FROZEN_INFO(r9, 0xc00c620f, &(0x7f0000000740)={r10}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="40306000000060b6b79e5dfce9ae9f9287e0d544892059a41e42853e9232afba0b787ee90d79eeca4f2dacc8f0fa4eda50a8dde7f4b762b2c821a460bf3a98c950adec8e5b0b6d5a97a34974101650dc60de57be6312eff916ecd32e7730422e5b2f2de30a1e"], &(0x7f0000000540)={0x0, 0x3, 0x102, @string={0x102, 0x3, "cbc2c81cafd0ad4d02d3d8fb038aa0b31432b8c65c4a17ac6581fc866099db3984d1e324360fff140f1d3ed9f5c5790eae3c90cca79f1e159982f2cd0ce74aa7c529f976ad3d4d864f7ebbe0a1cd9feff1816cc6276c18394a0fce6c8a62323787dcbcd1928f99904552e0450cd90e67e5c439f24039eb5136f998265eedd61a3c7ae2d51b074ab3bcdabdf0bb1e87bc6fc1b229a2fba50ebe421d1af3000000000000009a759c610fb24d052bdd92b5d0d347e07338e4358168594982ec5d0300844977aad9880aab8c448528076a01565bb1cda6623e8fe1cddef8cd2f392d25cf4beb47967c45d0f0acd11b9467d72b8834b18660e23f4eb27b8d7faedfb1"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="002222002a4c399f9b080742000007245addcd83abcb893792af0f937023c6819313b42aa6828a31"], &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe777, 0x8, 0x1, {0x22, 0x694}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="00138d0000005b97380b6d5b14c0e376f60f13eb5f6a458bf5729c3ad582b36e4fab85084904550a37af836ef3d35dab3a33d940e7b6e22ff9c81370b90dccd897445190fbe50cee05876112b1d29d31a77b000301512829a22eebb2b93750adc11aef5ac267e7ce4f2948ae22ef32126ba915f031d638efd593a99f92ed629efa865455827f89deea96ad8b8a4cbc2ca83b20"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xfc}, &(0x7f00000003c0)=ANY=[@ANYBLOB="20010e0000004c124591fd529dc1cdf4cd666097"], &(0x7f0000000400)={0x20, 0x3, 0x1, 0x1f}}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000003f000000aa0000000033000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x184}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)={0xa4, 0x3, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x661}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_PROTOINFO={0x3c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x38, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1e}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x6}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x1}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x1d}, @CTA_PROTOINFO_DCCP_ROLE={0x5}]}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) kernel console output (not intermixed with test programs): memset+0x23/0x50 [ 1010.191957][ C1] ? skb_queue_purge_reason+0x2de/0x500 [ 1010.197521][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1010.202775][ C1] unregister_netdevice_queue+0x303/0x370 [ 1010.208561][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1010.214869][ C1] __tun_detach+0x6b6/0x1600 [ 1010.219559][ C1] tun_chr_close+0x108/0x1b0 [ 1010.224194][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 1010.229363][ C1] __fput+0x24a/0x8a0 [ 1010.233384][ C1] task_work_run+0x24f/0x310 [ 1010.237983][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1010.243131][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1010.248916][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 1010.254594][ C1] do_syscall_64+0x100/0x230 [ 1010.259253][ C1] ? clear_bhb_loop+0x35/0x90 [ 1010.263941][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.269989][ C1] RIP: 0033:0x7f165cd75a99 [ 1010.274407][ C1] RSP: 002b:00007ffe63985c68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1010.282858][ C1] RAX: 0000000000000000 RBX: 00007f165cf05a60 RCX: 00007f165cd75a99 [ 1010.290864][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1010.298866][ C1] RBP: 00007f165cf05a60 R08: 0000000000000006 R09: 0000000763985f8f [ 1010.306839][ C1] R10: 0000000000dd1384 R11: 0000000000000246 R12: 00000000000f51d5 [ 1010.314888][ C1] R13: 0000000000000032 R14: 00007f165cf05a60 R15: 00007f165cf03f60 [ 1010.322998][ C1] [ 1010.326020][ C1] DEBUG: waiting rtnl_mutex for 558 jiffies. [ 1010.332062][ C1] task:syz.1.2536 state:D stack:27360 pid:16477 tgid:16475 ppid:16013 flags:0x00000004 [ 1010.342290][ C1] Call Trace: [ 1010.345594][ C1] [ 1010.348619][ C1] __schedule+0x1800/0x4a60 [ 1010.353197][ C1] ? __pfx___schedule+0x10/0x10 [ 1010.358231][ C1] ? __pfx_lock_release+0x10/0x10 [ 1010.363298][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1010.368823][ C1] ? schedule+0x90/0x320 [ 1010.373071][ C1] schedule+0x14b/0x320 [ 1010.377232][ C1] schedule_preempt_disabled+0x13/0x30 [ 1010.382728][ C1] __mutex_lock+0x6a4/0xd70 [ 1010.387244][ C1] ? __mutex_lock+0x527/0xd70 [ 1010.391962][ C1] ? ip6_mroute_setsockopt+0x367/0x1340 [ 1010.397516][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1010.402585][ C1] ? get_rtnl_holder+0x144/0x190 [ 1010.407526][ C1] ip6_mroute_setsockopt+0x367/0x1340 [ 1010.413008][ C1] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 1010.419082][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1010.425462][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1010.430734][ C1] do_ipv6_setsockopt+0x48c/0x3630 [ 1010.435865][ C1] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1010.441479][ C1] ? __pfx_validate_chain+0x10/0x10 [ 1010.446681][ C1] ? aa_label_sk_perm+0x4f0/0x6d0 [ 1010.451752][ C1] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1010.457178][ C1] ? __pfx___might_resched+0x10/0x10 [ 1010.462591][ C1] ? __lock_acquire+0x1384/0x2050 [ 1010.467729][ C1] ? aa_sk_perm+0x967/0xab0 [ 1010.472284][ C1] ipv6_setsockopt+0x5c/0x1a0 [ 1010.476978][ C1] rawv6_setsockopt+0x327/0x740 [ 1010.482123][ C1] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1010.487594][ C1] ? aa_sock_opt_perm+0x79/0x120 [ 1010.492574][ C1] ? sock_common_setsockopt+0x37/0xc0 [ 1010.497961][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1010.503895][ C1] do_sock_setsockopt+0x3af/0x720 [ 1010.509311][ C1] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1010.514863][ C1] ? __fget_files+0x29/0x470 [ 1010.519489][ C1] ? __fget_files+0x3f6/0x470 [ 1010.524180][ C1] __sys_setsockopt+0x1ae/0x250 [ 1010.529072][ C1] __x64_sys_setsockopt+0xb5/0xd0 [ 1010.534105][ C1] do_syscall_64+0xf3/0x230 [ 1010.538669][ C1] ? clear_bhb_loop+0x35/0x90 [ 1010.543400][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.549401][ C1] RIP: 0033:0x7fd1e5575a99 [ 1010.553843][ C1] RSP: 002b:00007fd1e636b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1010.562311][ C1] RAX: ffffffffffffffda RBX: 00007fd1e5704038 RCX: 00007fd1e5575a99 [ 1010.570326][ C1] RDX: 00000000000000c8 RSI: 0000000000000029 RDI: 0000000000000004 [ 1010.578344][ C1] RBP: 00007fd1e55e4e5d R08: 000000000c000000 R09: 0000000000000000 [ 1010.586336][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1010.594343][ C1] R13: 000000000000006e R14: 00007fd1e5704038 R15: 00007fffb173ad48 [ 1010.602362][ C1] [ 1010.605383][ C1] DEBUG: waiting rtnl_mutex for 580 jiffies. [ 1010.611389][ C1] task:syz.1.2536 state:D stack:27360 pid:16478 tgid:16475 ppid:16013 flags:0x00000004 [ 1010.621633][ C1] Call Trace: [ 1010.624912][ C1] [ 1010.627849][ C1] __schedule+0x1800/0x4a60 [ 1010.632418][ C1] ? __pfx___schedule+0x10/0x10 [ 1010.637283][ C1] ? __pfx_lock_release+0x10/0x10 [ 1010.642353][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1010.647841][ C1] ? schedule+0x90/0x320 [ 1010.652139][ C1] schedule+0x14b/0x320 [ 1010.656306][ C1] schedule_preempt_disabled+0x13/0x30 [ 1010.661844][ C1] __mutex_lock+0x6a4/0xd70 [ 1010.666411][ C1] ? __mutex_lock+0x527/0xd70 [ 1010.671172][ C1] ? __tun_chr_ioctl+0x48f/0x2400 [ 1010.676247][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1010.681420][ C1] ? get_rtnl_holder+0x144/0x190 [ 1010.686416][ C1] __tun_chr_ioctl+0x48f/0x2400 [ 1010.691357][ C1] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1010.696689][ C1] ? __fget_files+0x3f6/0x470 [ 1010.701414][ C1] ? __fget_files+0x29/0x470 [ 1010.706046][ C1] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1010.711036][ C1] ? security_file_ioctl+0x87/0xb0 [ 1010.716153][ C1] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1010.721313][ C1] __se_sys_ioctl+0xfc/0x170 [ 1010.725925][ C1] do_syscall_64+0xf3/0x230 [ 1010.730507][ C1] ? clear_bhb_loop+0x35/0x90 [ 1010.735196][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.741130][ C1] RIP: 0033:0x7fd1e5575a99 [ 1010.745580][ C1] RSP: 002b:00007fd1e634a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1010.754053][ C1] RAX: ffffffffffffffda RBX: 00007fd1e5704110 RCX: 00007fd1e5575a99 [ 1010.762096][ C1] RDX: 00000000200000c0 RSI: 00000000400454ca RDI: 0000000000000008 [ 1010.770139][ C1] RBP: 00007fd1e55e4e5d R08: 0000000000000000 R09: 0000000000000000 [ 1010.778116][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1010.786158][ C1] R13: 000000000000006e R14: 00007fd1e5704110 R15: 00007fffb173ad48 [ 1010.794211][ C1] [ 1010.797239][ C1] DEBUG: waiting rtnl_mutex for 564 jiffies. [ 1010.803296][ C1] task:syz.1.2536 state:D stack:27424 pid:16479 tgid:16475 ppid:16013 flags:0x00004004 [ 1010.813537][ C1] Call Trace: [ 1010.816819][ C1] [ 1010.819786][ C1] __schedule+0x1800/0x4a60 [ 1010.824318][ C1] ? __pfx___schedule+0x10/0x10 [ 1010.829243][ C1] ? __pfx_lock_release+0x10/0x10 [ 1010.834365][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1010.839923][ C1] ? schedule+0x90/0x320 [ 1010.844184][ C1] schedule+0x14b/0x320 [ 1010.848377][ C1] schedule_preempt_disabled+0x13/0x30 [ 1010.853859][ C1] __mutex_lock+0x6a4/0xd70 [ 1010.858431][ C1] ? __mutex_lock+0x527/0xd70 [ 1010.863137][ C1] ? devinet_ioctl+0x2ce/0x1bc0 [ 1010.868020][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1010.873103][ C1] ? bpf_lsm_capable+0x9/0x10 [ 1010.877810][ C1] ? security_capable+0x90/0xb0 [ 1010.882731][ C1] ? get_rtnl_holder+0x144/0x190 [ 1010.887679][ C1] devinet_ioctl+0x2ce/0x1bc0 [ 1010.892405][ C1] ? get_user_ifreq+0x1bb/0x200 [ 1010.897270][ C1] inet_ioctl+0x3d7/0x4f0 [ 1010.901653][ C1] ? __pfx_inet_ioctl+0x10/0x10 [ 1010.906536][ C1] ? packet_ioctl+0x26b/0x350 [ 1010.911297][ C1] sock_do_ioctl+0x158/0x460 [ 1010.916031][ C1] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1010.921208][ C1] sock_ioctl+0x629/0x8e0 [ 1010.925551][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 1010.930440][ C1] ? __fget_files+0x29/0x470 [ 1010.935053][ C1] ? __fget_files+0x3f6/0x470 [ 1010.939799][ C1] ? __fget_files+0x29/0x470 [ 1010.944411][ C1] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1010.949428][ C1] ? security_file_ioctl+0x87/0xb0 [ 1010.954599][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 1010.959504][ C1] __se_sys_ioctl+0xfc/0x170 [ 1010.964112][ C1] do_syscall_64+0xf3/0x230 [ 1010.968709][ C1] ? clear_bhb_loop+0x35/0x90 [ 1010.973450][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.979411][ C1] RIP: 0033:0x7fd1e5575a99 [ 1010.983856][ C1] RSP: 002b:00007fd1e6329048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1010.992343][ C1] RAX: ffffffffffffffda RBX: 00007fd1e57041e8 RCX: 00007fd1e5575a99 [ 1011.000407][ C1] RDX: 0000000020000180 RSI: 0000000000008914 RDI: 0000000000000009 [ 1011.008430][ C1] RBP: 00007fd1e55e4e5d R08: 0000000000000000 R09: 0000000000000000 [ 1011.016428][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1011.024466][ C1] R13: 000000000000006e R14: 00007fd1e57041e8 R15: 00007fffb173ad48 [ 1011.032500][ C1] [ 1011.035523][ C1] [ 1011.035523][ C1] Showing all locks held in the system: [ 1011.043309][ C1] 3 locks held by kworker/u8:5/128: [ 1011.048543][ C1] #0: ffff88802a76c148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1011.060179][ C1] #1: ffffc90002d8fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1011.073157][ C1] #2: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1011.082953][ C1] 4 locks held by kworker/u8:7/1275: [ 1011.088278][ C1] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1011.099272][ C1] #1: ffffc900040bfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1011.109908][ C1] #2: ffffffff8f5fca50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1011.119357][ C1] #3: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 1011.129297][ C1] 2 locks held by kworker/u9:1/4496: [ 1011.134608][ C1] #0: ffff888020813148 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1011.145965][ C1] #1: ffffc9000c1cfd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1011.157824][ C1] 2 locks held by dhcpcd/4767: [ 1011.162647][ C1] #0: ffff88804900f678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x780 [ 1011.173096][ C1] #1: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x9e/0x210 [ 1011.182041][ C1] 2 locks held by getty/4860: [ 1011.186719][ C1] #0: ffff88802aaf00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1011.196529][ C1] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1011.206696][ C1] 2 locks held by kworker/u9:2/5104: [ 1011.212006][ C1] #0: ffff8880209a0948 ((wq_completion)nbd7-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1011.223283][ C1] #1: ffffc90003dc7d00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1011.235084][ C1] 2 locks held by kworker/u9:5/5110: [ 1011.240398][ C1] #0: ffff88802089b148 ((wq_completion)nbd6-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1011.251715][ C1] #1: ffffc90003e17d00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1011.263570][ C1] 2 locks held by kworker/u9:10/7607: [ 1011.268970][ C1] #0: ffff8880209a6148 ((wq_completion)nbd8-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1011.280278][ C1] #1: ffffc90003947d00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1011.292161][ C1] 2 locks held by kworker/u9:11/7955: [ 1011.297539][ C1] #0: ffff888020980948 ((wq_completion)nbd9-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1011.308807][ C1] #1: ffffc9001503fd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1011.320610][ C1] 3 locks held by syz.4.1646/12069: [ 1011.325804][ C1] #0: ffff8880663e80a8 (&ctx->uring_lock){+.+.}-{3:3}, at: __se_sys_io_uring_enter+0x1b6a/0x2670 [ 1011.336506][ C1] #1: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1011.346657][ C1] #2: ffffffff8e337aa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1011.356563][ C1] 7 locks held by syz-executor/16211: [ 1011.361972][ C1] #0: ffff8880570e8420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1011.370931][ C1] #1: ffff88802c35a888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1011.380733][ C1] #2: ffff888021b8e698 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1011.390801][ C1] #3: ffffffff8ef0b0e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1011.401151][ C1] #4: ffff8880530f00e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1011.411835][ C1] #5: ffff8880530f1250 (&devlink->lock_key#25){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1011.422080][ C1] #6: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 1011.431026][ C1] 4 locks held by syz-executor/16227: [ 1011.436389][ C1] #0: ffff8880570e8420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1011.445337][ C1] #1: ffff88806491ec88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1011.455126][ C1] #2: ffff888021b8e698 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1011.465194][ C1] #3: ffffffff8ef0b0e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1011.475552][ C1] 1 lock held by syz-executor/16328: [ 1011.480919][ C1] #0: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 1011.490437][ C1] 2 locks held by syz.2.2535/16465: [ 1011.495633][ C1] #0: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1011.504660][ C1] #1: ffffffff8e33ce78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1011.515618][ C1] 1 lock held by syz.1.2536/16477: [ 1011.520765][ C1] #0: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: ip6_mroute_setsockopt+0x367/0x1340 [ 1011.530648][ C1] 1 lock held by syz.1.2536/16478: [ 1011.535763][ C1] #0: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48f/0x2400 [ 1011.545124][ C1] 1 lock held by syz.1.2536/16479: [ 1011.550259][ C1] #0: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 1011.559462][ C1] [ 1011.561784][ C1] ============================================= [ 1011.561784][ C1] [ 1012.578311][ C1] DEBUG: waiting rtnl_mutex for 528 jiffies. [ 1012.584443][ C1] task:kworker/u8:5 state:D stack:19728 pid:128 tgid:128 ppid:2 flags:0x00004000 [ 1012.594718][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 1012.600824][ C1] Call Trace: [ 1012.604144][ C1] [ 1012.607114][ C1] __schedule+0x1800/0x4a60 [ 1012.611737][ C1] ? __pfx___schedule+0x10/0x10 [ 1012.616631][ C1] ? __pfx_lock_release+0x10/0x10 [ 1012.621748][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1012.627249][ C1] ? kthread_data+0x52/0xd0 [ 1012.631829][ C1] ? schedule+0x90/0x320 [ 1012.636103][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1012.641294][ C1] ? schedule+0x90/0x320 [ 1012.645574][ C1] schedule+0x14b/0x320 [ 1012.649813][ C1] schedule_preempt_disabled+0x13/0x30 [ 1012.655312][ C1] __mutex_lock+0x6a4/0xd70 [ 1012.659893][ C1] ? mark_lock+0x9a/0x360 [ 1012.664268][ C1] ? __mutex_lock+0x527/0xd70 [ 1012.669048][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 1012.674201][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1012.679327][ C1] ? get_rtnl_holder+0x144/0x190 [ 1012.684301][ C1] addrconf_dad_work+0xd0/0x16f0 [ 1012.689331][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1012.694834][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1012.701257][ C1] ? process_scheduled_works+0x945/0x1830 [ 1012.707024][ C1] process_scheduled_works+0xa2c/0x1830 [ 1012.712689][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1012.718776][ C1] ? assign_work+0x364/0x3d0 [ 1012.723410][ C1] worker_thread+0x86d/0xd40 [ 1012.728069][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1012.734086][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1012.739206][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1012.744361][ C1] kthread+0x2f0/0x390 [ 1012.748504][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1012.753661][ C1] ? __pfx_kthread+0x10/0x10 [ 1012.758318][ C1] ret_from_fork+0x4b/0x80 [ 1012.762775][ C1] ? __pfx_kthread+0x10/0x10 [ 1012.767403][ C1] ret_from_fork_asm+0x1a/0x30 [ 1012.772279][ C1] [ 1012.775680][ C1] DEBUG: holding rtnl_mutex for 632 jiffies. [ 1012.781740][ C1] task:syz-executor state:D stack:21728 pid:16211 tgid:16211 ppid:16204 flags:0x00004002 [ 1012.792015][ C1] Call Trace: [ 1012.795328][ C1] [ 1012.798320][ C1] __schedule+0x1800/0x4a60 [ 1012.802901][ C1] ? __pfx___schedule+0x10/0x10 [ 1012.807798][ C1] ? __pfx_lock_release+0x10/0x10 [ 1012.812919][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1012.818921][ C1] ? schedule+0x90/0x320 [ 1012.823208][ C1] schedule+0x14b/0x320 [ 1012.827410][ C1] synchronize_rcu_expedited+0x684/0x830 [ 1012.833140][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1012.839426][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1012.844758][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1012.850924][ C1] ? __pfx___might_resched+0x10/0x10 [ 1012.856292][ C1] dev_deactivate_many+0x4a7/0xb10 [ 1012.861513][ C1] __dev_close_many+0x1a4/0x300 [ 1012.866421][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1012.872859][ C1] ? __pfx___dev_close_many+0x10/0x10 [ 1012.878321][ C1] ? mark_lock+0x9a/0x360 [ 1012.882709][ C1] dev_close_many+0x24e/0x4c0 [ 1012.887454][ C1] ? __pfx_dev_close_many+0x10/0x10 [ 1012.892786][ C1] unregister_netdevice_many_notify+0x50b/0x1c40 [ 1012.899247][ C1] ? __mutex_lock+0x99b/0xd70 [ 1012.903993][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1012.910843][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 1012.915923][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1012.921258][ C1] ? __mutex_lock+0x9a5/0xd70 [ 1012.926080][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1012.931389][ C1] ? __mutex_lock+0x527/0xd70 [ 1012.936128][ C1] unregister_netdevice_queue+0x303/0x370 [ 1012.941955][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1012.948305][ C1] nsim_destroy+0x180/0x5c0 [ 1012.952920][ C1] __nsim_dev_port_del+0x14b/0x1b0 [ 1012.958101][ C1] nsim_dev_reload_destroy+0x28a/0x490 [ 1012.963666][ C1] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1012.969038][ C1] nsim_drv_remove+0x58/0x160 [ 1012.973764][ C1] device_release_driver_internal+0x4a9/0x7c0 [ 1012.979933][ C1] bus_remove_device+0x34f/0x420 [ 1012.984929][ C1] device_del+0x57a/0x9b0 [ 1012.989358][ C1] ? __pfx_device_del+0x10/0x10 [ 1012.994264][ C1] device_unregister+0x20/0xc0 [ 1012.999114][ C1] del_device_store+0x363/0x480 [ 1013.004018][ C1] ? __pfx_del_device_store+0x10/0x10 [ 1013.009486][ C1] ? sysfs_kf_write+0x182/0x2a0 [ 1013.014385][ C1] ? bus_attr_store+0x4f/0xa0 [ 1013.019154][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1013.024403][ C1] kernfs_fop_write_iter+0x3a1/0x500 [ 1013.029789][ C1] vfs_write+0xa72/0xc90 [ 1013.034085][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1013.039976][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1013.044809][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1013.050181][ C1] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 1013.056302][ C1] ksys_write+0x1a0/0x2c0 [ 1013.060745][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1013.065646][ C1] ? do_syscall_64+0x100/0x230 [ 1013.070508][ C1] ? do_syscall_64+0xb6/0x230 [ 1013.075236][ C1] do_syscall_64+0xf3/0x230 [ 1013.079833][ C1] ? clear_bhb_loop+0x35/0x90 [ 1013.084553][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.090531][ C1] RIP: 0033:0x7f61ac97461f [ 1013.094988][ C1] RSP: 002b:00007ffd2d75e1c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1013.103494][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f61ac97461f [ 1013.111551][ C1] RDX: 0000000000000001 RSI: 00007ffd2d75e210 RDI: 0000000000000005 [ 1013.119629][ C1] RBP: 00007f61ac9e45b2 R08: 0000000000000000 R09: 00007ffd2d75e017 [ 1013.127638][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1013.135707][ C1] R13: 00007ffd2d75e210 R14: 00007f61ad634620 R15: 0000000000000003 [ 1013.143800][ C1] [ 1013.146850][ C1] DEBUG: waiting rtnl_mutex for 662 jiffies. [ 1013.152898][ C1] task:kworker/u8:7 state:D stack:20944 pid:1275 tgid:1275 ppid:2 flags:0x00004000 [ 1013.163187][ C1] Workqueue: netns cleanup_net [ 1013.168003][ C1] Call Trace: [ 1013.171367][ C1] [ 1013.174336][ C1] __schedule+0x1800/0x4a60 [ 1013.178949][ C1] ? __pfx___schedule+0x10/0x10 [ 1013.183845][ C1] ? __pfx_lock_release+0x10/0x10 [ 1013.188964][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 1013.194465][ C1] ? kthread_data+0x52/0xd0 [ 1013.199050][ C1] ? schedule+0x90/0x320 [ 1013.203340][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1013.208545][ C1] ? schedule+0x90/0x320 [ 1013.212850][ C1] schedule+0x14b/0x320 [ 1013.217059][ C1] schedule_preempt_disabled+0x13/0x30 [ 1013.222618][ C1] __mutex_lock+0x6a4/0xd70 [ 1013.227176][ C1] ? __mutex_lock+0x527/0xd70 [ 1013.231938][ C1] ? ieee80211_unregister_hw+0x55/0x2c0 [ 1013.237524][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1013.242633][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1013.248611][ C1] ? rcu_is_watching+0x15/0xb0 [ 1013.253413][ C1] ? get_rtnl_holder+0x144/0x190 [ 1013.258423][ C1] ieee80211_unregister_hw+0x55/0x2c0 [ 1013.263841][ C1] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 1013.269478][ C1] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1013.275611][ C1] hwsim_exit_net+0x5c1/0x670 [ 1013.280386][ C1] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1013.285631][ C1] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 1013.291519][ C1] cleanup_net+0x802/0xcc0 [ 1013.295992][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1013.301018][ C1] ? process_scheduled_works+0x945/0x1830 [ 1013.306779][ C1] process_scheduled_works+0xa2c/0x1830 [ 1013.312457][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1013.318541][ C1] ? assign_work+0x364/0x3d0 [ 1013.323203][ C1] worker_thread+0x86d/0xd40 [ 1013.327862][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1013.333000][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1013.338166][ C1] kthread+0x2f0/0x390 [ 1013.342308][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1013.347460][ C1] ? __pfx_kthread+0x10/0x10 [ 1013.352130][ C1] ret_from_fork+0x4b/0x80 [ 1013.356594][ C1] ? __pfx_kthread+0x10/0x10 [ 1013.361259][ C1] ret_from_fork_asm+0x1a/0x30 [ 1013.366085][ C1] [ 1013.369179][ C1] [ 1013.369179][ C1] Showing all locks held in the system: [ 1013.376925][ C1] 2 locks held by kworker/u8:0/11: [ 1013.382130][ C1] 3 locks held by kworker/u8:5/128: [ 1013.387368][ C1] #0: ffff88802a76c148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1013.399076][ C1] #1: ffffc90002d8fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1013.412072][ C1] #2: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1013.421566][ C1] 4 locks held by kworker/u8:7/1275: [ 1013.426868][ C1] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1013.437862][ C1] #1: ffffc900040bfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1013.448447][ C1] #2: ffffffff8f5fca50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1013.457866][ C1] #3: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 1013.467809][ C1] 2 locks held by kworker/u9:1/4496: [ 1013.473141][ C1] #0: ffff888020813148 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1013.484420][ C1] #1: ffffc9000c1cfd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1013.496236][ C1] 2 locks held by dhcpcd/4767: [ 1013.501026][ C1] #0: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 1013.511189][ C1] #1: ffffffff8e337aa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1013.521085][ C1] 2 locks held by getty/4860: [ 1013.525774][ C1] #0: ffff88802aaf00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1013.535635][ C1] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1013.545824][ C1] 2 locks held by kworker/u9:2/5104: [ 1013.551134][ C1] #0: ffff8880209a0948 ((wq_completion)nbd7-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1013.562421][ C1] #1: ffffc90003dc7d00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1013.574243][ C1] 2 locks held by kworker/u9:5/5110: [ 1013.579615][ C1] #0: ffff88802089b148 ((wq_completion)nbd6-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1013.591332][ C1] #1: ffffc90003e17d00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1013.603135][ C1] 2 locks held by kworker/u9:10/7607: [ 1013.608532][ C1] #0: ffff8880209a6148 ((wq_completion)nbd8-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1013.619812][ C1] #1: ffffc90003947d00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1013.631639][ C1] 2 locks held by kworker/u9:11/7955: [ 1013.637094][ C1] #0: ffff888020980948 ((wq_completion)nbd9-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1013.648380][ C1] #1: ffffc9001503fd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1013.660200][ C1] 5 locks held by kworker/u8:11/10420: [ 1013.665673][ C1] 1 lock held by syz.4.1646/12069: [ 1013.670834][ C1] 3 locks held by kworker/1:6/13447: [ 1013.676118][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1013.687142][ C1] #1: ffffc900042ffd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1013.698768][ C1] #2: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1013.707844][ C1] 8 locks held by syz-executor/16211: [ 1013.713420][ C1] #0: ffff8880570e8420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1013.722363][ C1] #1: ffff88802c35a888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1013.732268][ C1] #2: ffff888021b8e698 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1013.742381][ C1] #3: ffffffff8ef0b0e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1013.752731][ C1] #4: ffff8880530f00e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1013.763341][ C1] #5: ffff8880530f1250 (&devlink->lock_key#25){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1013.773552][ C1] #6: ffffffff8f6095c8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 1013.782506][ C1] #7: ffffffff8e33ce78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1013.793446][ C1] 4 locks held by syz-executor/16227: [ 1013.798845][ C1] #0: ffff8880570e8420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1013.807768][ C1] #1: ffff88806491ec88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1013.817597][ C1] #2: ffff888021b8e698 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1013.827678][ C1] #3: ffffffff8ef0b0e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1013.838011][ C1] [ 1013.840394][ C1] ============================================= [ 1013.840394][ C1] [ 1013.995804][T16490] sctp: [Deprecated]: syz.1.2539 (pid 16490) Use of int in maxseg socket option. [ 1013.995804][T16490] Use struct sctp_assoc_value instead [ 1015.524322][ T1275] hsr_slave_0: left promiscuous mode [ 1015.549110][ T1275] hsr_slave_1: left promiscuous mode [ 1015.561437][ T1275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1015.577498][ T1275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.616466][ T1275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1015.628944][ T1275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.644253][ T1275] hsr_slave_0: left promiscuous mode [ 1015.667892][ T1275] hsr_slave_1: left promiscuous mode [ 1015.680573][ T1275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.689067][ T1275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.755649][ T1275] veth1_macvtap: left promiscuous mode [ 1015.771053][ T1275] veth0_macvtap: left promiscuous mode [ 1015.787904][ T1275] veth1_vlan: left promiscuous mode [ 1015.799133][ T1275] veth0_vlan: left promiscuous mode [ 1016.942141][ T1275] team0 (unregistering): Port device team_slave_1 removed [ 1017.054103][ T1275] team0 (unregistering): Port device team_slave_0 removed [ 1018.425928][ T1275] team0 (unregistering): Port device team_slave_1 removed [ 1018.482140][ T1275] team0 (unregistering): Port device team_slave_0 removed [ 1018.984829][T16502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.992094][T16502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.808685][T16211] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1019.836848][T16211] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1020.162437][T16211] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1020.210633][T16211] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1021.458948][ T5108] Bluetooth: hci13: command tx timeout [ 1021.961842][T16568] sctp: [Deprecated]: syz.1.2549 (pid 16568) Use of int in maxseg socket option. [ 1021.961842][T16568] Use struct sctp_assoc_value instead [ 1022.295775][T16211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1022.325379][T16211] 8021q: adding VLAN 0 to HW filter on device team0 [ 1022.346795][ T6305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.354169][ T6305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1022.448857][ T6305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.456043][ T6305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1022.927724][T16227] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1022.980791][T16227] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1023.043437][T16227] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1023.101493][T16227] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1023.378731][ T5108] Bluetooth: hci13: Controller not accepting commands anymore: ncmd = 0 [ 1023.387967][ T5108] Bluetooth: hci13: Injecting HCI hardware error event [ 1023.390276][T16328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1023.398476][ T5108] Bluetooth: hci13: hardware error 0x00 [ 1023.452882][T16328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1023.578760][T16328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1023.634159][T16328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1023.724491][T16211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.922589][T16227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.086539][T16211] veth0_vlan: entered promiscuous mode [ 1024.147874][T16227] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.194248][T16211] veth1_vlan: entered promiscuous mode [ 1024.243339][T12919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.250596][T12919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.315780][T12919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.323121][T12919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.634661][T16211] veth0_macvtap: entered promiscuous mode [ 1024.727136][T16211] veth1_macvtap: entered promiscuous mode [ 1024.797470][T16328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.821842][T16602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2551'. [ 1025.022837][T16328] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.060348][T16211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.108305][T16211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.133066][T16211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.168854][T16211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.201298][T16211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.238424][T16211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.249006][T16211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.275101][T16211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.285471][T16211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.317345][T16211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.338578][T16211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.367440][T16211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.409185][T16211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.448257][T16211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.461647][ T5108] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 1025.476526][T16211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.511330][T16211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.538597][T16211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.578312][T16211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.600414][T16211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.646419][T13447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.653775][T13447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.706029][T16211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.748907][T16211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.779519][T16211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.808299][T16211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.808348][ T6305] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1025.841568][T16211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.868290][T16211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.888554][T16211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.912240][T16211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.926749][T16211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.937436][T16211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.949937][T16211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.960460][T16211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.970360][T16211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.981458][T16211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.991387][T16211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.011251][T16211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.033999][T16211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.051438][ T6305] usb 3-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=72.93 [ 1026.064587][ T6305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.073033][T16211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.109226][ T6305] usb 3-1: config 0 descriptor?? [ 1026.117338][T16211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.131955][ T6305] upd78f0730 3-1:0.0: upd78f0730 converter detected [ 1026.163586][ T4639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.170890][ T4639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.179363][ T6305] usb 3-1: upd78f0730 converter now attached to ttyUSB0 [ 1026.253203][T16211] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.278478][T16211] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.287344][T16211] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.348813][T16211] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.549123][T16227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.858986][T10420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.900462][T10420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.036569][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.097012][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.404487][T16328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.523789][T16636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2508'. [ 1027.807323][T16227] veth0_vlan: entered promiscuous mode [ 1027.842499][T16328] veth0_vlan: entered promiscuous mode [ 1027.882501][T16227] veth1_vlan: entered promiscuous mode [ 1027.990739][T16328] veth1_vlan: entered promiscuous mode [ 1028.185714][ T8] usb 3-1: USB disconnect, device number 36 [ 1028.190110][T16227] veth0_macvtap: entered promiscuous mode [ 1028.223852][ T8] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 1028.292180][T16328] veth0_macvtap: entered promiscuous mode [ 1028.325869][ T8] upd78f0730 3-1:0.0: device disconnected [ 1028.368524][T16227] veth1_macvtap: entered promiscuous mode [ 1028.438147][T16328] veth1_macvtap: entered promiscuous mode [ 1028.646172][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.858375][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.884136][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.897826][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.909515][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.946572][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.976456][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.024040][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.043489][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.057676][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.068879][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.079647][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.094719][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.116428][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.139609][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.150467][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.160659][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.176890][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.187547][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.201045][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.265902][T16227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1029.339653][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.373941][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.403614][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.442717][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.466332][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.489215][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.511663][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.533975][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.565993][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.606998][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.646693][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.680742][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.717990][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.754468][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.788622][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.816694][T16681] sctp: [Deprecated]: syz.2.2562 (pid 16681) Use of int in maxseg socket option. [ 1029.816694][T16681] Use struct sctp_assoc_value instead [ 1029.824069][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.868944][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.893278][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.921814][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.949098][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.004052][T16227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.200351][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.298397][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.332543][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.373200][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.420066][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.448535][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.468313][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.504619][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.552820][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.588342][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.614470][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.848531][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.164019][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.207975][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.228279][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.278400][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.313630][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.350852][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.413371][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.458756][ T8] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1031.461808][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.527390][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.570345][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.615539][T16328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.695904][ T8] usb 4-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=e6.01 [ 1031.721275][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.759326][ T8] usb 4-1: Product: syz [ 1031.763557][ T8] usb 4-1: Manufacturer: syz [ 1031.788238][ T8] usb 4-1: SerialNumber: syz [ 1031.829053][ T8] usb 4-1: config 0 descriptor?? [ 1031.842229][ T8] usb 4-1: Found UVC 0.00 device syz (1bcf:0b40) [ 1031.873948][ T8] usb 4-1: Forcing UVC version to 1.0a [ 1031.891907][T16227] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.901367][ T8] usb 4-1: No valid video chain found. [ 1031.939331][T16227] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.948109][T16227] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.001921][T16227] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.044042][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.081136][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.111285][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.148385][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.198621][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.221594][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.258470][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.298273][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.331773][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.371948][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.408345][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.437548][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.478254][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.518256][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.561786][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.608273][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.642756][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.681384][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.701613][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.732644][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.765105][T16328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.816498][T16328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.845107][T16328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.951784][T16328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.987081][T16328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.016589][T16328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.047054][T16328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.535414][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.571500][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.733561][T12919] usb 4-1: USB disconnect, device number 56 [ 1033.819106][T13673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.853365][T13673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.963262][T13673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.988335][T13673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.094265][T10420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.148349][T10420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.518884][T16737] binder: 16707:16737 ioctl 4018620d 0 returned -22 [ 1036.994987][T16766] loop0: detected capacity change from 0 to 1024 [ 1037.088402][ T928] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1037.172550][T16766] loop0: detected capacity change from 0 to 2048 [ 1037.291041][ T928] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1037.319597][T16766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1037.342300][ T928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.345938][T16766] EXT4-fs error (device loop0): ext4_find_dest_de:2067: inode #2: block 16: comm syz.0.2573: bad entry in directory: inode out of bounds - offset=92, inode=65536, rec_len=16, size=2048 fake=0 [ 1037.370998][ T928] usb 3-1: config 0 descriptor?? [ 1037.390338][ T928] cp210x 3-1:0.0: cp210x converter detected [ 1037.574724][T16328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.139604][T16761] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2571'. [ 1038.528507][ T928] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1038.616116][ T928] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1039.045903][ T928] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1039.079021][T16778] sctp: [Deprecated]: syz.0.2575 (pid 16778) Use of int in maxseg socket option. [ 1039.079021][T16778] Use struct sctp_assoc_value instead [ 1039.145867][ T928] usb 3-1: USB disconnect, device number 37 [ 1039.191528][ T928] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1039.211969][ T928] cp210x 3-1:0.0: device disconnected [ 1040.058419][ T928] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1040.104611][T16806] loop0: detected capacity change from 0 to 1024 [ 1040.166307][T16806] loop0: detected capacity change from 0 to 2048 [ 1040.199526][T16806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1040.248580][ T928] usb 4-1: Using ep0 maxpacket: 16 [ 1040.271551][ T928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1040.291331][ T928] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1040.309761][ T928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.336807][ T928] usb 4-1: config 0 descriptor?? [ 1040.338943][T16806] EXT4-fs error (device loop0): ext4_find_dest_de:2067: inode #2: block 16: comm syz.0.2585: bad entry in directory: inode out of bounds - offset=92, inode=65536, rec_len=16, size=2048 fake=0 [ 1040.625293][T16328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.772691][T16819] FAULT_INJECTION: forcing a failure. [ 1040.772691][T16819] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.786180][T16819] CPU: 1 UID: 0 PID: 16819 Comm: syz.2.2589 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 1040.796136][T16819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1040.806203][T16819] Call Trace: [ 1040.809487][T16819] [ 1040.812433][T16819] dump_stack_lvl+0x241/0x360 [ 1040.817153][T16819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1040.822374][T16819] ? __pfx__printk+0x10/0x10 [ 1040.826987][T16819] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 1040.832571][T16819] ? __pfx___might_resched+0x10/0x10 [ 1040.837873][T16819] should_fail_ex+0x3b0/0x4e0 [ 1040.842600][T16819] ? getname_flags+0xb7/0x540 [ 1040.847320][T16819] should_failslab+0xac/0x100 [ 1040.852032][T16819] ? getname_flags+0xb7/0x540 [ 1040.856716][T16819] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1040.862118][T16819] getname_flags+0xb7/0x540 [ 1040.866646][T16819] ? __fget_files+0x3f6/0x470 [ 1040.871459][T16819] user_path_at+0x24/0x60 [ 1040.875826][T16819] do_setxattrat+0x112/0x300 [ 1040.880449][T16819] ? __pfx_do_setxattrat+0x10/0x10 [ 1040.885608][T16819] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1040.891633][T16819] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1040.897994][T16819] __x64_sys_setxattr+0xbc/0xe0 [ 1040.902862][T16819] do_syscall_64+0xf3/0x230 [ 1040.907381][T16819] ? clear_bhb_loop+0x35/0x90 [ 1040.912071][T16819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.918042][T16819] RIP: 0033:0x7f165cd75a99 [ 1040.922553][T16819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1040.942173][T16819] RSP: 002b:00007f165db4d048 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1040.950603][T16819] RAX: ffffffffffffffda RBX: 00007f165cf04038 RCX: 00007f165cd75a99 [ 1040.958583][T16819] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000100 [ 1040.966587][T16819] RBP: 00007f165db4d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1040.974577][T16819] R10: 0000000000000039 R11: 0000000000000246 R12: 0000000000000001 [ 1040.982567][T16819] R13: 000000000000006e R14: 00007f165cf04038 R15: 00007ffe63985b88 [ 1040.990566][T16819] [ 1042.074668][T16834] FAULT_INJECTION: forcing a failure. [ 1042.074668][T16834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1042.182357][T16834] CPU: 0 UID: 0 PID: 16834 Comm: syz.4.2592 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 1042.192324][T16834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1042.202418][T16834] Call Trace: [ 1042.205730][T16834] [ 1042.208686][T16834] dump_stack_lvl+0x241/0x360 [ 1042.213419][T16834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1042.218678][T16834] ? __pfx__printk+0x10/0x10 [ 1042.223318][T16834] ? __pfx_lock_release+0x10/0x10 [ 1042.228381][T16834] ? vfs_write+0x7c4/0xc90 [ 1042.232840][T16834] should_fail_ex+0x3b0/0x4e0 [ 1042.237581][T16834] _copy_from_user+0x2f/0xe0 [ 1042.242263][T16834] __sys_bpf+0x1a4/0x810 [ 1042.246561][T16834] ? __pfx___sys_bpf+0x10/0x10 [ 1042.251378][T16834] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1042.257399][T16834] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1042.263766][T16834] ? do_syscall_64+0x100/0x230 [ 1042.268594][T16834] __x64_sys_bpf+0x7c/0x90 [ 1042.273041][T16834] do_syscall_64+0xf3/0x230 [ 1042.277574][T16834] ? clear_bhb_loop+0x35/0x90 [ 1042.282287][T16834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.288202][T16834] RIP: 0033:0x7fad16775a99 [ 1042.292644][T16834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1042.312288][T16834] RSP: 002b:00007fad174d1048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1042.320774][T16834] RAX: ffffffffffffffda RBX: 00007fad16903f60 RCX: 00007fad16775a99 [ 1042.328767][T16834] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 1042.336778][T16834] RBP: 00007fad174d10a0 R08: 0000000000000000 R09: 0000000000000000 [ 1042.344780][T16834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.352779][T16834] R13: 000000000000000b R14: 00007fad16903f60 R15: 00007fff9eb48288 [ 1042.360792][T16834] [ 1043.555878][T16845] sctp: [Deprecated]: syz.0.2597 (pid 16845) Use of int in maxseg socket option. [ 1043.555878][T16845] Use struct sctp_assoc_value instead [ 1043.911352][ T928] usbhid 4-1:0.0: can't add hid device: -71 [ 1043.932206][ T928] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1043.999013][ T928] usb 4-1: USB disconnect, device number 57 [ 1044.186869][T16854] FAULT_INJECTION: forcing a failure. [ 1044.186869][T16854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1044.226275][T16854] CPU: 0 UID: 0 PID: 16854 Comm: syz.0.2599 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 1044.236249][T16854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1044.246347][T16854] Call Trace: [ 1044.249659][T16854] [ 1044.252617][T16854] dump_stack_lvl+0x241/0x360 [ 1044.257344][T16854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1044.262590][T16854] ? __pfx__printk+0x10/0x10 [ 1044.267225][T16854] ? __pfx_lock_release+0x10/0x10 [ 1044.272329][T16854] ? vfs_write+0x7c4/0xc90 [ 1044.276804][T16854] should_fail_ex+0x3b0/0x4e0 [ 1044.281551][T16854] _copy_from_user+0x2f/0xe0 [ 1044.286268][T16854] __sys_bpf+0x1a4/0x810 [ 1044.290557][T16854] ? __pfx___sys_bpf+0x10/0x10 [ 1044.295390][T16854] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1044.301414][T16854] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1044.307780][T16854] ? do_syscall_64+0x100/0x230 [ 1044.312593][T16854] __x64_sys_bpf+0x7c/0x90 [ 1044.317045][T16854] do_syscall_64+0xf3/0x230 [ 1044.321591][T16854] ? clear_bhb_loop+0x35/0x90 [ 1044.326312][T16854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.332243][T16854] RIP: 0033:0x7fccf7775a99 [ 1044.336684][T16854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.356328][T16854] RSP: 002b:00007fccf8548048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1044.364804][T16854] RAX: ffffffffffffffda RBX: 00007fccf7903f60 RCX: 00007fccf7775a99 [ 1044.372826][T16854] RDX: 0000000000000090 RSI: 0000000020000100 RDI: 0000000000000005 [ 1044.380850][T16854] RBP: 00007fccf85480a0 R08: 0000000000000000 R09: 0000000000000000 [ 1044.388963][T16854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1044.396963][T16854] R13: 000000000000000b R14: 00007fccf7903f60 R15: 00007ffcc559dd18 [ 1044.404998][T16854] [ 1045.488799][T16869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1045.515410][T16868] loop0: detected capacity change from 0 to 1024 [ 1047.722342][T16881] netlink: 'syz.3.2606': attribute type 14 has an invalid length. [ 1048.150841][T16887] sctp: [Deprecated]: syz.0.2609 (pid 16887) Use of int in maxseg socket option. [ 1048.150841][T16887] Use struct sctp_assoc_value instead [ 1048.448229][T16894] FAULT_INJECTION: forcing a failure. [ 1048.448229][T16894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1048.461781][T16894] CPU: 0 UID: 0 PID: 16894 Comm: syz.2.2611 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 1048.471708][T16894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1048.481786][T16894] Call Trace: [ 1048.485089][T16894] [ 1048.488043][T16894] dump_stack_lvl+0x241/0x360 [ 1048.492767][T16894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1048.498014][T16894] ? __pfx__printk+0x10/0x10 [ 1048.502656][T16894] ? vfs_write+0x7c4/0xc90 [ 1048.507140][T16894] should_fail_ex+0x3b0/0x4e0 [ 1048.511866][T16894] _copy_from_user+0x2f/0xe0 [ 1048.516493][T16894] move_addr_to_kernel+0x82/0x150 [ 1048.521559][T16894] __sys_connect+0xc1/0x310 [ 1048.526092][T16894] ? __pfx___sys_connect+0x10/0x10 [ 1048.531247][T16894] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1048.537612][T16894] ? do_syscall_64+0x100/0x230 [ 1048.542420][T16894] __x64_sys_connect+0x7a/0x90 [ 1048.547224][T16894] do_syscall_64+0xf3/0x230 [ 1048.551791][T16894] ? clear_bhb_loop+0x35/0x90 [ 1048.556504][T16894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.562435][T16894] RIP: 0033:0x7f165cd75a99 [ 1048.566877][T16894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1048.586518][T16894] RSP: 002b:00007f165db2c048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1048.594973][T16894] RAX: ffffffffffffffda RBX: 00007f165cf04110 RCX: 00007f165cd75a99 [ 1048.602973][T16894] RDX: 0000000000000010 RSI: 00000000200000c0 RDI: 0000000000000009 [ 1048.610970][T16894] RBP: 00007f165db2c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1048.618967][T16894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1048.626965][T16894] R13: 000000000000006e R14: 00007f165cf04110 R15: 00007ffe63985b88 [ 1048.634991][T16894] [ 1049.272128][T16905] loop0: detected capacity change from 0 to 256 [ 1049.289346][T16905] vfat: Unknown parameter 'nmnumtail' [ 1049.330390][T16906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.337635][T16906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.494060][T16906] team_slave_0: entered promiscuous mode [ 1049.500509][T16906] team_slave_1: entered promiscuous mode [ 1049.565321][T16906] team_slave_0: left promiscuous mode [ 1049.571031][T16906] team_slave_1: left promiscuous mode [ 1050.436108][T16913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2614'. [ 1050.445326][T16913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2614'. [ 1050.796668][T16909] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2616'. [ 1051.084127][T16919] netlink: 'syz.0.2618': attribute type 14 has an invalid length. [ 1052.943286][T16940] fuse: Unknown parameter ' [ 1052.943286][T16940] ÿÿÿÿ18446744073709551615' [ 1053.804360][T16960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2629'. [ 1054.107568][T16966] vhci_hcd: invalid port number 253 [ 1054.135678][T16966] vhci_hcd: default hub control req: 2012 v02fe i00fd l0 [ 1054.845050][T16983] netlink: 'syz.1.2634': attribute type 14 has an invalid length. [ 1054.977043][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.983845][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.268391][T17016] usb usb8: usbfs: process 17016 (syz.0.2640) did not claim interface 0 before use [ 1057.868976][T17018] FAULT_INJECTION: forcing a failure. [ 1057.868976][T17018] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.881868][T17018] CPU: 1 UID: 0 PID: 17018 Comm: syz.3.2642 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 1057.891802][T17018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1057.901880][T17018] Call Trace: [ 1057.905178][T17018] [ 1057.908151][T17018] dump_stack_lvl+0x241/0x360 [ 1057.912880][T17018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1057.918127][T17018] ? __pfx__printk+0x10/0x10 [ 1057.922764][T17018] ? fs_reclaim_acquire+0x93/0x140 [ 1057.927908][T17018] ? __pfx___might_resched+0x10/0x10 [ 1057.933228][T17018] should_fail_ex+0x3b0/0x4e0 [ 1057.937949][T17018] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1057.943704][T17018] should_failslab+0xac/0x100 [ 1057.948416][T17018] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1057.954172][T17018] __kmalloc_noprof+0xd8/0x400 [ 1057.958966][T17018] ? kfree+0x4e/0x360 [ 1057.962997][T17018] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1057.968594][T17018] tomoyo_path_number_perm+0x23a/0x880 [ 1057.974122][T17018] ? tomoyo_path_number_perm+0x208/0x880 [ 1057.979815][T17018] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1057.985896][T17018] ? __fget_files+0x29/0x470 [ 1057.990530][T17018] ? __fget_files+0x3f6/0x470 [ 1057.995240][T17018] ? __fget_files+0x29/0x470 [ 1057.999864][T17018] security_file_ioctl+0x75/0xb0 [ 1058.004839][T17018] __se_sys_ioctl+0x47/0x170 [ 1058.009468][T17018] do_syscall_64+0xf3/0x230 [ 1058.014007][T17018] ? clear_bhb_loop+0x35/0x90 [ 1058.018714][T17018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.024637][T17018] RIP: 0033:0x7f61ac975a99 [ 1058.029079][T17018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.048893][T17018] RSP: 002b:00007f61ad77d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1058.057358][T17018] RAX: ffffffffffffffda RBX: 00007f61acb04110 RCX: 00007f61ac975a99 [ 1058.065442][T17018] RDX: 0000000020000340 RSI: 00000000c0105502 RDI: 0000000000000005 [ 1058.073446][T17018] RBP: 00007f61ad77d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1058.081444][T17018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.089439][T17018] R13: 000000000000006e R14: 00007f61acb04110 R15: 00007ffd2d75ea18 [ 1058.097458][T17018] [ 1058.104888][T17018] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1058.111699][T17018] usb usb8: usbfs: process 17018 (syz.3.2642) did not claim interface 0 before use [ 1059.231645][T17031] netlink: 'syz.0.2645': attribute type 14 has an invalid length. [ 1060.138357][T16009] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1060.353880][T17052] loop0: detected capacity change from 0 to 2048 [ 1060.369436][T16009] usb 4-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=e6.01 [ 1060.408236][T16009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.448371][T16009] usb 4-1: Product: syz [ 1060.488916][T16009] usb 4-1: Manufacturer: syz [ 1060.538248][T16009] usb 4-1: SerialNumber: syz [ 1060.576017][T16009] usb 4-1: config 0 descriptor?? [ 1060.617227][T16009] usb 4-1: Found UVC 0.00 device syz (1bcf:0b40) [ 1060.650031][T16009] usb 4-1: Forcing UVC version to 1.0a [ 1060.674238][T16009] usb 4-1: No valid video chain found. [ 1060.694511][T17059] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1060.784500][T17052] FAULT_INJECTION: forcing a failure. [ 1060.784500][T17052] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1060.832792][ T928] usb 4-1: USB disconnect, device number 58 [ 1060.850850][T17052] CPU: 1 UID: 0 PID: 17052 Comm: syz.0.2654 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 1060.860823][T17052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1060.870924][T17052] Call Trace: [ 1060.874227][T17052] [ 1060.877179][T17052] dump_stack_lvl+0x241/0x360 [ 1060.881905][T17052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1060.887129][T17052] ? __pfx__printk+0x10/0x10 [ 1060.891748][T17052] should_fail_ex+0x3b0/0x4e0 [ 1060.896449][T17052] prepare_alloc_pages+0x1da/0x5d0 [ 1060.901583][T17052] __alloc_pages_noprof+0x166/0x6c0 [ 1060.906794][T17052] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1060.912582][T17052] ? filemap_get_entry+0x123/0x3b0 [ 1060.917741][T17052] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1060.923245][T17052] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1060.929253][T17052] ? filemap_get_entry+0x328/0x3b0 [ 1060.934381][T17052] folio_alloc_noprof+0x128/0x180 [ 1060.939439][T17052] filemap_alloc_folio_noprof+0xdf/0x500 [ 1060.945099][T17052] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 1060.951372][T17052] ? __filemap_get_folio+0x984/0xc10 [ 1060.956678][T17052] ? __pfx___might_resched+0x10/0x10 [ 1060.961988][T17052] do_read_cache_folio+0xed/0x820 [ 1060.967034][T17052] ? __pfx_nilfs_read_folio+0x10/0x10 [ 1060.972430][T17052] nilfs_get_folio+0x4b/0x240 [ 1060.977127][T17052] nilfs_readdir+0x1b2/0x870 [ 1060.981733][T17052] ? iterate_dir+0x215/0x810 [ 1060.986346][T17052] ? __pfx_lock_release+0x10/0x10 [ 1060.991410][T17052] ? end_current_label_crit_section+0x14e/0x180 [ 1060.997671][T17052] ? __pfx_nilfs_readdir+0x10/0x10 [ 1061.002799][T17052] ? common_file_perm+0x1a6/0x210 [ 1061.007844][T17052] ? bpf_lsm_file_permission+0x9/0x10 [ 1061.013271][T17052] iterate_dir+0x57a/0x810 [ 1061.017717][T17052] __se_sys_getdents64+0x20d/0x4f0 [ 1061.022861][T17052] ? __pfx___se_sys_getdents64+0x10/0x10 [ 1061.028538][T17052] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1061.034556][T17052] ? __pfx_filldir64+0x10/0x10 [ 1061.039389][T17052] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1061.045760][T17052] ? do_syscall_64+0x100/0x230 [ 1061.050557][T17052] ? do_syscall_64+0xb6/0x230 [ 1061.055274][T17052] do_syscall_64+0xf3/0x230 [ 1061.059803][T17052] ? clear_bhb_loop+0x35/0x90 [ 1061.064500][T17052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.070414][T17052] RIP: 0033:0x7fccf7775a99 [ 1061.074839][T17052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1061.094473][T17052] RSP: 002b:00007fccf8548048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1061.102906][T17052] RAX: ffffffffffffffda RBX: 00007fccf7903f60 RCX: 00007fccf7775a99 [ 1061.110920][T17052] RDX: 0000000000001000 RSI: 0000000020000f80 RDI: 0000000000000004 [ 1061.118904][T17052] RBP: 00007fccf85480a0 R08: 0000000000000000 R09: 0000000000000000 [ 1061.126889][T17052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.134873][T17052] R13: 000000000000000b R14: 00007fccf7903f60 R15: 00007ffcc559dd18 [ 1061.142892][T17052] [ 1061.218390][T17052] NILFS error (device loop0): nilfs_readdir: bad page in #2 [ 1061.409673][ T5120] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1061.423080][ T5120] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1061.430249][T17052] Remounting filesystem read-only [ 1061.447535][ T5120] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1061.485307][ T5120] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1061.500575][ T5120] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1061.508292][ T5120] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1062.206708][T17077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.213996][T17077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.848375][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1063.040103][T17087] netlink: 'syz.0.2661': attribute type 14 has an invalid length. [ 1063.265489][T17060] chnl_net:caif_netlink_parms(): no params data found [ 1063.275365][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.358515][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.438268][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 1063.495428][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.595132][ T9] usb 2-1: config 0 descriptor?? [ 1063.618507][ T5108] Bluetooth: hci10: command tx timeout [ 1063.681510][ T1275] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.912425][ T6305] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1064.124585][ T6305] usb 1-1: Using ep0 maxpacket: 16 [ 1064.138306][ T6305] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1064.139791][ T1275] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.169769][ T6305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.177845][ T6305] usb 1-1: Product: syz [ 1064.208372][ T6305] usb 1-1: Manufacturer: syz [ 1064.232496][ T6305] usb 1-1: SerialNumber: syz [ 1064.272452][ T6305] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1064.280137][ T6305] r8152-cfgselector 1-1: config 0 descriptor?? [ 1064.541032][ T6305] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1064.557210][ T1275] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.563457][ T6305] r8152-cfgselector 1-1: bad CDC descriptors [ 1064.609350][ T6305] r8152-cfgselector 1-1: USB disconnect, device number 49 [ 1064.647139][T16009] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1064.663363][T17060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.673044][ T9] wacom 0003:056A:00B8.0005: unknown main item tag 0x0 [ 1064.692638][ T9] wacom 0003:056A:00B8.0005: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 1064.693621][T17060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.732073][T17060] bridge_slave_0: entered allmulticast mode [ 1064.733996][ T9] wacom 0003:056A:00B8.0005: hidraw0: USB HID v0.00 Device [HID 056a:00b8] on usb-dummy_hcd.1-1/input0 [ 1064.751704][T17060] bridge_slave_0: entered promiscuous mode [ 1064.788792][ T9] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B8.0005/input/input20 [ 1064.821573][ T1275] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.847109][T16009] usb 3-1: device descriptor read/64, error -71 [ 1064.888115][T17060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.898051][T17060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.910383][T17060] bridge_slave_1: entered allmulticast mode [ 1064.919132][T17060] bridge_slave_1: entered promiscuous mode [ 1064.976353][ T9] usb 2-1: USB disconnect, device number 42 [ 1065.090072][T17060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.144728][T16009] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1065.226538][T17060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.352779][T16009] usb 3-1: device descriptor read/64, error -71 [ 1065.509391][T16009] usb usb3-port1: attempt power cycle [ 1065.590934][T17060] team0: Port device team_slave_0 added [ 1065.668388][T17110] vlan2: entered promiscuous mode [ 1065.689587][T17110] batadv0: entered promiscuous mode [ 1065.695080][T17110] vlan2: entered allmulticast mode [ 1065.708489][T17110] batadv0: entered allmulticast mode [ 1065.714221][ T5108] Bluetooth: hci10: command tx timeout [ 1065.731025][T17110] batadv0: left allmulticast mode [ 1065.756794][T17110] batadv0: left promiscuous mode [ 1065.915665][T17060] team0: Port device team_slave_1 added [ 1065.958840][T16009] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1065.992711][T16009] usb 3-1: device descriptor read/8, error -71 [ 1066.142436][T17060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1066.166528][T17060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.278294][T16009] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1066.288341][T17060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.320112][T16009] usb 3-1: device descriptor read/8, error -71 [ 1066.331050][T17060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.338062][T17060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.441105][T16009] usb usb3-port1: unable to enumerate USB device [ 1066.448512][T17060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1066.479437][ T1275] bridge_slave_1: left allmulticast mode [ 1066.489852][ T1275] bridge_slave_1: left promiscuous mode [ 1066.501637][ T1275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.531245][ T1275] bridge_slave_0: left allmulticast mode [ 1066.538298][ T1275] bridge_slave_0: left promiscuous mode [ 1066.551572][ T1275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.509066][ T1275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.524273][T17127] FAULT_INJECTION: forcing a failure. [ 1067.524273][T17127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1067.542071][ T1275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.573282][ T1275] bond0 (unregistering): Released all slaves [ 1067.579836][T17127] CPU: 1 UID: 0 PID: 17127 Comm: syz.2.2673 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 1067.589777][T17127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1067.599882][T17127] Call Trace: [ 1067.603191][T17127] [ 1067.606144][T17127] dump_stack_lvl+0x241/0x360 [ 1067.610894][T17127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1067.616131][T17127] ? __pfx__printk+0x10/0x10 [ 1067.620777][T17127] ? snprintf+0xda/0x120 [ 1067.625071][T17127] should_fail_ex+0x3b0/0x4e0 [ 1067.629802][T17127] _copy_to_user+0x2f/0xb0 [ 1067.634261][T17127] simple_read_from_buffer+0xca/0x150 [ 1067.639681][T17127] proc_fail_nth_read+0x1e9/0x250 [ 1067.644754][T17127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1067.650379][T17127] ? rw_verify_area+0x520/0x6b0 [ 1067.655274][T17127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1067.660865][T17127] vfs_read+0x204/0xbc0 [ 1067.665063][T17127] ? __pfx_lock_release+0x10/0x10 [ 1067.670126][T17127] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1067.676071][T17127] ? __pfx_vfs_read+0x10/0x10 [ 1067.680887][T17127] ? __fget_files+0x29/0x470 [ 1067.685507][T17127] ? __fget_files+0x3f6/0x470 [ 1067.690235][T17127] ksys_read+0x1a0/0x2c0 [ 1067.694525][T17127] ? __pfx_ksys_read+0x10/0x10 [ 1067.699336][T17127] ? do_syscall_64+0x100/0x230 [ 1067.704147][T17127] ? do_syscall_64+0xb6/0x230 [ 1067.708870][T17127] do_syscall_64+0xf3/0x230 [ 1067.713453][T17127] ? clear_bhb_loop+0x35/0x90 [ 1067.718171][T17127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.724107][T17127] RIP: 0033:0x7f165cd7457c [ 1067.728561][T17127] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1067.748224][T17127] RSP: 002b:00007f165db6e040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1067.756700][T17127] RAX: ffffffffffffffda RBX: 00007f165cf03f60 RCX: 00007f165cd7457c [ 1067.764739][T17127] RDX: 000000000000000f RSI: 00007f165db6e0b0 RDI: 0000000000000005 [ 1067.772761][T17127] RBP: 00007f165db6e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1067.780769][T17127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.788781][T17127] R13: 000000000000000b R14: 00007f165cf03f60 R15: 00007ffe63985b88 [ 1067.796786][T17127] [ 1067.824617][ T5108] Bluetooth: hci10: command tx timeout [ 1067.948552][T17122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.955848][T17122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.373816][T17137] FAULT_INJECTION: forcing a failure. [ 1068.373816][T17137] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.421419][T17137] CPU: 1 UID: 0 PID: 17137 Comm: syz.0.2677 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 1068.431502][T17137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1068.441601][T17137] Call Trace: [ 1068.444936][T17137] [ 1068.447911][T17137] dump_stack_lvl+0x241/0x360 [ 1068.452647][T17137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1068.457895][T17137] ? __pfx__printk+0x10/0x10 [ 1068.462540][T17137] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 1068.468129][T17137] ? __pfx___might_resched+0x10/0x10 [ 1068.473476][T17137] should_fail_ex+0x3b0/0x4e0 [ 1068.478212][T17137] ? getname_flags+0xb7/0x540 [ 1068.482942][T17137] should_failslab+0xac/0x100 [ 1068.487684][T17137] ? getname_flags+0xb7/0x540 [ 1068.492415][T17137] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1068.497835][T17137] getname_flags+0xb7/0x540 [ 1068.502386][T17137] __se_sys_statx+0x1a2/0x2b0 [ 1068.507117][T17137] ? __pfx___se_sys_statx+0x10/0x10 [ 1068.512390][T17137] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1068.518506][T17137] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1068.524889][T17137] ? do_syscall_64+0x100/0x230 [ 1068.529711][T17137] ? __x64_sys_statx+0x20/0xc0 [ 1068.534538][T17137] do_syscall_64+0xf3/0x230 [ 1068.539085][T17137] ? clear_bhb_loop+0x35/0x90 [ 1068.543817][T17137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.549765][T17137] RIP: 0033:0x7fccf7775a99 [ 1068.554216][T17137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1068.573878][T17137] RSP: 002b:00007fccf8548048 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 1068.582525][T17137] RAX: ffffffffffffffda RBX: 00007fccf7903f60 RCX: 00007fccf7775a99 [ 1068.590551][T17137] RDX: 0000000000001000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 1068.598572][T17137] RBP: 00007fccf85480a0 R08: 0000000000000000 R09: 0000000000000000 [ 1068.606585][T17137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1068.614599][T17137] R13: 000000000000000b R14: 00007fccf7903f60 R15: 00007ffcc559dd18 [ 1068.622636][T17137] [ 1068.767982][T17141] loop0: detected capacity change from 0 to 512 [ 1068.842238][T17141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1068.856575][T17060] hsr_slave_0: entered promiscuous mode [ 1068.939176][T17060] hsr_slave_1: entered promiscuous mode [ 1068.965969][T17141] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1069.038484][T17060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1069.046315][T17060] Cannot create hsr debugfs directory [ 1069.055594][T17141] netlink: 'syz.0.2678': attribute type 4 has an invalid length. [ 1069.087326][T17141] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2678'. [ 1069.622460][ T1275] hsr_slave_0: left promiscuous mode [ 1069.670547][ T1275] hsr_slave_1: left promiscuous mode [ 1069.696600][ T1275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1069.726972][ T1275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.799343][ T1275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1069.806942][ T1275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.858379][ T5108] Bluetooth: hci10: command tx timeout [ 1069.938147][ T1275] veth1_macvtap: left promiscuous mode [ 1069.977825][ T1275] veth0_macvtap: left promiscuous mode [ 1069.987944][ T1275] veth1_vlan: left promiscuous mode [ 1070.008382][ T1275] veth0_vlan: left promiscuous mode [ 1070.541165][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801f992400: rx timeout, send abort [ 1070.553218][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801f992400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1070.622138][T16328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.345876][ T5120] Bluetooth: hci3: command 0x0406 tx timeout [ 1072.791721][T17197] loop0: detected capacity change from 0 to 512 [ 1072.857470][T17197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1072.904481][T17197] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1072.958380][ T928] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1072.981871][T17197] netlink: 'syz.0.2691': attribute type 4 has an invalid length. [ 1073.010720][T17197] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2691'. [ 1073.109811][ T1275] team0 (unregistering): Port device team_slave_1 removed [ 1073.155951][ T928] usb 3-1: Using ep0 maxpacket: 8 [ 1073.174183][ T928] usb 3-1: config index 0 descriptor too short (expected 62226, got 18) [ 1073.182966][ T928] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1073.193571][ T928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.256850][ T928] usb 3-1: config 0 descriptor?? [ 1073.296119][ T1275] team0 (unregistering): Port device team_slave_0 removed [ 1073.391960][ T928] viperboard 3-1:0.0: version 0.00 found at bus 003 address 042 [ 1073.455678][ T928] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 1073.475517][ T928] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1074.491439][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068d9b400: rx timeout, send abort [ 1074.500132][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888068d9b400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1074.538026][T16328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.551019][T17215] FAULT_INJECTION: forcing a failure. [ 1075.551019][T17215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1075.566064][T17215] CPU: 0 UID: 0 PID: 17215 Comm: syz.0.2695 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 1075.576008][T17215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1075.586086][T17215] Call Trace: [ 1075.589390][T17215] [ 1075.592343][T17215] dump_stack_lvl+0x241/0x360 [ 1075.597060][T17215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1075.602453][T17215] ? __pfx__printk+0x10/0x10 [ 1075.607064][T17215] ? __pfx_lock_release+0x10/0x10 [ 1075.612110][T17215] ? validate_chain+0x11e/0x5920 [ 1075.617087][T17215] should_fail_ex+0x3b0/0x4e0 [ 1075.621792][T17215] _copy_from_iter+0x1f6/0x1960 [ 1075.626670][T17215] ? __pfx_validate_chain+0x10/0x10 [ 1075.631900][T17215] ? __pfx__copy_from_iter+0x10/0x10 [ 1075.637302][T17215] tun_get_user+0x25f/0x4720 [ 1075.641917][T17215] ? __pfx_lock_release+0x10/0x10 [ 1075.646965][T17215] ? __lock_acquire+0x1384/0x2050 [ 1075.652013][T17215] ? __pfx_tun_get_user+0x10/0x10 [ 1075.657067][T17215] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1075.662543][T17215] ? tun_get+0x1e/0x2f0 [ 1075.666714][T17215] ? __pfx_lock_release+0x10/0x10 [ 1075.671768][T17215] ? tun_get+0x1e/0x2f0 [ 1075.675937][T17215] ? tun_get+0x27d/0x2f0 [ 1075.680196][T17215] tun_chr_write_iter+0x113/0x1f0 [ 1075.685246][T17215] vfs_write+0xa72/0xc90 [ 1075.689799][T17215] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1075.695364][T17215] ? __pfx_vfs_write+0x10/0x10 [ 1075.700212][T17215] ksys_write+0x1a0/0x2c0 [ 1075.704571][T17215] ? __pfx_ksys_write+0x10/0x10 [ 1075.709442][T17215] ? do_syscall_64+0x100/0x230 [ 1075.714226][T17215] ? do_syscall_64+0xb6/0x230 [ 1075.718922][T17215] do_syscall_64+0xf3/0x230 [ 1075.723446][T17215] ? clear_bhb_loop+0x35/0x90 [ 1075.728138][T17215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.734080][T17215] RIP: 0033:0x7fccf7775a99 [ 1075.738508][T17215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1075.758125][T17215] RSP: 002b:00007fccf8548048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1075.766655][T17215] RAX: ffffffffffffffda RBX: 00007fccf7903f60 RCX: 00007fccf7775a99 [ 1075.774641][T17215] RDX: 000000000000ffdd RSI: 0000000020000200 RDI: 0000000000000003 [ 1075.782625][T17215] RBP: 00007fccf85480a0 R08: 0000000000000000 R09: 0000000000000000 [ 1075.790652][T17215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.798634][T17215] R13: 000000000000000b R14: 00007fccf7903f60 R15: 00007ffcc559dd18 [ 1075.806632][T17215] [ 1075.936767][ T4639] usb 3-1: USB disconnect, device number 42 [ 1076.154019][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2696'. [ 1076.680310][T17222] loop0: detected capacity change from 0 to 8192 [ 1077.261388][T17231] batadv0: entered promiscuous mode [ 1077.348861][T17231] vlan2: entered promiscuous mode [ 1077.354180][T17231] vlan2: entered allmulticast mode [ 1077.398405][T17231] batadv0: entered allmulticast mode [ 1077.427181][ C0] eth0: bad gso: type: 1, size: 1408 [ 1077.479097][T17231] batadv0: left allmulticast mode [ 1077.484454][T17231] batadv0: left promiscuous mode [ 1078.003730][T17060] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1078.101765][T17060] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1078.146818][T17060] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1078.194630][T17060] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1078.764050][T17060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.854923][T17060] 8021q: adding VLAN 0 to HW filter on device team0 [ 1078.999332][T13173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.006529][T13173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.071862][T13173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.079130][T13173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.751946][T17288] loop0: detected capacity change from 0 to 256 [ 1079.819733][T17288] exfat: Unknown parameter 'discard00000000000000007' [ 1080.007988][T17291] could not allocate digest TFM handle [ 1080.286054][T17060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1080.358646][T17304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.365999][T17304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.757599][T17325] loop0: detected capacity change from 0 to 128 [ 1080.973682][T17325] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1081.041229][T17325] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1081.353720][T17325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2715'. [ 1081.408907][T17060] veth0_vlan: entered promiscuous mode [ 1081.482172][T17060] veth1_vlan: entered promiscuous mode [ 1081.649465][T16328] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1081.681871][T17060] veth0_macvtap: entered promiscuous mode [ 1081.751410][T17060] veth1_macvtap: entered promiscuous mode [ 1081.879940][T17060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.938233][T17060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.968307][T17060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.997317][T17060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.018678][T17060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.048896][T17060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.082259][T17060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.128408][T17060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.188260][T17060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.220288][T17060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.241846][T17060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.279614][T17060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.320003][T17060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.356767][T17060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.389526][T17060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.414807][T17060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.445058][T17060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.469573][T17060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.491663][T17060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.551120][T17060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.605577][T17060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.746058][T17060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.785056][T17060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.807997][T17060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.853453][T17060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.888560][T17060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.909685][T17060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.948563][T17060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.994721][T17060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.038625][T17060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.083280][T17060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.123861][T17060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.175574][T17060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.208402][T17060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.239218][T17060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.281542][T17060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.315710][T17060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.347204][T17060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.381295][T17060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.412733][T17060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.446804][T17060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.499596][T17060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.536440][T17060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.562625][T17060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1083.637817][T17379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.645107][T17379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.702918][T17060] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.743313][T17060] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.769118][T17060] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.808743][T17060] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.330688][T16877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.375739][T16877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.517861][T16877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.560501][T16877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.795407][T17417] sctp: [Deprecated]: syz.0.2730 (pid 17417) Use of int in maxseg socket option. [ 1084.795407][T17417] Use struct sctp_assoc_value instead [ 1085.233064][T17433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.240348][T17433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.849767][T13447] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1087.164820][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1087.284193][T17464] netlink: 'syz.0.2740': attribute type 2 has an invalid length. [ 1087.322933][T13447] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1087.436857][T13447] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.193008][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1088.259503][ T8] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 1088.319706][T13447] usb 5-1: config 0 descriptor?? [ 1088.350518][T13447] cp210x 5-1:0.0: cp210x converter detected [ 1088.488290][ T8] usb 4-1: device descriptor read/64, error -71 [ 1088.778395][ T8] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 1088.840199][T17471] loop0: detected capacity change from 0 to 8192 [ 1088.901064][T17471] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ta" [ 1088.978636][ T8] usb 4-1: device descriptor read/64, error -71 [ 1089.159091][ T8] usb usb4-port1: attempt power cycle [ 1089.189596][T17450] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2737'. [ 1089.239838][T13447] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1089.262291][T13447] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 1089.289623][T13447] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1089.328618][T13447] usb 5-1: USB disconnect, device number 56 [ 1089.365874][T17480] overlayfs: failed to resolve './file0': -2 [ 1089.379045][T13447] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1089.416138][T13447] cp210x 5-1:0.0: device disconnected [ 1089.577080][T17483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2746'. [ 1089.611406][ T8] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1089.643079][T17483] hsr0: entered promiscuous mode [ 1089.651285][T17483] macvlan2: entered allmulticast mode [ 1089.656718][T17483] hsr0: entered allmulticast mode [ 1089.662117][T17483] hsr_slave_0: entered allmulticast mode [ 1089.667851][T17483] hsr_slave_1: entered allmulticast mode [ 1089.692681][ T8] usb 4-1: device descriptor read/8, error -71 [ 1090.008897][ T8] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 1090.169779][T17489] PKCS7: Unknown OID: [4] 5.16.79.89.2714.16034.120 [ 1090.191862][T17489] PKCS7: Only support pkcs7_signedData type [ 1090.269312][ T8] usb 4-1: device not accepting address 62, error -71 [ 1090.318577][ T8] usb usb4-port1: unable to enumerate USB device [ 1090.857129][T17502] FAULT_INJECTION: forcing a failure. [ 1090.857129][T17502] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.888515][T17502] CPU: 1 UID: 0 PID: 17502 Comm: syz.2.2752 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 1090.898442][T17502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1090.908507][T17502] Call Trace: [ 1090.911807][T17502] [ 1090.914758][T17502] dump_stack_lvl+0x241/0x360 [ 1090.919465][T17502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1090.924705][T17502] ? __pfx__printk+0x10/0x10 [ 1090.929327][T17502] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1090.935313][T17502] ? __pfx___might_resched+0x10/0x10 [ 1090.940617][T17502] ? tcp_established_options+0x3c1/0x800 [ 1090.946286][T17502] should_fail_ex+0x3b0/0x4e0 [ 1090.950988][T17502] should_failslab+0xac/0x100 [ 1090.955667][T17502] ? __alloc_skb+0x1c3/0x440 [ 1090.960258][T17502] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1090.966089][T17502] ? tcp_current_mss+0x29b/0x4d0 [ 1090.971048][T17502] __alloc_skb+0x1c3/0x440 [ 1090.975470][T17502] ? __pfx___alloc_skb+0x10/0x10 [ 1090.980412][T17502] ? validate_chain+0x11e/0x5920 [ 1090.985380][T17502] tcp_stream_alloc_skb+0x3d/0x310 [ 1090.990507][T17502] tcp_sendmsg_locked+0xd6a/0x4e10 [ 1090.995657][T17502] ? __lock_acquire+0x1384/0x2050 [ 1091.000735][T17502] ? mark_lock+0x9a/0x360 [ 1091.005105][T17502] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1091.010657][T17502] ? __local_bh_enable_ip+0x168/0x200 [ 1091.016047][T17502] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1091.021310][T17502] tcp_sendmsg+0x30/0x50 [ 1091.025573][T17502] __sock_sendmsg+0x1a6/0x270 [ 1091.030261][T17502] __sys_sendto+0x3a4/0x4f0 [ 1091.034768][T17502] ? __pfx___sys_sendto+0x10/0x10 [ 1091.039813][T17502] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1091.045821][T17502] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1091.052187][T17502] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1091.058525][T17502] __x64_sys_sendto+0xde/0x100 [ 1091.063293][T17502] do_syscall_64+0xf3/0x230 [ 1091.067806][T17502] ? clear_bhb_loop+0x35/0x90 [ 1091.072525][T17502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.078418][T17502] RIP: 0033:0x7f165cd75a99 [ 1091.082831][T17502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1091.102440][T17502] RSP: 002b:00007f165db6e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1091.110858][T17502] RAX: ffffffffffffffda RBX: 00007f165cf03f60 RCX: 00007f165cd75a99 [ 1091.118827][T17502] RDX: 00000000000020c8 RSI: 00000000200012c0 RDI: 0000000000000003 [ 1091.126798][T17502] RBP: 00007f165db6e0a0 R08: 0000000000000000 R09: 0000000000000027 [ 1091.134782][T17502] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 1091.142748][T17502] R13: 000000000000000b R14: 00007f165cf03f60 R15: 00007ffe63985b88 [ 1091.150738][T17502] [ 1091.201736][T17508] sctp: [Deprecated]: syz.4.2749 (pid 17508) Use of int in maxseg socket option. [ 1091.201736][T17508] Use struct sctp_assoc_value instead [ 1091.342973][T17509] loop0: detected capacity change from 0 to 2048 [ 1091.429910][T17509] loop0: p3 < > p4 < > [ 1091.439862][T17509] loop0: partition table partially beyond EOD, truncated [ 1091.469200][T17509] loop0: p3 start 4284289 is beyond EOD, truncated [ 1092.043699][T17527] FAULT_INJECTION: forcing a failure. [ 1092.043699][T17527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1092.158920][T17527] CPU: 0 UID: 0 PID: 17527 Comm: syz.4.2756 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 1092.168905][T17527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1092.178998][T17527] Call Trace: [ 1092.182314][T17527] [ 1092.185260][T17527] dump_stack_lvl+0x241/0x360 [ 1092.189998][T17527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1092.195219][T17527] ? __pfx__printk+0x10/0x10 [ 1092.199864][T17527] ? __pfx_lock_release+0x10/0x10 [ 1092.204910][T17527] ? vfs_write+0x7c4/0xc90 [ 1092.209366][T17527] should_fail_ex+0x3b0/0x4e0 [ 1092.214073][T17527] _copy_from_user+0x2f/0xe0 [ 1092.218683][T17527] __sys_bpf+0x1a4/0x810 [ 1092.222944][T17527] ? __pfx___sys_bpf+0x10/0x10 [ 1092.227732][T17527] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1092.233733][T17527] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1092.240089][T17527] ? do_syscall_64+0x100/0x230 [ 1092.244880][T17527] __x64_sys_bpf+0x7c/0x90 [ 1092.249320][T17527] do_syscall_64+0xf3/0x230 [ 1092.253868][T17527] ? clear_bhb_loop+0x35/0x90 [ 1092.258568][T17527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.264474][T17527] RIP: 0033:0x7fdc43f75a99 [ 1092.268904][T17527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.288532][T17527] RSP: 002b:00007fdc44d2b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1092.296960][T17527] RAX: ffffffffffffffda RBX: 00007fdc44103f60 RCX: 00007fdc43f75a99 [ 1092.304941][T17527] RDX: 0000000000000090 RSI: 0000000020000240 RDI: 0000000000000005 [ 1092.312919][T17527] RBP: 00007fdc44d2b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1092.320898][T17527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1092.328878][T17527] R13: 000000000000000b R14: 00007fdc44103f60 R15: 00007ffdd6624c38 [ 1092.336871][T17527] [ 1092.724656][T17535] FAULT_INJECTION: forcing a failure. [ 1092.724656][T17535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1092.777991][T17535] CPU: 1 UID: 0 PID: 17535 Comm: syz.4.2760 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 1092.787946][T17535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1092.798062][T17535] Call Trace: [ 1092.801350][T17535] [ 1092.804285][T17535] dump_stack_lvl+0x241/0x360 [ 1092.808985][T17535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1092.814199][T17535] ? __pfx__printk+0x10/0x10 [ 1092.818811][T17535] ? snprintf+0xda/0x120 [ 1092.823063][T17535] should_fail_ex+0x3b0/0x4e0 [ 1092.827769][T17535] _copy_to_user+0x2f/0xb0 [ 1092.832216][T17535] simple_read_from_buffer+0xca/0x150 [ 1092.837609][T17535] proc_fail_nth_read+0x1e9/0x250 [ 1092.842652][T17535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1092.848253][T17535] ? rw_verify_area+0x520/0x6b0 [ 1092.853128][T17535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1092.858696][T17535] vfs_read+0x204/0xbc0 [ 1092.862872][T17535] ? __pfx_lock_release+0x10/0x10 [ 1092.867921][T17535] ? __pfx_vfs_read+0x10/0x10 [ 1092.872616][T17535] ? __fget_files+0x29/0x470 [ 1092.877237][T17535] ? __fget_files+0x3f6/0x470 [ 1092.881947][T17535] ksys_read+0x1a0/0x2c0 [ 1092.886236][T17535] ? __pfx_ksys_read+0x10/0x10 [ 1092.891043][T17535] ? do_syscall_64+0x100/0x230 [ 1092.895834][T17535] ? do_syscall_64+0xb6/0x230 [ 1092.900558][T17535] do_syscall_64+0xf3/0x230 [ 1092.905082][T17535] ? clear_bhb_loop+0x35/0x90 [ 1092.909777][T17535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.915686][T17535] RIP: 0033:0x7fdc43f7457c [ 1092.920136][T17535] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1092.939756][T17535] RSP: 002b:00007fdc44d2b040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1092.948186][T17535] RAX: ffffffffffffffda RBX: 00007fdc44103f60 RCX: 00007fdc43f7457c [ 1092.956169][T17535] RDX: 000000000000000f RSI: 00007fdc44d2b0b0 RDI: 0000000000000005 [ 1092.964149][T17535] RBP: 00007fdc44d2b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1092.972133][T17535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1092.980131][T17535] R13: 000000000000000b R14: 00007fdc44103f60 R15: 00007ffdd6624c38 [ 1092.988159][T17535] [ 1093.263880][T17537] loop0: detected capacity change from 0 to 8192 [ 1093.283715][T17537] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ta" [ 1093.304523][ T8] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1093.539111][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 1093.559268][ T8] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1093.587353][ T8] usb 2-1: config 179 has no interface number 0 [ 1093.611642][ T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1093.648789][ T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1093.678038][ T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1093.711730][ T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1093.754388][ T8] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1093.786731][ T8] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1093.817824][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.846371][T17538] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1094.139170][T13447] usb 2-1: USB disconnect, device number 43 [ 1094.139308][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1094.153534][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1094.764970][T17558] sctp: [Deprecated]: syz.3.2766 (pid 17558) Use of int in maxseg socket option. [ 1094.764970][T17558] Use struct sctp_assoc_value instead [ 1096.345721][T17592] usb usb8: usbfs: process 17592 (syz.0.2774) did not claim interface 0 before use [ 1096.400590][T17594] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1096.483884][T17596] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1096.550398][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2775'. [ 1096.596715][T17596] loop0: detected capacity change from 0 to 1024 [ 1096.959917][T17607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2776'. [ 1096.996194][T17607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2776'. [ 1097.010105][T17608] FAULT_INJECTION: forcing a failure. [ 1097.010105][T17608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1097.049422][T17608] CPU: 1 UID: 0 PID: 17608 Comm: syz.2.2777 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 1097.059505][T17608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1097.069606][T17608] Call Trace: [ 1097.072919][T17608] [ 1097.075881][T17608] dump_stack_lvl+0x241/0x360 [ 1097.080617][T17608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1097.085873][T17608] ? __pfx__printk+0x10/0x10 [ 1097.090522][T17608] ? __pfx_lock_release+0x10/0x10 [ 1097.095603][T17608] should_fail_ex+0x3b0/0x4e0 [ 1097.100344][T17608] _copy_from_user+0x2f/0xe0 [ 1097.104985][T17608] copy_msghdr_from_user+0xae/0x680 [ 1097.110253][T17608] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1097.116124][T17608] __sys_sendmsg+0x23d/0x3a0 [ 1097.120758][T17608] ? __pfx___sys_sendmsg+0x10/0x10 [ 1097.125926][T17608] ? vfs_write+0x7c4/0xc90 [ 1097.130444][T17608] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1097.136821][T17608] ? do_syscall_64+0x100/0x230 [ 1097.141653][T17608] ? do_syscall_64+0xb6/0x230 [ 1097.146379][T17608] do_syscall_64+0xf3/0x230 [ 1097.150934][T17608] ? clear_bhb_loop+0x35/0x90 [ 1097.155662][T17608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.161596][T17608] RIP: 0033:0x7f165cd75a99 [ 1097.166041][T17608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1097.185682][T17608] RSP: 002b:00007f165db6e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1097.194232][T17608] RAX: ffffffffffffffda RBX: 00007f165cf03f60 RCX: 00007f165cd75a99 [ 1097.202244][T17608] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 1097.210255][T17608] RBP: 00007f165db6e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1097.218270][T17608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.226294][T17608] R13: 000000000000000b R14: 00007f165cf03f60 R15: 00007ffe63985b88 [ 1097.234343][T17608] [ 1097.237508][ C1] vkms_vblank_simulate: vblank timer overrun [ 1097.473144][T13673] hfsplus: b-tree write err: -5, ino 4 [ 1097.670680][T17616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2779'. [ 1098.079193][T17624] sctp: [Deprecated]: syz.2.2782 (pid 17624) Use of int in maxseg socket option. [ 1098.079193][T17624] Use struct sctp_assoc_value instead [ 1100.649470][T17653] dlm: no locking on control device [ 1102.842928][T17667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2792'. [ 1103.416744][T13447] kernel write not supported for file /vcs (pid: 13447 comm: kworker/1:6) [ 1104.483671][T17702] sctp: [Deprecated]: syz.3.2800 (pid 17702) Use of int in maxseg socket option. [ 1104.483671][T17702] Use struct sctp_assoc_value instead [ 1104.686418][T17706] loop0: detected capacity change from 0 to 512 [ 1105.560390][T17691] FAULT_INJECTION: forcing a failure. [ 1105.560390][T17691] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.598294][T17691] CPU: 1 UID: 0 PID: 17691 Comm: syz.2.2798 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 1105.608265][T17691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1105.618349][T17691] Call Trace: [ 1105.621659][T17691] [ 1105.624624][T17691] dump_stack_lvl+0x241/0x360 [ 1105.629366][T17691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1105.634623][T17691] ? __pfx__printk+0x10/0x10 [ 1105.639276][T17691] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 1105.644878][T17691] ? __pfx___might_resched+0x10/0x10 [ 1105.650221][T17691] should_fail_ex+0x3b0/0x4e0 [ 1105.654965][T17691] ? getname_flags+0xb7/0x540 [ 1105.659693][T17691] should_failslab+0xac/0x100 [ 1105.664417][T17691] ? getname_flags+0xb7/0x540 [ 1105.669143][T17691] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1105.674656][T17691] getname_flags+0xb7/0x540 [ 1105.679209][T17691] do_sys_openat2+0xd2/0x1d0 [ 1105.683843][T17691] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1105.689877][T17691] ? __pfx_do_sys_openat2+0x10/0x10 [ 1105.695118][T17691] ? __fget_files+0x3f6/0x470 [ 1105.699856][T17691] __x64_sys_open+0x225/0x270 [ 1105.704580][T17691] ? __pfx___x64_sys_open+0x10/0x10 [ 1105.709835][T17691] ? do_syscall_64+0x100/0x230 [ 1105.714644][T17691] ? do_syscall_64+0xb6/0x230 [ 1105.719346][T17691] do_syscall_64+0xf3/0x230 [ 1105.723874][T17691] ? clear_bhb_loop+0x35/0x90 [ 1105.728567][T17691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.734472][T17691] RIP: 0033:0x7f165cd75a99 [ 1105.738892][T17691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1105.758514][T17691] RSP: 002b:00007f165db6e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1105.766976][T17691] RAX: ffffffffffffffda RBX: 00007f165cf03f60 RCX: 00007f165cd75a99 [ 1105.775016][T17691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1105.783024][T17691] RBP: 00007f165db6e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1105.791024][T17691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1105.799017][T17691] R13: 000000000000000b R14: 00007f165cf03f60 R15: 00007ffe63985b88 [ 1105.807034][T17691] [ 1105.968071][ T5108] Bluetooth: hci8: command tx timeout [ 1106.791881][T17731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2806'. [ 1107.077120][T17733] loop0: detected capacity change from 0 to 2048 [ 1107.200795][T13173] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1107.209286][T17733] loop0: p3 < > p4 < > [ 1107.236174][T17733] loop0: partition table partially beyond EOD, truncated [ 1107.292756][T17733] loop0: p3 start 4284289 is beyond EOD, truncated [ 1107.432566][T13173] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.450577][T13173] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.472085][T13173] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1107.511397][T13173] usb 3-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.00 [ 1107.547994][T13173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.582834][T13173] usb 3-1: config 0 descriptor?? [ 1107.664586][T16491] udevd[16491]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1107.729677][T17750] FAULT_INJECTION: forcing a failure. [ 1107.729677][T17750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1107.785003][T17750] CPU: 1 UID: 0 PID: 17750 Comm: syz.3.2812 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 1107.794985][T17750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1107.805085][T17750] Call Trace: [ 1107.808403][T17750] [ 1107.811333][T17750] dump_stack_lvl+0x241/0x360 [ 1107.816050][T17750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1107.821285][T17750] ? __pfx__printk+0x10/0x10 [ 1107.825900][T17750] ? __pfx_lock_release+0x10/0x10 [ 1107.830980][T17750] should_fail_ex+0x3b0/0x4e0 [ 1107.835687][T17750] _copy_from_user+0x2f/0xe0 [ 1107.840357][T17750] copy_msghdr_from_user+0xae/0x680 [ 1107.845609][T17750] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1107.851461][T17750] __sys_sendmsg+0x23d/0x3a0 [ 1107.856094][T17750] ? __pfx___sys_sendmsg+0x10/0x10 [ 1107.861214][T17750] ? vfs_write+0x7c4/0xc90 [ 1107.865685][T17750] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1107.872031][T17750] ? do_syscall_64+0x100/0x230 [ 1107.876808][T17750] ? do_syscall_64+0xb6/0x230 [ 1107.881513][T17750] do_syscall_64+0xf3/0x230 [ 1107.886045][T17750] ? clear_bhb_loop+0x35/0x90 [ 1107.890759][T17750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.896674][T17750] RIP: 0033:0x7f61ac975a99 [ 1107.901127][T17750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1107.920839][T17750] RSP: 002b:00007f61ad7bf048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1107.929273][T17750] RAX: ffffffffffffffda RBX: 00007f61acb03f60 RCX: 00007f61ac975a99 [ 1107.937255][T17750] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 1107.945239][T17750] RBP: 00007f61ad7bf0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1107.953231][T17750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.961215][T17750] R13: 000000000000000b R14: 00007f61acb03f60 R15: 00007ffd2d75ea18 [ 1107.969211][T17750] [ 1107.989509][ T5120] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 1107.999757][ T5120] Bluetooth: hci8: Injecting HCI hardware error event [ 1108.009882][ T5120] Bluetooth: hci8: hardware error 0x00 [ 1108.182966][ T5119] Bluetooth: hci5: command 0x0406 tx timeout [ 1108.291982][T13173] wacom 0003:056A:00D5.0007: Unknown device_type for 'HID 056a:00d5'. Assuming pen. [ 1108.379766][T13173] wacom 0003:056A:00D5.0007: hidraw0: USB HID v0.00 Device [HID 056a:00d5] on usb-dummy_hcd.2-1/input0 [ 1108.436959][T13173] input: Wacom Bamboo Pen 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D5.0007/input/input23 [ 1108.702951][T13173] usb 3-1: USB disconnect, device number 43 [ 1110.496769][ T5120] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1113.543576][T17822] FAULT_INJECTION: forcing a failure. [ 1113.543576][T17822] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.648304][T17822] CPU: 0 UID: 0 PID: 17822 Comm: syz.1.2832 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 1113.658284][T17822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1113.668371][T17822] Call Trace: [ 1113.671680][T17822] [ 1113.674648][T17822] dump_stack_lvl+0x241/0x360 [ 1113.679383][T17822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1113.684631][T17822] ? __pfx__printk+0x10/0x10 [ 1113.689316][T17822] ? fs_reclaim_acquire+0x93/0x140 [ 1113.694467][T17822] ? __pfx___might_resched+0x10/0x10 [ 1113.699801][T17822] should_fail_ex+0x3b0/0x4e0 [ 1113.704532][T17822] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1113.710814][T17822] should_failslab+0xac/0x100 [ 1113.715531][T17822] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1113.721379][T17822] __kmalloc_noprof+0xd8/0x400 [ 1113.726178][T17822] ? kfree+0x4e/0x360 [ 1113.730199][T17822] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1113.735806][T17822] tomoyo_path_number_perm+0x23a/0x880 [ 1113.741308][T17822] ? tomoyo_path_number_perm+0x208/0x880 [ 1113.746975][T17822] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1113.753032][T17822] ? __fget_files+0x29/0x470 [ 1113.757659][T17822] ? __fget_files+0x3f6/0x470 [ 1113.762368][T17822] ? __fget_files+0x29/0x470 [ 1113.766999][T17822] security_file_ioctl+0x75/0xb0 [ 1113.771977][T17822] __se_sys_ioctl+0x47/0x170 [ 1113.776613][T17822] do_syscall_64+0xf3/0x230 [ 1113.781170][T17822] ? clear_bhb_loop+0x35/0x90 [ 1113.785897][T17822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.791840][T17822] RIP: 0033:0x7fd1e5575a99 [ 1113.796290][T17822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1113.815938][T17822] RSP: 002b:00007fd1e638c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1113.824443][T17822] RAX: ffffffffffffffda RBX: 00007fd1e5703f60 RCX: 00007fd1e5575a99 [ 1113.832448][T17822] RDX: 0000000000000000 RSI: 0000000040047438 RDI: 0000000000000003 [ 1113.840456][T17822] RBP: 00007fd1e638c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1113.848474][T17822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.856544][T17822] R13: 000000000000000b R14: 00007fd1e5703f60 R15: 00007fffb173ad48 [ 1113.864543][T17822] [ 1113.934039][T17822] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1114.038666][T17827] netlink: 'syz.4.2830': attribute type 14 has an invalid length. [ 1116.351126][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.357519][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.715227][T13173] kernel write not supported for file /vcs (pid: 13173 comm: kworker/1:1) [ 1117.300971][T17874] vhci_hcd: invalid port number 253 [ 1117.340510][T17874] vhci_hcd: default hub control req: 2012 v02fe i00fd l0 [ 1117.818553][T13447] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1118.031804][T13447] usb 2-1: New USB device found, idVendor=13d3, idProduct=3311, bcdDevice=40.90 [ 1118.041262][T13447] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.090903][T13447] usb 2-1: config 0 descriptor?? [ 1118.112573][T13447] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1118.138281][T13447] usb 2-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 1118.228434][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1118.450437][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.510903][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.568274][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1118.753194][T13447] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 1118.787598][T13447] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1118.819947][T13447] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1119.260265][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.00 [ 1119.290014][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.310485][ T9] usb 3-1: config 0 descriptor?? [ 1119.784972][ T9] wacom 0003:056A:00D5.0008: Unknown device_type for 'HID 056a:00d5'. Assuming pen. [ 1119.847279][ T9] wacom 0003:056A:00D5.0008: hidraw0: USB HID v0.00 Device [HID 056a:00d5] on usb-dummy_hcd.2-1/input0 [ 1120.476970][ T9] input: Wacom Bamboo Pen 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D5.0008/input/input26 [ 1120.553068][T13173] usb 2-1: USB disconnect, device number 44 [ 1120.593135][ T9] usb 3-1: USB disconnect, device number 44 [ 1121.318313][T13173] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1121.530348][T13173] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1121.578725][T13173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.632519][T13173] usb 2-1: config 0 descriptor?? [ 1121.647706][T13173] cp210x 2-1:0.0: cp210x converter detected [ 1122.100402][T17921] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2854'. [ 1122.135595][T13173] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 1122.153992][T13173] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1122.177677][T13173] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1122.213825][T13173] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1122.245745][T13173] usb 2-1: USB disconnect, device number 45 [ 1122.271991][T13173] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1122.317318][T13173] cp210x 2-1:0.0: device disconnected [ 1123.161150][T17968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.168456][T17968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1123.551271][T17968] team_slave_0: entered promiscuous mode [ 1123.557061][T17968] team_slave_1: entered promiscuous mode [ 1123.639416][T17968] team_slave_0: left promiscuous mode [ 1123.646821][T17968] team_slave_1: left promiscuous mode [ 1124.819567][T18005] FAULT_INJECTION: forcing a failure. [ 1124.819567][T18005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1124.878302][T18005] CPU: 0 UID: 0 PID: 18005 Comm: syz.1.2868 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 1124.888282][T18005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1124.898375][T18005] Call Trace: [ 1124.900955][T18002] ================================================================== [ 1124.901690][T18005] [ 1124.909750][T18002] BUG: KASAN: slab-use-after-free in handle_mm_fault+0x14f0/0x19a0 [ 1124.912691][T18005] dump_stack_lvl+0x241/0x360 [ 1124.920567][T18002] Read of size 8 at addr ffff888057374210 by task syz.2.2867/18002 [ 1124.925245][T18005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1124.933118][T18002] [ 1124.940793][T18005] ? __pfx__printk+0x10/0x10 [ 1124.945405][T18005] ? __pfx_lock_release+0x10/0x10 [ 1124.950446][T18005] ? vfs_write+0x7c4/0xc90 [ 1124.954889][T18005] should_fail_ex+0x3b0/0x4e0 [ 1124.959619][T18005] _copy_from_user+0x2f/0xe0 [ 1124.964238][T18005] get_timespec64+0x97/0x280 [ 1124.968856][T18005] ? __pfx_get_timespec64+0x10/0x10 [ 1124.974187][T18005] __x64_sys_recvmmsg+0x140/0x250 [ 1124.979246][T18005] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1124.984827][T18005] ? do_syscall_64+0x100/0x230 [ 1124.989632][T18005] ? do_syscall_64+0xb6/0x230 [ 1124.994342][T18005] do_syscall_64+0xf3/0x230 [ 1124.998870][T18005] ? clear_bhb_loop+0x35/0x90 [ 1125.003567][T18005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.009473][T18005] RIP: 0033:0x7fd1e5575a99 [ 1125.013904][T18005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1125.033581][T18005] RSP: 002b:00007fd1e634a048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1125.042015][T18005] RAX: ffffffffffffffda RBX: 00007fd1e5704110 RCX: 00007fd1e5575a99 [ 1125.049996][T18005] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 1125.057977][T18005] RBP: 00007fd1e634a0a0 R08: 0000000020003700 R09: 0000000000000000 [ 1125.065961][T18005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.073940][T18005] R13: 000000000000006e R14: 00007fd1e5704110 R15: 00007fffb173ad48 [ 1125.081940][T18005] [ 1125.084974][T18002] CPU: 1 UID: 0 PID: 18002 Comm: syz.2.2867 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 1125.094998][T18002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1125.105089][T18002] Call Trace: [ 1125.108395][T18002] [ 1125.111346][T18002] dump_stack_lvl+0x241/0x360 [ 1125.116075][T18002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1125.121321][T18002] ? __pfx__printk+0x10/0x10 [ 1125.125974][T18002] ? _printk+0xd5/0x120 [ 1125.130172][T18002] ? __virt_addr_valid+0x183/0x530 [ 1125.135316][T18002] ? __virt_addr_valid+0x183/0x530 [ 1125.140454][T18002] print_report+0x169/0x550 [ 1125.144981][T18002] ? __virt_addr_valid+0x183/0x530 [ 1125.150199][T18002] ? __virt_addr_valid+0x183/0x530 [ 1125.155319][T18002] ? __virt_addr_valid+0x45f/0x530 [ 1125.160433][T18002] ? __phys_addr+0xba/0x170 [ 1125.164945][T18002] ? handle_mm_fault+0x14f0/0x19a0 [ 1125.170063][T18002] kasan_report+0x143/0x180 [ 1125.174576][T18002] ? handle_mm_fault+0x14f0/0x19a0 [ 1125.179696][T18002] handle_mm_fault+0x14f0/0x19a0 [ 1125.184653][T18002] ? __pfx_handle_mm_fault+0x10/0x10 [ 1125.189951][T18002] ? __pfx_find_vma+0x10/0x10 [ 1125.194647][T18002] ? vma_is_secretmem+0xd/0x50 [ 1125.199425][T18002] ? check_vma_flags+0x3f4/0x5a0 [ 1125.204372][T18002] __get_user_pages+0x6ec/0x16a0 [ 1125.209346][T18002] ? __pfx___get_user_pages+0x10/0x10 [ 1125.214729][T18002] ? __pfx_lock_acquire+0x10/0x10 [ 1125.219776][T18002] __gup_longterm_locked+0xed7/0x17d0 [ 1125.225159][T18002] ? down_read+0x82b/0xa40 [ 1125.229613][T18002] ? is_valid_gup_args+0x124/0x200 [ 1125.234729][T18002] pin_user_pages_remote+0x132/0x1f0 [ 1125.240019][T18002] ? __pfx___up_read+0x10/0x10 [ 1125.244796][T18002] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 1125.250628][T18002] ? mm_access+0x207/0x240 [ 1125.255060][T18002] process_vm_rw+0x716/0xcf0 [ 1125.259671][T18002] ? __pfx_process_vm_rw+0x10/0x10 [ 1125.264794][T18002] ? futex_wait+0x285/0x360 [ 1125.269324][T18002] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1125.275314][T18002] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1125.281654][T18002] __x64_sys_process_vm_writev+0xe0/0x100 [ 1125.287393][T18002] do_syscall_64+0xf3/0x230 [ 1125.291912][T18002] ? clear_bhb_loop+0x35/0x90 [ 1125.296599][T18002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.302500][T18002] RIP: 0033:0x7f165cd75a99 [ 1125.306917][T18002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1125.326526][T18002] RSP: 002b:00007f165db4d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 1125.334951][T18002] RAX: ffffffffffffffda RBX: 00007f165cf04038 RCX: 00007f165cd75a99 [ 1125.342926][T18002] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000115 [ 1125.350907][T18002] RBP: 00007f165cde4e5d R08: 0000000000000001 R09: 0000000000000000 [ 1125.358907][T18002] R10: 0000000020121000 R11: 0000000000000246 R12: 0000000000000000 [ 1125.366882][T18002] R13: 000000000000006e R14: 00007f165cf04038 R15: 00007ffe63985b88 [ 1125.374872][T18002] [ 1125.377892][T18002] [ 1125.380215][T18002] Allocated by task 18002: [ 1125.384627][T18002] kasan_save_track+0x3f/0x80 [ 1125.389314][T18002] __kasan_slab_alloc+0x66/0x80 [ 1125.394169][T18002] kmem_cache_alloc_noprof+0x135/0x2a0 [ 1125.399635][T18002] vm_area_dup+0x27/0x290 [ 1125.403969][T18002] copy_vma+0x442/0x910 [ 1125.408129][T18002] move_vma+0x6a1/0x19a0 [ 1125.412404][T18002] __se_sys_mremap+0x134b/0x1980 [ 1125.417428][T18002] do_syscall_64+0xf3/0x230 [ 1125.421945][T18002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.427847][T18002] [ 1125.430171][T18002] Freed by task 17992: [ 1125.434234][T18002] kasan_save_track+0x3f/0x80 [ 1125.438913][T18002] kasan_save_free_info+0x40/0x50 [ 1125.443946][T18002] poison_slab_object+0xe0/0x150 [ 1125.448900][T18002] __kasan_slab_free+0x37/0x60 [ 1125.453678][T18002] kmem_cache_free+0x145/0x350 [ 1125.458470][T18002] rcu_core+0xafd/0x1830 [ 1125.462749][T18002] handle_softirqs+0x2c4/0x970 [ 1125.467563][T18002] __irq_exit_rcu+0xf4/0x1c0 [ 1125.472163][T18002] irq_exit_rcu+0x9/0x30 [ 1125.476416][T18002] sysvec_apic_timer_interrupt+0x57/0xc0 [ 1125.482071][T18002] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1125.488062][T18002] [ 1125.490388][T18002] Last potentially related work creation: [ 1125.496101][T18002] kasan_save_stack+0x3f/0x60 [ 1125.500783][T18002] __kasan_record_aux_stack+0xac/0xc0 [ 1125.506165][T18002] call_rcu+0x167/0xa70 [ 1125.510335][T18002] do_vmi_align_munmap+0x155c/0x18c0 [ 1125.515627][T18002] do_vmi_munmap+0x261/0x2f0 [ 1125.520225][T18002] do_munmap+0x136/0x1c0 [ 1125.524558][T18002] __se_sys_mremap+0xfbf/0x1980 [ 1125.529415][T18002] do_syscall_64+0xf3/0x230 [ 1125.533930][T18002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.539839][T18002] [ 1125.542165][T18002] The buggy address belongs to the object at ffff8880573741f0 [ 1125.542165][T18002] which belongs to the cache vm_area_struct of size 184 [ 1125.556485][T18002] The buggy address is located 32 bytes inside of [ 1125.556485][T18002] freed 184-byte region [ffff8880573741f0, ffff8880573742a8) [ 1125.570209][T18002] [ 1125.572535][T18002] The buggy address belongs to the physical page: [ 1125.578956][T18002] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57374 [ 1125.587715][T18002] memcg:ffff888029b79201 [ 1125.591955][T18002] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1125.599419][T18002] page_type: 0xfdffffff(slab) [ 1125.604105][T18002] raw: 00fff00000000000 ffff888015eefb40 ffffea00013d8500 dead000000000007 [ 1125.612693][T18002] raw: 0000000000000000 0000000000100010 00000001fdffffff ffff888029b79201 [ 1125.621271][T18002] page dumped because: kasan: bad access detected [ 1125.627691][T18002] page_owner tracks the page as allocated [ 1125.633411][T18002] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4552, tgid 4552 (udevd), ts 951102387026, free_ts 947390881875 [ 1125.652178][T18002] post_alloc_hook+0x1f3/0x230 [ 1125.656966][T18002] get_page_from_freelist+0x2ccb/0x2d80 [ 1125.662528][T18002] __alloc_pages_noprof+0x256/0x6c0 [ 1125.667734][T18002] alloc_slab_page+0x5f/0x120 [ 1125.672413][T18002] allocate_slab+0x5a/0x2f0 [ 1125.677025][T18002] ___slab_alloc+0xcd1/0x14b0 [ 1125.681752][T18002] __slab_alloc+0x58/0xa0 [ 1125.686092][T18002] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 1125.691555][T18002] vm_area_dup+0x27/0x290 [ 1125.695891][T18002] copy_mm+0xc7b/0x1f30 [ 1125.700056][T18002] copy_process+0x186b/0x3d90 [ 1125.704744][T18002] kernel_clone+0x226/0x8f0 [ 1125.709263][T18002] __x64_sys_clone+0x258/0x2a0 [ 1125.714043][T18002] do_syscall_64+0xf3/0x230 [ 1125.718559][T18002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.724457][T18002] page last free pid 15605 tgid 15605 stack trace: [ 1125.730956][T18002] free_unref_page+0xd22/0xea0 [ 1125.735724][T18002] vfree+0x186/0x2e0 [ 1125.739622][T18002] kcov_close+0x2b/0x50 [ 1125.743804][T18002] __fput+0x24a/0x8a0 [ 1125.747854][T18002] task_work_run+0x24f/0x310 [ 1125.752475][T18002] do_exit+0xa2f/0x27f0 [ 1125.756660][T18002] do_group_exit+0x207/0x2c0 [ 1125.761287][T18002] get_signal+0x16a1/0x1740 [ 1125.765801][T18002] arch_do_signal_or_restart+0x96/0x830 [ 1125.771355][T18002] syscall_exit_to_user_mode+0xc9/0x370 [ 1125.776912][T18002] do_syscall_64+0x100/0x230 [ 1125.781602][T18002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.787504][T18002] [ 1125.789829][T18002] Memory state around the buggy address: [ 1125.795487][T18002] ffff888057374100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1125.803549][T18002] ffff888057374180: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb [ 1125.811698][T18002] >ffff888057374200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1125.819756][T18002] ^ [ 1125.824344][T18002] ffff888057374280: fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb fb [ 1125.832406][T18002] ffff888057374300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1125.840487][T18002] ================================================================== [ 1125.938684][T18002] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1125.945955][T18002] CPU: 0 UID: 0 PID: 18002 Comm: syz.2.2867 Not tainted 6.10.0-next-20240717-syzkaller #0 [ 1125.955892][T18002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1125.965977][T18002] Call Trace: [ 1125.969283][T18002] [ 1125.972244][T18002] dump_stack_lvl+0x241/0x360 [ 1125.976969][T18002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1125.982211][T18002] ? __pfx__printk+0x10/0x10 [ 1125.986843][T18002] ? preempt_schedule+0xe1/0xf0 [ 1125.991733][T18002] ? vscnprintf+0x5d/0x90 [ 1125.996094][T18002] panic+0x349/0x870 [ 1126.000015][T18002] ? check_panic_on_warn+0x21/0xb0 [ 1126.005188][T18002] ? __pfx_panic+0x10/0x10 [ 1126.009647][T18002] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 1126.015652][T18002] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1126.021997][T18002] ? print_report+0x502/0x550 [ 1126.026697][T18002] check_panic_on_warn+0x86/0xb0 [ 1126.031649][T18002] ? handle_mm_fault+0x14f0/0x19a0 [ 1126.036786][T18002] end_report+0x77/0x160 [ 1126.041038][T18002] kasan_report+0x154/0x180 [ 1126.045556][T18002] ? handle_mm_fault+0x14f0/0x19a0 [ 1126.050680][T18002] handle_mm_fault+0x14f0/0x19a0 [ 1126.055636][T18002] ? __pfx_handle_mm_fault+0x10/0x10 [ 1126.060939][T18002] ? __pfx_find_vma+0x10/0x10 [ 1126.065631][T18002] ? vma_is_secretmem+0xd/0x50 [ 1126.070412][T18002] ? check_vma_flags+0x3f4/0x5a0 [ 1126.075387][T18002] __get_user_pages+0x6ec/0x16a0 [ 1126.080345][T18002] ? __pfx___get_user_pages+0x10/0x10 [ 1126.085734][T18002] ? __pfx_lock_acquire+0x10/0x10 [ 1126.090779][T18002] __gup_longterm_locked+0xed7/0x17d0 [ 1126.096170][T18002] ? down_read+0x82b/0xa40 [ 1126.100605][T18002] ? is_valid_gup_args+0x124/0x200 [ 1126.105726][T18002] pin_user_pages_remote+0x132/0x1f0 [ 1126.111022][T18002] ? __pfx___up_read+0x10/0x10 [ 1126.115797][T18002] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 1126.121614][T18002] ? mm_access+0x207/0x240 [ 1126.126044][T18002] process_vm_rw+0x716/0xcf0 [ 1126.130660][T18002] ? __pfx_process_vm_rw+0x10/0x10 [ 1126.135781][T18002] ? futex_wait+0x285/0x360 [ 1126.140322][T18002] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1126.146318][T18002] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1126.152670][T18002] __x64_sys_process_vm_writev+0xe0/0x100 [ 1126.158410][T18002] do_syscall_64+0xf3/0x230 [ 1126.162930][T18002] ? clear_bhb_loop+0x35/0x90 [ 1126.167711][T18002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.173635][T18002] RIP: 0033:0x7f165cd75a99 [ 1126.178062][T18002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1126.197677][T18002] RSP: 002b:00007f165db4d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 1126.206106][T18002] RAX: ffffffffffffffda RBX: 00007f165cf04038 RCX: 00007f165cd75a99 [ 1126.214087][T18002] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000115 [ 1126.222068][T18002] RBP: 00007f165cde4e5d R08: 0000000000000001 R09: 0000000000000000 [ 1126.230045][T18002] R10: 0000000020121000 R11: 0000000000000246 R12: 0000000000000000 [ 1126.238021][T18002] R13: 000000000000006e R14: 00007f165cf04038 R15: 00007ffe63985b88 [ 1126.246013][T18002] [ 1126.249369][T18002] Kernel Offset: disabled [ 1126.253695][T18002] Rebooting in 86400 seconds..